www4.bestjavporn.com/video/dvdes-813-decensored/
301 Moved Permanently 0 B URL HTTP/1.1 www4.bestjavporn.com/video/dvdes-813-decensored/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /video/dvdes-813-decensored/ HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 13 Dec 2022 14:49:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 13 Dec 2022 15:49:48 GMT
Location: https://www4.bestjavporn.com/video/dvdes-813-decensored/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ueFoB92LM3T2ZsjbxZ7oP36lsJOqmLpyjDoF6zwhEq5CKs9OkEiPIV7p2w1k%2B1VP5U9D%2FntMxOY57%2BhQG05AkzB%2BEXHZSxLdD0tWYrM4r27F4vFyaWXmdWvRIkkTUMqFDZTn03Kn"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778f822dca6b0b69-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 555d8608594803d49eeb9581c6b70702
d01e0201e0ba0cf751ef97226620338a853bc635
2885cdac311a30161a8ac9ef8e54c788afafd4f86ed197a651fc6d8bda077908
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2885CDAC311A30161A8AC9EF8E54C788AFAFD4F86ED197A651FC6D8BDA077908"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14439
Expires: Tue, 13 Dec 2022 18:50:27 GMT
Date: Tue, 13 Dec 2022 14:49:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358212db02ecc7c1fa088906bd2dba14
091a0688da9de609d97349215ba9e452dfc346a4
7486e512e4de8172ac07f07f47da3a96dd3ac7cb054b335f3e4929261440e672
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7486E512E4DE8172AC07F07F47DA3A96DD3AC7CB054B335F3E4929261440E672"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5596
Expires: Tue, 13 Dec 2022 16:23:04 GMT
Date: Tue, 13 Dec 2022 14:49:48 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 13 Dec 2022 14:08:45 GMT
content-type: application/json
age: 2463
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d29881eeb0456eff8cf415ad2ce64ba0
e3cfdd5f56ff88066257ec8f4726f53e3a733bd3
2cd90072f113163f976ddb8bc7017884efd3f764e7e8961b04e3ba5ec0a17d85
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2CD90072F113163F976DDB8BC7017884EFD3F764E7E8961B04E3BA5EC0A17D85"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11925
Expires: Tue, 13 Dec 2022 18:08:33 GMT
Date: Tue, 13 Dec 2022 14:49:48 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ayUIs/lZ91jlXbFSh5uX3SGA9smLMXj0kIWJ25KRI2Bvjlo51IAJIc38h5KiOAjUXdn54EglTAE=
x-amz-request-id: 9YPFN5QYYHKANEN0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 13 Dec 2022 13:50:05 GMT
age: 3583
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 903b43b73ec171bdbbe816d74bf4fef1
49b7953b0941dbc92e70dcb7926848f42ae293c2
0b43d80103c3710e67a109e45aaeb96797bf777ad4a68b504fdd5fc593ea19af
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3599
Cache-Control: max-age=137812
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 14:49:48 GMT
Etag: "6397fa51-118"
Expires: Thu, 15 Dec 2022 05:06:40 GMT
Last-Modified: Tue, 13 Dec 2022 04:06:41 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 14:49:48 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:49 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 510242
expires: Sun, 03 Dec 2023 14:49:49 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tEBJBZTRBxTvvrHEM2WddrYigW1KsAIH87NlSmxZoXuBQkxQYCezNvKPc5%2F0o6EcqV9Z0pgtMryr4p%2FXch4rKD9vglxZeWBq8xBwSA34UZouk1nl1ylW8XjM635L3RSrIi9rDSMb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 778f82321c0b1bfe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js
200 OK 5.1 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js
IP
File type ASCII text, with very long lines (17660)
Hash abe1df98b6ab4644bd567e6669d0da03
27e3bf22ef08b7ca0090721ed31b4f921d278e7c
cd40ba7dbf63d67511c0fd56b7e5327dbedb43d15c439d79a8aacb6377059540
GET /ajax/libs/postscribe/2.0.8/postscribe.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:49 GMT
content-type: application/javascript; charset=utf-8
content-length: 5117
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03faa-45f4"
last-modified: Mon, 04 May 2020 16:15:38 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 16224651
expires: Sun, 03 Dec 2023 14:49:49 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nJ%2By4TozAYeRJaOtdFldfPY5ZjlwQoDUxfedurcBXsvulHgPaeOAiNZq3GZbZZWZLApGy%2B3%2Bkp3dY8XnnU3ipU8t2Eqinhuc1FUnPM2nRmb42CqTTv8mHa%2BJbAbtXEGXOo3Xw8LV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 778f82324d13b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4cfff21eb23d58996d9e27a376974cb5
79c2ffbc0f6594a69eaa643edee1757760fb848e
7916a7a170a38e6b445dadcf83d3fac44305960c6c15f756e0cde0a6a6e90970
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 14:49:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.1.0
200 OK 1.1 kB URL HTTP/2 www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.1.0
IP
File type ASCII text, with very long lines (529)
Hash b7e586a68416e711eab5d15b4f2dc331
f39248dc3e33481259e676cee7bc77af5eac1da1
928603251d5efc36fc7a35097c3587cb4358df445ba027b1a47f96c939b5dc13
GET /wp-content/themes/retrotube/assets/js/navigation.js?ver=1.1.0 HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/dvdes-813-decensored/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:49 GMT
content-type: application/javascript
cf-connecting-ip: 88.195.172.127
cf-bgj: minify
cf-polished: origSize=6149
etag: W/"635fdc2f-1805"
last-modified: Mon, 31 Oct 2022 14:31:11 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-rocket-args: ver=1.1.0
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/assets/js/navigation.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 14893
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iJKVMQHQu1XNco4Rw9dRxOFw3YPoQ97dWapS16Nwhr%2Bw1FXaPZvFo7MeS8nnPfHnmr8bRiqhYVjaIHtu%2BqsWVWce9LzNw6rd0DIsMn5aNz5fCmV%2FRnY1FW9JK7dFpWiM6q5Q5UDe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 778f8231f9d20b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0
200 OK 705 B URL HTTP/2 www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0
IP
Hash 8b82c0608eddf18701c80284dcf49fda
90582c83f8c7f496d799c02e4b46a3e6f72feaa9
9cecaa107831353a251b285415b91589c0da09e2dd37dfc4ca8cccfe111b5d96
GET /wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/dvdes-813-decensored/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:49 GMT
content-type: application/javascript
cf-connecting-ip: 88.195.172.127
cf-bgj: minify
cf-polished: origSize=683
etag: W/"600200e4-2ab"
last-modified: Fri, 15 Jan 2021 20:53:56 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-rocket-args: ver=1.0.0
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 14893
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KeNxAHLArrxuVOWAGx20SDncdz%2FGHwX4sfiK6ntxHmvpebf9jCjpCagz7oJOZR%2BUhT%2BTelY9zSCET5PpSaECzZ%2FfTVKByhl6opSZKCzSkGFBWAX3Nu%2B4ymmlDkHrT%2F%2BnqyzrjGql"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 778f8231f9da0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js?ver=1.12.4
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js?ver=1.12.4
IP
File type ASCII text, with very long lines (32077)
Hash fd2b58574f9637ba7ef639267349d848
6eda5ea93f549ceb5693f6f1c038893fa56a510d
75627d4b97e5e6294a8f88f5eeaf9b616696dc8600db9701c47ef05f067880ec
GET /ajax/libs/jquery/1.12.4/jquery.min.js?ver=1.12.4 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Dec 2022 19:27:28 GMT
expires: Sat, 09 Dec 2023 19:27:28 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 328941
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-124653024-3
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-124653024-3
IP
File type ASCII text, with very long lines (1921)
Hash dabc3e8fdec70a16ecc9b2e532919c99
eec9fb6f8b3c2a639e3e29f688c0dea344d182d1
cbb9e604b5ddc683f49033c7db7ecf10f20f99c9e6edde54fca6aa175e39b7c6
GET /gtag/js?id=UA-124653024-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 13 Dec 2022 14:49:49 GMT
expires: Tue, 13 Dec 2022 14:49:49 GMT
cache-control: private, max-age=900
last-modified: Tue, 13 Dec 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43632
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4cfff21eb23d58996d9e27a376974cb5
79c2ffbc0f6594a69eaa643edee1757760fb848e
7916a7a170a38e6b445dadcf83d3fac44305960c6c15f756e0cde0a6a6e90970
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 14:49:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Backoff, Content-Length, Pragma, Alert, Expires, Last-Modified, Retry-After, ETag, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 13 Dec 2022 14:07:57 GMT
age: 2512
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4cfff21eb23d58996d9e27a376974cb5
79c2ffbc0f6594a69eaa643edee1757760fb848e
7916a7a170a38e6b445dadcf83d3fac44305960c6c15f756e0cde0a6a6e90970
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 14:49:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1f984d58053be39408d40ea947d38943
871048440e5ee63f08e83909802a4cae099d24d2
cf34f29cecf5262d96efec6d5302d083733a55809df7a1c60ebbacce89ada95f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 14:49:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/main.js?ver=1.4.3
200 OK 10 kB URL HTTP/2 www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/main.js?ver=1.4.3
IP
File type ASCII text, with very long lines (3433)
Hash 210efce71fa73f7e5f625057aa4e05a4
015e368bb26454b124009281f7c3bc1cc1c5482e
4044a684dcd7371cce54750c5e0835f70f11bd9d3dba4e19a1d524492656b348
GET /wp-content/themes/retrotube/assets/js/main.js?ver=1.4.3 HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/dvdes-813-decensored/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:49 GMT
content-type: application/javascript
cf-connecting-ip: 92.220.0.147
cf-bgj: minify
cf-polished: origSize=51865
etag: W/"6388cd36-ca99"
last-modified: Thu, 01 Dec 2022 15:50:14 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-rocket-args: ver=1.4.3
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/assets/js/main.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 14893
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c%2Fr3e9TXD%2B3IJg8rHuoatczfVN5BU33YsJ8%2BbyaHLnrkSq7F%2B16dak%2B1hRrlXcbTs%2F7CDwKq70bC1yMC053C%2BKqBqxHz2Ifoe19yQcmQX0H7SJOVXFIiqwDazF0fwMWSILT%2BCw6P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 778f8231f9d80b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
www4.bestjavporn.com/wp-content/plugins/wp-rocket/assets/js/lazyload/12.0/lazyload.min.js
200 OK 2.6 kB URL HTTP/2 www4.bestjavporn.com/wp-content/plugins/wp-rocket/assets/js/lazyload/12.0/lazyload.min.js
IP
File type ASCII text, with very long lines (5543)
Hash 5fafbf0051f7bb5b83c5c53b79ae7a19
89783a756ac68fc03cc0c8407033518ee671f440
0ac644306fc220327530169b8398f9ed3ab93e8f103bc98340c9f0f89bf2c123
GET /wp-content/plugins/wp-rocket/assets/js/lazyload/12.0/lazyload.min.js HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/dvdes-813-decensored/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:49 GMT
content-type: application/javascript
last-modified: Tue, 31 Mar 2020 10:02:46 GMT
vary: Accept-Encoding
etag: W/"5e831546-15d1"
cf-connecting-ip: 88.195.172.127
x-frame-options: SAMEORIGIN
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/plugins/wp-rocket/assets/js/lazyload/12.0/lazyload.min.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 14772
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TO5UwLX3MXdWl%2FAgLAd5CrTtBbGE3XkxVhuP1Nss3ghhOS5KtG9et2SSJ6E5hbHOGZWa%2BqkIM6FKEbaVB9Jo0zvQ9EyzFDUgBdjN50f8hjeztHO6ncpi1E1YaaWwldtFvtVM8zgF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 778f823209f50b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2e5ee531cc0386adab9fe3d62f530231
16ec934be53e9ce97d40aedf906430551ad1b58a
0259d529060dc76765ae2bfb9bb5f513662c41e1b6608ec3a950d8b4b04ec056
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 14:49:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash be660c58948f81a53cf1a776cf4b0021
0c99955aec215b1e24bd53623ded8b36a613b26d
d9272f94364f5e321bf30aeb7f4fde0c4f43af3df1787f47044f6d2707ac9756
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=100739
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 14:49:49 GMT
Etag: "63977790-117"
Expires: Wed, 14 Dec 2022 18:48:48 GMT
Last-Modified: Mon, 12 Dec 2022 18:48:48 GMT
Server: nginx
Content-Length: 279
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Hash e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Dec 2022 18:52:55 GMT
expires: Tue, 12 Dec 2023 18:52:55 GMT
cache-control: public, max-age=31536000
age: 71814
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/cast.js?ver=7.2.2
200 OK 20 kB URL HTTP/2 www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/cast.js?ver=7.2.2
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash a5db927bf5d6bdceb401a2563f1fc7db
39595d8c70cc46cf717833bceb45b5ffe5fe9fe0
401dcc8885e2b3874230b652a5f644ab1811c1f482327fb6036daafbda3a23b9
GET /wp-content/themes/retrotube/assets/js/cast.js?ver=7.2.2 HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/dvdes-813-decensored/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:49 GMT
content-type: application/javascript
cf-connecting-ip: 92.220.0.147
cf-bgj: minify
etag: W/"6388cd36-11395"
last-modified: Thu, 01 Dec 2022 15:50:14 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-rocket-args: ver=7.2.2
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/assets/js/cast.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 13135
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PfqsM7XQ2xiOv2fYse0qtoQLO3CBcrutPvXrEh5%2Fm%2FRyO0D7%2BymX0TQ6zK0nt8yNgrt1ltqj%2B8YZbENKOYEZAbzHyXfYqF9mvHx0FDSXpWj1RuKj3tZ%2B066P7x7y8h2ePZtxgPCb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 778f8231f9e20b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2e5ee531cc0386adab9fe3d62f530231
16ec934be53e9ce97d40aedf906430551ad1b58a
0259d529060dc76765ae2bfb9bb5f513662c41e1b6608ec3a950d8b4b04ec056
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 14:49:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash de9e80c3bbe25e8623562110be8b8c9c
013f87db47c4ce3daf3380bc5e0ac3b1b496fe6f
792d587777c03d661a39a0593b71b3ec7611cb6e9d7a834bc79f28e6ace19692
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5836
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 14:49:49 GMT
Last-Modified: Tue, 13 Dec 2022 13:12:33 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
asg.phukienthoitranggiare.com/api/settings/184920
404 Not Found 9 B URL HTTP/2 asg.phukienthoitranggiare.com/api/settings/184920
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 9e076f5885f5cc16a4b5aeb8de4adff5
475c848673a3f79fa778f01c2bd5a721d4c41707
e3ebaa16dd9d9b9fc107c42183fb6cf9d22927e1af03dbbdfa0ccc38e4e4ac31
GET /api/settings/184920 HTTP/1.1
Host: asg.phukienthoitranggiare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www4.bestjavporn.com/
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx
date: Tue, 13 Dec 2022 14:49:49 GMT
content-type: text/plain; charset=utf-8
content-length: 9
access-control-allow-origin: *
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: cxzmBD90sgznUHT2zSLt2g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HtjeFkEku11byixV3/uMmmYjF3o=
ocsp.sectigo.com/
200 OK 472 B IP
Hash 6775836d0255d7372cec2703fb651e91
43f918640742a77ca445a1577035ce2b5c86c2d1
3a92a8c297e9d8c3d2ee7cd3755a26d66bcde5f50a8f384e2b02cd04765056eb
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 14:49:49 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 13 Dec 2022 08:27:06 GMT
Expires: Tue, 20 Dec 2022 08:27:05 GMT
Etag: "43f918640742a77ca445a1577035ce2b5c86c2d1"
Cache-Control: max-age=581235,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 778f8236589eb51d-OSL
poweredby.jads.co/js/jads.js
301 Moved Permanently 178 B URL HTTP/1.1 poweredby.jads.co/js/jads.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 13 Dec 2022 14:49:49 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
poweredby.jads.co/js/jads2.js
200 OK 1.7 kB URL HTTP/1.1 poweredby.jads.co/js/jads2.js
IP
File type ASCII text, with very long lines (3758), with no line terminators
Hash 558e1b61fc513016183a3812938e79fb
5f72ea61a2aad8f7a0956321d3fd8524db70eddf
a79f8c0aabfc2d1d45e4df2a86ca9172d292b08987f7a9d5c10bd10abf3aef54
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www4.bestjavporn.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 14:49:49 GMT
Content-Type: application/x-javascript
Last-Modified: Mon, 11 Jul 2022 00:36:11 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"62cb707b-eae"
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3a70d8ddbade77f5a23db8af884c0d6
04ea47aef9f45cfaac947c94a3f56ad9a1a9e610
7ced73077954fcf401b9bddc683d5c3ee38212cca3d30c56a1c2519f986d13b6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 14:49:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 13 Dec 2022 13:34:02 GMT
expires: Tue, 13 Dec 2022 15:34:02 GMT
cache-control: public, max-age=7200
age: 4548
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 25f905a6d1e77cf0eb2eb5b5dba980e4
3e3840f7c03a38575c6247de92358fc0bfaa24b0
3bed7c98f75089d27355d6516b726c32ca332e49cd4a3d9eb348f5cdbac827b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 14:49:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/WhibRaqexi4
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/WhibRaqexi4
IP
Hash 10a4008fa010d812c44a4ab2ec82d3f9
70f40712497fbe162345605b5d391d2ba09ece35
0935d3736d4281ac98fcdc1b3296ad3b70fb10db4a953fe4f2856d9eb91e9fe9
POST /s/gts1p5/WhibRaqexi4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 14:49:50 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ec692b4bb3d01c1d40dbc392c0096f1
0db69c07415e5fc5908fa894825e6d3d2459745c
5134a24a4515285d21bd294eeb9d11a93ed6337ec9f9779d42576998630ba69a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5134A24A4515285D21BD294EEB9D11A93ED6337EC9F9779D42576998630BA69A"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14627
Expires: Tue, 13 Dec 2022 18:53:37 GMT
Date: Tue, 13 Dec 2022 14:49:50 GMT
Connection: keep-alive
static.adxadserv.com/js/adb.js
200 OK 2.3 kB URL HTTP/2 static.adxadserv.com/js/adb.js
IP
ASN #60068 Datacamp Limited
Hash a8ef4766bb2fc5058f110ba9d3a7a4bd
f42a77fe191774adddd72fe401c4b7d416ecdd25
0f69a48a66fffae0cfadece1f6c2ec1b579b21ace62c749294f8f15dce77ca58
GET /js/adb.js HTTP/1.1
Host: static.adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:50 GMT
content-type: application/javascript
last-modified: Tue, 24 Mar 2020 11:15:59 GMT
etag: W/"5e79ebef-532"
x-accel-expires: @1671966426
server: CDN77-Turbo
x-77-nzt: AblMCQ1iQjX/NDQAAA
x-77-nzt-ray: c0a4cc285936279a0e9198636cfcc30b
x-cache: HIT
x-age: 13364
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 96fcd2cd43a8753bec8344d3bec88d91
c1a21bddaea6f4c0c4d0b13fd72629d7e9599302
635b7a8f7b8fea3fb1efc6f05ca0a01112fa8627aaffeeff99503f022e55a042
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "635B7A8F7B8FEA3FB1EFC6F05CA0A01112FA8627AAFFEEFF99503F022E55A042"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16409
Expires: Tue, 13 Dec 2022 19:23:19 GMT
Date: Tue, 13 Dec 2022 14:49:50 GMT
Connection: keep-alive
ocsp.pki.goog/s/gts1p5/WhibRaqexi4
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/WhibRaqexi4
IP
Hash 10a4008fa010d812c44a4ab2ec82d3f9
70f40712497fbe162345605b5d391d2ba09ece35
0935d3736d4281ac98fcdc1b3296ad3b70fb10db4a953fe4f2856d9eb91e9fe9
POST /s/gts1p5/WhibRaqexi4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 14:49:50 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8479a3148cab4275d4ce504e9865174b
a61b0fd5cf905b5278c5bfd075e9ecf4e29c4a86
101498cadbcf70ee23cca45072c70c318dc3e8a0b526c2a0a684556a3e2541df
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "101498CADBCF70EE23CCA45072C70C318DC3E8A0B526C2A0A684556A3E2541DF"
Last-Modified: Tue, 13 Dec 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18622
Expires: Tue, 13 Dec 2022 20:00:12 GMT
Date: Tue, 13 Dec 2022 14:49:50 GMT
Connection: keep-alive
adxadserv.com/ascripts/pxl.js
200 OK 78 kB URL HTTP/1.1 adxadserv.com/ascripts/pxl.js
IP
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (36114)
Hash 8348b78d100940ba1808a8e9b93f2e94
c2aa612dc3256c9f235dcfc6e330d0ecaf957768
9c983adf86ebc949957bdf55d524dfa278a79bea8d13f2efa9512c6dd37b86f5
GET /ascripts/pxl.js HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 13 Dec 2022 14:49:50 GMT
Content-Type: application/javascript
Content-Length: 77806
Connection: keep-alive
Last-Modified: Fri, 25 Sep 2020 09:55:25 GMT
ETag: "5f6dbe8d-12fee"
Expires: Tue, 13 Dec 2022 08:33:19 GMT
Cache-Control: max-age=86400, public
X-77-NZT: AblMCgELi3f/PlgAAA
X-77-NZT-Ray: 382b0f19f5ede80e0e919863ece3b226
X-Cache: HIT
X-Age: 22590
X-77-POP: amsterdamNL
X-77-Cache: HIT
Accept-Ranges: bytes
r.trackwilltrk.com/s1/e1ce8edc-bc88-4852-876e-2bf610b566ce?externalId=6560d749-7af5-11ed-a8af-e2e38133f3a0&cv1=6560d749-7af5-11ed-a8af-e2e38133f3a0&cv2=0c1c5c30286e1db21a741e4b62c8b6e4&cv3=desktop&cv4=62fe933961d6e278cd572307&cv5=62fe933061d6e278cd572305&cv6=en&cv7=NTVA-Bestjavporn&cv8=Firefox&cv9=62fe56a361d6e272ea2a6a61&cv10=62fe56a361d6e272ea2a6a61
200 OK 931 B URL HTTP/2 r.trackwilltrk.com/s1/e1ce8edc-bc88-4852-876e-2bf610b566ce?externalId=6560d749-7af5-11ed-a8af-e2e38133f3a0&cv1=6560d749-7af5-11ed-a8af-e2e38133f3a0&cv2=0c1c5c30286e1db21a741e4b62c8b6e4&cv3=desktop&cv4=62fe933961d6e278cd572307&cv5=62fe933061d6e278cd572305&cv6=en&cv7=NTVA-Bestjavporn&cv8=Firefox&cv9=62fe56a361d6e272ea2a6a61&cv10=62fe56a361d6e272ea2a6a61
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (735)
Hash 237ca99d2465c58b78b152718ca3f725
be15e72b34d5114a53127da3cac7649ae770e267
0e664d494f038148f23355765fd90d864c52a3d64c5ae04fa1f3356331e56dad
GET /s1/e1ce8edc-bc88-4852-876e-2bf610b566ce?externalId=6560d749-7af5-11ed-a8af-e2e38133f3a0&cv1=6560d749-7af5-11ed-a8af-e2e38133f3a0&cv2=0c1c5c30286e1db21a741e4b62c8b6e4&cv3=desktop&cv4=62fe933961d6e278cd572307&cv5=62fe933061d6e278cd572305&cv6=en&cv7=NTVA-Bestjavporn&cv8=Firefox&cv9=62fe56a361d6e272ea2a6a61&cv10=62fe56a361d6e272ea2a6a61 HTTP/1.1
Host: r.trackwilltrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Tue, 13 Dec 2022 14:49:50 GMT
content-type: text/html; charset=utf-8
content-length: 931
set-cookie: uid=RglXA9xaMp; Path=/; Domain=trackwilltrk.com; Expires=Wed, 14 Dec 2022 14:49:50 GMT; HttpOnly
x-request-id: 3b457e72-9fd0-45f5-b230-2f3fb921cc3c
X-Firefox-Spdy: h2
liaisondegreedaughters.com/2b/d8/d3/2bd8d300136a6fd50bcb5a7f3f4a12fa.js
200 OK 13 kB URL HTTP/1.1 liaisondegreedaughters.com/2b/d8/d3/2bd8d300136a6fd50bcb5a7f3f4a12fa.js
IP
File type ASCII text, with very long lines (37134), with no line terminators
Hash 6a39429485a2244385bd4e8cdc79f4ed
bfb22d5a50341d73cd43b374c3e12b660f2ec4dd
fbfdaf23c1ac44d46e9fdfadf70d2a1e671a5dbbc32063ebf45ae7de7efd69bd
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /2b/d8/d3/2bd8d300136a6fd50bcb5a7f3f4a12fa.js HTTP/1.1
Host: liaisondegreedaughters.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 13 Dec 2022 14:49:50 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c7c7bf9ca5441b1c52c36073eda22f75
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
adxadserv.com/px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D62fe56a361d6e272ea2a6a61%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fwww4.bestjavporn.com%252Fvideo%252Fdvdes-813-decensored%252F%2526dt%253D1670942988083%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fwww4.bestjavporn.com%252F&d_r=1&d_s=1280x1024&d_w=293x250&t_s=1670942988373&t_i=1670942988383&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=baf66cb0-a15a-483b-9271-bfccd954b414&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=6560d749-7af5-11ed-a8af-e2e38133f3a0&spid=62fe56a361d6e272ea2a6a61&fpid_sa=1670942988383&fpid=&feid_sa=1670942988383&sid_sa=1670942988383&feid=eb61b6a80d92881313a43df5b9b1e5a1&sid=676d177e8f0cf3b789cb6dc88d611f1a&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www4.bestjavporn.com&s_rst=1&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.313
200 OK 0 B URL HTTP/1.1 adxadserv.com/px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D62fe56a361d6e272ea2a6a61%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fwww4.bestjavporn.com%252Fvideo%252Fdvdes-813-decensored%252F%2526dt%253D1670942988083%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fwww4.bestjavporn.com%252F&d_r=1&d_s=1280x1024&d_w=293x250&t_s=1670942988373&t_i=1670942988383&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=baf66cb0-a15a-483b-9271-bfccd954b414&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=6560d749-7af5-11ed-a8af-e2e38133f3a0&spid=62fe56a361d6e272ea2a6a61&fpid_sa=1670942988383&fpid=&feid_sa=1670942988383&sid_sa=1670942988383&feid=eb61b6a80d92881313a43df5b9b1e5a1&sid=676d177e8f0cf3b789cb6dc88d611f1a&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www4.bestjavporn.com&s_rst=1&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.313
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D62fe56a361d6e272ea2a6a61%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fwww4.bestjavporn.com%252Fvideo%252Fdvdes-813-decensored%252F%2526dt%253D1670942988083%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fwww4.bestjavporn.com%252F&d_r=1&d_s=1280x1024&d_w=293x250&t_s=1670942988373&t_i=1670942988383&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=baf66cb0-a15a-483b-9271-bfccd954b414&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=6560d749-7af5-11ed-a8af-e2e38133f3a0&spid=62fe56a361d6e272ea2a6a61&fpid_sa=1670942988383&fpid=&feid_sa=1670942988383&sid_sa=1670942988383&feid=eb61b6a80d92881313a43df5b9b1e5a1&sid=676d177e8f0cf3b789cb6dc88d611f1a&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www4.bestjavporn.com&s_rst=1&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.313 HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 13 Dec 2022 14:49:50 GMT
Content-Length: 0
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash da1ead7a692f2fe5455f8ef2763bd76c
7de0479b1ca5802b754baec939ba1dca33eebdfd
43ac39cafd0c4d1f0d1ff203f2f132db3f11bfbb7d28a7174e36533af236063a
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "43AC39CAFD0C4D1F0D1FF203F2F132DB3F11BFBB7D28A7174E36533AF236063A"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17918
Expires: Tue, 13 Dec 2022 19:48:28 GMT
Date: Tue, 13 Dec 2022 14:49:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bddb5b91ba378cb9c29b266766ea1335
a3c19cdcc77635030513d9edefe49a7663b5a81a
f734e9ca5bce606a6ed4f3dcaccd6006b7f813d89a7c9fd4ddb50d5bdfee4bd6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F734E9CA5BCE606A6ED4F3DCACCD6006B7F813D89A7C9FD4DDB50D5BDFEE4BD6"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4211
Expires: Tue, 13 Dec 2022 16:00:01 GMT
Date: Tue, 13 Dec 2022 14:49:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 08f7321e01de2d111fc8100424937061
01ea459fe9270ea25e3cec2228d1cf3cd61d80b8
36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6720
Expires: Tue, 13 Dec 2022 16:41:51 GMT
Date: Tue, 13 Dec 2022 14:49:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 08f7321e01de2d111fc8100424937061
01ea459fe9270ea25e3cec2228d1cf3cd61d80b8
36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6720
Expires: Tue, 13 Dec 2022 16:41:51 GMT
Date: Tue, 13 Dec 2022 14:49:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 08f7321e01de2d111fc8100424937061
01ea459fe9270ea25e3cec2228d1cf3cd61d80b8
36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6720
Expires: Tue, 13 Dec 2022 16:41:51 GMT
Date: Tue, 13 Dec 2022 14:49:51 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3319031c-7524-4aba-998b-86a7b8a1132f.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3319031c-7524-4aba-998b-86a7b8a1132f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 690133687ca909986a7ac4e919193bbb
9f36b8f5cd7f540d18318c0b8ca55d40e85ed1d4
d4913048b7f2b341c77a345420a855e6385e00c64ef30f6cf136ad16f6bda771
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3319031c-7524-4aba-998b-86a7b8a1132f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6711
x-amzn-requestid: ac93518c-b2e1-4995-9152-11c30c05cc9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c9h4oHmiIAMFXQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639549d0-5180e10e467c4c4c5e7fd1f4;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 03:09:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: iPEuoDVSO2rNh9Y9VA2sYsfqtiMYPHJx2IQdW2Yevo2eqsch2MesJg==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Dec 2022 03:38:02 GMT
age: 40309
etag: "9f36b8f5cd7f540d18318c0b8ca55d40e85ed1d4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5a14c22-5022-4263-af44-d51914a825ed.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5a14c22-5022-4263-af44-d51914a825ed.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 82729f01d4f9937407d14605a2b611f4
63ef739dbbcd1238da788c05909df21826d9f37b
4420ac61a207ef4d7899632123af2dd2c7421e6d16a494aea33383d37d603038
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5a14c22-5022-4263-af44-d51914a825ed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5871
x-amzn-requestid: 0c5fa60d-81f3-4796-966d-cf91b6a28939
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dDWefGstIAMF-zA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63979df6-7234498f4094f61107741d1c;Sampled=0
x-amzn-remapped-date: Mon, 12 Dec 2022 21:32:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: CxVd8_RIj3lEuDAyy9zMdU6jUrRHrosdRCMLCePbaILqq1vqlzvlJg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 21:47:05 GMT
age: 61366
etag: "63ef739dbbcd1238da788c05909df21826d9f37b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5d9c5ff-aaa2-4c2a-ab2b-661f84126bf7.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5d9c5ff-aaa2-4c2a-ab2b-661f84126bf7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 86bce3d677c0dd541440ebf38920020d
f11e21b6ad97e07b1d7103ad40a2e158e06fda73
9e23bc16cd1402d9124ebb9e625a5580f677ca9e008d3e04dc95080072fd1df4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5d9c5ff-aaa2-4c2a-ab2b-661f84126bf7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7104
x-amzn-requestid: b1117224-be51-4e21-8b3b-01e5485f0af0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAD2yH4loAMFuWQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964cf8-1382e1a6710239ec629eedb8;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:34:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: eCJ1Y9f8WMsfMlaqxVR4kTx0Eacgeqn2TN-df-DPt9nQI9AIrqHkEg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Dec 2022 00:46:29 GMT
age: 50602
etag: "f11e21b6ad97e07b1d7103ad40a2e158e06fda73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffebdc4d5-a724-47ca-a30a-bce3e96bbbe3.jpeg
200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffebdc4d5-a724-47ca-a30a-bce3e96bbbe3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2f6f26cc088c96e477fab6eb3bfac37b
7c2728ee396b9aa4d8c32300fb3695e04fcb9d6c
29f7be917aa2ada98958c1e5cc12073417573a46376b35334535587e09c37948
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffebdc4d5-a724-47ca-a30a-bce3e96bbbe3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3666
x-amzn-requestid: 9eb88928-c5fe-4a71-bc9b-a3aa9ffc2d06
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dDWgPE_CoAMFv7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63979e01-6ed9af730d773de1607af63c;Sampled=0
x-amzn-remapped-date: Mon, 12 Dec 2022 21:32:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: u4VOkrCbMz_iuTxWEtB5BW5xEeg6X1dBj6Y1QV8ndXkA5QELnhvleg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 21:47:02 GMT
age: 61369
etag: "7c2728ee396b9aa4d8c32300fb3695e04fcb9d6c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba22bdf-55a7-4e1e-9034-79415392197a.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba22bdf-55a7-4e1e-9034-79415392197a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e6788236cae1083aaf5a1cf95f1a6c9b
3825506ecfd360bf5352979023f445748373be3b
544d94a4896d3db29f3b6e518503f82776a3feaa55a5e9114b5572da1e667691
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba22bdf-55a7-4e1e-9034-79415392197a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9676
x-amzn-requestid: 6d84c903-9bdb-4255-8324-d87d99cd1979
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dDWgGHZZoAMFtwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63979e00-7964e1ca60e88ca45822b963;Sampled=0
x-amzn-remapped-date: Mon, 12 Dec 2022 21:32:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: btTZz7Nxw4axn2z0AGHK8opfEpmDf7ezidoktYn-0AHOvA-DHVUBIQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 21:47:06 GMT
age: 61365
etag: "3825506ecfd360bf5352979023f445748373be3b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 801b52658938119bb773ea1d481b7169
27ed326f27fb206bc72eab314b30d5d7278287b4
18d23851bc0a71f081554f04b8efd395cad0dbc5c1cd19a11add68b9a6991777
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=171856
Date: Tue, 13 Dec 2022 14:49:50 GMT
Etag: "63987e9d-1d7"
Expires: Thu, 15 Dec 2022 14:34:06 GMT
Last-Modified: Tue, 13 Dec 2022 13:31:09 GMT
Server: ECS (bsa/EB24)
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: RDHzSPmS83b6c41W33dpjxMUPH2W2_8MCzfuA34bkITF_Im9SvLrLA==
Age: 3777
static.javhd.com/h5/files/overlay/1602-overlay-preview.png
200 OK 1.5 kB URL HTTP/2 static.javhd.com/h5/files/overlay/1602-overlay-preview.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 7083a71bc40e5d85670940c518cacca2
a2caeb7c6ca3960af2881434fb0df0c2241d7288
7c4049c76ecd35b05855df0c6ce7e1157213d9fb92c3b2b05ebf9b5d9bdff03a
GET /h5/files/overlay/1602-overlay-preview.png HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhdhello.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:51 GMT
content-type: image/png
content-length: 1546
last-modified: Wed, 20 Apr 2022 13:56:48 GMT
etag: "62601120-60a"
expires: Tue, 23 May 2023 11:04:47 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684839887
server: CDN77-Turbo
x-77-nzt: AblMCQ0CcJb/wCYNAQ
x-77-nzt-ray: c0a4cc286d36b8a20f9198637112bb02
x-cache: HIT
x-age: 17639104
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
static.javhd.com/h5/files/overlay/1602-overlay.png
200 OK 1.8 kB URL HTTP/2 static.javhd.com/h5/files/overlay/1602-overlay.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash f4403fc07b7c414db6ec613317885035
457d3e8f9e9fb0456292efdbd5f18b318e804ea7
00ffbfa9483f4a6e8b85b6ab368a9547cf29e54c1aeb2bfcf81f34ec2bf50ee7
GET /h5/files/overlay/1602-overlay.png HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhdhello.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:51 GMT
content-type: image/png
content-length: 1839
last-modified: Wed, 20 Apr 2022 13:56:47 GMT
etag: "6260111f-72f"
expires: Tue, 23 May 2023 11:04:47 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684839887
server: CDN77-Turbo
x-77-nzt: AblMCQ2hCR3/wCYNAQ
x-77-nzt-ray: c0a4cc286d36b8a20f919863041fbf02
x-cache: HIT
x-age: 17639104
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
static.javhd.com/h5/files/button/29-button.png
200 OK 733 B URL HTTP/2 static.javhd.com/h5/files/button/29-button.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 82a66a2d222379716ca9a03ff50d8f42
ae43d917ff791f9172edc527baa6266416182aaa
cc5da7b40e498d30bf5eaae43e59cae32202737076422676489dd8d3030803de
GET /h5/files/button/29-button.png HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhdhello.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:51 GMT
content-type: image/png
content-length: 733
last-modified: Tue, 22 Dec 2015 18:41:22 GMT
etag: "56799952-2dd"
expires: Tue, 23 May 2023 11:04:47 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684839887
server: CDN77-Turbo
x-77-nzt: AblMCQ0CDnD/wCYNAQ
x-77-nzt-ray: c0a4cc286d36b8a20f9198636c280d03
x-cache: HIT
x-age: 17639104
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e88e06c-7fb5-447c-ab5f-a3075c4318c1.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e88e06c-7fb5-447c-ab5f-a3075c4318c1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a155e8441280437a2293c7838ee085c1
f70e9e62d07733784b37e050b163ee7fdc17ce99
8cfa8d89af71d36df36c480a5228d3822cc5b5a0c2d373997d30144b4a979618
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e88e06c-7fb5-447c-ab5f-a3075c4318c1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4453
x-amzn-requestid: fe6af59f-8c78-40e6-bf15-2aeab0c1da0e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c6jXkEjZoAMFctw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639418fd-345602320306063952b95a35;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 05:28:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gRL6VSAv4RN7LukA9bdB4Y0rP3yTUNTcdrE1kyvvMbH4mk3i9dsX6A==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 15:38:26 GMT
age: 83485
etag: "f70e9e62d07733784b37e050b163ee7fdc17ce99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 50513b6aa1f4203fdcc1ac7bce4ddc42
d52b32c182252b7491236b75bff58d18e877de3e
386e15fd19497d3d88a505ece3322093b420808707d54121de2b243c1b9a6a07
Analyzer Verdict Alert fortinet Malware
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:51 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www4.bestjavporn.com
access-control-allow-credentials: true
set-cookie: uid_id2=5e40e64c-76cd-441f-a2e3-d95994728fde:1:1; expires=Fri, 10 Dec 2032 14:49:51 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
js.wpadmngr.com/static/adManager.m.js
200 OK 36 kB URL HTTP/2 js.wpadmngr.com/static/adManager.m.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash 48c7bdf66bb68aa2836d810bf904e1d7
3ffffd76f7b2355b098889f6f35c490231636d32
ae54789a20abc55c3a904b1e6dae0b5354118475932c0ea464fc019430db02d8
GET /static/adManager.m.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:51 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Mon, 12 Dec 2022 10:14:28 GMT
etag: W/"6396ff04-1880d"
content-encoding: gzip
expires: Tue, 13 Dec 2022 14:54:51 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
js.wpadmngr.com/npc/sdk/wp-banners.js
200 OK 0 B URL HTTP/2 js.wpadmngr.com/npc/sdk/wp-banners.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/wp-banners.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:51 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 20 Aug 2021 15:14:31 GMT
etag: "611fc6d7-0"
expires: Tue, 13 Dec 2022 14:54:51 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
static.javhd.com/h5/files/video/3142-11518-300x250.medium.mp4
206 Partial Content 551 kB URL HTTP/2 static.javhd.com/h5/files/video/3142-11518-300x250.medium.mp4
IP
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 551 kB (551282 bytes)
Hash d57f9c72bffb62004a30bd3eb1ad58c0
81866548694b3ff0f7eab36c1224cab49b1dd72a
27a86038b0db14fb8a9df5220317d028dd21ff9b62541184b2feed8af3d47b41
GET /h5/files/video/3142-11518-300x250.medium.mp4 HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://static.javhdhello.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Tue, 13 Dec 2022 14:49:51 GMT
content-type: video/mp4
content-length: 551282
last-modified: Wed, 19 Oct 2022 09:58:17 GMT
etag: "634fca39-86972"
expires: Tue, 22 Nov 2022 14:34:26 GMT
cache-control: max-age=86400
access-control-allow-origin: *
x-accel-expires: @1670943478
server: CDN77-Turbo
x-77-nzt: AblMCQ1Mysv/mU8BAA
x-77-nzt-ray: c0a4cc286d36b8a20f919863cd3aaf0a
x-cache: HIT
x-age: 85913
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-551281/551282
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9737234c717c89fb6ffae311fd4006f3
ab6f9e1e455eb0cb1080f9a188c0713c72ce6ad0
e9dde11e853c106bce6024be7f6a86138f25fbceb9779b6dfd8a42d478349c8e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E9DDE11E853C106BCE6024BE7F6A86138F25FBCEB9779B6DFD8A42D478349C8E"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20942
Expires: Tue, 13 Dec 2022 20:38:53 GMT
Date: Tue, 13 Dec 2022 14:49:51 GMT
Connection: keep-alive
static.javhd.com/h5/files/css/style.css
200 OK 1.6 kB URL HTTP/2 static.javhd.com/h5/files/css/style.css
IP
ASN #60068 Datacamp Limited
Hash 0aef8613729ec16135993d7916910ca9
5e765117d33ad10796634b4235935f3a4afb9064
fb6732f9ed83cbba598eb2aaed0998e2fdd97a723b92c6a887991c46f502ac76
GET /h5/files/css/style.css HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhdhello.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:51 GMT
content-type: text/css
last-modified: Wed, 25 May 2016 08:29:12 GMT
etag: W/"57456258-7bd"
expires: Tue, 23 May 2023 11:04:47 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684839887
server: CDN77-Turbo
x-77-nzt: AblMCQ24Y0T/wCYNAQ
x-77-nzt-ray: c0a4cc286d36b8a20f919863c8bcb402
x-cache: HIT
x-age: 17639104
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
poweredby.jads.co/adshow.php?adzone=784300
200 OK 1.5 kB URL HTTP/1.1 poweredby.jads.co/adshow.php?adzone=784300
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (358), with CRLF, LF line terminators
Hash 7874beed51eeaa00832e380f63bffc3a
ffd30c48d73e9e4802c030fbb2ed6c1b59f2919a
537f49721f3fef421c26640c2012d63ed12b798f3ef62a23fe3e02ac22b52d9a
GET /adshow.php?adzone=784300 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 14:49:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=c3c00cd0ca7ba000addb1e45d69c6d37; expires=Wed, 13-Dec-2023 14:49:50 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YTowOnt9; expires=Fri, 16-Dec-2022 14:49:50 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Fri, 16-Dec-2022 14:49:50 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
r.trackwilltrk.com/s1/4121eca0-ff5a-4c89-9772-768fbbfd1900?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=126401&cv4=237443&cv5=784300&cv6=
200 OK 757 B URL HTTP/2 r.trackwilltrk.com/s1/4121eca0-ff5a-4c89-9772-768fbbfd1900?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=126401&cv4=237443&cv5=784300&cv6=
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (561)
Hash 67c2639c11128b581ba0deb3f0990341
5c34528772d5429676bc4b17bcaaf0ecb76d47bf
a00b2bd3868601ed6160bc121e6d4a2802325aadda9c5134841fa46df2962232
GET /s1/4121eca0-ff5a-4c89-9772-768fbbfd1900?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=126401&cv4=237443&cv5=784300&cv6= HTTP/1.1
Host: r.trackwilltrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poweredby.jads.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Tue, 13 Dec 2022 14:49:51 GMT
content-type: text/html; charset=utf-8
content-length: 757
set-cookie: uid=v88Xe9EtM; Path=/; Domain=trackwilltrk.com; Expires=Wed, 14 Dec 2022 14:49:51 GMT; HttpOnly
x-request-id: 7e52c0fb-e1ea-4e61-a83f-3c3046f60331
X-Firefox-Spdy: h2
static.javhd.com/h5/files/overlay/16-overlay-preview.png
200 OK 507 B URL HTTP/2 static.javhd.com/h5/files/overlay/16-overlay-preview.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 728 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash db53e5222242237b3bf9cfa0e57ba892
682eff797b686263d1259a4cb5e56475f6b49abe
90b8ab0ecc1d52738d7f0c0bb413375bd6e2f7d7f22d4adf1b1df004ee5d4d43
GET /h5/files/overlay/16-overlay-preview.png HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhdhello.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:52 GMT
content-type: image/png
content-length: 507
last-modified: Tue, 06 Feb 2018 18:18:14 GMT
etag: "5a79f166-1fb"
expires: Tue, 23 May 2023 11:06:53 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684840013
server: CDN77-Turbo
x-77-nzt: AblMCQ2idSz/QyYNAQ
x-77-nzt-ray: c0a4cc286d36b8a210919863ddae1f01
x-cache: HIT
x-age: 17638979
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
static.javhd.com/h5/files/overlay/16-overlay.png
200 OK 4.2 kB URL HTTP/2 static.javhd.com/h5/files/overlay/16-overlay.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 728 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash d66274c14945df9c552f3f29b2edb39e
ab31d71d26c8486aa6e5662459341e1db4171ecb
eca2a576dcb0e650c0701e96f1d4e7336cd0adc970cedbc7e8a72638ca2aa43e
GET /h5/files/overlay/16-overlay.png HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhdhello.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:52 GMT
content-type: image/png
content-length: 4224
last-modified: Tue, 06 Feb 2018 18:15:47 GMT
etag: "5a79f0d3-1080"
expires: Tue, 23 May 2023 11:06:55 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684840015
server: CDN77-Turbo
x-77-nzt: AblMCQ1C0VX/QSYNAQ
x-77-nzt-ray: c0a4cc286d36b8a2109198636adf2b01
x-cache: HIT
x-age: 17638977
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
static.javhd.com/h5/files/button/19-button.png
200 OK 504 B URL HTTP/2 static.javhd.com/h5/files/button/19-button.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 728 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash 6b9292b2f016f0dca094f08e98b10e4f
032fb37c0956d518c289b727d4f2b1f7d300f9e1
549b9bd0060e105223af22424e20b6dce5b9276b90bda0af13a1b0fc503bd673
GET /h5/files/button/19-button.png HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhdhello.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:52 GMT
content-type: image/png
content-length: 504
last-modified: Fri, 11 Dec 2015 19:04:22 GMT
etag: "566b1e36-1f8"
expires: Tue, 23 May 2023 11:05:44 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684839944
server: CDN77-Turbo
x-77-nzt: AblMCQ0XMsb/iCYNAQ
x-77-nzt-ray: c0a4cc286d36b8a210919863ed033b01
x-cache: HIT
x-age: 17639048
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
poweredby.jads.co/adshow.php?adzone=794135
200 OK 1.7 kB URL HTTP/1.1 poweredby.jads.co/adshow.php?adzone=794135
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1332), with CRLF, LF line terminators
Hash b5218def94ebc687a2eaabe8e8290829
668f276d5e6135b3e809913090d6e729e00631d6
7c34227782428a87bbdf77c62b975180e5c117a34cbab00d8bf540f86dc92ad7
GET /adshow.php?adzone=794135 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 Dec 2022 14:49:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=c3c00cd0ca7ba000addb1e45d69c6d37; expires=Wed, 13-Dec-2023 14:49:50 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YTowOnt9; expires=Fri, 16-Dec-2022 14:49:50 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Fri, 16-Dec-2022 14:49:50 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
i.jads.co/1x1.gif
200 OK 43 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /1x1.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=c3c00cd0ca7ba000addb1e45d69c6d37; juicy_data_1=YTowOnt9; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:52 GMT
etag: "1457030838"
cache-control: max-age=16282274
content-length: 43
content-type: image/gif
last-modified: Thu, 03 Mar 2016 18:47:18 GMT
accept-ranges: bytes
x-hw: 1670942992.dop010.sk1.t,1670942992.cds262.sk1.hn,1670942992.cds264.sk1.c
X-Firefox-Spdy: h2
static.javhdhello.com/h5/files/15540/728x90.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2F71c4b258-85d7-4b68-903c-9b5137533963%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D237443%26cv5%3D784300%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzY3NTUsImJoIjo5MCwiYnciOjcyOCwiZiI6MSwibyI6MSwicCI6MSwicyI6MjEwMzR9
200 OK 1.7 kB URL HTTP/2 static.javhdhello.com/h5/files/15540/728x90.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2F71c4b258-85d7-4b68-903c-9b5137533963%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D237443%26cv5%3D784300%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzY3NTUsImJoIjo5MCwiYnciOjcyOCwiZiI6MSwibyI6MSwicCI6MSwicyI6MjEwMzR9
IP
ASN #60068 Datacamp Limited
Hash d7ef4e01a06a2537bd1054af79265a6d
6a5054e5e86c138488dcfa402d63fa25e406948d
cccb4467ed1e3e024b67551d8eb767d2fda04d7758cdaa0686aa226b0a59cc6f
GET /h5/files/15540/728x90.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2F71c4b258-85d7-4b68-903c-9b5137533963%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D237443%26cv5%3D784300%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzY3NTUsImJoIjo5MCwiYnciOjcyOCwiZiI6MSwibyI6MSwicCI6MSwicyI6MjEwMzR9 HTTP/1.1
Host: static.javhdhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r.trackwilltrk.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:51 GMT
content-type: text/html
last-modified: Mon, 07 Feb 2022 07:42:09 GMT
etag: W/"6200cd51-c7f"
expires: Mon, 02 Jan 2023 12:44:54 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-accel-expires: @1672663494
server: CDN77-Turbo
x-77-nzt: AblMCQ1/ven/SUwNAA
x-77-nzt-ray: c0a4cc286d36b8a20f9198636ab97b3b
x-cache: HIT
x-age: 871497
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
static.javhd.com/h5/files/video/3189-24876-728x90.medium.mp4
206 Partial Content 173 kB URL HTTP/2 static.javhd.com/h5/files/video/3189-24876-728x90.medium.mp4
IP
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 173 kB (172741 bytes)
Hash b0b8b3da7ed73a14da0ac281fe38fd2c
7b4d1fcedb3827a8dc8431488d96f1e6921a6c44
09a509c27b9e830c02f65ae8f2e5b7c5a654c481cd6b7bd9131197dfce5c33dc
GET /h5/files/video/3189-24876-728x90.medium.mp4 HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://static.javhdhello.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Tue, 13 Dec 2022 14:49:52 GMT
content-type: video/mp4
content-length: 523070
last-modified: Mon, 07 Feb 2022 07:42:08 GMT
etag: "6200cd50-7fb3e"
expires: Tue, 24 May 2022 11:07:07 GMT
cache-control: max-age=86400
access-control-allow-origin: *
x-accel-expires: @1671025844
server: CDN77-Turbo
x-77-nzt: AblMCQ0x45D/3A0AAA
x-77-nzt-ray: c0a4cc286d36b8a210919863598ce501
x-cache: HIT
x-age: 3548
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-523069/523070
X-Firefox-Spdy: h2
static.javhd.com/h5/files/video/35-17549-300x250.medium.mp4
206 Partial Content 254 kB URL HTTP/2 static.javhd.com/h5/files/video/35-17549-300x250.medium.mp4
IP
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 254 kB (253929 bytes)
Hash d413ef2eaeddc338ec5f97b435f3d296
a148b2f56a605a4b2999bc31aed77197dbf2af6a
89a31e1328238b5dafa5c836385e65cd86a165ad4d58dd79deddc4a2a0f098f8
GET /h5/files/video/35-17549-300x250.medium.mp4 HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://static.javhdhello.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Tue, 13 Dec 2022 14:49:52 GMT
content-type: video/mp4
content-length: 690350
last-modified: Mon, 21 Nov 2022 14:28:12 GMT
etag: "637b8afc-a88ae"
expires: Wed, 23 Nov 2022 07:36:55 GMT
cache-control: max-age=86400
access-control-allow-origin: *
x-accel-expires: @1671005741
server: CDN77-Turbo
x-77-nzt: AblMCQ1aIKj/Y1wAAA
x-77-nzt-ray: c0a4cc286d36b8a2109198637e05db16
x-cache: HIT
x-age: 23651
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-690349/690350
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c5fab2272f7323282f3f73dfd469f6cb
413484c4193166a02657f6111248c2227e005a1f
6a707e1907f52c5a666508c30785b671d5fef4dff9a675235714e8490d8f0e64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A707E1907F52C5A666508C30785B671D5FEF4DFF9A675235714E8490D8F0E64"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5413
Expires: Tue, 13 Dec 2022 16:20:05 GMT
Date: Tue, 13 Dec 2022 14:49:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 21711da45bed49fe74fe5c96d17d1c6b
6a179f643003ceff53c3c757874623b7eae1e345
936833fa9ec254bf130cd7ccd4d8ab671004309067b8242392f646bbd3580a7b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "936833FA9EC254BF130CD7CCD4D8AB671004309067B8242392F646BBD3580A7B"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14102
Expires: Tue, 13 Dec 2022 18:44:54 GMT
Date: Tue, 13 Dec 2022 14:49:52 GMT
Connection: keep-alive
fp.metricswpsh.com/fp?tag_id=59555
204 No Content 0 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=59555
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=59555 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www4.bestjavporn.com/
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Tue, 13 Dec 2022 14:49:52 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://www4.bestjavporn.com
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
js.wpadmngr.com/static/adManager.js
200 OK 613 B URL HTTP/2 js.wpadmngr.com/static/adManager.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (1245), with no line terminators
Hash 6794c84322ff4058e3cdef79f8e0ff88
34e2f8f3a7ed78a68453be557a9e4bc6ba4effc0
94771762d8c52ec00704a728e35993b89ec1075edf403887c1d56afd7d64b389
GET /static/adManager.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:51 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Mon, 05 Dec 2022 13:37:26 GMT
etag: W/"638df416-4dd"
content-encoding: gzip
expires: Tue, 13 Dec 2022 14:54:51 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
static.javhdhello.com/h5/files/16581/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Fef7ed9bf-02b1-42a7-b41c-1a88029074bd%3Fcv1%3D6560d749-7af5-11ed-a8af-e2e38133f3a0%26cv10%3D62fe56a361d6e272ea2a6a61%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D62fe933961d6e278cd572307%26cv5%3D62fe933061d6e278cd572305%26cv6%3Den%26cv7%3DNTVA-Bestjavporn%26cv8%3DFirefox%26cv9%3D62fe56a361d6e272ea2a6a61%26externalId%3D6560d749-7af5-11ed-a8af-e2e38133f3a0%26p%3DeyJiIjoyNzg2MDUsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3Nzc5fQ
200 OK 18 kB URL HTTP/2 static.javhdhello.com/h5/files/16581/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Fef7ed9bf-02b1-42a7-b41c-1a88029074bd%3Fcv1%3D6560d749-7af5-11ed-a8af-e2e38133f3a0%26cv10%3D62fe56a361d6e272ea2a6a61%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D62fe933961d6e278cd572307%26cv5%3D62fe933061d6e278cd572305%26cv6%3Den%26cv7%3DNTVA-Bestjavporn%26cv8%3DFirefox%26cv9%3D62fe56a361d6e272ea2a6a61%26externalId%3D6560d749-7af5-11ed-a8af-e2e38133f3a0%26p%3DeyJiIjoyNzg2MDUsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3Nzc5fQ
IP
ASN #60068 Datacamp Limited
Hash e1715cf32a1f37deba45c75112f77fdd
611bd229218f47e3febefa04d12a68c31b26b5e5
75c2244b7874eb1a1e025b130e93c9483716691a9d4470ce1f7ffc7d1e0c72b8
GET /h5/files/16581/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Fef7ed9bf-02b1-42a7-b41c-1a88029074bd%3Fcv1%3D6560d749-7af5-11ed-a8af-e2e38133f3a0%26cv10%3D62fe56a361d6e272ea2a6a61%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D62fe933961d6e278cd572307%26cv5%3D62fe933061d6e278cd572305%26cv6%3Den%26cv7%3DNTVA-Bestjavporn%26cv8%3DFirefox%26cv9%3D62fe56a361d6e272ea2a6a61%26externalId%3D6560d749-7af5-11ed-a8af-e2e38133f3a0%26p%3DeyJiIjoyNzg2MDUsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3Nzc5fQ HTTP/1.1
Host: static.javhdhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r.trackwilltrk.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:50 GMT
content-type: text/html
last-modified: Wed, 19 Oct 2022 09:58:18 GMT
etag: W/"634fca3a-c86"
expires: Thu, 12 Jan 2023 14:49:50 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-accel-expires: @1673534990
server: CDN77-Turbo
x-77-nzt: AblMCQ3gN/Gh
x-77-nzt-ray: c0a4cc286d36b8a20e91986339b31e34
x-cache: MISS
x-77-pop: stockholmSE
x-77-cache: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=59555
200 OK 28 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=59555
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text
Hash e3af49472d683a217237a6ebaf79bcb7
378db4d7e6171a2676ee15c80b4475d7f5ec9742
7714898d715fb8b1ce7a1de73e0e7c9f6394acc8a08cf1a3b342a7829d4de84a
POST /fp?tag_id=59555 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 22283
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 13 Dec 2022 14:49:52 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 28
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www4.bestjavporn.com
Set-Cookie: id=3657360825507855456; Expires=Wed, 13 Dec 2023 14:49:52 GMT; Secure; SameSite=None
Vary: Origin
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c8d65e91c31776ba048fc56247723896
9f6456303ac7b570cb2f5b4918f0c4060ff87f8f
f4f26985bdad79e4e647221712875116970ac6b3f5e42ad0d12a39edfadb55f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F4F26985BDAD79E4E647221712875116970AC6B3F5E42AD0D12A39EDFADB55F3"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8861
Expires: Tue, 13 Dec 2022 17:17:33 GMT
Date: Tue, 13 Dec 2022 14:49:52 GMT
Connection: keep-alive
unseenreport.com/pxf.gif?uuid=5e40e64c-76cd-441f-a2e3-d95994728fde&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=2bd8d300136a6fd50bcb5a7f3f4a12fa&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=14
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=5e40e64c-76cd-441f-a2e3-d95994728fde&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=2bd8d300136a6fd50bcb5a7f3f4a12fa&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=14
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=5e40e64c-76cd-441f-a2e3-d95994728fde&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=2bd8d300136a6fd50bcb5a7f3f4a12fa&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=14 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Tue, 13 Dec 2022 14:49:53 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c6025dd90a8f64281ab51413b06b5adc
Strict-Transport-Security: max-age=0; includeSubdomains
costhandbookfolder.com/sbar.json?key=2bd8d300136a6fd50bcb5a7f3f4a12fa&uuid=5e40e64c-76cd-441f-a2e3-d95994728fde%3A1%3A1
200 OK 4.6 kB URL HTTP/1.1 costhandbookfolder.com/sbar.json?key=2bd8d300136a6fd50bcb5a7f3f4a12fa&uuid=5e40e64c-76cd-441f-a2e3-d95994728fde%3A1%3A1
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (7321), with no line terminators
Hash f48122ecfe81781da2330a8d7621fde0
10c57a6eb035d3f6cafa57a1b782a31fa4355828
a6e8f3d61bd21b07a8c4221826060362abfdf1ddeb33a08c7c8dcefa6a822218
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=2bd8d300136a6fd50bcb5a7f3f4a12fa&uuid=5e40e64c-76cd-441f-a2e3-d95994728fde%3A1%3A1 HTTP/1.1
Host: costhandbookfolder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Tue, 13 Dec 2022 14:49:53 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www4.bestjavporn.com
Access-Control-Allow-Origin: https://www4.bestjavporn.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17179025; expires=Wed, 14 Dec 2022 14:49:52 GMT; secure; SameSite=None
uid_id2=5e40e64c-76cd-441f-a2e3-d95994728fde:1:1; expires=Tue, 20 Dec 2022 14:49:52 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 14 Dec 2022 14:49:53 GMT; secure; SameSite=None
uncs=1; expires=Wed, 14 Dec 2022 14:49:53 GMT; secure; SameSite=None
pdhtkv29=true; expires=Wed, 14 Dec 2022 14:49:53 GMT; secure; SameSite=None
uncs29=1; expires=Wed, 14 Dec 2022 14:49:53 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bfb005dae695ed3ce041326c35d909d1
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
costhandbookfolder.com/ren.gif?sid=H4sIAAAAAAAC%2F6xS0WscVRe%2F0%2FYrH%2FSl%2Ffhevg%2BF0dWiaDYzuzO72cQQ2iatS9MkJJFCQcqde%2B9sbvfOvcO9MztJnooR6UshLaLFl05OksbaYtt3BbsRRAJC1gdZ0PgfSEXss%2BwmUn0QfPDAzPkdfvdefr9zzntr6R5yIMXdmQtqmQuBB%2F2iY79ykUuqMmNPzduuU3RG7ItcVrwRe7H3061h1%2FGLzqv2OUaaarDkuI7jOq59lmsWqsXBPgs8vl9zizWn6JWKru%2FBov5zbVILDLaAtvbQf4DTzr8Wvn4EnLRBRg%2FHmWkmKn59IkoFTpSGFt16SzalyiREz2CoLQjl1sFpUKaD0K1DoOTWgQNQrY2eAwh4B1nfuRDIrQOZELQ295UGApiEgB6DrNUGJtrAcRuIWgFOdxEAoTA1DTK6M6V0hpf2WdxjO%2BjI01%2BAZx105If%2Fgow%2BPS34oj2nRJpwJQ0shjnwxTbwRhvidBuSZQt4tg0keQc4%2FQYNPp0EGW1MG6GA0%2B5LPvMcVvHIQLVC6IDnueEALrHyAK35tZpXLQ2FlPVbxHkbeNgGwVYBGwvS3sctSEML0tiCiHZt7NdCx6mGQVguD3mEkHKZEH%2BoQn1a9oZCB1LS87AKSbwKRKwC0Vch1lehyW%2Fu%2Bi%2Fvvv0a6PQLMAs5GGqBSRC0aA4ZQ5AZBBlGkHEEWYIga%2BWbVJiSye9QYdLAPcilg1zO11XSWMObKmkwidbiPXSi1z7r6As3oMm6dimgQ7TsOG65gish9Z2ABD6uhuXQw24pxGB4Dtwc6ptd5h10%2BOgKxLyDDo38DAFugxFtIPw44PR5wNl6teQAXlj3hhxYlg8CZpIruBUrLYtERUBVDnFyBJIla03sof%2F1J1k%2BVgFGdsYeVx6%2F8fSeBKJziHUOV%2FiXCBri2vqsytDGrMoMejQdJzziy7g35bkEJwx9cp4tZUrT%2BrhZvXuK9IgevD%2FPTDKJJeWyYdC905xSps8qTRj6vG4usmAmNQunUy3TeHLmzNl6FGtmDFeyDZjvLl4Cwjvo35%2BN9vf3%2F3PfA9fboNPu%2BEKSxMODg0Rw0izGRDSLEkdsvx4zDCejvldxPP8kppz%2BjvloY%2BH8wAXt1auyedmBKN0Z%2B6Bl%2F3T9%2BK%2FAVRtI%2FO6DQmF8Yu7MbH1mvj49VSh0X5xrLklqU9awtzftcHvTbjHRVJFJAiVT8%2BT2zYcPCoXJU7PnJi7XL5w6N1EodN%2F8C3XJQhoFEnPxdxV%2BXCjUz%2FRlzP5TT57kUSMZ5UTJu4XCfH1%2Bsid48Mnt9zfnOTUBa2gmDUvshIsgpcO26ziOPTV93g6V7nfhye2ProKJd9BBgFEItHhWB7EFWZqv61KwM7b03O5XezMrIHgHDR%2FzQbCdsQ%2BvT%2F84Qi8BDnIw7A8Xn%2BE1cw0a2gKcrICMcmjpHFoiByxWwaSH15NY74x9W%2B4HBMJaD4S2NgKhxY39TTa8azM%2FdELmlFgQ1oKwih1aC71agGsuqwY%2BdiExHXLrxonfAAAA%2F%2F8BAAD%2F%2F2X7iqkGBgAA
200 OK 7 B URL HTTP/1.1 costhandbookfolder.com/ren.gif?sid=H4sIAAAAAAAC%2F6xS0WscVRe%2F0%2FYrH%2FSl%2Ffhevg%2BF0dWiaDYzuzO72cQQ2iatS9MkJJFCQcqde%2B9sbvfOvcO9MztJnooR6UshLaLFl05OksbaYtt3BbsRRAJC1gdZ0PgfSEXss%2BwmUn0QfPDAzPkdfvdefr9zzntr6R5yIMXdmQtqmQuBB%2F2iY79ykUuqMmNPzduuU3RG7ItcVrwRe7H3061h1%2FGLzqv2OUaaarDkuI7jOq59lmsWqsXBPgs8vl9zizWn6JWKru%2FBov5zbVILDLaAtvbQf4DTzr8Wvn4EnLRBRg%2FHmWkmKn59IkoFTpSGFt16SzalyiREz2CoLQjl1sFpUKaD0K1DoOTWgQNQrY2eAwh4B1nfuRDIrQOZELQ295UGApiEgB6DrNUGJtrAcRuIWgFOdxEAoTA1DTK6M6V0hpf2WdxjO%2BjI01%2BAZx105If%2Fgow%2BPS34oj2nRJpwJQ0shjnwxTbwRhvidBuSZQt4tg0keQc4%2FQYNPp0EGW1MG6GA0%2B5LPvMcVvHIQLVC6IDnueEALrHyAK35tZpXLQ2FlPVbxHkbeNgGwVYBGwvS3sctSEML0tiCiHZt7NdCx6mGQVguD3mEkHKZEH%2BoQn1a9oZCB1LS87AKSbwKRKwC0Vch1lehyW%2Fu%2Bi%2Fvvv0a6PQLMAs5GGqBSRC0aA4ZQ5AZBBlGkHEEWYIga%2BWbVJiSye9QYdLAPcilg1zO11XSWMObKmkwidbiPXSi1z7r6As3oMm6dimgQ7TsOG65gish9Z2ABD6uhuXQw24pxGB4Dtwc6ptd5h10%2BOgKxLyDDo38DAFugxFtIPw44PR5wNl6teQAXlj3hhxYlg8CZpIruBUrLYtERUBVDnFyBJIla03sof%2F1J1k%2BVgFGdsYeVx6%2F8fSeBKJziHUOV%2FiXCBri2vqsytDGrMoMejQdJzziy7g35bkEJwx9cp4tZUrT%2BrhZvXuK9IgevD%2FPTDKJJeWyYdC905xSps8qTRj6vG4usmAmNQunUy3TeHLmzNl6FGtmDFeyDZjvLl4Cwjvo35%2BN9vf3%2F3PfA9fboNPu%2BEKSxMODg0Rw0izGRDSLEkdsvx4zDCejvldxPP8kppz%2BjvloY%2BH8wAXt1auyedmBKN0Z%2B6Bl%2F3T9%2BK%2FAVRtI%2FO6DQmF8Yu7MbH1mvj49VSh0X5xrLklqU9awtzftcHvTbjHRVJFJAiVT8%2BT2zYcPCoXJU7PnJi7XL5w6N1EodN%2F8C3XJQhoFEnPxdxV%2BXCjUz%2FRlzP5TT57kUSMZ5UTJu4XCfH1%2Bsid48Mnt9zfnOTUBa2gmDUvshIsgpcO26ziOPTV93g6V7nfhye2ProKJd9BBgFEItHhWB7EFWZqv61KwM7b03O5XezMrIHgHDR%2FzQbCdsQ%2BvT%2F84Qi8BDnIw7A8Xn%2BE1cw0a2gKcrICMcmjpHFoiByxWwaSH15NY74x9W%2B4HBMJaD4S2NgKhxY39TTa8azM%2FdELmlFgQ1oKwih1aC71agGsuqwY%2BdiExHXLrxonfAAAA%2F%2F8BAAD%2F%2F2X7iqkGBgAA
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F6xS0WscVRe%2F0%2FYrH%2FSl%2Ffhevg%2BF0dWiaDYzuzO72cQQ2iatS9MkJJFCQcqde%2B9sbvfOvcO9MztJnooR6UshLaLFl05OksbaYtt3BbsRRAJC1gdZ0PgfSEXss%2BwmUn0QfPDAzPkdfvdefr9zzntr6R5yIMXdmQtqmQuBB%2F2iY79ykUuqMmNPzduuU3RG7ItcVrwRe7H3061h1%2FGLzqv2OUaaarDkuI7jOq59lmsWqsXBPgs8vl9zizWn6JWKru%2FBov5zbVILDLaAtvbQf4DTzr8Wvn4EnLRBRg%2FHmWkmKn59IkoFTpSGFt16SzalyiREz2CoLQjl1sFpUKaD0K1DoOTWgQNQrY2eAwh4B1nfuRDIrQOZELQ295UGApiEgB6DrNUGJtrAcRuIWgFOdxEAoTA1DTK6M6V0hpf2WdxjO%2BjI01%2BAZx105If%2Fgow%2BPS34oj2nRJpwJQ0shjnwxTbwRhvidBuSZQt4tg0keQc4%2FQYNPp0EGW1MG6GA0%2B5LPvMcVvHIQLVC6IDnueEALrHyAK35tZpXLQ2FlPVbxHkbeNgGwVYBGwvS3sctSEML0tiCiHZt7NdCx6mGQVguD3mEkHKZEH%2BoQn1a9oZCB1LS87AKSbwKRKwC0Vch1lehyW%2Fu%2Bi%2Fvvv0a6PQLMAs5GGqBSRC0aA4ZQ5AZBBlGkHEEWYIga%2BWbVJiSye9QYdLAPcilg1zO11XSWMObKmkwidbiPXSi1z7r6As3oMm6dimgQ7TsOG65gish9Z2ABD6uhuXQw24pxGB4Dtwc6ptd5h10%2BOgKxLyDDo38DAFugxFtIPw44PR5wNl6teQAXlj3hhxYlg8CZpIruBUrLYtERUBVDnFyBJIla03sof%2F1J1k%2BVgFGdsYeVx6%2F8fSeBKJziHUOV%2FiXCBri2vqsytDGrMoMejQdJzziy7g35bkEJwx9cp4tZUrT%2BrhZvXuK9IgevD%2FPTDKJJeWyYdC905xSps8qTRj6vG4usmAmNQunUy3TeHLmzNl6FGtmDFeyDZjvLl4Cwjvo35%2BN9vf3%2F3PfA9fboNPu%2BEKSxMODg0Rw0izGRDSLEkdsvx4zDCejvldxPP8kppz%2BjvloY%2BH8wAXt1auyedmBKN0Z%2B6Bl%2F3T9%2BK%2FAVRtI%2FO6DQmF8Yu7MbH1mvj49VSh0X5xrLklqU9awtzftcHvTbjHRVJFJAiVT8%2BT2zYcPCoXJU7PnJi7XL5w6N1EodN%2F8C3XJQhoFEnPxdxV%2BXCjUz%2FRlzP5TT57kUSMZ5UTJu4XCfH1%2Bsid48Mnt9zfnOTUBa2gmDUvshIsgpcO26ziOPTV93g6V7nfhye2ProKJd9BBgFEItHhWB7EFWZqv61KwM7b03O5XezMrIHgHDR%2FzQbCdsQ%2BvT%2F84Qi8BDnIw7A8Xn%2BE1cw0a2gKcrICMcmjpHFoiByxWwaSH15NY74x9W%2B4HBMJaD4S2NgKhxY39TTa8azM%2FdELmlFgQ1oKwih1aC71agGsuqwY%2BdiExHXLrxonfAAAA%2F%2F8BAAD%2F%2F2X7iqkGBgAA HTTP/1.1
Host: costhandbookfolder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Cookie: u_pl=17179025; uid_id2=5e40e64c-76cd-441f-a2e3-d95994728fde:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Tue, 13 Dec 2022 14:49:53 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e876423fcb3364dfa654e7170b675b20
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 24f17490ee5696a9002967e9e53200f4
6aa0b8742785a4eeed32c76362ae1aafb716e3b0
073ca337d67af4b7523e89d73e7126c18ad35496b7a2a1104314060711c3e6b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "073CA337D67AF4B7523E89D73E7126C18AD35496B7A2A1104314060711C3E6B1"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8974
Expires: Tue, 13 Dec 2022 17:19:27 GMT
Date: Tue, 13 Dec 2022 14:49:53 GMT
Connection: keep-alive
www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18
200 OK 5.7 kB URL HTTP/2 www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18
IP
File type ASCII text, with very long lines (20018), with CRLF line terminators
Hash 925b20b6ed838dd301b58607b0088b83
0d037d6523c7683a5d909ebfb578538755f5c55e
3d135f998918aa5da7c1288b3645341895c3b3e5f5f985e76baec7f5309604e5
GET /wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18 HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/dvdes-813-decensored/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:49 GMT
content-type: application/javascript
last-modified: Fri, 15 Jan 2021 20:53:56 GMT
vary: Accept-Encoding
etag: W/"600200e4-4fdb"
cf-connecting-ip: 88.195.172.127
x-frame-options: SAMEORIGIN
x-rocket-nginx-serving-static: No
x-rocket-args: ver=1.6.18
x-rocket-uri: /wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 14893
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bFOn9LQ9iHWinmf5LoDPKVnD%2FDm9te13jb61OnVOKyDBa5lCZftHduYDNXurrH%2FnEFdLxal8dqJm8wXooMLeXfvzh7CDKp4C7qRo0O09vNmvWEKYCfaeqlr00jnI9CTsmtEh8bLR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 778f8231f9d50b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash aa84e06995042e1322075032a2fc727e
69cea844074957e83574ba3ae81a22c14bb0b15c
155e80cfb87e5cb8149276ab3a0fb53e217024f46878dcd3711f1def03d068c2
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "155E80CFB87E5CB8149276AB3A0FB53E217024F46878DCD3711F1DEF03D068C2"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12588
Expires: Tue, 13 Dec 2022 18:19:41 GMT
Date: Tue, 13 Dec 2022 14:49:53 GMT
Connection: keep-alive
costhandbookfolder.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2F%2Fsb%2Fnotifications%2Frtb%2Fsocial%2Finsta%2F1-1%2Findex.html&l=1184&fd=254
200 OK 0 B URL HTTP/1.1 costhandbookfolder.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2F%2Fsb%2Fnotifications%2Frtb%2Fsocial%2Finsta%2F1-1%2Findex.html&l=1184&fd=254
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2F%2Fsb%2Fnotifications%2Frtb%2Fsocial%2Finsta%2F1-1%2Findex.html&l=1184&fd=254 HTTP/1.1
Host: costhandbookfolder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Cookie: u_pl=17179025; uid_id2=5e40e64c-76cd-441f-a2e3-d95994728fde:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Tue, 13 Dec 2022 14:49:53 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash aa84e06995042e1322075032a2fc727e
69cea844074957e83574ba3ae81a22c14bb0b15c
155e80cfb87e5cb8149276ab3a0fb53e217024f46878dcd3711f1def03d068c2
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "155E80CFB87E5CB8149276AB3A0FB53E217024F46878DCD3711F1DEF03D068C2"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12588
Expires: Tue, 13 Dec 2022 18:19:41 GMT
Date: Tue, 13 Dec 2022 14:49:53 GMT
Connection: keep-alive
cdn.creative-bars1.com/sb/notifications/rtb/social/insta/1-1/css/animate.css
200 OK 4.8 kB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/rtb/social/insta/1-1/css/animate.css
IP
Hash 21eb7a65c17a2c22ba104a7ecbf1dc0f
ea8c53be54889c7489aed04e30e3eb83af64dec9
090bd9ceb9a58da038e5ed4a39dfbb63ece49ed4f4f0656ce35f7faa41a3b237
GET /sb/notifications/rtb/social/insta/1-1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:53 GMT
content-type: text/css
last-modified: Mon, 11 Apr 2022 15:17:45 GMT
etag: W/"62544699-1358d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 80099
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KsaTYEFrrF7WIVV9O9PZsZbd3Y2dHlYnkkVuH44S0%2BJhOpAzJKII4FMnDc4ltuvZUEaicrFgS71FoOR3O3Nhv7%2FmpluFosOk8GD7yIcnEpovKZcofkdLz7REC%2FHPP7ee%2F7bAwJGcvQ%2Bd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778f824d6de023ae-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/rtb/social/insta/1-1/css/style.css
200 OK 1.6 kB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/rtb/social/insta/1-1/css/style.css
IP
Hash 2a66b98300616a53c1b65fa4f0b07735
ce3ee75e75d358e5361088864eff212e287c9be5
4caca2a77ce7356e216ee584995f6951ee9e8cf7f25a217da824467b54c55d7b
GET /sb/notifications/rtb/social/insta/1-1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:53 GMT
content-type: text/css
last-modified: Mon, 06 Jun 2022 09:51:08 GMT
etag: W/"629dce0c-1a5e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 80099
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q3EGNNZ6yooAjxhQH8nKguH9QB0L9WtDhVZS79d7%2F%2FdUcblot7r5NHpxcCDjLJYTvkxOqxvg41KMIfMIUrdmZrNwB1NyuQlHMLq%2BucEb1L3HcKbA3kAcEFtxCbHELShY4jq5woPRiscx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778f824d6de423ae-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
click.pclk.name/thumbnail?seat=546045&adid=546045&i=ghK-Mr4I7nk_0&imgt=icon
302 Found 0 B URL HTTP/1.1 click.pclk.name/thumbnail?seat=546045&adid=546045&i=ghK-Mr4I7nk_0&imgt=icon
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?seat=546045&adid=546045&i=ghK-Mr4I7nk_0&imgt=icon HTTP/1.1
Host: click.pclk.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 302 Found
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: https://us.doctorpost.net/metrics/save.img?event=impressions&bid-id=v2-1670942992921-7-8932-1178228-d0da81f1-ae25-6bec-1766-1d571d361826&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3D8YvjDfSSYAKX4drYX17I1P6DcA68-9C1eCxuWqm-g-Dfg0X5TVGtD2i862oO5lpS3qf7CR_EejpVYahnkrzGD1inBgjRcuEE1IjD2YTgH49-xtNiHtCImPvyDaaRw5tTxXL8Yi3ueKDDN-RP9T2q16cSqbcE15Ei4BXygO8-4DUlNrUiC-Whjj0nq4kPMyWr1cEoyoiKKtGtPHHw7sjoQCgT_hULdj_qEmJO5PWLXUra8x3_MxYc2_S7SuPoo0-6p3Q02BKKYGfBvheGQURBeR9mcs2V7GAdc6MlvBbbt4vY00BlacWgPVfKOsXFh_ap9Jcm6meHzSlE1d3CK64alWQnjQIZyYZngQZedTAuVqtd9iuBOlR3k4tCW1iU3L5omYeaTzg2tngARhn-cPikCi5U05oFiGaWAMNtplrYM-8ZrBhZ7Gm65yTJORYlbz5-RD97pDfw8nDm-GOoQokFUJTKiiZk6TWvJoTJtIixD3yyBdsPkBVmWRUZMFcg-1yI8J5xuFp0cHd5YROQRfCCqET7oZj_tm0AirG_65FhT-BAZf2Nklz_OsUmGCHppYS0KkLYhgRNaJk013iKlMzzYWQAyznVFpdtZ01ts99_lvdQJayF
Pragma: no-cache
cdn.barscreative1.com//sb/notifications/rtb/social/insta/1-1/index.html
200 OK 1.1 kB URL HTTP/2 cdn.barscreative1.com//sb/notifications/rtb/social/insta/1-1/index.html
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document, ASCII text
Hash 1ec2670ffc886137a23a95385efefdb9
c0ad78c17c79ed3b58ab554f1bec8acc510d27f5
a8050afa9bf3959ce7f830ff5dc5e4eae824e5cbc10e07d8735ee7ac682b7e8d
Analyzer Verdict Alert fortinet Phishing
GET //sb/notifications/rtb/social/insta/1-1/index.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:53 GMT
content-type: text/html; charset=utf-8
server: nginx/1.17.6
last-modified: Mon, 06 Jun 2022 09:30:03 GMT
etag: W/"629dc91b-4a0"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Tue, 13 Dec 2022 15:49:53 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Dec 2022 13:33:13 GMT
expires: Sat, 09 Dec 2023 13:33:13 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 350200
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:33:54 GMT
expires: Thu, 07 Dec 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 501359
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/rtb/social/insta/1-1/img/close.svg
200 OK 585 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/rtb/social/insta/1-1/img/close.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash bce897c680cae17c899994ba9f1a68da
698c9fbcd96ab6e61b7bb9b6039eb439a24839fd
8313e273fc788c1d37c114316ecf3b22cc7cd3c65c8585acc9c6b3595dd06734
GET /sb/notifications/rtb/social/insta/1-1/img/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:53 GMT
content-type: image/svg+xml
last-modified: Mon, 11 Apr 2022 15:17:52 GMT
etag: W/"625446a0-52a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 725153
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pltnbM03iyvxOQS%2Buk3AKueEa72ZLKwM6j5EgdIB6Br9nW9mrHngJc8hlWpRrzg34NVSnDw%2FwgGxuzidZsN7zS4GI%2BL6mVB67XSllKWt1kVqG91SyebygVzFTtp7upWybpoq6fzqkNj5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778f824d9e1723ae-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
costhandbookfolder.com/impr.gif?sid=H4sIAAAAAAAC%2F6xSz2scRxautr1mwRd72csuu9C7s2t2STTqnumeH1KEsC3ZGSxLQlIwGIKprqoelae6qqnqnpZ0MlEIvhhkExKTi1tPkhXHJrbvCcSjQAiCgCaHMJAo%2F0FwCPE5zEjBySGQQx50v%2B%2FxVRXf9957az3dRw6kuDd7Sa1wIfCwX3Ts%2F13mkqrM2NMLtusUnVH7MpcVb9Re6v90e8R1%2FKLzf%2FsCIy01XHJcx3Ed1z7PNQvV0vCABR4%2FrLvFulP0SkXX92BJ%2F7o2qQUGW0Db%2B%2BgvwGn3T4ufPwFOOiCjxxPMtBIVvzwZpQInSkObbr8mW1JlEqIXMNQWhHL78DQo00XozhFQcvvQAaj2Zt8BBLyLrK9cCOT2oUwI2lsHSgMBTEJAT0DW7gATHeC4A0StAqd7CIBQmJ4BGd2bVjrDywcs7rNddOz5D8CzLjr2zV9BRh%2BeFXzJnlciTbiSBpbCHPhSB3izA3G6A8mKBTzbAZK8AZx%2BgYafT4GMNmeMUMBp7z8%2B8xxW8chQtULokOe54RAusfIQrfv1ulct1ULKBi3ivAM87IBga4CNBWn%2F4xakoQVpbEFEezb266HjVMMgLJdrHiGkXCbEr1WoT8teLXQgJX0Pa5DEa0DEGhB9HWJ9HVr89p7%2F373XXwKdfgJmMQdDLTAJgjbNIWMIMoMgwwgyjiBLEGTtfIsKUzL5PSpMGriHuXSYy%2FmGSprreEslTSbReryPTvXbZx3%2F1y1osZ5dCmiNlh3HLVdwJaS%2BE5DAx9WwHHrYLYUYDM%2BBmyMDsyu8i44eX4WYd9GR0e8hwB0wogOEnwSc%2FhNwtlEtOYAXN7yaAyvyUcBMcg23Y6VlkagIqMohTo5Bsmyti330t8EkyycqwMju%2BNPK01eeP5BAdA6xzuEa%2FxRBU9zYmFMZ2pxTmUFPZuKER3wF96c8n%2BCEoQ8usuVMadqYMGv3z5A%2B0YcPF5hJprCkXDYNenCWU8r0eaUJQx83zGUWzKZm8WyqZRpPzZ4734hizYzhSnYA872lK0B4F%2F35o7HB%2Fv59%2Fmvgegd02ptYTJJ4ZHiYCE5axZiIVlHiiB3U44bhZMz3Ko7nn8aU058xH2suXhy6pL1GVbauOhClu%2BPvtO3vbp78EbjqAInffFQoTEzOn5trzC40ZqYLhd6%2F51vLktqUNe2dLTvc2bLbTLRUZJJAydQ8u3v78aNCYerM3IXJq41LZy5MFgq9V39DXbKYRoHEXPxehe8XCo1zAxlzf9STp3nUTMY4UfJ%2BobDQWJjqCx5%2BdvftrQVOTcCamknDEjvhIkjpiO06jmNPz1y0Q6UHXXh2973rYOJddBhgFAItXtRBbEGW5hu6FOyOL%2F9j77P92VUQvItGTvgg2O74uzdnvh2lVwAHORj2i4sv8Lq5AU1tAU5WQUY5tHUObZEDFmtg0qMbSax3x78sDwICYW0EQlubgdDi1sEmG96zfddjtaBWJZQGjFC3WirXyo5TotSr1plbh8R0yZ1bp34CAAD%2F%2FwEAAP%2F%2FcfMETwYGAAA%3D
200 OK 7 B URL HTTP/1.1 costhandbookfolder.com/impr.gif?sid=H4sIAAAAAAAC%2F6xSz2scRxautr1mwRd72csuu9C7s2t2STTqnumeH1KEsC3ZGSxLQlIwGIKprqoelae6qqnqnpZ0MlEIvhhkExKTi1tPkhXHJrbvCcSjQAiCgCaHMJAo%2F0FwCPE5zEjBySGQQx50v%2B%2FxVRXf9957az3dRw6kuDd7Sa1wIfCwX3Ts%2F13mkqrM2NMLtusUnVH7MpcVb9Re6v90e8R1%2FKLzf%2FsCIy01XHJcx3Ed1z7PNQvV0vCABR4%2FrLvFulP0SkXX92BJ%2F7o2qQUGW0Db%2B%2BgvwGn3T4ufPwFOOiCjxxPMtBIVvzwZpQInSkObbr8mW1JlEqIXMNQWhHL78DQo00XozhFQcvvQAaj2Zt8BBLyLrK9cCOT2oUwI2lsHSgMBTEJAT0DW7gATHeC4A0StAqd7CIBQmJ4BGd2bVjrDywcs7rNddOz5D8CzLjr2zV9BRh%2BeFXzJnlciTbiSBpbCHPhSB3izA3G6A8mKBTzbAZK8AZx%2BgYafT4GMNmeMUMBp7z8%2B8xxW8chQtULokOe54RAusfIQrfv1ulct1ULKBi3ivAM87IBga4CNBWn%2F4xakoQVpbEFEezb266HjVMMgLJdrHiGkXCbEr1WoT8teLXQgJX0Pa5DEa0DEGhB9HWJ9HVr89p7%2F373XXwKdfgJmMQdDLTAJgjbNIWMIMoMgwwgyjiBLEGTtfIsKUzL5PSpMGriHuXSYy%2FmGSprreEslTSbReryPTvXbZx3%2F1y1osZ5dCmiNlh3HLVdwJaS%2BE5DAx9WwHHrYLYUYDM%2BBmyMDsyu8i44eX4WYd9GR0e8hwB0wogOEnwSc%2FhNwtlEtOYAXN7yaAyvyUcBMcg23Y6VlkagIqMohTo5Bsmyti330t8EkyycqwMju%2BNPK01eeP5BAdA6xzuEa%2FxRBU9zYmFMZ2pxTmUFPZuKER3wF96c8n%2BCEoQ8usuVMadqYMGv3z5A%2B0YcPF5hJprCkXDYNenCWU8r0eaUJQx83zGUWzKZm8WyqZRpPzZ4734hizYzhSnYA872lK0B4F%2F35o7HB%2Fv59%2Fmvgegd02ptYTJJ4ZHiYCE5axZiIVlHiiB3U44bhZMz3Ko7nn8aU058xH2suXhy6pL1GVbauOhClu%2BPvtO3vbp78EbjqAInffFQoTEzOn5trzC40ZqYLhd6%2F51vLktqUNe2dLTvc2bLbTLRUZJJAydQ8u3v78aNCYerM3IXJq41LZy5MFgq9V39DXbKYRoHEXPxehe8XCo1zAxlzf9STp3nUTMY4UfJ%2BobDQWJjqCx5%2BdvftrQVOTcCamknDEjvhIkjpiO06jmNPz1y0Q6UHXXh2973rYOJddBhgFAItXtRBbEGW5hu6FOyOL%2F9j77P92VUQvItGTvgg2O74uzdnvh2lVwAHORj2i4sv8Lq5AU1tAU5WQUY5tHUObZEDFmtg0qMbSax3x78sDwICYW0EQlubgdDi1sEmG96zfddjtaBWJZQGjFC3WirXyo5TotSr1plbh8R0yZ1bp34CAAD%2F%2FwEAAP%2F%2FcfMETwYGAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F6xSz2scRxautr1mwRd72csuu9C7s2t2STTqnumeH1KEsC3ZGSxLQlIwGIKprqoelae6qqnqnpZ0MlEIvhhkExKTi1tPkhXHJrbvCcSjQAiCgCaHMJAo%2F0FwCPE5zEjBySGQQx50v%2B%2FxVRXf9957az3dRw6kuDd7Sa1wIfCwX3Ts%2F13mkqrM2NMLtusUnVH7MpcVb9Re6v90e8R1%2FKLzf%2FsCIy01XHJcx3Ed1z7PNQvV0vCABR4%2FrLvFulP0SkXX92BJ%2F7o2qQUGW0Db%2B%2BgvwGn3T4ufPwFOOiCjxxPMtBIVvzwZpQInSkObbr8mW1JlEqIXMNQWhHL78DQo00XozhFQcvvQAaj2Zt8BBLyLrK9cCOT2oUwI2lsHSgMBTEJAT0DW7gATHeC4A0StAqd7CIBQmJ4BGd2bVjrDywcs7rNddOz5D8CzLjr2zV9BRh%2BeFXzJnlciTbiSBpbCHPhSB3izA3G6A8mKBTzbAZK8AZx%2BgYafT4GMNmeMUMBp7z8%2B8xxW8chQtULokOe54RAusfIQrfv1ulct1ULKBi3ivAM87IBga4CNBWn%2F4xakoQVpbEFEezb266HjVMMgLJdrHiGkXCbEr1WoT8teLXQgJX0Pa5DEa0DEGhB9HWJ9HVr89p7%2F373XXwKdfgJmMQdDLTAJgjbNIWMIMoMgwwgyjiBLEGTtfIsKUzL5PSpMGriHuXSYy%2FmGSprreEslTSbReryPTvXbZx3%2F1y1osZ5dCmiNlh3HLVdwJaS%2BE5DAx9WwHHrYLYUYDM%2BBmyMDsyu8i44eX4WYd9GR0e8hwB0wogOEnwSc%2FhNwtlEtOYAXN7yaAyvyUcBMcg23Y6VlkagIqMohTo5Bsmyti330t8EkyycqwMju%2BNPK01eeP5BAdA6xzuEa%2FxRBU9zYmFMZ2pxTmUFPZuKER3wF96c8n%2BCEoQ8usuVMadqYMGv3z5A%2B0YcPF5hJprCkXDYNenCWU8r0eaUJQx83zGUWzKZm8WyqZRpPzZ4734hizYzhSnYA872lK0B4F%2F35o7HB%2Fv59%2Fmvgegd02ptYTJJ4ZHiYCE5axZiIVlHiiB3U44bhZMz3Ko7nn8aU058xH2suXhy6pL1GVbauOhClu%2BPvtO3vbp78EbjqAInffFQoTEzOn5trzC40ZqYLhd6%2F51vLktqUNe2dLTvc2bLbTLRUZJJAydQ8u3v78aNCYerM3IXJq41LZy5MFgq9V39DXbKYRoHEXPxehe8XCo1zAxlzf9STp3nUTMY4UfJ%2BobDQWJjqCx5%2BdvftrQVOTcCamknDEjvhIkjpiO06jmNPz1y0Q6UHXXh2973rYOJddBhgFAItXtRBbEGW5hu6FOyOL%2F9j77P92VUQvItGTvgg2O74uzdnvh2lVwAHORj2i4sv8Lq5AU1tAU5WQUY5tHUObZEDFmtg0qMbSax3x78sDwICYW0EQlubgdDi1sEmG96zfddjtaBWJZQGjFC3WirXyo5TotSr1plbh8R0yZ1bp34CAAD%2F%2FwEAAP%2F%2FcfMETwYGAAA%3D HTTP/1.1
Host: costhandbookfolder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Cookie: u_pl=17179025; uid_id2=5e40e64c-76cd-441f-a2e3-d95994728fde:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Tue, 13 Dec 2022 14:49:53 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 333cc3a93e507c509e574d1dc0d6448f
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4df17869848209ec442acda76e0e101f
59650cdbfbcd6538e21253a35229b1516c524df5
d40e6f01d3d0eeb1783e9e74b363750ff4b8f6e18cfeef6b704ccb3231217111
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D40E6F01D3D0EEB1783E9E74B363750FF4B8F6E18CFEEF6B704CCB3231217111"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21562
Expires: Tue, 13 Dec 2022 20:49:16 GMT
Date: Tue, 13 Dec 2022 14:49:54 GMT
Connection: keep-alive
us.doctorpost.net/metrics/save.img?event=impressions&bid-id=v2-1670942992921-7-8932-1178228-d0da81f1-ae25-6bec-1766-1d571d361826&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3D8YvjDfSSYAKX4drYX17I1P6DcA68-9C1eCxuWqm-g-Dfg0X5TVGtD2i862oO5lpS3qf7CR_EejpVYahnkrzGD1inBgjRcuEE1IjD2YTgH49-xtNiHtCImPvyDaaRw5tTxXL8Yi3ueKDDN-RP9T2q16cSqbcE15Ei4BXygO8-4DUlNrUiC-Whjj0nq4kPMyWr1cEoyoiKKtGtPHHw7sjoQCgT_hULdj_qEmJO5PWLXUra8x3_MxYc2_S7SuPoo0-6p3Q02BKKYGfBvheGQURBeR9mcs2V7GAdc6MlvBbbt4vY00BlacWgPVfKOsXFh_ap9Jcm6meHzSlE1d3CK64alWQnjQIZyYZngQZedTAuVqtd9iuBOlR3k4tCW1iU3L5omYeaTzg2tngARhn-cPikCi5U05oFiGaWAMNtplrYM-8ZrBhZ7Gm65yTJORYlbz5-RD97pDfw8nDm-GOoQokFUJTKiiZk6TWvJoTJtIixD3yyBdsPkBVmWRUZMFcg-1yI8J5xuFp0cHd5YROQRfCCqET7oZj_tm0AirG_65FhT-BAZf2Nklz_OsUmGCHppYS0KkLYhgRNaJk013iKlMzzYWQAyznVFpdtZ01ts99_lvdQJayF
302 Found 0 B URL HTTP/2 us.doctorpost.net/metrics/save.img?event=impressions&bid-id=v2-1670942992921-7-8932-1178228-d0da81f1-ae25-6bec-1766-1d571d361826&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3D8YvjDfSSYAKX4drYX17I1P6DcA68-9C1eCxuWqm-g-Dfg0X5TVGtD2i862oO5lpS3qf7CR_EejpVYahnkrzGD1inBgjRcuEE1IjD2YTgH49-xtNiHtCImPvyDaaRw5tTxXL8Yi3ueKDDN-RP9T2q16cSqbcE15Ei4BXygO8-4DUlNrUiC-Whjj0nq4kPMyWr1cEoyoiKKtGtPHHw7sjoQCgT_hULdj_qEmJO5PWLXUra8x3_MxYc2_S7SuPoo0-6p3Q02BKKYGfBvheGQURBeR9mcs2V7GAdc6MlvBbbt4vY00BlacWgPVfKOsXFh_ap9Jcm6meHzSlE1d3CK64alWQnjQIZyYZngQZedTAuVqtd9iuBOlR3k4tCW1iU3L5omYeaTzg2tngARhn-cPikCi5U05oFiGaWAMNtplrYM-8ZrBhZ7Gm65yTJORYlbz5-RD97pDfw8nDm-GOoQokFUJTKiiZk6TWvJoTJtIixD3yyBdsPkBVmWRUZMFcg-1yI8J5xuFp0cHd5YROQRfCCqET7oZj_tm0AirG_65FhT-BAZf2Nklz_OsUmGCHppYS0KkLYhgRNaJk013iKlMzzYWQAyznVFpdtZ01ts99_lvdQJayF
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrics/save.img?event=impressions&bid-id=v2-1670942992921-7-8932-1178228-d0da81f1-ae25-6bec-1766-1d571d361826&img=https%3A%2F%2Ftrack.trackingtraffo.com%2Fpush%2Fic%3Fauth%3Dpz6u78%26c%3D8YvjDfSSYAKX4drYX17I1P6DcA68-9C1eCxuWqm-g-Dfg0X5TVGtD2i862oO5lpS3qf7CR_EejpVYahnkrzGD1inBgjRcuEE1IjD2YTgH49-xtNiHtCImPvyDaaRw5tTxXL8Yi3ueKDDN-RP9T2q16cSqbcE15Ei4BXygO8-4DUlNrUiC-Whjj0nq4kPMyWr1cEoyoiKKtGtPHHw7sjoQCgT_hULdj_qEmJO5PWLXUra8x3_MxYc2_S7SuPoo0-6p3Q02BKKYGfBvheGQURBeR9mcs2V7GAdc6MlvBbbt4vY00BlacWgPVfKOsXFh_ap9Jcm6meHzSlE1d3CK64alWQnjQIZyYZngQZedTAuVqtd9iuBOlR3k4tCW1iU3L5omYeaTzg2tngARhn-cPikCi5U05oFiGaWAMNtplrYM-8ZrBhZ7Gm65yTJORYlbz5-RD97pDfw8nDm-GOoQokFUJTKiiZk6TWvJoTJtIixD3yyBdsPkBVmWRUZMFcg-1yI8J5xuFp0cHd5YROQRfCCqET7oZj_tm0AirG_65FhT-BAZf2Nklz_OsUmGCHppYS0KkLYhgRNaJk013iKlMzzYWQAyznVFpdtZ01ts99_lvdQJayF HTTP/1.1
Host: us.doctorpost.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty/1.15.8.3
date: Tue, 13 Dec 2022 14:49:54 GMT
content-length: 0
location: https://track.trackingtraffo.com/push/ic?auth=pz6u78&c=8YvjDfSSYAKX4drYX17I1P6DcA68-9C1eCxuWqm-g-Dfg0X5TVGtD2i862oO5lpS3qf7CR_EejpVYahnkrzGD1inBgjRcuEE1IjD2YTgH49-xtNiHtCImPvyDaaRw5tTxXL8Yi3ueKDDN-RP9T2q16cSqbcE15Ei4BXygO8-4DUlNrUiC-Whjj0nq4kPMyWr1cEoyoiKKtGtPHHw7sjoQCgT_hULdj_qEmJO5PWLXUra8x3_MxYc2_S7SuPoo0-6p3Q02BKKYGfBvheGQURBeR9mcs2V7GAdc6MlvBbbt4vY00BlacWgPVfKOsXFh_ap9Jcm6meHzSlE1d3CK64alWQnjQIZyYZngQZedTAuVqtd9iuBOlR3k4tCW1iU3L5omYeaTzg2tngARhn-cPikCi5U05oFiGaWAMNtplrYM-8ZrBhZ7Gm65yTJORYlbz5-RD97pDfw8nDm-GOoQokFUJTKiiZk6TWvJoTJtIixD3yyBdsPkBVmWRUZMFcg-1yI8J5xuFp0cHd5YROQRfCCqET7oZj_tm0AirG_65FhT-BAZf2Nklz_OsUmGCHppYS0KkLYhgRNaJk013iKlMzzYWQAyznVFpdtZ01ts99_lvdQJayF
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash aad080e16486101f22ec0d6fa42ae81f
10aa4bca2eebb93d6189e294a0b6084f2e7ba5f0
775adc296eb2aed17489ba7e6c9354edd1d51ad7b12f6654c3face19e9b4bf03
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 14:49:54 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 11 Dec 2022 12:04:37 GMT
Expires: Sun, 18 Dec 2022 12:04:36 GMT
Etag: "10aa4bca2eebb93d6189e294a0b6084f2e7ba5f0"
Cache-Control: max-age=421481,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 778f82555f93b51d-OSL
track.trackingtraffo.com/push/ic?auth=pz6u78&c=8YvjDfSSYAKX4drYX17I1P6DcA68-9C1eCxuWqm-g-Dfg0X5TVGtD2i862oO5lpS3qf7CR_EejpVYahnkrzGD1inBgjRcuEE1IjD2YTgH49-xtNiHtCImPvyDaaRw5tTxXL8Yi3ueKDDN-RP9T2q16cSqbcE15Ei4BXygO8-4DUlNrUiC-Whjj0nq4kPMyWr1cEoyoiKKtGtPHHw7sjoQCgT_hULdj_qEmJO5PWLXUra8x3_MxYc2_S7SuPoo0-6p3Q02BKKYGfBvheGQURBeR9mcs2V7GAdc6MlvBbbt4vY00BlacWgPVfKOsXFh_ap9Jcm6meHzSlE1d3CK64alWQnjQIZyYZngQZedTAuVqtd9iuBOlR3k4tCW1iU3L5omYeaTzg2tngARhn-cPikCi5U05oFiGaWAMNtplrYM-8ZrBhZ7Gm65yTJORYlbz5-RD97pDfw8nDm-GOoQokFUJTKiiZk6TWvJoTJtIixD3yyBdsPkBVmWRUZMFcg-1yI8J5xuFp0cHd5YROQRfCCqET7oZj_tm0AirG_65FhT-BAZf2Nklz_OsUmGCHppYS0KkLYhgRNaJk013iKlMzzYWQAyznVFpdtZ01ts99_lvdQJayF
302 Found 0 B URL HTTP/1.1 track.trackingtraffo.com/push/ic?auth=pz6u78&c=8YvjDfSSYAKX4drYX17I1P6DcA68-9C1eCxuWqm-g-Dfg0X5TVGtD2i862oO5lpS3qf7CR_EejpVYahnkrzGD1inBgjRcuEE1IjD2YTgH49-xtNiHtCImPvyDaaRw5tTxXL8Yi3ueKDDN-RP9T2q16cSqbcE15Ei4BXygO8-4DUlNrUiC-Whjj0nq4kPMyWr1cEoyoiKKtGtPHHw7sjoQCgT_hULdj_qEmJO5PWLXUra8x3_MxYc2_S7SuPoo0-6p3Q02BKKYGfBvheGQURBeR9mcs2V7GAdc6MlvBbbt4vY00BlacWgPVfKOsXFh_ap9Jcm6meHzSlE1d3CK64alWQnjQIZyYZngQZedTAuVqtd9iuBOlR3k4tCW1iU3L5omYeaTzg2tngARhn-cPikCi5U05oFiGaWAMNtplrYM-8ZrBhZ7Gm65yTJORYlbz5-RD97pDfw8nDm-GOoQokFUJTKiiZk6TWvJoTJtIixD3yyBdsPkBVmWRUZMFcg-1yI8J5xuFp0cHd5YROQRfCCqET7oZj_tm0AirG_65FhT-BAZf2Nklz_OsUmGCHppYS0KkLYhgRNaJk013iKlMzzYWQAyznVFpdtZ01ts99_lvdQJayF
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /push/ic?auth=pz6u78&c=8YvjDfSSYAKX4drYX17I1P6DcA68-9C1eCxuWqm-g-Dfg0X5TVGtD2i862oO5lpS3qf7CR_EejpVYahnkrzGD1inBgjRcuEE1IjD2YTgH49-xtNiHtCImPvyDaaRw5tTxXL8Yi3ueKDDN-RP9T2q16cSqbcE15Ei4BXygO8-4DUlNrUiC-Whjj0nq4kPMyWr1cEoyoiKKtGtPHHw7sjoQCgT_hULdj_qEmJO5PWLXUra8x3_MxYc2_S7SuPoo0-6p3Q02BKKYGfBvheGQURBeR9mcs2V7GAdc6MlvBbbt4vY00BlacWgPVfKOsXFh_ap9Jcm6meHzSlE1d3CK64alWQnjQIZyYZngQZedTAuVqtd9iuBOlR3k4tCW1iU3L5omYeaTzg2tngARhn-cPikCi5U05oFiGaWAMNtplrYM-8ZrBhZ7Gm65yTJORYlbz5-RD97pDfw8nDm-GOoQokFUJTKiiZk6TWvJoTJtIixD3yyBdsPkBVmWRUZMFcg-1yI8J5xuFp0cHd5YROQRfCCqET7oZj_tm0AirG_65FhT-BAZf2Nklz_OsUmGCHppYS0KkLYhgRNaJk013iKlMzzYWQAyznVFpdtZ01ts99_lvdQJayF HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 13 Dec 2022 14:49:54 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Location: https://ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659514995116-National Casino black.png
ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659514995116-National%20Casino%20black.png
200 OK 4.5 kB URL HTTP/1.1 ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1659514995116-National%20Casino%20black.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 58be17b22d6e1178a54c92cf862c817e
b821bc2f016751647df49e49863077e927a70322
9cc4f3f40313b08baf54c956685ac7a21ac8a3573908b9763865c6f613ce1b5f
GET /creatives/k1qy286gxmd5g3dpr397nw5v/1659514995116-National%20Casino%20black.png HTTP/1.1
Host: ads.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 13 Dec 2022 14:49:55 GMT
Content-Type: image/png
Content-Length: 4456
Last-Modified: Wed, 03 Aug 2022 08:23:15 GMT
Connection: keep-alive
ETag: "62ea3073-1168"
Accept-Ranges: bytes
adxadserv.com/px/heartbeat/v1?pv_uid=baf66cb0-a15a-483b-9271-bfccd954b414&t_op=5.319&p_nn=adxad-rtb&fpid_sa=1670942988383&fpid=bc43f01a151639d4c69739dcaca30e3b&feid_sa=1670942988383&sid_sa=1670942988383&feid=eb61b6a80d92881313a43df5b9b1e5a1&sid=676d177e8f0cf3b789cb6dc88d611f1a&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www4.bestjavporn.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=16&dm=-1&dt=2&ed=0&sr=5497558139882&fb=10384
200 OK 0 B URL HTTP/1.1 adxadserv.com/px/heartbeat/v1?pv_uid=baf66cb0-a15a-483b-9271-bfccd954b414&t_op=5.319&p_nn=adxad-rtb&fpid_sa=1670942988383&fpid=bc43f01a151639d4c69739dcaca30e3b&feid_sa=1670942988383&sid_sa=1670942988383&feid=eb61b6a80d92881313a43df5b9b1e5a1&sid=676d177e8f0cf3b789cb6dc88d611f1a&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www4.bestjavporn.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=16&dm=-1&dt=2&ed=0&sr=5497558139882&fb=10384
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /px/heartbeat/v1?pv_uid=baf66cb0-a15a-483b-9271-bfccd954b414&t_op=5.319&p_nn=adxad-rtb&fpid_sa=1670942988383&fpid=bc43f01a151639d4c69739dcaca30e3b&feid_sa=1670942988383&sid_sa=1670942988383&feid=eb61b6a80d92881313a43df5b9b1e5a1&sid=676d177e8f0cf3b789cb6dc88d611f1a&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www4.bestjavporn.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=16&dm=-1&dt=2&ed=0&sr=5497558139882&fb=10384 HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1
Origin: https://ads.adxadserv.com
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 13 Dec 2022 14:49:55 GMT
Content-Length: 0
Connection: keep-alive
www4.bestjavporn.com/wp-content/themes/retrotube/ajax-view.php
200 OK 0 B URL HTTP/2 www4.bestjavporn.com/wp-content/themes/retrotube/ajax-view.php
IP
POST /wp-content/themes/retrotube/ajax-view.php HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 49
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/dvdes-813-decensored/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:50 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
cf-connecting-ip: 91.90.42.154
x-frame-options: SAMEORIGIN
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/ajax-view.php
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TyV3N%2F21Uvqkkp7GpCGdggphbQBwdsxuIFERGZQi8oRvDA2OTfNEElpm5K5t%2FcTdnsn8s%2FN3spMeX02OomofoFTewMfd%2FrVD%2BmhntoOVy8eJjMubNp1CzByvAjT7YNHfz%2FAdu%2BTE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 778f8238a8c00b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.javhdhello.com/h5/files/16667/300x250.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2Ff194c970-bc2d-4827-8b0a-7f39df13c295%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D237443%26cv5%3D794135%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzg4MjIsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjIxOTM5fQ
200 OK 0 B URL HTTP/2 static.javhdhello.com/h5/files/16667/300x250.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2Ff194c970-bc2d-4827-8b0a-7f39df13c295%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D237443%26cv5%3D794135%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzg4MjIsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjIxOTM5fQ
IP
ASN #60068 Datacamp Limited
GET /h5/files/16667/300x250.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2Ff194c970-bc2d-4827-8b0a-7f39df13c295%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D237443%26cv5%3D794135%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzg4MjIsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjIxOTM5fQ HTTP/1.1
Host: static.javhdhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r.trwl1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:52 GMT
content-type: text/html
last-modified: Mon, 21 Nov 2022 14:28:13 GMT
etag: W/"637b8afd-c82"
expires: Sat, 24 Dec 2022 16:24:20 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-accel-expires: @1671899060
server: CDN77-Turbo
x-77-nzt: AblMCQ1v3zb/XPYYAA
x-77-nzt-ray: c0a4cc286d36b8a2109198636c367014
x-cache: HIT
x-age: 1635932
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
pics.pornfhd.com/s/digital/video/snis00031/snis00031pl.jpg
200 OK 0 B URL HTTP/2 pics.pornfhd.com/s/digital/video/snis00031/snis00031pl.jpg
IP
GET /s/digital/video/snis00031/snis00031pl.jpg HTTP/1.1
Host: pics.pornfhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:49 GMT
content-type: image/jpeg
last-modified: Fri, 18 Oct 2013 00:32:01 GMT
vary: Accept-Encoding
etag: W/"52608181-a96d"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 118085
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j%2FxoiTYBLXwJRbcBMC%2BzbQxP2sGkie1dnRp9sdQGohuvZU2oc%2FBlaeTysCu2cvIgsdzGwHab8kSpQsXbECbqtB46vhfLdrndrG0W6p%2BItIGRWz2MZ4kZvMR%2B7cyjWausa2Iy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 778f82346f1edd17-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pics.pornfhd.com/s/digital/video/1dandy00418/1dandy00418pl.jpg
200 OK 0 B URL HTTP/2 pics.pornfhd.com/s/digital/video/1dandy00418/1dandy00418pl.jpg
IP
GET /s/digital/video/1dandy00418/1dandy00418pl.jpg HTTP/1.1
Host: pics.pornfhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:49 GMT
content-type: image/jpeg
last-modified: Thu, 26 Mar 2015 04:59:10 GMT
vary: Accept-Encoding
etag: W/"5513921e-a993"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 749791
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vQFbNOsbKcA1BdRI5Ad%2BHxY1u%2BCHl529gKYcvKjuX7j3mIblmWRFfeNReMn4DdTb%2BZhM0EMfyzTrQneAMLCi3ifQzV%2BTznC5RIKVgFkClA0rvXHVqwyySbkEgaw3lOZCxP4F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 778f82346f1cdd17-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/fun.js?ver=1.3.3
200 OK 0 B URL HTTP/2 www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/fun.js?ver=1.3.3
IP
GET /wp-content/themes/retrotube/assets/js/fun.js?ver=1.3.3 HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/dvdes-813-decensored/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:49 GMT
content-type: application/javascript
cf-connecting-ip: 217.140.208.120
cf-bgj: minify
cf-polished: origSize=23878
etag: W/"6388cd5c-5d46"
last-modified: Thu, 01 Dec 2022 15:50:52 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-rocket-args: ver=1.3.3
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/assets/js/fun.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 79169
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MnBOy7esiiDRIFM4p86Rq2S0ZApuZgMj9o%2BrQ8GsyeeF%2BUmSVMAZlxfv7w1F2G7HFtM7D7P5Q7kyltgf9GzeshQhesl%2BiEO5JqTB2i3TOgfZr%2FQGy%2FgReePBuI3i%2B6tJ6Tzpb1hT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 778f823209f90b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
asg.phukienthoitranggiare.com/Cqp6VQ5.js
200 OK 0 B URL HTTP/2 asg.phukienthoitranggiare.com/Cqp6VQ5.js
IP
ASN #24940 Hetzner Online GmbH
GET /Cqp6VQ5.js HTTP/1.1
Host: asg.phukienthoitranggiare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 14:49:49 GMT
content-type: application/javascript
last-modified: Thu, 17 Nov 2022 11:24:59 GMT
etag: W/"63761a0b-29e8b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
vary: Accept-Encoding, Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ddf05588239a53ffcc4f78bf3b76aac4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: GbBfCZQij0dmBJ2OXx0jUQdu_3irk2J3mHtgjZLVfeEHpA65O7yPVA==
age: 1848215
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
www4.bestjavporn.com/video/dvdes-813-decensored/
200 OK 0 B URL HTTP/2 www4.bestjavporn.com/video/dvdes-813-decensored/
IP
GET /video/dvdes-813-decensored/ HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:48 GMT
content-type: text/html; charset=UTF-8
cf-ray: 778f822fdf600b65-OSL
cache-control: max-age=3600
last-modified: Tue, 13 Dec 2022 14:49:24 GMT
link: <https://www4.bestjavporn.com/wp-json/>; rel="https://api.w.org/", <https://www4.bestjavporn.com/?p=527437>; rel=shortlink
vary: Accept-Encoding
cf-cache-status: HIT
cf-apo-via: tcache
cf-connecting-ip: 2001:569:7f9b:9c00:b8ce:6a1c:90ce:d7e2
cf-edge-cache: cache,platform=wordpress
x-frame-options: SAMEORIGIN
x-rocket-nginx-serving-static: No
x-rocket-uri: /index.php
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Llt8yeDz5%2FEzLvwCTydergQsLqn0uqtWlDQBDJkqbKRSt6z9Tx5eCydjzSV72AQw0eZy2y9yeuNPjHaE2YI%2FkIcfgYKy9orMuzzaHSv9M%2BsqIw14XJ%2FOHSCAym8Ee3vedrVDyp8%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
www4.bestjavporn.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0
200 OK 0 B URL HTTP/2 www4.bestjavporn.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0
IP
GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/dvdes-813-decensored/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:49 GMT
content-type: text/css
last-modified: Mon, 31 Oct 2022 14:31:11 GMT
vary: Accept-Encoding
etag: W/"635fdc2f-7a75"
cf-connecting-ip: 88.195.172.127
x-frame-options: SAMEORIGIN
x-rocket-nginx-serving-static: No
x-rocket-args: ver=4.7.0
x-rocket-uri: /wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css
cache-control: max-age=3600
cf-cache-status: HIT
age: 13701
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ImM9Wh7bQlfq110fyuXN%2FbKm1s2Np9PLvBDy%2BIniu11jnjtP6r3qabRY%2F0XyOZQ%2BXTG5ZQZLuDVFukNK8H9KmaoOLxpL5FHzuPvTrNYaTYd0GfV1qtCNayzE9qrohpQLPZG0c%2FHI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 778f8231e9c40b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/rtb/social/insta/1-1/js/jquery-3.2.1.min.js
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/rtb/social/insta/1-1/js/jquery-3.2.1.min.js
IP
GET /sb/notifications/rtb/social/insta/1-1/js/jquery-3.2.1.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:53 GMT
content-type: application/javascript
last-modified: Mon, 11 Apr 2022 15:17:54 GMT
etag: W/"625446a2-1fa27"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 725153
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xF4DpaG4kyDqmgyctgieeK6Uk%2BXyIYQ45oVymtsTCG4biYTocVHoIrnkGh7SmtHmkcUTMMjGoqDNzuj%2FSkPsoREAijCEtmMtWOeg1bF7gLs6ALCEtHY6QxSVoKgmtjL4vs4SNq9SCWNl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778f824d9e1f23ae-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www4.bestjavporn.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
200 OK 0 B URL HTTP/2 www4.bestjavporn.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/dvdes-813-decensored/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:49 GMT
content-type: application/javascript
last-modified: Wed, 07 Dec 2022 18:45:45 GMT
etag: W/"6390df59-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UBLczXfoEODGy1yAnkpCDeLa1LE3%2FkaBRaZFwFOxajPmx4027J5Z6DPnUd1i0E2uIhuBE2c8UjsrHQ5QLiHSVZgiEIpDBoDdmWGYDzxgHejNRwPGp18aEckM9uZ44fo53AsMixJj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778f8231f9cb0b65-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Thu, 15 Dec 2022 14:49:49 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
pics.pornfhd.com/s/digital/video/snis00115/snis00115pl.jpg
200 OK 0 B URL HTTP/2 pics.pornfhd.com/s/digital/video/snis00115/snis00115pl.jpg
IP
GET /s/digital/video/snis00115/snis00115pl.jpg HTTP/1.1
Host: pics.pornfhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:49 GMT
content-type: image/jpeg
last-modified: Wed, 19 Feb 2014 00:11:02 GMT
vary: Accept-Encoding
etag: W/"5303f696-8a74"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 50226
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=81zlsjXH3Ci5l8HepFSqyUNUgWNsOZZSkrE8MReEXok4Z4O5MhRExgO0EYuAWCTFK66LXAcxRD6YgOH3Y%2FkDqsd%2BRCmcXfjmReiSBc4le3O84y29HVNQo%2BKenRLVbv0LVVmI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 778f82346f20dd17-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans&display=swap
IP
GET /css?family=Open+Sans&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 13 Dec 2022 14:49:49 GMT
date: Tue, 13 Dec 2022 14:49:49 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pics.pornfhd.com/digital/video/1dvdes00813/1dvdes00813pl.jpg
200 OK 0 B URL HTTP/2 pics.pornfhd.com/digital/video/1dvdes00813/1dvdes00813pl.jpg
IP
GET /digital/video/1dvdes00813/1dvdes00813pl.jpg HTTP/1.1
Host: pics.pornfhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:49 GMT
content-type: image/jpeg
last-modified: Tue, 27 Jan 2015 05:01:26 GMT
vary: Accept-Encoding
etag: W/"54c71ba6-303b3"
cache-control: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FS%2Bu6M9CPxlRvXpkz9n%2FsvXlCrbJnaCSiNiAZXRwKbA0DdoueV%2Fa53ePIiIzGfT5vScyPM3NSvheE6Ygud9x2LjryRuiHIqbKaqmIjW5wirFBPQT1SNilliAKsXS5G8%2BlfCr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 778f82341e97dd17-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img.bestjavporn.net/favicon.ico
200 OK 0 B URL HTTP/2 img.bestjavporn.net/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: img.bestjavporn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:50 GMT
content-type: image/x-icon
last-modified: Thu, 16 Jul 2020 11:00:10 GMT
etag: W/"5f10333a-3c2e"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 889084
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vhmXrNZq6eE92xbkiTY1MUOFpda9QGdZ0zm2L9%2F1f1tehc5xvCMAjIPh92N0c8j0aPES1SNpoVAxt6VfXOD28kLchWkyYSG6vt3h9Bd9h3B8Z8REVCkEZHi3%2FH4NUGgiBvAhWuZs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778f823a48b40672-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
asg.phukienthoitranggiare.com/api/spots/184920?host=www4.bestjavporn.com&ev=197&wh=939&ww=1280&uuid=
200 OK 0 B URL HTTP/2 asg.phukienthoitranggiare.com/api/spots/184920?host=www4.bestjavporn.com&ev=197&wh=939&ww=1280&uuid=
IP
ASN #24940 Hetzner Online GmbH
GET /api/spots/184920?host=www4.bestjavporn.com&ev=197&wh=939&ww=1280&uuid= HTTP/1.1
Host: asg.phukienthoitranggiare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 14:49:52 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
set-cookie: nauid=TRDsna7e9LiaM75Gsp63; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 0 B URL HTTP/2 friendshipmale.com/sfp.js
IP
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:51 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: a98d1682c2d084006291a9b5159bbf06
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 13 Dec 2022 14:49:50 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6bJVVoRyraOsbgGC%2Fnrf04fQM6SaAtLrIl2duG8LL9CYc9n3UJoh8PFEcKLdUGkqYQX8U7fbQMsRkrzYcI%2BItH5ja6fCDZNGV77NMPYnIzYYrud7okb8YrbikPZbKBWzqGOldRY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778f823d8be2768b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/rtb/social/insta/1-1/js/script.js
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/rtb/social/insta/1-1/js/script.js
IP
GET /sb/notifications/rtb/social/insta/1-1/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:53 GMT
content-type: application/javascript
last-modified: Mon, 06 Jun 2022 09:28:08 GMT
etag: W/"629dc8a8-32d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 80087
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZDpA7efCAZa%2F35fWtZLE5EZHADNYbTONaeJIiaTvBxFlgxMjPsVIZZzp8s1V9Mulv4XNsgqrSRWzRYrZ7RqVdPle7SBtfRhKe68jRrv8ssllbwHv%2FM%2F%2BcOijRg%2Bf%2BOSThc3veK9cEq5g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 778f824e1ebe23ae-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www4.bestjavporn.com/wp-content/themes/retrotube/style.css?ver=1.4.3
200 OK 0 B URL HTTP/2 www4.bestjavporn.com/wp-content/themes/retrotube/style.css?ver=1.4.3
IP
GET /wp-content/themes/retrotube/style.css?ver=1.4.3 HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/dvdes-813-decensored/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:49 GMT
content-type: text/css
cf-connecting-ip: 92.220.0.147
cf-bgj: minify
cf-polished: origSize=84878
etag: W/"6388cd36-14b8e"
last-modified: Thu, 01 Dec 2022 15:50:14 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-rocket-args: ver=1.4.3
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/style.css
cache-control: max-age=3600
cf-cache-status: HIT
age: 13701
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J5dvIDm%2BL0lwcSyBqGvOOWBH4jyq0Dj0%2FenKmaSIHqKP1g7JfJPSfxidEpZPZ7VCRMPN%2BPkQx4A15tf%2BpYDkZ33PweOWolxLOOCYiTpjM5m%2FjcZaoUp9vgeVIBqUTzyIe1iv5eCs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 778f8231e9c10b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
pics.pornfhd.com/s/digital/video/snis00193/snis00193pl.jpg
200 OK 0 B URL HTTP/2 pics.pornfhd.com/s/digital/video/snis00193/snis00193pl.jpg
IP
GET /s/digital/video/snis00193/snis00193pl.jpg HTTP/1.1
Host: pics.pornfhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 14:49:49 GMT
content-type: image/jpeg
last-modified: Thu, 19 Jun 2014 00:10:22 GMT
vary: Accept-Encoding
etag: W/"53a22a6e-825d"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 310922
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AfW7blPSXgEKruBNI0qSlc793yGZzG1rkzh%2F%2FZWYcHDVAyhLYk54CZ1k3WoMKaVatsZ0Oe%2BsdZ78iPM4qzmGG9WL0PhHGQ8uKiel1D5DhutynMljoiWxQBw6VMtyp2yJrtuo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 778f82346f1bdd17-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
104.26.2.123
185.76.9.18
157.90.84.242
185.98.53.17
88.214.195.156
95.101.11.115
104.21.233.137
135.181.208.216