javflag.com/logo.png
200 OK 71 kB IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type PNG image data, 1667 x 835, 8-bit/color RGBA, interlaced\012- data
Hash dc0573cdbf589017fa0766fde8805a33
4d344e8bc97fc664026f8f8dfb5edd7d29058423
a9c0fdd41fa2f2f3eae8a2d289e64600085c4454da51800f2ea1d8f3599405d3
GET /logo.png HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: image/png
content-length: 70638
cache-control: public, max-age=86400
last-modified: Thu, 20 May 2021 07:50:36 GMT
etag: W/"113ee-17988c13dc1"
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lnORvdsw9XborUfXj%2FTuU%2F3ocZmQRl%2FiTXn%2B1oq5QL5eahB%2FRg4OSxl4wcYdmyMgEutqODZd0%2BW7pG7N79SCcaMK%2FUbzrwvUmIsln7lo6GbkDwpxznCEVIroCyFaQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6764f8456b5-OSL
alt-svc: h3=":443"; ma=86400
javflag.com/_next/static/chunks/425-0b0079bd0619a11510ff.js
200 OK 17 kB URL GET HTTP/3 javflag.com/_next/static/chunks/425-0b0079bd0619a11510ff.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (54113), with no line terminators
Hash c92ff2dc6e50b640711443919a88c901
a74a5e6959982ab18a1d50fb432f68de6561df19
a97a18bd9697f8ee41d2b787b4da4e9b24af1b146ecd8e31c5170f6334385b37
GET /_next/static/chunks/425-0b0079bd0619a11510ff.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-d361"
expires: Fri, 22 Sep 2023 09:02:33 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 1964209
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RDkyzSKMFD0wpNBpJhqyMGR6oeBlZgIJXooDE7o0BOU5e6cKG6qxZQo87pqZT1LVL5idp%2B75plbG4NP9dK9AxmEwS1WOOIBswNxMiU3%2B7ubiwJVdD1jDLURYFtHo7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6763f7356b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
poweredby.jads.co/js/jads.js
301 Moved Permanently 178 B URL GET HTTP/1.1 poweredby.jads.co/js/jads.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 23 Sep 2023 18:48:35 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
poweredby.jads.co/js/jads.js
301 Moved Permanently 178 B URL GET HTTP/1.1 poweredby.jads.co/js/jads.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 23 Sep 2023 18:48:36 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
poweredby.jads.co/js/jads.js
301 Moved Permanently 178 B URL GET HTTP/1.1 poweredby.jads.co/js/jads.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 23 Sep 2023 18:48:36 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
javflag.com/_next/static/chunks/661-de23d19261349a423517.js
200 OK 18 kB URL GET HTTP/3 javflag.com/_next/static/chunks/661-de23d19261349a423517.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4977efe72b50a2e37007389e3df257a3
a87b8866b820ad8fe4633628524318dce347df67
b88506efa0bf175b65b4f288dc31f6494acc5452811cfafe89fb41f64afd549b
GET /_next/static/chunks/661-de23d19261349a423517.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-107e2"
expires: Thu, 07 Sep 2023 18:43:11 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 1964209
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IXP3SgpLbwAx4MeE2lhyZIjOqEugR9MKGVRCYwvShscnW1tDn35oq1Xmb4Ny6LvKf0fUd0YcxAP0oXKINN8EKoptyFdW1SgrTPyTRnabBxntKMNbzM9vF%2B4nPbaRfA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6763f7156b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
javflag.com/_next/static/chunks/pages/v/%5Bvid%5D-ea28034f17b72262d94e.js
200 OK 3.2 kB URL GET HTTP/3 javflag.com/_next/static/chunks/pages/v/%5Bvid%5D-ea28034f17b72262d94e.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (8751), with no line terminators
Hash 04e36dfe7959436f7964f52b2e321e2a
cdf559994eef7b4189c3a0e8c330d067e75f4455
eb274a232b33e15076e338415f136a29fd2c085a5f1a31d8c4ef03962bd0cd58
GET /_next/static/chunks/pages/v/%5Bvid%5D-ea28034f17b72262d94e.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-222f"
expires: Sat, 07 Oct 2023 20:51:47 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 1251913
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9wBKq4TrDcOiQh0T7fANnq9U4WqUFKy5df1cVxTYfODggozx8BuAMOpC8LBqlRay%2Fg7obff0NI7ruWujW%2F2AEMaUsrfPZcTHqqI90j2nEIwsUAlgpK%2BIVxlLtAiUag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6764f7e56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
poweredby.jads.co/js/jads.js
301 Moved Permanently 178 B URL GET HTTP/1.1 poweredby.jads.co/js/jads.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 23 Sep 2023 18:48:36 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
poweredby.jads.co/js/jads.js
301 Moved Permanently 178 B URL GET HTTP/1.1 poweredby.jads.co/js/jads.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 23 Sep 2023 18:48:36 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
poweredby.jads.co/js/jads.js
301 Moved Permanently 178 B URL GET HTTP/1.1 poweredby.jads.co/js/jads.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 23 Sep 2023 18:48:36 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
javflag.com/_next/static/chunks/276-f3997e1a316a342897ff.js
200 OK 8.4 kB URL GET HTTP/3 javflag.com/_next/static/chunks/276-f3997e1a316a342897ff.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (25647), with no line terminators
Hash be952dbb3cc4ee1318cc105bdb295718
a18a7de767dbd5b2976ff7aec4c19e7c757131fb
ff85f2dddb6087fe998f3c358196677036029be24ed9721babb3ef28c4c3fea6
GET /_next/static/chunks/276-f3997e1a316a342897ff.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-642f"
expires: Wed, 04 Oct 2023 08:52:02 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 356911
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PS9PLxeOTYixAB8hXGqVzGRj3Awrgb2Wn%2Ba3wxZ9zTPs6qYbndbsbpycVumARKSEzQ3kDFaCStc85aeAgI67SXn0OJIU15gljSySTKnaBeeBxe9fkEkklk3HOw4JVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6763f7256b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
javflag.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 4.4 kB URL GET HTTP/3 javflag.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type gzip compressed data, from Unix\012- data
Hash 120daf4b12645529b3265a953de0ff1f
23a4abe76c2cc1c8b62d52511a18a7723bd62d9a
18ccd96315907e7f92ce8c22a170e8bc3e827748eb3fdeba75eb03b39582e8ae
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript
last-modified: Wed, 20 Sep 2023 08:17:07 GMT
etag: W/"650aaa83-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mxBdsaS5Gyi0HduVmqHGQGuSTRjVSapcSQuFnwWsujXoCw54j6T0HbMvaw%2FdktQhYjHWPPCqO6tp7GuMKi4gydO%2F5OHs7uTY8FJC5QFWEefx6Kd0OYCAF5BJiZYJ%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f678ea4c56b5-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Mon, 25 Sep 2023 18:48:35 GMT
cache-control: max-age=172800, public
content-encoding: gzip
poweredby.jads.co/js/jads2.js
200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/js/jads2.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (3758), with no line terminators
Hash bc8141c4650030c41f6a98026b12ce80
af5618f7e467a207d4c64627be580283ab5640cd
5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javflag.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 18:48:36 GMT
Content-Type: application/x-javascript
Last-Modified: Wed, 20 Sep 2023 21:26:09 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"650b6371-eae"
Content-Encoding: gzip
poweredby.jads.co/js/jads2.js
200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/js/jads2.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (3758), with no line terminators
Hash bc8141c4650030c41f6a98026b12ce80
af5618f7e467a207d4c64627be580283ab5640cd
5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javflag.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 18:48:36 GMT
Content-Type: application/x-javascript
Last-Modified: Wed, 20 Sep 2023 21:26:09 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"650b6371-eae"
Content-Encoding: gzip
poweredby.jads.co/js/jads2.js
200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/js/jads2.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (3758), with no line terminators
Hash bc8141c4650030c41f6a98026b12ce80
af5618f7e467a207d4c64627be580283ab5640cd
5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javflag.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 18:48:36 GMT
Content-Type: application/x-javascript
Last-Modified: Wed, 20 Sep 2023 21:26:09 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"650b6371-eae"
Content-Encoding: gzip
poweredby.jads.co/js/jads2.js
200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/js/jads2.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (3758), with no line terminators
Hash bc8141c4650030c41f6a98026b12ce80
af5618f7e467a207d4c64627be580283ab5640cd
5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javflag.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 18:48:36 GMT
Content-Type: application/x-javascript
Last-Modified: Wed, 20 Sep 2023 21:26:09 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"650b6371-eae"
Content-Encoding: gzip
poweredby.jads.co/js/jads2.js
200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/js/jads2.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (3758), with no line terminators
Hash bc8141c4650030c41f6a98026b12ce80
af5618f7e467a207d4c64627be580283ab5640cd
5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javflag.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 18:48:36 GMT
Content-Type: application/x-javascript
Last-Modified: Wed, 20 Sep 2023 21:26:09 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"650b6371-eae"
Content-Encoding: gzip
barnabaslinger.com/32ef2a2504620607fa5a59dd0d7fa048/invoke.js
200 OK 9.3 kB URL GET HTTP/1.1 barnabaslinger.com/32ef2a2504620607fa5a59dd0d7fa048/invoke.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectbarnabaslinger.com
FingerprintA1:79:FD:AC:7C:C1:24:2F:80:32:0C:DA:4B:29:FA:84:C7:B5:51:6A
ValidityWed, 20 Sep 2023 06:08:22 GMT - Tue, 19 Dec 2023 06:08:21 GMT
File type Unicode text, UTF-8 text, with very long lines (25101), with no line terminators
Hash 5674c6712feb4bff7c679a094b068975
ebf83adac42f678bb728bc1abbde0f286efb4af9
228d1ff31c342333fd5e2a5bc6004bc4d911b539ed7e796093a3e7b01a233316
GET /32ef2a2504620607fa5a59dd0d7fa048/invoke.js HTTP/1.1
Host: barnabaslinger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 18:48:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a7e46c27f372c3517bfe3573ddd34240
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
poweredby.jads.co/js/jads2.js
200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/js/jads2.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (3758), with no line terminators
Hash bc8141c4650030c41f6a98026b12ce80
af5618f7e467a207d4c64627be580283ab5640cd
5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javflag.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 18:48:36 GMT
Content-Type: application/x-javascript
Last-Modified: Wed, 20 Sep 2023 21:26:09 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"650b6371-eae"
Content-Encoding: gzip
poweredby.jads.co/js/jads2.js
200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/js/jads2.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (3758), with no line terminators
Hash bc8141c4650030c41f6a98026b12ce80
af5618f7e467a207d4c64627be580283ab5640cd
5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javflag.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 18:48:36 GMT
Content-Type: application/x-javascript
Last-Modified: Wed, 20 Sep 2023 21:26:09 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"650b6371-eae"
Content-Encoding: gzip
poweredby.jads.co/js/jads2.js
200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/js/jads2.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (3758), with no line terminators
Hash bc8141c4650030c41f6a98026b12ce80
af5618f7e467a207d4c64627be580283ab5640cd
5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javflag.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 18:48:36 GMT
Content-Type: application/x-javascript
Last-Modified: Wed, 20 Sep 2023 21:26:09 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"650b6371-eae"
Content-Encoding: gzip
poweredby.jads.co/js/jads2.js
200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/js/jads2.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (3758), with no line terminators
Hash bc8141c4650030c41f6a98026b12ce80
af5618f7e467a207d4c64627be580283ab5640cd
5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javflag.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 18:48:36 GMT
Content-Type: application/x-javascript
Last-Modified: Wed, 20 Sep 2023 21:26:09 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"650b6371-eae"
Content-Encoding: gzip
javflag.com/_next/static/bnYr1uSKwC65k62TJb7Wt/_ssgManifest.js
200 OK 14 kB URL GET HTTP/3 javflag.com/_next/static/bnYr1uSKwC65k62TJb7Wt/_ssgManifest.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with no line terminators
Hash 5ce0d2713404bd05c9502cc490488dca
552f4970f95812a42a366cf0752db5c4c4218236
ddeea69d5116852145775870dab4d86b4e909e7a02c03465efaa67d5b0f744be
GET /_next/static/bnYr1uSKwC65k62TJb7Wt/_ssgManifest.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:36 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b168-5b"
expires: Thu, 07 Sep 2023 19:44:31 GMT
last-modified: Tue, 14 Jun 2022 16:03:52 GMT
cf-cache-status: HIT
age: 1964209
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1AzMTorwDTSxgDp05xHdE7pRJD4d%2BcD0ACyhmjRAx24pplLrhoanWj1GFLhKvNgbJ8aY56Y4DbQcmxf68S%2B2ueNl%2B7N%2B1EALUaNajdGY%2Buml33xrlMBRMs7GMBCDWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f67a2be656b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 6c9e8534605c94d44deb96ea6eec0d5f
4fe4efa9b812f4c6aaf42589ce475ab379db6f39
da753b7746d232637f22c241c8a32db3b35c68ce66bdece0b651f66b8671e1ad
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 23 Sep 2023 18:48:37 GMT
Last-Modified: Sat, 23 Sep 2023 18:38:51 GMT
Server: ECAcc (ska/F6E3)
X-Cache: Miss from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 6Ur8upsaB7Y5TncJ2pfNR6-a6iaAQ2jTl2WjN8brp7qCiZWLu1QSbw==
Age: 586
professionalswebcheck.com/stats
200 OK 40 B URL GET HTTP/2 professionalswebcheck.com/stats
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerAmazon
Subjectprofessionalswebcheck.com
Fingerprint75:E9:08:FD:96:58:C7:98:43:E8:21:27:A8:E9:B9:A4:55:28:F2:0C
ValidityWed, 30 Aug 2023 00:00:00 GMT - Fri, 27 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash eb33f1aab0e34889ae64480e8441343f
22f1147336e7e6e83753c6263c4a2e73d93d052e
88dbf81e8f547e78ee113b6249984289c83bbbc4fc54917d2e107d68c2aea4a8
GET /stats HTTP/1.1
Host: professionalswebcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:37 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://javflag.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=f466fc22-1b51-4663-81da-7ecda77a6b48:1:1; expires=Tue, 20 Sep 2033 18:48:37 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
javflag.com/_next/static/chunks/683-f2e49eb90230bcb7e9e5.js
200 OK 24 kB URL GET HTTP/3 javflag.com/_next/static/chunks/683-f2e49eb90230bcb7e9e5.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 09462d3e4b9152d16b2acb0064800894
bcd6dfa29cb5705248e2fe0a2c34db260ffae9c6
78c4d0b1b9a030a9cc78b17687f1539dc306b29e46458298ebadaec397023cd1
GET /_next/static/chunks/683-f2e49eb90230bcb7e9e5.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-1556b"
expires: Wed, 04 Oct 2023 04:56:40 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 356911
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GFIvIy%2FqSjLD3Jda4SogyRjVGwE3gqgyKpBXvfLN2sZ0ZLNlNhWilfs3O5IrAMmkTtr3o9SM63zYOEhmsJv6pJePkMWoivCrC%2FEAS5ir3AyEMUeX%2B0dezfEkPZjTOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6763f6f56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
poweredby.jads.co/adshow.php?adzone=947353
200 OK 1.5 kB URL GET HTTP/1.1 poweredby.jads.co/adshow.php?adzone=947353
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (393), with CRLF, LF line terminators
Hash e46b345df54809a70b5e6e88eb6dc51c
a32aa774009cf4f5c53ddd9b01df3a89e60fe480
5241a4fa1627aa07bd2a0d5d2bb5621065fcae995d8d2865ee18a56722bf7154
GET /adshow.php?adzone=947353 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 18:48:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=b9303c234426be03eaba33d9082b7f3b; expires=Sun, 22-Sep-2024 18:48:36 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps22340=1; expires=Sun, 24-Sep-2023 18:48:37 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjU2NDYzMDtpOjE2OTU3NTQxMTY7fQ%3D%3D; expires=Tue, 26-Sep-2023 18:48:36 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Tue, 26-Sep-2023 18:48:36 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
poweredby.jads.co/adshow.php?adzone=947353
200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/adshow.php?adzone=947353
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1332), with CRLF, LF line terminators
Hash f79347df38532d7efa3344d3dfba6d0a
0b82581f15a675deb422de39e6eb156128c71b2b
43e965dd594dab0021fd2fb8508090255db3901d6239a7a50611825b1409140c
GET /adshow.php?adzone=947353 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 18:48:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=5e144b2c0388603e962b4deafce10257; expires=Sun, 22-Sep-2024 18:48:37 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps22340=1; expires=Sun, 24-Sep-2023 18:48:37 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjU2NDYzMDtpOjE2OTU3NTQxMTc7fQ%3D%3D; expires=Tue, 26-Sep-2023 18:48:37 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Tue, 26-Sep-2023 18:48:37 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
ponderriding.com/e9/24/16/e924162be61bba09598de0746dea6240.js
200 OK 17 kB URL GET HTTP/1.1 ponderriding.com/e9/24/16/e924162be61bba09598de0746dea6240.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectponderriding.com
Fingerprint04:FA:28:9B:C5:4E:3E:C2:F7:B4:B7:DE:CA:79:BE:73:62:80:5C:84
ValidityThu, 14 Sep 2023 11:16:23 GMT - Wed, 13 Dec 2023 11:16:22 GMT
File type ASCII text, with very long lines (42669), with no line terminators
Hash 14cd278f0f1d228f8132f426f6a3b994
154124ff6f3adf919b2b64377a9b1650b53444bc
7949fe1c289b27e406bc49fcaa363329279a1978ba24ff1f0770381fadbefff9
GET /e9/24/16/e924162be61bba09598de0746dea6240.js HTTP/1.1
Host: ponderriding.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 18:48:37 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 60a92f3eeea03284b7622a4c99a9a56d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
poweredby.jads.co/adshow.php?adzone=948378
1.6 kB URL GET poweredby.jads.co/adshow.php?adzone=948378
IP
Requested by https://javflag.com/en/v/a8mPO
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (400), with CRLF, LF line terminators
Hash e548b75e9d5a6bde24b06cf644e5be20
9bd7bc4c086bf642434f048f24f0ed7777caef54
040401518bb0cac5b5b502876a8b3e36a63654dca117db0c32fb6df03de17e56
GET /adshow.php?adzone=948378 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 18:48:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=b9303c234426be03eaba33d9082b7f3b; expires=Sun, 22-Sep-2024 18:48:36 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps32597=1; expires=Sun, 24-Sep-2023 18:48:37 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjc2NzAzODtpOjE2OTU3NTQxMTY7fQ%3D%3D; expires=Tue, 26-Sep-2023 18:48:36 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Tue, 26-Sep-2023 18:48:36 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
javflag.com/_next/static/chunks/framework-22e517ee0ba8263cb42d.js
200 OK 56 kB URL GET HTTP/3 javflag.com/_next/static/chunks/framework-22e517ee0ba8263cb42d.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 302451770dee42dbdddba06cafb3aa75
1f3c31579919f89f7d8c24ad8dac11e86622f378
7d21f1a318979f0281aceb7f1553214fce3a5a82d23d02f8073d3f2ebd23d478
GET /_next/static/chunks/framework-22e517ee0ba8263cb42d.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-1ffc1"
expires: Tue, 26 Sep 2023 10:02:19 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 1964209
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FFSdSiVjTZqhCVpcRHbGrXtujPQTky30%2B3SgbChQvYxJhR0Fwfcx0k6WLd1mINgi54aWIq%2Bsv68tN%2FpnSurIly%2Bdqvafa87UKuxRFMTmv4sCO3D6Cq3npEUIbOeLKg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6762f6156b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
poweredby.jads.co/adshow.php?adzone=947366
200 OK 2.1 kB URL GET HTTP/1.1 poweredby.jads.co/adshow.php?adzone=947366
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1626), with CRLF, LF line terminators
Hash df437428693066873f0b29e4649101d0
4d3f80754a5b316be4ba31586d11c7b270064056
d82c8ca8e3870b67c0648e0fd771594f7c02ddfe2ae2494aaa83ebf40d751f6c
GET /adshow.php?adzone=947366 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 18:48:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=5e144b2c0388603e962b4deafce10257; expires=Sun, 22-Sep-2024 18:48:37 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps203=1; expires=Sun, 24-Sep-2023 18:48:37 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
imps43654=1; expires=Sun, 24-Sep-2023 18:48:37 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
imps58522=1; expires=Sun, 24-Sep-2023 18:48:37 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
imps43654=1; expires=Sun, 24-Sep-2023 18:48:37 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YTo0OntpOjYzMTM3MjtpOjE2OTU3NTQxMTc7aToxMjA0MzAwO2k6MTY5NTc1NDExNztpOjE2OTMyMzc7aToxNjk1NzU0MTE3O2k6MTIwNDMzNDtpOjE2OTU3NTQxMTc7fQ%3D%3D; expires=Tue, 26-Sep-2023 18:48:37 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Tue, 26-Sep-2023 18:48:37 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
i.jads.co/network/user500/16321-1456773456.gif
200 OK 160 kB URL GET HTTP/2 i.jads.co/network/user500/16321-1456773456.gif
IP
Requested by https://poweredby.jads.co/adshow.php?adzone=947353
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 160 x 600\012- data
Size 160 kB (159963 bytes)
Hash 7ac0d7682e2a5b0fd95c4d549322268b
383de13eb415d95282f577ed439929b309c29f44
fe6fd88fe1e9747efc40e941057baf8d161b1adaae8a96073ad83b87a955825c
GET /network/user500/16321-1456773456.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=b9303c234426be03eaba33d9082b7f3b; imps22340=1; juicy_data_1=YToxOntpOjc2NzAzODtpOjE2OTU3NTQxMTY7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:37 GMT
etag: "1456773457"
cache-control: max-age=16763359
content-length: 159963
content-type: image/gif
last-modified: Mon, 29 Feb 2016 19:17:37 GMT
accept-ranges: bytes
x-hw: 1695494917.dop210.sk1.t,1695494917.cds219.sk1.hn,1695494917.cds263.sk1.c
X-Firefox-Spdy: h2
javflag.com/_next/static/css/e8aa9fd894472a74d5f3.css
200 OK 164 kB URL GET HTTP/3 javflag.com/_next/static/css/e8aa9fd894472a74d5f3.css
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (13849), with no line terminators
Size 164 kB (163472 bytes)
Hash 24a14e00d2cd84f43109c258f058b7d3
ff0bb42143f0fc1b5bd9434e93663f6cb755fe8d
8464acd927b22db0f86d6962676bbab2aaa154242c0f394126c0d99f8ee550e5
GET /_next/static/css/e8aa9fd894472a74d5f3.css HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: text/css
cache-control: max-age=2592000
cf-bgj: minify
cf-polished: origSize=13886
etag: W/"62a8b159-363e"
expires: Sat, 07 Oct 2023 19:47:30 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 356911
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DoYe1iBNiAa8PdqdjUiAbRhedYpC9u3e%2BXtcFM1HxW8GjtX9I0VE30g3AEe%2FzcqRDn1aO9LY1KDZijAJGWsz2d0Kj3Z85dsJi8ux%2FS5Ju3nUUzw4VcCbnXuWByMyeA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6762f5856b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
i.jads.co/1x1.gif
200 OK 28 kB IP
Requested by https://poweredby.jads.co/adshow.php?adzone=947357
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 250x250, components 3\012- data
Hash 2acfb73fd2df022a7dad5595adef5bda
939b803ea641bd427b7599f92a816262e7a5bf48
3d4610a2ab69d08e54685d0d3cfcf03ec663bacff8cc89a1e0a2904a7769e641
GET /1x1.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=b9303c234426be03eaba33d9082b7f3b; imps22340=1; juicy_data_1=YToxOntpOjc2NzAzODtpOjE2OTU3NTQxMTY7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:37 GMT
etag: "1478208967"
cache-control: max-age=24782779
content-length: 27460
content-type: image/jpeg
last-modified: Thu, 03 Nov 2016 21:36:07 GMT
accept-ranges: bytes
x-hw: 1695494917.dop210.sk1.t,1695494917.cds219.sk1.hn,1695494917.cds217.sk1.c
X-Firefox-Spdy: h2
ponderriding.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSP2wcxRfHZ2P%2FmqT4AUJCNOgkGpDQeXe957sjRSCEQxEmzh8QdGh2ZvY88ezOMrN%2Fzq4MEcjlSVRQrb9nx4JYFuloQGidBllC8lG5wAUSFXSB0CF0F4uDJ837M%2B9bfN6b%2BWQ7PyUucnrSe0tvSKXoQqvpNl54z%2FMuNpZlkg8ag87S%2B0vBxYYpXvbcbtN9sfGGYGt6wXc91%2FVcr9GTRkR6sOB5XtOFTPe7XrPrNgO%2F6bUCDMx%2Fa5s7sNQBL07JU5B8fH7%2FIIBkNZL4qyvCrmU6fen1OFc00wYF33snWUt0mSCepZFxECV7Z2poe9z7FjrZnQJDF%2F8IQzkmzi8%2FI0z2zigRFruPQUMFkSDkF1AWNYSqIWkNpu9A8mMCMI5rK0jiu9e0Ken64y6ddMdk%2FtFDyHJM5n96Gkl8cFnJQeOWVnkmdWIxiCrIQQ3Zr5Hmh8g2zkGWh2DZR5D8B7LwaBlJvLNilYbk1XR4KWvIqIYSQ1DrIJ8c6SCPHOSpg5ifNNos6HR4p8WpYMwPI68TBVHQpcyNmLvY9ZGzCd4QWToEU0Mws4nUbGJNDmHy72BXK1juwGZj4tzYRMErlIKgtAQlJSglQZkRlEW1y5X1bXWXK5uH3ln0z%2BJiNdJZf5vu6qwvErKdnpInp3v58zjBmjhpLPoi8qnfcoMl311y2xFt0VaXc5e3I%2BoGHVhZQdpz01E35Jg80%2FsQqRyT%2Ba0fEdJDWHUIJp8AzT3QctT2XdDVUdBxsZHcu02LSNF%2Bk%2BkYXFdIs3lk6862OiXPTjFeefAQgh1duv%2Frx899feM3MFMhNRVuywcEfbU1uqlLsnNTl5bcX0kzGcsNOnm6WxnNxNyXb4r1Uht%2B9YodfvEqmzQm6f7bwmbLNOEy6Vty77LkXJieNkyQb67ad0V4Pberl3OT5Ony9dd6V%2BPUCGulTmpQOSak%2FgBMjsmFv9Lpt3zeHkCaGiavEOdH5MwgdQ2WbsKmM36rCYyaacLUQZlXI%2BOHs0slCZSY1TSsYP9Vh7N8226hb%2BZAsztI4gqFqVCoClQNYfPzoyw1R5e%2B%2F2xinyNUc6NQmbmdUBn16XS5E%2FfHxP0OK08aoi2Wut3ADdrcdcOA%2B77XEowuBrRLfT9qI7Nj8f%2FF%2F%2F0NAAD%2F%2FwEAAP%2F%2FtSHH6W0EAAA%3D
200 OK 7 B URL GET HTTP/1.1 ponderriding.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSP2wcxRfHZ2P%2FmqT4AUJCNOgkGpDQeXe957sjRSCEQxEmzh8QdGh2ZvY88ezOMrN%2Fzq4MEcjlSVRQrb9nx4JYFuloQGidBllC8lG5wAUSFXSB0CF0F4uDJ837M%2B9bfN6b%2BWQ7PyUucnrSe0tvSKXoQqvpNl54z%2FMuNpZlkg8ag87S%2B0vBxYYpXvbcbtN9sfGGYGt6wXc91%2FVcr9GTRkR6sOB5XtOFTPe7XrPrNgO%2F6bUCDMx%2Fa5s7sNQBL07JU5B8fH7%2FIIBkNZL4qyvCrmU6fen1OFc00wYF33snWUt0mSCepZFxECV7Z2poe9z7FjrZnQJDF%2F8IQzkmzi8%2FI0z2zigRFruPQUMFkSDkF1AWNYSqIWkNpu9A8mMCMI5rK0jiu9e0Ken64y6ddMdk%2FtFDyHJM5n96Gkl8cFnJQeOWVnkmdWIxiCrIQQ3Zr5Hmh8g2zkGWh2DZR5D8B7LwaBlJvLNilYbk1XR4KWvIqIYSQ1DrIJ8c6SCPHOSpg5ifNNos6HR4p8WpYMwPI68TBVHQpcyNmLvY9ZGzCd4QWToEU0Mws4nUbGJNDmHy72BXK1juwGZj4tzYRMErlIKgtAQlJSglQZkRlEW1y5X1bXWXK5uH3ln0z%2BJiNdJZf5vu6qwvErKdnpInp3v58zjBmjhpLPoi8qnfcoMl311y2xFt0VaXc5e3I%2BoGHVhZQdpz01E35Jg80%2FsQqRyT%2Ba0fEdJDWHUIJp8AzT3QctT2XdDVUdBxsZHcu02LSNF%2Bk%2BkYXFdIs3lk6862OiXPTjFeefAQgh1duv%2Frx899feM3MFMhNRVuywcEfbU1uqlLsnNTl5bcX0kzGcsNOnm6WxnNxNyXb4r1Uht%2B9YodfvEqmzQm6f7bwmbLNOEy6Vty77LkXJieNkyQb67ad0V4Pberl3OT5Ony9dd6V%2BPUCGulTmpQOSak%2FgBMjsmFv9Lpt3zeHkCaGiavEOdH5MwgdQ2WbsKmM36rCYyaacLUQZlXI%2BOHs0slCZSY1TSsYP9Vh7N8226hb%2BZAsztI4gqFqVCoClQNYfPzoyw1R5e%2B%2F2xinyNUc6NQmbmdUBn16XS5E%2FfHxP0OK08aoi2Wut3ADdrcdcOA%2B77XEowuBrRLfT9qI7Nj8f%2FF%2F%2F0NAAD%2F%2FwEAAP%2F%2FtSHH6W0EAAA%3D
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectponderriding.com
Fingerprint04:FA:28:9B:C5:4E:3E:C2:F7:B4:B7:DE:CA:79:BE:73:62:80:5C:84
ValidityThu, 14 Sep 2023 11:16:23 GMT - Wed, 13 Dec 2023 11:16:22 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1SSP2wcxRfHZ2P%2FmqT4AUJCNOgkGpDQeXe957sjRSCEQxEmzh8QdGh2ZvY88ezOMrN%2Fzq4MEcjlSVRQrb9nx4JYFuloQGidBllC8lG5wAUSFXSB0CF0F4uDJ837M%2B9bfN6b%2BWQ7PyUucnrSe0tvSKXoQqvpNl54z%2FMuNpZlkg8ag87S%2B0vBxYYpXvbcbtN9sfGGYGt6wXc91%2FVcr9GTRkR6sOB5XtOFTPe7XrPrNgO%2F6bUCDMx%2Fa5s7sNQBL07JU5B8fH7%2FIIBkNZL4qyvCrmU6fen1OFc00wYF33snWUt0mSCepZFxECV7Z2poe9z7FjrZnQJDF%2F8IQzkmzi8%2FI0z2zigRFruPQUMFkSDkF1AWNYSqIWkNpu9A8mMCMI5rK0jiu9e0Ken64y6ddMdk%2FtFDyHJM5n96Gkl8cFnJQeOWVnkmdWIxiCrIQQ3Zr5Hmh8g2zkGWh2DZR5D8B7LwaBlJvLNilYbk1XR4KWvIqIYSQ1DrIJ8c6SCPHOSpg5ifNNos6HR4p8WpYMwPI68TBVHQpcyNmLvY9ZGzCd4QWToEU0Mws4nUbGJNDmHy72BXK1juwGZj4tzYRMErlIKgtAQlJSglQZkRlEW1y5X1bXWXK5uH3ln0z%2BJiNdJZf5vu6qwvErKdnpInp3v58zjBmjhpLPoi8qnfcoMl311y2xFt0VaXc5e3I%2BoGHVhZQdpz01E35Jg80%2FsQqRyT%2Ba0fEdJDWHUIJp8AzT3QctT2XdDVUdBxsZHcu02LSNF%2Bk%2BkYXFdIs3lk6862OiXPTjFeefAQgh1duv%2Frx899feM3MFMhNRVuywcEfbU1uqlLsnNTl5bcX0kzGcsNOnm6WxnNxNyXb4r1Uht%2B9YodfvEqmzQm6f7bwmbLNOEy6Vty77LkXJieNkyQb67ad0V4Pberl3OT5Ony9dd6V%2BPUCGulTmpQOSak%2FgBMjsmFv9Lpt3zeHkCaGiavEOdH5MwgdQ2WbsKmM36rCYyaacLUQZlXI%2BOHs0slCZSY1TSsYP9Vh7N8226hb%2BZAsztI4gqFqVCoClQNYfPzoyw1R5e%2B%2F2xinyNUc6NQmbmdUBn16XS5E%2FfHxP0OK08aoi2Wut3ADdrcdcOA%2B77XEowuBrRLfT9qI7Nj8f%2FF%2F%2F0NAAD%2F%2FwEAAP%2F%2FtSHH6W0EAAA%3D HTTP/1.1
Host: ponderriding.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Cookie: u_pl=16241006; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 18:48:37 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4001f372daf8d90a44e4cd1e5d644ae4
Strict-Transport-Security: max-age=0; includeSubdomains
ponderriding.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSP2wcRRTG52LTJAV%2FhIRo0Ek0IKHz7HrPd0eKQAiHIkycPyDo0OzM7Hni2Z1lZvf27MoQgVyeRAXV%2Bjs7FsSKko4GhNZpkCUkH5ULXCBRQRcIHUJ3sTh40u57b95X%2FN4389l2fkIocnbcfcdsKK3ZQrNB6y994Hnn68sqyQf1QXvpw6XgfN32X%2FVop0Ffrr8l%2BZpZ8KlHqUe9eldZGZnBgud5DQqV7ne8Roc2Ar%2FhNQMM7P97l9fgWA2if0KegRLjs%2Ft3AyheIYnvXZJuLTPpK2%2FGuWaZseiLvfeStcQUCeJZGdkaomTvVA3jjrrfwSS7U2CY%2Fr%2FCUI1J7ddfECZ7p5QI%2B7uPQUMNmSAU51D0K0hdQbEK3NyCEkcE4AJXVpDEt68YW7D1x1M2mY7J%2FKOHUMWYzP%2F8LJL47kWtBvUbRueZMonDICqhBhVUr0KaHyDbOANVHIBnn0CJH8nCo2Uk8c6K0wZKlNPllaqgogpaDsFcDfnkUzXkUQ15WkMsjustHrTbot0UTHLuh5HXjoIo6DBOI04XOz5yPsEbIkuH4HoIbjeR2k2sqSFs%2Fj3cagknanDZmNSubaIvShSSoHAEBSMoFEGRERT9cldo57vyttAuD73T7J%2FmxXJkst422zVZTyZkOz0hT099%2BesowZo8ri%2F6MvKZ36TBkk%2BXaCtiTdbsCEFFK2I0aMOpEsqdma66ocbkue7HSNWYzG%2F9hJAdwOkDcPUUWO6BFaOWT8FWR0GbYiO5c5P1I816DW5iCFMizeaRrde29Ql5forx2oM%2FIfnhhfu%2FffrCN9d%2BB7clUlvipnpA0NNbo%2BumIDvXTeHI%2FZU0U7HaYJOru5GxTM59%2FbZcL4wVly%2B54Vev88lgUu6%2FK122zBKhkp4jdy4qIaTtGssl%2Bfaye1%2BGV3O3ejG3SZ4uX32jezlOrXROmaQCU2NCqo%2FA1Zic%2BzudPssX3T0oW8HmJeL8kJwGlKnA0024dMbvDIHVM02YnkGRlyPrh7NDrQi0nPUsLOH%2B04ezetttoWfnwLJbSOISfVuir0swPYTLz46y1B5e%2BOGLSXyJUM%2BNQm3ndkJt9ecTcx9OHZ78%2FoBTx3XZkkudTkCDlqA0DITve03J2WLAOsz3oxYyN5ZPLj7xDwAAAP%2F%2FAQAA%2F%2F%2B7E00TbQQAAA%3D%3D
200 OK 7 B URL GET HTTP/1.1 ponderriding.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSP2wcRRTG52LTJAV%2FhIRo0Ek0IKHz7HrPd0eKQAiHIkycPyDo0OzM7Hni2Z1lZvf27MoQgVyeRAXV%2Bjs7FsSKko4GhNZpkCUkH5ULXCBRQRcIHUJ3sTh40u57b95X%2FN4389l2fkIocnbcfcdsKK3ZQrNB6y994Hnn68sqyQf1QXvpw6XgfN32X%2FVop0Ffrr8l%2BZpZ8KlHqUe9eldZGZnBgud5DQqV7ne8Roc2Ar%2FhNQMM7P97l9fgWA2if0KegRLjs%2Ft3AyheIYnvXZJuLTPpK2%2FGuWaZseiLvfeStcQUCeJZGdkaomTvVA3jjrrfwSS7U2CY%2Fr%2FCUI1J7ddfECZ7p5QI%2B7uPQUMNmSAU51D0K0hdQbEK3NyCEkcE4AJXVpDEt68YW7D1x1M2mY7J%2FKOHUMWYzP%2F8LJL47kWtBvUbRueZMonDICqhBhVUr0KaHyDbOANVHIBnn0CJH8nCo2Uk8c6K0wZKlNPllaqgogpaDsFcDfnkUzXkUQ15WkMsjustHrTbot0UTHLuh5HXjoIo6DBOI04XOz5yPsEbIkuH4HoIbjeR2k2sqSFs%2Fj3cagknanDZmNSubaIvShSSoHAEBSMoFEGRERT9cldo57vyttAuD73T7J%2FmxXJkst422zVZTyZkOz0hT099%2BesowZo8ri%2F6MvKZ36TBkk%2BXaCtiTdbsCEFFK2I0aMOpEsqdma66ocbkue7HSNWYzG%2F9hJAdwOkDcPUUWO6BFaOWT8FWR0GbYiO5c5P1I816DW5iCFMizeaRrde29Ql5forx2oM%2FIfnhhfu%2FffrCN9d%2BB7clUlvipnpA0NNbo%2BumIDvXTeHI%2FZU0U7HaYJOru5GxTM59%2FbZcL4wVly%2B54Vev88lgUu6%2FK122zBKhkp4jdy4qIaTtGssl%2Bfaye1%2BGV3O3ejG3SZ4uX32jezlOrXROmaQCU2NCqo%2FA1Zic%2BzudPssX3T0oW8HmJeL8kJwGlKnA0024dMbvDIHVM02YnkGRlyPrh7NDrQi0nPUsLOH%2B04ezetttoWfnwLJbSOISfVuir0swPYTLz46y1B5e%2BOGLSXyJUM%2BNQm3ndkJt9ecTcx9OHZ78%2FoBTx3XZkkudTkCDlqA0DITve03J2WLAOsz3oxYyN5ZPLj7xDwAAAP%2F%2FAQAA%2F%2F%2B7E00TbQQAAA%3D%3D
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectponderriding.com
Fingerprint04:FA:28:9B:C5:4E:3E:C2:F7:B4:B7:DE:CA:79:BE:73:62:80:5C:84
ValidityThu, 14 Sep 2023 11:16:23 GMT - Wed, 13 Dec 2023 11:16:22 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1SSP2wcRRTG52LTJAV%2FhIRo0Ek0IKHz7HrPd0eKQAiHIkycPyDo0OzM7Hni2Z1lZvf27MoQgVyeRAXV%2Bjs7FsSKko4GhNZpkCUkH5ULXCBRQRcIHUJ3sTh40u57b95X%2FN4389l2fkIocnbcfcdsKK3ZQrNB6y994Hnn68sqyQf1QXvpw6XgfN32X%2FVop0Ffrr8l%2BZpZ8KlHqUe9eldZGZnBgud5DQqV7ne8Roc2Ar%2FhNQMM7P97l9fgWA2if0KegRLjs%2Ft3AyheIYnvXZJuLTPpK2%2FGuWaZseiLvfeStcQUCeJZGdkaomTvVA3jjrrfwSS7U2CY%2Fr%2FCUI1J7ddfECZ7p5QI%2B7uPQUMNmSAU51D0K0hdQbEK3NyCEkcE4AJXVpDEt68YW7D1x1M2mY7J%2FKOHUMWYzP%2F8LJL47kWtBvUbRueZMonDICqhBhVUr0KaHyDbOANVHIBnn0CJH8nCo2Uk8c6K0wZKlNPllaqgogpaDsFcDfnkUzXkUQ15WkMsjustHrTbot0UTHLuh5HXjoIo6DBOI04XOz5yPsEbIkuH4HoIbjeR2k2sqSFs%2Fj3cagknanDZmNSubaIvShSSoHAEBSMoFEGRERT9cldo57vyttAuD73T7J%2FmxXJkst422zVZTyZkOz0hT099%2BesowZo8ri%2F6MvKZ36TBkk%2BXaCtiTdbsCEFFK2I0aMOpEsqdma66ocbkue7HSNWYzG%2F9hJAdwOkDcPUUWO6BFaOWT8FWR0GbYiO5c5P1I816DW5iCFMizeaRrde29Ql5forx2oM%2FIfnhhfu%2FffrCN9d%2BB7clUlvipnpA0NNbo%2BumIDvXTeHI%2FZU0U7HaYJOru5GxTM59%2FbZcL4wVly%2B54Vev88lgUu6%2FK122zBKhkp4jdy4qIaTtGssl%2Bfaye1%2BGV3O3ejG3SZ4uX32jezlOrXROmaQCU2NCqo%2FA1Zic%2BzudPssX3T0oW8HmJeL8kJwGlKnA0024dMbvDIHVM02YnkGRlyPrh7NDrQi0nPUsLOH%2B04ezetttoWfnwLJbSOISfVuir0swPYTLz46y1B5e%2BOGLSXyJUM%2BNQm3ndkJt9ecTcx9OHZ78%2FoBTx3XZkkudTkCDlqA0DITve03J2WLAOsz3oxYyN5ZPLj7xDwAAAP%2F%2FAQAA%2F%2F%2B7E00TbQQAAA%3D%3D HTTP/1.1
Host: ponderriding.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Cookie: u_pl=16241006; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 18:48:37 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 752276775c005d66ed536ef1f98470de
Strict-Transport-Security: max-age=0; includeSubdomains
i.jads.co/network/user500/32597-1558023679-0662609001558023679.gif
200 OK 2.8 MB URL GET HTTP/2 i.jads.co/network/user500/32597-1558023679-0662609001558023679.gif
IP
Requested by https://poweredby.jads.co/adshow.php?adzone=948378
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 900 x 250\012- data
Size 2.8 MB (2779644 bytes)
Hash 2d94d6190b76c55706a23118444f6f9c
18f7130ff19a2484cc67f2fc3d47582338e85460
67f56bdf924518dbfd65faae8ccbb09e8b287a330b5819d8080a916c44ca4bc7
GET /network/user500/32597-1558023679-0662609001558023679.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=b9303c234426be03eaba33d9082b7f3b; imps22340=1; juicy_data_1=YToxOntpOjc2NzAzODtpOjE2OTU3NTQxMTY7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:37 GMT
etag: "1558023680"
cache-control: max-age=28682245
content-length: 2779644
content-type: image/gif
last-modified: Thu, 16 May 2019 16:21:20 GMT
accept-ranges: bytes
x-hw: 1695494917.dop210.sk1.t,1695494917.cds219.sk1.hn,1695494917.cds222.sk1.c
X-Firefox-Spdy: h2
i.jads.co/network/user1037/203-1520185101.jpg
200 OK 24 kB URL GET HTTP/2 i.jads.co/network/user1037/203-1520185101.jpg
IP
Requested by https://poweredby.jads.co/adshow.php?adzone=947366
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash 9d43d8ef4d6605e218bf318e21923b8c
e8cae62be698d197f2f23ad36815f4e2d3f45881
11114dddf1cf3603f2782c8b8ba1d5dd4403147e9030053c6e268819f56f2f64
GET /network/user1037/203-1520185101.jpg HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=5e144b2c0388603e962b4deafce10257; imps22340=1; juicy_data_1=YTo0OntpOjYzMTM3MjtpOjE2OTU3NTQxMTc7aToxMjA0MzAwO2k6MTY5NTc1NDExNztpOjE2OTMyMzc7aToxNjk1NzU0MTE3O2k6MTIwNDMzNDtpOjE2OTU3NTQxMTc7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1; imps203=1; imps43654=1; imps58522=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:37 GMT
etag: "1520185101"
cache-control: max-age=20478838
content-length: 23898
content-type: image/jpeg
last-modified: Sun, 04 Mar 2018 17:38:21 GMT
accept-ranges: bytes
x-hw: 1695494917.dop210.sk1.t,1695494917.cds219.sk1.hn,1695494917.cds206.sk1.c
X-Firefox-Spdy: h2
i.jads.co/network/user500/25313-1582977070-0638295001582977070.jpg
200 OK 36 kB URL GET HTTP/2 i.jads.co/network/user500/25313-1582977070-0638295001582977070.jpg
IP
Requested by https://poweredby.jads.co/adshow.php?adzone=947366
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "Resized on https://ezgif.com/resize", Exif Standard: [TIFF image data, little-endian, direntries=12, height=600, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=800], baseline, precision 8, 300x300, components 3\012- data
Hash b2de14c43852939e2fc96729697e6990
f09617fa3f0999ae351dd5fb41189a4cd29c54fd
626fe4d81c93bee913f40136317d44f44f4d808ab8c76296134586ca6718d505
GET /network/user500/25313-1582977070-0638295001582977070.jpg HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=5e144b2c0388603e962b4deafce10257; imps22340=1; juicy_data_1=YTo0OntpOjYzMTM3MjtpOjE2OTU3NTQxMTc7aToxMjA0MzAwO2k6MTY5NTc1NDExNztpOjE2OTMyMzc7aToxNjk1NzU0MTE3O2k6MTIwNDMzNDtpOjE2OTU3NTQxMTc7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1; imps203=1; imps43654=1; imps58522=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:37 GMT
etag: "1582977070"
cache-control: max-age=12768980
content-length: 36139
content-type: image/jpeg
last-modified: Sat, 29 Feb 2020 11:51:10 GMT
accept-ranges: bytes
x-hw: 1695494917.dop210.sk1.t,1695494917.cds219.sk1.hn,1695494917.cds002.sk1.c
X-Firefox-Spdy: h2
javflag.com/cdn-cgi/challenge-platform/h/g/jsd/r/80b4f66f880156b9
200 OK 1.7 kB URL POST HTTP/3 javflag.com/cdn-cgi/challenge-platform/h/g/jsd/r/80b4f66f880156b9
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
Hash da7405e7c4b329ba4f4ec92e538325c3
44121592e2713d7f865973696d12156b044d4c20
c0a25fd6e828d3167128999723026da6fc8dfd1dfde67687b2789399f8eae3ca
POST /cdn-cgi/challenge-platform/h/g/jsd/r/80b4f66f880156b9 HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12185
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:36 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=pIdWu2gNLSLsWkFnSUzrTm1vEr4VsxQQiawFdEbLjUs-1695494916-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1695494916; path=/; expires=Sun, 22-Sep-24 18:48:36 GMT; domain=.javflag.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oh8ZG3XFq1RQuteEQHB%2FoBuC8HznE%2BJHMsAg%2F2XchV5JFNVfUDEWPV1lJxSwjQb27rIgNzI8cJfx%2BfuYHl3UyaNsMcgPX9dpCAKsj0zTJ4UvF6goFLJ8PExZW5G6ZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f67e58c956b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ponderriding.com/impr.gif?sid=H4sIAAAAAAAC%2F1SSP2wcxRfHZ2P%2FmqT4AUJCNOgkGpDQeXdv7x8pAiEcijBx%2FoCgQ7Mzs%2BeJZ3eWmd3bsytDBHJ5EhVU6%2B%2FZsSCWRToaEFqnQZaQfFQucIFEBV0gdAjdxeLgSfP%2BzPsWn%2FdmPtnOT4mLnJ703tIbUim61Ky7tRfe87yLtWWZ5MPasNN6vxVcrJnBy57brbsv1t4QbE0v%2Ba7nup7r1XrSiEgPlzzPq7uQ6X7Xq3fdeuDXvWaAoflvbXMHljrgg1PyFCSfnN8%2FCCBZhST%2B6oqwa5lOX3o9zhXNtMGA772TrCW6SBDP08g4iJK9MzW0Pe59C53szoChB%2F8IQzkhzi8%2FI0z2zigRDnYfg4YKIkHIL6AYVBCqgqQVmL4DyY8JwDiurSCJ717TpqDrj7t02p2QxUcPIYsJWfzpaSTxwWUlh7VbWuWZ1InFMCohhxVkv0KaHyLbOAdZHIJlH0HyH8jSo2Uk8c6KVRqSl7PhpawgowpKjECtg3x6pIM8cpCnDmJ%2BUmuzoNPhnSangjE%2FjLxOFERBlzI3Ym6j6yNnU7wRsnQEpkZgZhOp2cSaHMHk38GulrDcgc0mxLmxiQEvUQiCwhIUlKCQBEVGUAzKXa6sb8u7XNk89M6ifxYb5Vhn%2FW26q7O%2BSMh2ekqenO3lz%2BMEa%2BKk1vBF5FO%2F6QYt32257Yg2abPLucvbEXWDDqwsIe252agbckKe6X2IVE7I4taPCOkhrDoEk0%2BA5h5oMW77LujqOOi42Eju3aaDSNF%2BnekYXJdIs0Vk6862OiXPzjBeefAQgh1duv%2Frx899feM3MFMiNSVuywcEfbU1vqkLsnNTF5bcX0kzGcsNOn26WxnNxMKXb4r1Qht%2B9YodffEqmzam6f7bwmbLNOEy6Vty77LkXJieNkyQb67ad0V4Pberl3OT5Ony9dd6V%2BPUCGulTipQOSGk%2BgBMTsiFv9LZt3zeHkCaCiYvEedH5MwgdQWWbsKmc36rCYyaa8LUQZGXY%2BOH80slCZSY1zQsYf9Vh%2FN8226hbxZAsztI4hIDU2KgSlA1gs3Pj7PUHF36%2FrOpfY5QLYxDZRZ2QmXUp7PlTt0fU%2Fc7rDypMeYK6oVtTwgumg3GghbrhK2oEbRFp8mbyOxE%2FL%2Fxv78BAAD%2F%2FwEAAP%2F%2FSgZv%2BW0EAAA%3D
200 OK 7 B URL GET HTTP/1.1 ponderriding.com/impr.gif?sid=H4sIAAAAAAAC%2F1SSP2wcxRfHZ2P%2FmqT4AUJCNOgkGpDQeXdv7x8pAiEcijBx%2FoCgQ7Mzs%2BeJZ3eWmd3bsytDBHJ5EhVU6%2B%2FZsSCWRToaEFqnQZaQfFQucIFEBV0gdAjdxeLgSfP%2BzPsWn%2FdmPtnOT4mLnJ703tIbUim61Ky7tRfe87yLtWWZ5MPasNN6vxVcrJnBy57brbsv1t4QbE0v%2Ba7nup7r1XrSiEgPlzzPq7uQ6X7Xq3fdeuDXvWaAoflvbXMHljrgg1PyFCSfnN8%2FCCBZhST%2B6oqwa5lOX3o9zhXNtMGA772TrCW6SBDP08g4iJK9MzW0Pe59C53szoChB%2F8IQzkhzi8%2FI0z2zigRDnYfg4YKIkHIL6AYVBCqgqQVmL4DyY8JwDiurSCJ717TpqDrj7t02p2QxUcPIYsJWfzpaSTxwWUlh7VbWuWZ1InFMCohhxVkv0KaHyLbOAdZHIJlH0HyH8jSo2Uk8c6KVRqSl7PhpawgowpKjECtg3x6pIM8cpCnDmJ%2BUmuzoNPhnSangjE%2FjLxOFERBlzI3Ym6j6yNnU7wRsnQEpkZgZhOp2cSaHMHk38GulrDcgc0mxLmxiQEvUQiCwhIUlKCQBEVGUAzKXa6sb8u7XNk89M6ifxYb5Vhn%2FW26q7O%2BSMh2ekqenO3lz%2BMEa%2BKk1vBF5FO%2F6QYt32257Yg2abPLucvbEXWDDqwsIe252agbckKe6X2IVE7I4taPCOkhrDoEk0%2BA5h5oMW77LujqOOi42Eju3aaDSNF%2BnekYXJdIs0Vk6862OiXPzjBeefAQgh1duv%2Frx899feM3MFMiNSVuywcEfbU1vqkLsnNTF5bcX0kzGcsNOn26WxnNxMKXb4r1Qht%2B9YodffEqmzam6f7bwmbLNOEy6Vty77LkXJieNkyQb67ad0V4Pberl3OT5Ony9dd6V%2BPUCGulTipQOSGk%2BgBMTsiFv9LZt3zeHkCaCiYvEedH5MwgdQWWbsKmc36rCYyaa8LUQZGXY%2BOH80slCZSY1zQsYf9Vh%2FN8226hbxZAsztI4hIDU2KgSlA1gs3Pj7PUHF36%2FrOpfY5QLYxDZRZ2QmXUp7PlTt0fU%2Fc7rDypMeYK6oVtTwgumg3GghbrhK2oEbRFp8mbyOxE%2FL%2Fxv78BAAD%2F%2FwEAAP%2F%2FSgZv%2BW0EAAA%3D
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectponderriding.com
Fingerprint04:FA:28:9B:C5:4E:3E:C2:F7:B4:B7:DE:CA:79:BE:73:62:80:5C:84
ValidityThu, 14 Sep 2023 11:16:23 GMT - Wed, 13 Dec 2023 11:16:22 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1SSP2wcxRfHZ2P%2FmqT4AUJCNOgkGpDQeXdv7x8pAiEcijBx%2FoCgQ7Mzs%2BeJZ3eWmd3bsytDBHJ5EhVU6%2B%2FZsSCWRToaEFqnQZaQfFQucIFEBV0gdAjdxeLgSfP%2BzPsWn%2FdmPtnOT4mLnJ703tIbUim61Ky7tRfe87yLtWWZ5MPasNN6vxVcrJnBy57brbsv1t4QbE0v%2Ba7nup7r1XrSiEgPlzzPq7uQ6X7Xq3fdeuDXvWaAoflvbXMHljrgg1PyFCSfnN8%2FCCBZhST%2B6oqwa5lOX3o9zhXNtMGA772TrCW6SBDP08g4iJK9MzW0Pe59C53szoChB%2F8IQzkhzi8%2FI0z2zigRDnYfg4YKIkHIL6AYVBCqgqQVmL4DyY8JwDiurSCJ717TpqDrj7t02p2QxUcPIYsJWfzpaSTxwWUlh7VbWuWZ1InFMCohhxVkv0KaHyLbOAdZHIJlH0HyH8jSo2Uk8c6KVRqSl7PhpawgowpKjECtg3x6pIM8cpCnDmJ%2BUmuzoNPhnSangjE%2FjLxOFERBlzI3Ym6j6yNnU7wRsnQEpkZgZhOp2cSaHMHk38GulrDcgc0mxLmxiQEvUQiCwhIUlKCQBEVGUAzKXa6sb8u7XNk89M6ifxYb5Vhn%2FW26q7O%2BSMh2ekqenO3lz%2BMEa%2BKk1vBF5FO%2F6QYt32257Yg2abPLucvbEXWDDqwsIe252agbckKe6X2IVE7I4taPCOkhrDoEk0%2BA5h5oMW77LujqOOi42Eju3aaDSNF%2BnekYXJdIs0Vk6862OiXPzjBeefAQgh1duv%2Frx899feM3MFMiNSVuywcEfbU1vqkLsnNTF5bcX0kzGcsNOn26WxnNxMKXb4r1Qht%2B9YodffEqmzam6f7bwmbLNOEy6Vty77LkXJieNkyQb67ad0V4Pberl3OT5Ony9dd6V%2BPUCGulTipQOSGk%2BgBMTsiFv9LZt3zeHkCaCiYvEedH5MwgdQWWbsKmc36rCYyaa8LUQZGXY%2BOH80slCZSY1zQsYf9Vh%2FN8226hbxZAsztI4hIDU2KgSlA1gs3Pj7PUHF36%2FrOpfY5QLYxDZRZ2QmXUp7PlTt0fU%2Fc7rDypMeYK6oVtTwgumg3GghbrhK2oEbRFp8mbyOxE%2FL%2Fxv78BAAD%2F%2FwEAAP%2F%2FSgZv%2BW0EAAA%3D HTTP/1.1
Host: ponderriding.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Cookie: u_pl=16241006; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 18:48:37 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 711c50dc904b99919ab30ce50a72c081
Strict-Transport-Security: max-age=0; includeSubdomains
ponderriding.com/impr.gif?sid=H4sIAAAAAAAC%2F1SSPWwcRRTH52LTJAUfQkI06CQakNB5d2%2FvixSBEA5FmDgfIOjQ7MzseeLZnWVmP86uDBHI5UlUUK3%2FZ8eCWFHS0YDQOg2yhOSjcoELJCroAqFD6C4WB0%2Fafe%2FN%2Bxe%2F95%2F5bDs7IQ4yetx%2FR29IpehSq%2BHUX%2FrAdc%2FXl2WcDevDbvvDtn%2B%2BbvJXXafXcF6uvyXYml7yHNdxXMet96URoR4uua7bcCCT%2FZ7b6DkN32u4LR9D8%2F%2FeZjVYWgPPT8gzkHxydv%2BuD8kqxNG9S8KupTp55c0oUzTVBjnfey9ei3URI5qXoakhjPdO1dD2qP8ddLw7A4bO%2FxUGckJqv%2F6CIN47pUSQ7z4GDRREjICfQ5FXEKqCpBWYvgXJjwjAOK6sII5uX9GmoOuPp3Q6nZDFRw8hiwlZ%2FPlZxNHdi0oO6ze0ylKpY4thWEIOK8hBhSQ7QLpxBrI4AEs%2FgeQ%2FkqVHy4ijnRWrNCQvZ8tLWUGGFZQYgdoasukna8jCGrKkhogf1zvM73Z5t8WpYMwLQrcb%2BqHfo8wJmdPsecjYFG%2BENBmBqRGY2URiNrEmRzDZ97CrJSyvwaYTUru2iZyXKARBYQkKSlBIgiIlKPJylyvr2fI2VzYL3NPsneZmOdbpYJvu6nQgYrKdnJCnZ778dRRjTRzXm54IPeq1HL%2FtOW2nE9IWbfU4d3gnpI7fhZUlpD0zW3VDTshz%2FY%2BRyAlZ3PoJAT2AVQdg8inQzAUtxh3PAV0d%2B10HG%2FGdmzQPFR00mI7AdYkkXUS6XttWJ%2BT5GcZrD%2F6EYIcX7v%2F26QvfXPsdzJRITImb8gHBQG2Nr%2BuC7FzXhSX3V5JURnKDTq%2FuRkpTsfD122K90IZfvmRHX73OpoNpuf%2BusOkyjbmMB5bcuSg5F6avDRPk28v2fRFczezqxczEWbJ89Y3%2B5Sgxwlqp4wpUTgipPgKTE3Lu72T2LF%2B09yBNBZOViLJDchqQugJLNmGTOb%2FVBEbNNUFyBkVWjo0XzA%2BVJFBi3tOghP1PH8zrbbuFgVkATW8hjkrkpkSuSlA1gs3OjtPEHF744YtpfIlALYwDZRZ2AmXU51NzH84cnv7%2BgJXHdcYcQd2g4wrBRavJmN9m3aAdNv2O6LZ4C6mdiCebT%2FwDAAD%2F%2FwEAAP%2F%2FRDTlA20EAAA%3D
200 OK 7 B URL GET HTTP/1.1 ponderriding.com/impr.gif?sid=H4sIAAAAAAAC%2F1SSPWwcRRTH52LTJAUfQkI06CQakNB5d2%2FvixSBEA5FmDgfIOjQ7MzseeLZnWVmP86uDBHI5UlUUK3%2FZ8eCWFHS0YDQOg2yhOSjcoELJCroAqFD6C4WB0%2Fafe%2FN%2Bxe%2F95%2F5bDs7IQ4yetx%2FR29IpehSq%2BHUX%2FrAdc%2FXl2WcDevDbvvDtn%2B%2BbvJXXafXcF6uvyXYml7yHNdxXMet96URoR4uua7bcCCT%2FZ7b6DkN32u4LR9D8%2F%2FeZjVYWgPPT8gzkHxydv%2BuD8kqxNG9S8KupTp55c0oUzTVBjnfey9ei3URI5qXoakhjPdO1dD2qP8ddLw7A4bO%2FxUGckJqv%2F6CIN47pUSQ7z4GDRREjICfQ5FXEKqCpBWYvgXJjwjAOK6sII5uX9GmoOuPp3Q6nZDFRw8hiwlZ%2FPlZxNHdi0oO6ze0ylKpY4thWEIOK8hBhSQ7QLpxBrI4AEs%2FgeQ%2FkqVHy4ijnRWrNCQvZ8tLWUGGFZQYgdoasukna8jCGrKkhogf1zvM73Z5t8WpYMwLQrcb%2BqHfo8wJmdPsecjYFG%2BENBmBqRGY2URiNrEmRzDZ97CrJSyvwaYTUru2iZyXKARBYQkKSlBIgiIlKPJylyvr2fI2VzYL3NPsneZmOdbpYJvu6nQgYrKdnJCnZ778dRRjTRzXm54IPeq1HL%2FtOW2nE9IWbfU4d3gnpI7fhZUlpD0zW3VDTshz%2FY%2BRyAlZ3PoJAT2AVQdg8inQzAUtxh3PAV0d%2B10HG%2FGdmzQPFR00mI7AdYkkXUS6XttWJ%2BT5GcZrD%2F6EYIcX7v%2F26QvfXPsdzJRITImb8gHBQG2Nr%2BuC7FzXhSX3V5JURnKDTq%2FuRkpTsfD122K90IZfvmRHX73OpoNpuf%2BusOkyjbmMB5bcuSg5F6avDRPk28v2fRFczezqxczEWbJ89Y3%2B5Sgxwlqp4wpUTgipPgKTE3Lu72T2LF%2B09yBNBZOViLJDchqQugJLNmGTOb%2FVBEbNNUFyBkVWjo0XzA%2BVJFBi3tOghP1PH8zrbbuFgVkATW8hjkrkpkSuSlA1gs3OjtPEHF744YtpfIlALYwDZRZ2AmXU51NzH84cnv7%2BgJXHdcYcQd2g4wrBRavJmN9m3aAdNv2O6LZ4C6mdiCebT%2FwDAAD%2F%2FwEAAP%2F%2FRDTlA20EAAA%3D
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectponderriding.com
Fingerprint04:FA:28:9B:C5:4E:3E:C2:F7:B4:B7:DE:CA:79:BE:73:62:80:5C:84
ValidityThu, 14 Sep 2023 11:16:23 GMT - Wed, 13 Dec 2023 11:16:22 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1SSPWwcRRTH52LTJAUfQkI06CQakNB5d2%2FvixSBEA5FmDgfIOjQ7MzseeLZnWVmP86uDBHI5UlUUK3%2FZ8eCWFHS0YDQOg2yhOSjcoELJCroAqFD6C4WB0%2Fafe%2FN%2Bxe%2F95%2F5bDs7IQ4yetx%2FR29IpehSq%2BHUX%2FrAdc%2FXl2WcDevDbvvDtn%2B%2BbvJXXafXcF6uvyXYml7yHNdxXMet96URoR4uua7bcCCT%2FZ7b6DkN32u4LR9D8%2F%2FeZjVYWgPPT8gzkHxydv%2BuD8kqxNG9S8KupTp55c0oUzTVBjnfey9ei3URI5qXoakhjPdO1dD2qP8ddLw7A4bO%2FxUGckJqv%2F6CIN47pUSQ7z4GDRREjICfQ5FXEKqCpBWYvgXJjwjAOK6sII5uX9GmoOuPp3Q6nZDFRw8hiwlZ%2FPlZxNHdi0oO6ze0ylKpY4thWEIOK8hBhSQ7QLpxBrI4AEs%2FgeQ%2FkqVHy4ijnRWrNCQvZ8tLWUGGFZQYgdoasukna8jCGrKkhogf1zvM73Z5t8WpYMwLQrcb%2BqHfo8wJmdPsecjYFG%2BENBmBqRGY2URiNrEmRzDZ97CrJSyvwaYTUru2iZyXKARBYQkKSlBIgiIlKPJylyvr2fI2VzYL3NPsneZmOdbpYJvu6nQgYrKdnJCnZ778dRRjTRzXm54IPeq1HL%2FtOW2nE9IWbfU4d3gnpI7fhZUlpD0zW3VDTshz%2FY%2BRyAlZ3PoJAT2AVQdg8inQzAUtxh3PAV0d%2B10HG%2FGdmzQPFR00mI7AdYkkXUS6XttWJ%2BT5GcZrD%2F6EYIcX7v%2F26QvfXPsdzJRITImb8gHBQG2Nr%2BuC7FzXhSX3V5JURnKDTq%2FuRkpTsfD122K90IZfvmRHX73OpoNpuf%2BusOkyjbmMB5bcuSg5F6avDRPk28v2fRFczezqxczEWbJ89Y3%2B5Sgxwlqp4wpUTgipPgKTE3Lu72T2LF%2B09yBNBZOViLJDchqQugJLNmGTOb%2FVBEbNNUFyBkVWjo0XzA%2BVJFBi3tOghP1PH8zrbbuFgVkATW8hjkrkpkSuSlA1gs3OjtPEHF744YtpfIlALYwDZRZ2AmXU51NzH84cnv7%2BgJXHdcYcQd2g4wrBRavJmN9m3aAdNv2O6LZ4C6mdiCebT%2FwDAAD%2F%2FwEAAP%2F%2FRDTlA20EAAA%3D HTTP/1.1
Host: ponderriding.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Cookie: u_pl=16241006; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 18:48:37 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 79e70de4d02ee272b50fe6885707a827
Strict-Transport-Security: max-age=0; includeSubdomains
i.jads.co/network/user191640/58522-1691985318-0359115001691985318.png
200 OK 186 kB URL GET HTTP/2 i.jads.co/network/user191640/58522-1691985318-0359115001691985318.png
IP
Requested by https://poweredby.jads.co/adshow.php?adzone=947366
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size 186 kB (185899 bytes)
Hash 5e89940030ba9b3ea61a291e818fb5ec
16334fd38149fe3196db26998860e7746e00fe6f
6f417dbc71f83b6c963460905604107bbe76de70688bb09ee00bdac3e9a6f4a3
GET /network/user191640/58522-1691985318-0359115001691985318.png HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=5e144b2c0388603e962b4deafce10257; imps22340=1; juicy_data_1=YTo0OntpOjYzMTM3MjtpOjE2OTU3NTQxMTc7aToxMjA0MzAwO2k6MTY5NTc1NDExNztpOjE2OTMyMzc7aToxNjk1NzU0MTE3O2k6MTIwNDMzNDtpOjE2OTU3NTQxMTc7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1; imps203=1; imps43654=1; imps58522=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:37 GMT
etag: "1691985318"
cache-control: max-age=28105298
content-length: 185899
content-type: image/png
last-modified: Mon, 14 Aug 2023 03:55:18 GMT
accept-ranges: bytes
x-hw: 1695494917.dop210.sk1.t,1695494917.cds219.sk1.hn,1695494917.cds215.sk1.c
X-Firefox-Spdy: h2
i.jads.co/network/user500/25313-1582977329-0828938001582977329.jpg
200 OK 36 kB URL GET HTTP/2 i.jads.co/network/user500/25313-1582977329-0828938001582977329.jpg
IP
Requested by https://poweredby.jads.co/adshow.php?adzone=947366
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "Resized on https://ezgif.com/resize", Exif Standard: [TIFF image data, little-endian, direntries=12, height=600, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=800], baseline, precision 8, 300x300, components 3\012- data
Hash 39d0f086abd1a0dba9ad31493feb40db
811e9a467ba34fb99c9ca842d65dd27aa440cb1b
3b981a0fb8eedeeb428ae18f3986ab4d277d2f72ad157a5c8e70b913c9539bd0
GET /network/user500/25313-1582977329-0828938001582977329.jpg HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=5e144b2c0388603e962b4deafce10257; imps22340=1; juicy_data_1=YTo0OntpOjYzMTM3MjtpOjE2OTU3NTQxMTc7aToxMjA0MzAwO2k6MTY5NTc1NDExNztpOjE2OTMyMzc7aToxNjk1NzU0MTE3O2k6MTIwNDMzNDtpOjE2OTU3NTQxMTc7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1; imps203=1; imps43654=1; imps58522=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:37 GMT
etag: "1582977329"
cache-control: max-age=24786314
content-length: 36035
content-type: image/jpeg
last-modified: Sat, 29 Feb 2020 11:55:29 GMT
accept-ranges: bytes
x-hw: 1695494917.dop210.sk1.t,1695494917.cds219.sk1.hn,1695494917.cds231.sk1.c
X-Firefox-Spdy: h2
javflag.com/favicon.ico
200 OK 5.1 kB IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 7aa1f3f0504f54a213c79fed13fb0fd9
b6d53f6702a25eaa6f6a3bd7c8e58bddee157784
f401c9c2a870bbfed763efa4780e74e44c06fafbeb7c78036dd2a865c3884236
GET /favicon.ico HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:36 GMT
content-type: image/x-icon
cache-control: public, max-age=86400
last-modified: Thu, 20 May 2021 07:50:36 GMT
etag: W/"3aee-17988c13db1"
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WxkZbENd8c37LxLh5Nl7kJWHsoTyQNlRxkEQUgcR3I3F8Cq%2BbFjqRFhGaEr1aSXUO79l5c%2FmDFAVkLcE43POcKaEQNiGoBIWd1DzJkSIqJiBeJeKaEc3AOK8D5u5ag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f67e289c56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
i.jads.co/1x1.gif
200 OK 28 kB IP
Requested by https://poweredby.jads.co/adshow.php?adzone=947357
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 250x250, components 3\012- data
Hash 2acfb73fd2df022a7dad5595adef5bda
939b803ea641bd427b7599f92a816262e7a5bf48
3d4610a2ab69d08e54685d0d3cfcf03ec663bacff8cc89a1e0a2904a7769e641
GET /1x1.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=5e144b2c0388603e962b4deafce10257; imps22340=1; juicy_data_1=YTo0OntpOjYzMTM3MjtpOjE2OTU3NTQxMTc7aToxMjA0MzAwO2k6MTY5NTc1NDExNztpOjE2OTMyMzc7aToxNjk1NzU0MTE3O2k6MTIwNDMzNDtpOjE2OTU3NTQxMTc7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1; imps203=1; imps43654=1; imps58522=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:37 GMT
etag: "1478208967"
cache-control: max-age=24782779
content-length: 27460
content-type: image/jpeg
last-modified: Thu, 03 Nov 2016 21:36:07 GMT
accept-ranges: bytes
x-hw: 1695494917.dop210.sk1.t,1695494917.cds219.sk1.hn,1695494917.cds217.sk1.c
X-Firefox-Spdy: h2
i.jads.co/network/user500/33261-1617884183-0130739001617884183.png
200 OK 10 kB URL GET HTTP/2 i.jads.co/network/user500/33261-1617884183-0130739001617884183.png
IP
Requested by https://poweredby.jads.co/adshow.php?adzone=947357
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash e66558a3d4c20465debaa6469f8748d4
e846a04f399e6104f3f76ab4fa64d80dfe681517
75c20bdfc8d961abede17de2c18cd86bc2cfa6d641db5b888f8c406b1d19e959
GET /network/user500/33261-1617884183-0130739001617884183.png HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=5e144b2c0388603e962b4deafce10257; imps22340=1; juicy_data_1=YToxOntpOjExODA0MDc7aToxNjk1NzU0MTE3O30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1; imps203=1; imps43654=1; imps58522=1; imps42805=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:38 GMT
etag: "1617884183"
cache-control: max-age=9686899
content-length: 10343
content-type: image/png
last-modified: Thu, 08 Apr 2021 12:16:23 GMT
accept-ranges: bytes
x-hw: 1695494918.dop210.sk1.t,1695494918.cds219.sk1.hn,1695494918.cds218.sk1.c
X-Firefox-Spdy: h2
i.jads.co/network/user500/16321-1456773456.gif
200 OK 160 kB URL GET HTTP/2 i.jads.co/network/user500/16321-1456773456.gif
IP
Requested by https://poweredby.jads.co/adshow.php?adzone=947353
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 160 x 600\012- data
Size 160 kB (159963 bytes)
Hash 7ac0d7682e2a5b0fd95c4d549322268b
383de13eb415d95282f577ed439929b309c29f44
fe6fd88fe1e9747efc40e941057baf8d161b1adaae8a96073ad83b87a955825c
GET /network/user500/16321-1456773456.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=5e144b2c0388603e962b4deafce10257; imps22340=1; juicy_data_1=YToxOntpOjExODA0MDc7aToxNjk1NzU0MTE3O30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1; imps203=1; imps43654=1; imps58522=1; imps42805=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:38 GMT
etag: "1456773457"
cache-control: max-age=16763358
content-length: 159963
content-type: image/gif
last-modified: Mon, 29 Feb 2016 19:17:37 GMT
accept-ranges: bytes
x-hw: 1695494918.dop210.sk1.t,1695494918.cds219.sk1.hn,1695494918.cds263.sk1.c
X-Firefox-Spdy: h2
i.jads.co/1x1.gif
200 OK 28 kB IP
Requested by https://poweredby.jads.co/adshow.php?adzone=947357
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 250x250, components 3\012- data
Hash 2acfb73fd2df022a7dad5595adef5bda
939b803ea641bd427b7599f92a816262e7a5bf48
3d4610a2ab69d08e54685d0d3cfcf03ec663bacff8cc89a1e0a2904a7769e641
GET /1x1.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=5e144b2c0388603e962b4deafce10257; imps22340=1; juicy_data_1=YToxOntpOjExODA0MDc7aToxNjk1NzU0MTE3O30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1; imps203=1; imps43654=1; imps58522=1; imps42805=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:38 GMT
etag: "1478208967"
cache-control: max-age=24782778
content-length: 27460
content-type: image/jpeg
last-modified: Thu, 03 Nov 2016 21:36:07 GMT
accept-ranges: bytes
x-hw: 1695494918.dop210.sk1.t,1695494918.cds219.sk1.hn,1695494918.cds217.sk1.c
X-Firefox-Spdy: h2
i.jads.co/1x1.gif
200 OK 28 kB IP
Requested by https://poweredby.jads.co/adshow.php?adzone=947357
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 250x250, components 3\012- data
Hash 2acfb73fd2df022a7dad5595adef5bda
939b803ea641bd427b7599f92a816262e7a5bf48
3d4610a2ab69d08e54685d0d3cfcf03ec663bacff8cc89a1e0a2904a7769e641
GET /1x1.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=5e144b2c0388603e962b4deafce10257; imps22340=1; juicy_data_1=YToxOntpOjExODA0MDc7aToxNjk1NzU0MTE3O30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1; imps203=1; imps43654=1; imps58522=1; imps42805=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:38 GMT
etag: "1478208967"
cache-control: max-age=24782778
content-length: 27460
content-type: image/jpeg
last-modified: Thu, 03 Nov 2016 21:36:07 GMT
accept-ranges: bytes
x-hw: 1695494918.dop210.sk1.t,1695494918.cds219.sk1.hn,1695494918.cds217.sk1.c
X-Firefox-Spdy: h2
ponderriding.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSP2wcRRTG52LTJAV%2FhIRo0Ek0IKHz7HrPd0eKQAiHIkz%2BgqBDszOz54lnd5aZ3duzK0MEcnkSFVTr7%2BxYECuQjgaE1mmQJSQflQtcIFFBFwgdQne2OHjS7ntv3lf83jfzyVZ%2BTChydtR9y6wrrdlCs0HrL7zneefryyrJB%2FVBe%2Bn9peB83fZf9minQV%2BsvyH5qlnwqUepR716V1kZmcGC53kNCpXudbxGhzYCv%2BE1Awzs%2F3uX1%2BBYDaJ%2FTJ6CEuOze%2FcCKF4hib%2B%2BJN1qZtKXXo9zzTJj0Re77ySriSkSxLMysjVEye6pGsYddr%2BDSXamwDD9f4WhGpPar78gTHZPKRH2d05AQw2ZIBTnUPQrSF1BsQrc3IYShwTgAleuIonvXDG2YGsnUzaZjsn8o4dQxZjM%2F%2Fw0kvjeRa0G9ZtG55kyicMgKqEGFVSvQprvI1s%2FA1Xsg2cfQYkfycKjZSTx9lWnDZQop8srVUFFFbQcgrka8smnasijGvK0hlgc1Vs8aLdFuymY5NwPI68dBVHQYZxGnC52fOR8gjdElg7B9RDcbiC1G1hVQ9j8e7iVEk7U4LIxqV3fQF%2BUKCRB4QgKRlAogiIjKPrljtDOd%2BUdoV0eeqfZP82L5chkvS22Y7KeTMhWekyenPry12GCVXlUX%2FRl5DO%2FSYMlny7RVsSarNkRgopWxGjQhlMllDszXXVdjckz3Q%2BRqjGZ3%2FwJIduH0%2Fvg6gmw3AMrRi2fgq2MgjbFenL3FutHmvUa3MQQpkSazSNbq23pY%2FLsFOOVB39A8oML93%2F7%2BLlvrv8ObkuktsQt9YCgpzdHN0xBtm%2BYwpH7V9NMxWqdTa7uZsYyOfflm3KtMFZcvuSGX7zKJ4NJufe2dNkyS4RKeo7cvaiEkLZrLJfk28vuXRley93Kxdwmebp87bXu5Ti10jllkgpMjQmpPgBXY3Lu73T6LJ93X0HZCjYvEecH5DSgTAWebsClM35nCKyeacJ0DkVejqwfzg61ItBy1rOwhPtPH87qLbeJnp0Dy24jiUv0bYm%2BLsH0EC4%2FO8pSe3Dhh88m8TlCPTcKtZ3bDrXVn07MfTj5%2FXlis1NHddmSS51OQIOWoDQMhO97TcnZYsA6zPejFjI3lo8vPvYPAAAA%2F%2F8BAAD%2F%2FwWV%2BJBtBAAA
200 OK 7 B URL GET HTTP/1.1 ponderriding.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSP2wcRRTG52LTJAV%2FhIRo0Ek0IKHz7HrPd0eKQAiHIkz%2BgqBDszOz54lnd5aZ3duzK0MEcnkSFVTr7%2BxYECuQjgaE1mmQJSQflQtcIFFBFwgdQne2OHjS7ntv3lf83jfzyVZ%2BTChydtR9y6wrrdlCs0HrL7zneefryyrJB%2FVBe%2Bn9peB83fZf9minQV%2BsvyH5qlnwqUepR716V1kZmcGC53kNCpXudbxGhzYCv%2BE1Awzs%2F3uX1%2BBYDaJ%2FTJ6CEuOze%2FcCKF4hib%2B%2BJN1qZtKXXo9zzTJj0Re77ySriSkSxLMysjVEye6pGsYddr%2BDSXamwDD9f4WhGpPar78gTHZPKRH2d05AQw2ZIBTnUPQrSF1BsQrc3IYShwTgAleuIonvXDG2YGsnUzaZjsn8o4dQxZjM%2F%2Fw0kvjeRa0G9ZtG55kyicMgKqEGFVSvQprvI1s%2FA1Xsg2cfQYkfycKjZSTx9lWnDZQop8srVUFFFbQcgrka8smnasijGvK0hlgc1Vs8aLdFuymY5NwPI68dBVHQYZxGnC52fOR8gjdElg7B9RDcbiC1G1hVQ9j8e7iVEk7U4LIxqV3fQF%2BUKCRB4QgKRlAogiIjKPrljtDOd%2BUdoV0eeqfZP82L5chkvS22Y7KeTMhWekyenPry12GCVXlUX%2FRl5DO%2FSYMlny7RVsSarNkRgopWxGjQhlMllDszXXVdjckz3Q%2BRqjGZ3%2FwJIduH0%2Fvg6gmw3AMrRi2fgq2MgjbFenL3FutHmvUa3MQQpkSazSNbq23pY%2FLsFOOVB39A8oML93%2F7%2BLlvrv8ObkuktsQt9YCgpzdHN0xBtm%2BYwpH7V9NMxWqdTa7uZsYyOfflm3KtMFZcvuSGX7zKJ4NJufe2dNkyS4RKeo7cvaiEkLZrLJfk28vuXRley93Kxdwmebp87bXu5Ti10jllkgpMjQmpPgBXY3Lu73T6LJ93X0HZCjYvEecH5DSgTAWebsClM35nCKyeacJ0DkVejqwfzg61ItBy1rOwhPtPH87qLbeJnp0Dy24jiUv0bYm%2BLsH0EC4%2FO8pSe3Dhh88m8TlCPTcKtZ3bDrXVn07MfTj5%2FXlis1NHddmSS51OQIOWoDQMhO97TcnZYsA6zPejFjI3lo8vPvYPAAAA%2F%2F8BAAD%2F%2FwWV%2BJBtBAAA
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectponderriding.com
Fingerprint04:FA:28:9B:C5:4E:3E:C2:F7:B4:B7:DE:CA:79:BE:73:62:80:5C:84
ValidityThu, 14 Sep 2023 11:16:23 GMT - Wed, 13 Dec 2023 11:16:22 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1SSP2wcRRTG52LTJAV%2FhIRo0Ek0IKHz7HrPd0eKQAiHIkz%2BgqBDszOz54lnd5aZ3duzK0MEcnkSFVTr7%2BxYECuQjgaE1mmQJSQflQtcIFFBFwgdQne2OHjS7ntv3lf83jfzyVZ%2BTChydtR9y6wrrdlCs0HrL7zneefryyrJB%2FVBe%2Bn9peB83fZf9minQV%2BsvyH5qlnwqUepR716V1kZmcGC53kNCpXudbxGhzYCv%2BE1Awzs%2F3uX1%2BBYDaJ%2FTJ6CEuOze%2FcCKF4hib%2B%2BJN1qZtKXXo9zzTJj0Re77ySriSkSxLMysjVEye6pGsYddr%2BDSXamwDD9f4WhGpPar78gTHZPKRH2d05AQw2ZIBTnUPQrSF1BsQrc3IYShwTgAleuIonvXDG2YGsnUzaZjsn8o4dQxZjM%2F%2Fw0kvjeRa0G9ZtG55kyicMgKqEGFVSvQprvI1s%2FA1Xsg2cfQYkfycKjZSTx9lWnDZQop8srVUFFFbQcgrka8smnasijGvK0hlgc1Vs8aLdFuymY5NwPI68dBVHQYZxGnC52fOR8gjdElg7B9RDcbiC1G1hVQ9j8e7iVEk7U4LIxqV3fQF%2BUKCRB4QgKRlAogiIjKPrljtDOd%2BUdoV0eeqfZP82L5chkvS22Y7KeTMhWekyenPry12GCVXlUX%2FRl5DO%2FSYMlny7RVsSarNkRgopWxGjQhlMllDszXXVdjckz3Q%2BRqjGZ3%2FwJIduH0%2Fvg6gmw3AMrRi2fgq2MgjbFenL3FutHmvUa3MQQpkSazSNbq23pY%2FLsFOOVB39A8oML93%2F7%2BLlvrv8ObkuktsQt9YCgpzdHN0xBtm%2BYwpH7V9NMxWqdTa7uZsYyOfflm3KtMFZcvuSGX7zKJ4NJufe2dNkyS4RKeo7cvaiEkLZrLJfk28vuXRley93Kxdwmebp87bXu5Ti10jllkgpMjQmpPgBXY3Lu73T6LJ93X0HZCjYvEecH5DSgTAWebsClM35nCKyeacJ0DkVejqwfzg61ItBy1rOwhPtPH87qLbeJnp0Dy24jiUv0bYm%2BLsH0EC4%2FO8pSe3Dhh88m8TlCPTcKtZ3bDrXVn07MfTj5%2FXlis1NHddmSS51OQIOWoDQMhO97TcnZYsA6zPejFjI3lo8vPvYPAAAA%2F%2F8BAAD%2F%2FwWV%2BJBtBAAA HTTP/1.1
Host: ponderriding.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Cookie: u_pl=16241006; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 18:48:38 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7445336be07e415fb55b77015adc0408
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/si/e7/65/91/e76591885426335875f96fec271ab416/1683357009.png
200 OK 118 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/e7/65/91/e76591885426335875f96fec271ab416/1683357009.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
FingerprintAA:0D:43:1A:D3:E4:C6:42:86:E6:B6:6B:B0:1E:22:41:C9:F8:8C:A9
ValidityThu, 27 Jul 2023 23:07:11 GMT - Wed, 25 Oct 2023 23:07:10 GMT
File type PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size 118 kB (118147 bytes)
Hash 42aa625f7b89a3d77b9fe771f1f1d3c3
9b3d290a8eba25e0c882692bc11c9c3ef4e52dbd
e85910c5985368e86dd68b62ca341599e65a4950383aa0a99e9336eecc47e122
GET /si/e7/65/91/e76591885426335875f96fec271ab416/1683357009.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:38 GMT
content-type: image/png
content-length: 118147
server: nginx/1.21.6
last-modified: Sat, 06 May 2023 07:10:21 GMT
etag: "6455fd5d-1cd83"
expires: Mon, 25 Sep 2023 18:48:38 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
theoryexempt.com/pixel/purst?dl=0&th=0&sc=0&rs=3203&rd=3203&fd=631&bv=23.9.v.3&tmpl=70
200 OK 0 B URL GET HTTP/1.1 theoryexempt.com/pixel/purst?dl=0&th=0&sc=0&rs=3203&rd=3203&fd=631&bv=23.9.v.3&tmpl=70
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjecttheoryexempt.com
Fingerprint94:51:84:31:32:5D:DE:A8:4F:B4:83:81:4F:AB:27:AF:6F:DD:EE:0A
ValidityMon, 18 Sep 2023 15:21:41 GMT - Sun, 17 Dec 2023 15:21:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/purst?dl=0&th=0&sc=0&rs=3203&rd=3203&fd=631&bv=23.9.v.3&tmpl=70 HTTP/1.1
Host: theoryexempt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 18:48:38 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.cloudimagesb.com/si/3c/a6/9a/3ca69a4ec5579fd98f5bf2c32dc4bf0c/1683357000.png
200 OK 156 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/3c/a6/9a/3ca69a4ec5579fd98f5bf2c32dc4bf0c/1683357000.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
FingerprintAA:0D:43:1A:D3:E4:C6:42:86:E6:B6:6B:B0:1E:22:41:C9:F8:8C:A9
ValidityThu, 27 Jul 2023 23:07:11 GMT - Wed, 25 Oct 2023 23:07:10 GMT
File type PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size 156 kB (155511 bytes)
Hash 4e4f25622c983e074eb908d4c15724bc
80f165b39dc08ebc204b390db0f7a3718b422a3d
12801ac20be4a4587a27149f756dd3123c9ba5d9555d73792a5c64df90bc4c05
GET /si/3c/a6/9a/3ca69a4ec5579fd98f5bf2c32dc4bf0c/1683357000.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:38 GMT
content-type: image/png
content-length: 155511
server: nginx/1.21.6
last-modified: Sat, 06 May 2023 07:10:08 GMT
etag: "6455fd50-25f77"
expires: Mon, 25 Sep 2023 18:48:38 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/9b/47/fb/9b47fb4316ad611bd932807c02c26cff/1683356991.png
200 OK 139 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/9b/47/fb/9b47fb4316ad611bd932807c02c26cff/1683356991.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
FingerprintAA:0D:43:1A:D3:E4:C6:42:86:E6:B6:6B:B0:1E:22:41:C9:F8:8C:A9
ValidityThu, 27 Jul 2023 23:07:11 GMT - Wed, 25 Oct 2023 23:07:10 GMT
File type PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size 139 kB (139050 bytes)
Hash b5095853b4c6e16acd9d238c51c479ff
b7436311ee33f668d8a71e1300a60a4e11ff32e4
b47522a109caa660ee05c5278f3ffc9eecd1d290b4132b6388d5677f9ea372a7
GET /si/9b/47/fb/9b47fb4316ad611bd932807c02c26cff/1683356991.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:38 GMT
content-type: image/png
content-length: 139050
server: nginx/1.21.6
last-modified: Sat, 06 May 2023 07:10:00 GMT
etag: "6455fd48-21f2a"
expires: Mon, 25 Sep 2023 18:48:38 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
poweredby.jads.co/adshow.php?adzone=947358
200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/adshow.php?adzone=947358
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (411), with CRLF, LF line terminators
Hash 48e3a5fd055a08470082ac94aa0476e3
ce8939cde6920b6ff25ad9d51ef87a221ac9588f
a9ff73cda8954245a23cea0ae0701f237544e3444e026ce0f569733edd65f12b
GET /adshow.php?adzone=947358 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 18:48:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=5e144b2c0388603e962b4deafce10257; expires=Sun, 22-Sep-2024 18:48:37 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps30553=1; expires=Sun, 24-Sep-2023 18:48:38 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjcxMzIyNjtpOjE2OTU3NTQxMTc7fQ%3D%3D; expires=Tue, 26-Sep-2023 18:48:37 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Tue, 26-Sep-2023 18:48:37 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
i.jads.co/network/user22416/30553-1544525869-0417811001544525869.gif
200 OK 426 kB URL GET HTTP/2 i.jads.co/network/user22416/30553-1544525869-0417811001544525869.gif
IP
Requested by https://poweredby.jads.co/adshow.php?adzone=947358
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 300 x 100\012- data
Size 426 kB (426439 bytes)
Hash 587089b6fa0f42ff77bd761bd8ba2639
a9d49e636359df14c4466cedfdef9fd76153cfbe
436d6ea2e5e852845794e3a13131ba7c30788fbed77d28b5b493f828069551d3
GET /network/user22416/30553-1544525869-0417811001544525869.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=5e144b2c0388603e962b4deafce10257; imps22340=1; juicy_data_1=YToxOntpOjcxMzIyNjtpOjE2OTU3NTQxMTc7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1; imps203=1; imps43654=1; imps58522=1; imps42805=1; imps30553=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:38 GMT
etag: "1544525869"
cache-control: max-age=5819277
content-length: 426439
content-type: image/gif
last-modified: Tue, 11 Dec 2018 10:57:49 GMT
accept-ranges: bytes
x-hw: 1695494918.dop210.sk1.t,1695494918.cds219.sk1.hn,1695494918.cds209.sk1.c
X-Firefox-Spdy: h2
poweredby.jads.co/adshow.php?adzone=947423
200 OK 1.6 kB URL GET HTTP/1.1 poweredby.jads.co/adshow.php?adzone=947423
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (401), with CRLF, LF line terminators
Hash 195e3d32d5564dd4e326084533e99356
1b0a406cf1ab43049d558ca352b6a4a563ab2297
b44e551f8aea328b3626e8276251b75ce763c07f6fbec5eedf727bfed336749b
GET /adshow.php?adzone=947423 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 18:48:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=5e144b2c0388603e962b4deafce10257; expires=Sun, 22-Sep-2024 18:48:37 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps42805=1; expires=Sun, 24-Sep-2023 18:48:38 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjExODA0MDY7aToxNjk1NzU0MTE3O30%3D; expires=Tue, 26-Sep-2023 18:48:37 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Tue, 26-Sep-2023 18:48:37 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
i.jads.co/network/user500/33261-1617884182-0301469001617884182.png
200 OK 1.5 kB URL GET HTTP/2 i.jads.co/network/user500/33261-1617884182-0301469001617884182.png
IP
Requested by https://poweredby.jads.co/adshow.php?adzone=947423
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type PNG image data, 300 x 100, 8-bit colormap, non-interlaced\012- data
Hash a71c6a691a71340bd0749dc1fa6f67f2
93aab673319770c9a9f4db3d59636dc91fbf1227
f9e5e435e5aa5877bbe306abb79af87ebbabf89e2eb52dd4b3122c2af281c9d5
GET /network/user500/33261-1617884182-0301469001617884182.png HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=5e144b2c0388603e962b4deafce10257; imps22340=1; juicy_data_1=YToxOntpOjExODA0MDY7aToxNjk1NzU0MTE3O30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1; imps203=1; imps43654=1; imps58522=1; imps42805=1; imps30553=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:38 GMT
etag: "1617884182"
cache-control: max-age=21614961
content-length: 1470
content-type: image/png
last-modified: Thu, 08 Apr 2021 12:16:22 GMT
accept-ranges: bytes
x-hw: 1695494918.dop210.sk1.t,1695494918.cds219.sk1.hn,1695494918.cds214.sk1.c
X-Firefox-Spdy: h2
poweredby.jads.co/adshow.php?adzone=947370
200 OK 1.5 kB URL GET HTTP/1.1 poweredby.jads.co/adshow.php?adzone=947370
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (400), with CRLF, LF line terminators
Hash 26c2c012cd4e283796e5e9b1e84f52c6
ed0959ad04eae7882735636adf6291cb94c2c81d
cdfcea7273dc2018f5e12c86ee5a877dc9d2f103a67c76daa99372bba79290e2
GET /adshow.php?adzone=947370 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 18:48:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=5e144b2c0388603e962b4deafce10257; expires=Sun, 22-Sep-2024 18:48:37 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps32597=1; expires=Sun, 24-Sep-2023 18:48:39 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjc2Njk2NTtpOjE2OTU3NTQxMTc7fQ%3D%3D; expires=Tue, 26-Sep-2023 18:48:37 GMT; Max-Age=259198; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Tue, 26-Sep-2023 18:48:37 GMT; Max-Age=259198; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
i.jads.co/network/user500/32597-1558023092-0965307001558023092.gif
200 OK 702 kB URL GET HTTP/2 i.jads.co/network/user500/32597-1558023092-0965307001558023092.gif
IP
Requested by https://poweredby.jads.co/adshow.php?adzone=947370
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 300 x 250\012- data
Size 702 kB (701566 bytes)
Hash 7df115eeaba3953a1a27a73f0c294d19
9598827e82c4bee286153f1211807efe6cf3c735
d7adb0f1856d1246950a527e31aca561be3228aca6bb86185365256a20b3df4a
GET /network/user500/32597-1558023092-0965307001558023092.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=5e144b2c0388603e962b4deafce10257; imps22340=1; juicy_data_1=YToxOntpOjc2Njk2NTtpOjE2OTU3NTQxMTc7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1; imps203=1; imps43654=1; imps58522=1; imps42805=1; imps30553=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:39 GMT
etag: "1558023093"
cache-control: max-age=20466690
content-length: 701566
content-type: image/gif
last-modified: Thu, 16 May 2019 16:11:33 GMT
accept-ranges: bytes
x-hw: 1695494919.dop210.sk1.t,1695494919.cds219.sk1.hn,1695494919.cds239.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 94111c3420bb2c6a13c84437834119c2
a60b1aaa235c754b4f840e14e5c32f3bd1920d3b
9f0636387ba07be147b51285a1e30b77ad2e4e77126f1c1082775fd981b32d78
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 18:48:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-T7RJTBH
200 OK 53 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-T7RJTBH
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (2213)
Hash 254d8453d31b8937083048c36581f0d9
6c588c4f798647cbf988e596f1563a176d8c489e
25aee948a246d6ce38a7e0754047853393a4f2ab4453c63cf75f941b2ba7c4d7
GET /gtm.js?id=GTM-T7RJTBH HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 23 Sep 2023 18:48:39 GMT
expires: Sat, 23 Sep 2023 18:48:39 GMT
cache-control: private, max-age=900
last-modified: Sat, 23 Sep 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 52831
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
barnabaslinger.com/e92baac9f9527ad976b281842138525b/invoke.js
200 OK 11 kB URL GET HTTP/1.1 barnabaslinger.com/e92baac9f9527ad976b281842138525b/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectbarnabaslinger.com
FingerprintA1:79:FD:AC:7C:C1:24:2F:80:32:0C:DA:4B:29:FA:84:C7:B5:51:6A
ValidityWed, 20 Sep 2023 06:08:22 GMT - Tue, 19 Dec 2023 06:08:21 GMT
File type exported SGML document, ASCII text, with very long lines (29595), with no line terminators
Hash 242ee6aeec18daed5636459f6e8fe1fd
643edd987411d6ee21adbac4068a532424388f56
9197da1abde2d3f92397d60a501695a5b40ac832df5b273e6b7159bbdd247281
GET /e92baac9f9527ad976b281842138525b/invoke.js HTTP/1.1
Host: barnabaslinger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 23 Sep 2023 18:48:39 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4eec2a41c6ac912526119701f4f98c16
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
471 B IP
Hash 41d47531a53830929519cbac6bcf752a
c39e4c34f34823397d064f1dd018625b2321f892
77798848ecc76001633e9d6571748a6c58fc655abb7509c4deb52932479e93ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 18:48:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ads.adxadserv.com/ad?spotid=60fa6cc461d6e22a417e5fc1&type=300x250&output=html&extra1=0&ref=https%3A//javflag.com/en/v/a8mPO&dt=1695494919778&screen=1280x1024&tags=
200 OK 1.5 kB URL GET HTTP/2 ads.adxadserv.com/ad?spotid=60fa6cc461d6e22a417e5fc1&type=300x250&output=html&extra1=0&ref=https%3A//javflag.com/en/v/a8mPO&dt=1695494919778&screen=1280x1024&tags=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectads.adxadserv.com
FingerprintCE:AA:6D:AC:4F:04:7C:DD:CF:AE:73:33:5A:0C:A8:98:B6:0E:CA:1B
ValidityMon, 14 Aug 2023 10:06:27 GMT - Sun, 12 Nov 2023 10:06:26 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (579)
Hash e620894390363b98334bae80ce2c6c25
e0d8f803e46faf3f15230ca27fae6a9c93ea1c86
f7c0da5cd1a75fdfbbeb69ba1493dd4c4feedf838ed5d78a5207458cd9cb9704
GET /ad?spotid=60fa6cc461d6e22a417e5fc1&type=300x250&output=html&extra1=0&ref=https%3A//javflag.com/en/v/a8mPO&dt=1695494919778&screen=1280x1024&tags= HTTP/1.1
Host: ads.adxadserv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 23 Sep 2023 18:48:39 GMT
content-type: text/html; charset=utf-8
content-length: 1516
cache-control: no-cache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 8fe5097b12ddbaa7731f5c6d445db349
b1d9718a7e3ead4ad6c08b3c888129ddf9ba52af
3133a3d91f11eeb170b6a3149b7cceb04228b72a222187bcc374f1fbbdbf4bd3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 18:48:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lilacsloppy.com/watch.1150317757379.js?key=e92baac9f9527ad976b281842138525b&kw=%5B%22javflag%22%2C%22-%22%2C%22%E5%A4%AB%E3%81%AE%E7%9B%AE%E3%81%AE%E5%89%8D%E3%81%A7%E7%8A%AF%E3%81%95%E3%82%8C%E3%81%A6-%22%2C%22%E6%AF%8D%E4%B9%B3%E8%B2%B8%E5%88%A5%E8%8D%98%22%2C%22%E8%91%B5%E3%81%82%E3%81%92%E3%81%AF%22%5D&refer=https%3A%2F%2Fjavflag.com%2Fen%2Fv%2Fa8mPO&tz=0&dev=e&res=14.2079&uuid=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1
307 Temporary Redirect 0 B URL GET HTTP/1.1 lilacsloppy.com/watch.1150317757379.js?key=e92baac9f9527ad976b281842138525b&kw=%5B%22javflag%22%2C%22-%22%2C%22%E5%A4%AB%E3%81%AE%E7%9B%AE%E3%81%AE%E5%89%8D%E3%81%A7%E7%8A%AF%E3%81%95%E3%82%8C%E3%81%A6-%22%2C%22%E6%AF%8D%E4%B9%B3%E8%B2%B8%E5%88%A5%E8%8D%98%22%2C%22%E8%91%B5%E3%81%82%E3%81%92%E3%81%AF%22%5D&refer=https%3A%2F%2Fjavflag.com%2Fen%2Fv%2Fa8mPO&tz=0&dev=e&res=14.2079&uuid=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectlilacsloppy.com
Fingerprint61:42:8D:7F:1F:9E:5E:99:C6:26:9F:97:2E:54:59:AB:93:1B:0E:3A
ValidityThu, 14 Sep 2023 11:06:53 GMT - Wed, 13 Dec 2023 11:06:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.1150317757379.js?key=e92baac9f9527ad976b281842138525b&kw=%5B%22javflag%22%2C%22-%22%2C%22%E5%A4%AB%E3%81%AE%E7%9B%AE%E3%81%AE%E5%89%8D%E3%81%A7%E7%8A%AF%E3%81%95%E3%82%8C%E3%81%A6-%22%2C%22%E6%AF%8D%E4%B9%B3%E8%B2%B8%E5%88%A5%E8%8D%98%22%2C%22%E8%91%B5%E3%81%82%E3%81%92%E3%81%AF%22%5D&refer=https%3A%2F%2Fjavflag.com%2Fen%2Fv%2Fa8mPO&tz=0&dev=e&res=14.2079&uuid=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1 HTTP/1.1
Host: lilacsloppy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 18:48:40 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://javflag.com
Access-Control-Allow-Origin: https://javflag.com
Access-Control-Allow-Credentials: true
Location: https://lilacsloppy.com/watch.1150317757379.js?key=e92baac9f9527ad976b281842138525b&kw=%5B%22javflag%22%2C%22-%22%2C%22%E5%A4%AB%E3%81%AE%E7%9B%AE%E3%81%AE%E5%89%8D%E3%81%A7%E7%8A%AF%E3%81%95%E3%82%8C%E3%81%A6-%22%2C%22%E6%AF%8D%E4%B9%B3%E8%B2%B8%E5%88%A5%E8%8D%98%22%2C%22%E8%91%B5%E3%81%82%E3%81%92%E3%81%AF%22%5D&refer=https%3A%2F%2Fjavflag.com%2Fen%2Fv%2Fa8mPO&tz=0&dev=e&res=14.2079&uuid=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1&shu=752f1f0d7416b669bca0597f425fdfb40c2e69ebe806bbea5764026713588eee1e8d96608c163d6bc352c887d557a718840a6978867a21eb1beac2c26d6994bf4bd907f8ee2c888b52a1a431e8ad4ab30872133149d7d39d09f648e8c8f38c5162&pst=1695494980&rmtc=t
Set-Cookie: u_pl=16240982; expires=Sun, 24 Sep 2023 18:48:40 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.80-aAcG1LD1VbtLpFRFcIhVUKVmgOdISoeE_7L31_OI; expires=Sat, 23 Sep 2023 18:49:40 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: dd2843e073a2363582435c24f3e69485
Strict-Transport-Security: max-age=0; includeSubdomains
r.trackwilltrk.com/s1/6f077301-542e-438f-9945-662f1f933fe8?externalId=c058f9ac-425b-416f-9aaa-dbff5f10be55&cv1=c058f9ac-425b-416f-9aaa-dbff5f10be55&cv2=3169587e34ed0405b1c2f0fec1e75538&cv3=desktop&cv4=64c90bb261d6e24e4a75a4a1&cv5=64c90ba461d6e255f81c8f58&cv6=en&cv7=javflag.com&cv8=Firefox&cv9=60fa6cc461d6e22a417e5fc1&cv10=qp_adxad_stub3_300x250
200 OK 1.2 kB URL GET HTTP/1.1 r.trackwilltrk.com/s1/6f077301-542e-438f-9945-662f1f933fe8?externalId=c058f9ac-425b-416f-9aaa-dbff5f10be55&cv1=c058f9ac-425b-416f-9aaa-dbff5f10be55&cv2=3169587e34ed0405b1c2f0fec1e75538&cv3=desktop&cv4=64c90bb261d6e24e4a75a4a1&cv5=64c90ba461d6e255f81c8f58&cv6=en&cv7=javflag.com&cv8=Firefox&cv9=60fa6cc461d6e22a417e5fc1&cv10=qp_adxad_stub3_300x250
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://ads.adxadserv.com/ad?spotid=60fa6cc461d6e22a417e5fc1&type=300x250&output=html&extra1=0&ref=https%3A//javflag.com/en/v/a8mPO&dt=1695494919778&screen=1280x1024&tags=
Certificate IssuerLet's Encrypt
Subjectr.trackwilltrk.com
FingerprintFC:F0:4B:C4:02:5F:E2:67:8D:5E:FD:54:99:00:7A:AA:4E:C1:F5:DA
ValidityFri, 25 Aug 2023 19:18:43 GMT - Thu, 23 Nov 2023 19:18:42 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (454)
Hash 9121c2cf5911331312c2b5ccf4cb2c50
8826cb3837c5f1587642e3457710a5a281cdaba9
521b3b6561552150b63d9dcc4e8527456e994cfa6da7043570d7937e3f73e20c
GET /s1/6f077301-542e-438f-9945-662f1f933fe8?externalId=c058f9ac-425b-416f-9aaa-dbff5f10be55&cv1=c058f9ac-425b-416f-9aaa-dbff5f10be55&cv2=3169587e34ed0405b1c2f0fec1e75538&cv3=desktop&cv4=64c90bb261d6e24e4a75a4a1&cv5=64c90ba461d6e255f81c8f58&cv6=en&cv7=javflag.com&cv8=Firefox&cv9=60fa6cc461d6e22a417e5fc1&cv10=qp_adxad_stub3_300x250 HTTP/1.1
Host: r.trackwilltrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 23 Sep 2023 18:48:40 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: uid=nCma3Yj-p; Path=/; Domain=trackwilltrk.com; Expires=Sun, 24 Sep 2023 18:48:40 GMT; HttpOnly
X-Request-Id: cb2e7f3f-aaaa-4c10-8495-5b740eae8f93
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
471 B IP
Hash 8fe5097b12ddbaa7731f5c6d445db349
b1d9718a7e3ead4ad6c08b3c888129ddf9ba52af
3133a3d91f11eeb170b6a3149b7cceb04228b72a222187bcc374f1fbbdbf4bd3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 18:48:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 23ee71f34a80feec27e23d99ecada83e
62f4c8dcc03187e2bdcdfa76dc732d4eebde5cc1
429bd03ec19810ed389955d166c98e62d9850e52160fbec3dd27da2cc30200fe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 18:48:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
200 OK 35 kB URL GET HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
IP
Requested by https://ads.adxadserv.com/ad?spotid=60fa6cc461d6e22a417e5fc1&type=300x250&output=html&extra1=0&ref=https%3A//javflag.com/en/v/a8mPO&dt=1695494919778&screen=1280x1024&tags=
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 34852, version 1.0\012- data
Hash 0e8eefb4549a2edf26c560cb9845952e
8d0b1718aacad934fd0043c87cbc54aa091396bf
7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a
GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.adxadserv.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 14:54:30 GMT
expires: Fri, 20 Sep 2024 14:54:30 GMT
cache-control: public, max-age=31536000
age: 186850
last-modified: Wed, 27 Apr 2022 16:31:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
javflag.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/dffb14d6/main.js
200 OK 5.4 kB URL GET HTTP/3 javflag.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/dffb14d6/main.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (7315), with no line terminators
Hash 899c2aaabe62e0f111887a7badcfe2f1
1947aaa2f6cb68a0d3a94c6e94ce1912e6bd8f9b
0cd9718bef48bfa5c5e31232d9cb4afb0393a34bb06d97ffc8112b4104a19572
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/dffb14d6/main.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=pIdWu2gNLSLsWkFnSUzrTm1vEr4VsxQQiawFdEbLjUs-1695494916-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1695494916; dom3ic8zudi28v8lr6fgphwffqoz0j6c=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=ponderriding.com; sb_main_2ef41dd6bdb358bdf7d02bce45635537=1; sb_count_2ef41dd6bdb358bdf7d02bce45635537=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
vary: accept-encoding
cache-control: max-age=14400, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rzOXuN5oG7wh1WfLo4m9mhG6U13T%2BhIbVMuOj8Ar%2B5c35nEFpS0b97omj6%2FVhFVh7i3quFVwqYO5Y%2Buiko8OP47A4A97da9jScXmaglDtdflZ8KqQpUO7%2BhhNk91jQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f6939cb356b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
471 B IP
Hash 2a9cb3694beef11368f7284821163a4d
32d723fad91ccd0c154e5d7e489266cfe596aa61
08cd4f8a916cab4a520c51bd519209ebe87f4898f10d1f1c968bce537c4d3916
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 18:48:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adxadserv.com/ascripts/pxl.js
200 OK 78 kB URL GET HTTP/1.1 adxadserv.com/ascripts/pxl.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://ads.adxadserv.com/ad?spotid=60fa6cc461d6e22a417e5fc1&type=300x250&output=html&extra1=0&ref=https%3A//javflag.com/en/v/a8mPO&dt=1695494919778&screen=1280x1024&tags=
Certificate IssuerLet's Encrypt
Subjectadxadserv.com
FingerprintEC:5B:70:8C:C3:4D:22:CB:BB:DC:30:33:17:B2:17:AE:6F:22:35:B3
ValidityWed, 02 Aug 2023 10:52:22 GMT - Tue, 31 Oct 2023 10:52:21 GMT
File type Unicode text, UTF-8 text, with very long lines (36114)
Hash 8348b78d100940ba1808a8e9b93f2e94
c2aa612dc3256c9f235dcfc6e330d0ecaf957768
9c983adf86ebc949957bdf55d524dfa278a79bea8d13f2efa9512c6dd37b86f5
GET /ascripts/pxl.js HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 23 Sep 2023 18:48:40 GMT
Content-Type: application/javascript
Content-Length: 77806
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 25 Sep 2020 09:55:41 GMT
ETag: "5f6dbe9d-12fee"
Expires: Sun, 24 Sep 2023 07:45:24 GMT
Cache-Control: max-age=86400, public
X-77-NZT: AcO1rBmORiX/dJsAAA
X-77-NZT-Ray: f5ba4623e7b0446308330f65b88aa719
X-Accel-Date: 1695455124
X-Cache: HIT
X-Age: 39796
X-77-POP: amsterdamNL
X-77-Cache: HIT
X-77-Age: 39796
Accept-Ranges: bytes
cdn.cloudimagesb.com/cti/d8/97/52/d897522560826fbc9238fdebb03ecfb9/1690556492.mp4
200 OK 72 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/d8/97/52/d897522560826fbc9238fdebb03ecfb9/1690556492.mp4
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
FingerprintAA:0D:43:1A:D3:E4:C6:42:86:E6:B6:6B:B0:1E:22:41:C9:F8:8C:A9
ValidityThu, 27 Jul 2023 23:07:11 GMT - Wed, 25 Oct 2023 23:07:10 GMT
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Hash 933820ceea4dfe37aeb64ada6c532926
6407d343c6867354821e8a593b9dbb4061fc9a8f
a2149392dec2a9f09ec22d5b9a1bcccd0ba44bfd7f00bd4fccf0e56b043ae5b5
GET /cti/d8/97/52/d897522560826fbc9238fdebb03ecfb9/1690556492.mp4 HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: video/mp4
content-length: 72404
server: nginx/1.21.6
last-modified: Fri, 28 Jul 2023 15:01:40 GMT
etag: "64c3d854-11ad4"
expires: Mon, 25 Sep 2023 18:48:40 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
panel.javflag.com/api/videos/E2EJ3
200 OK 3.4 kB URL GET HTTP/2 panel.javflag.com/api/videos/E2EJ3
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type JSON data\012- , ASCII text, with very long lines (15742), with no line terminators
Hash ecf7911ff1fd85d7586e8ab14af358bc
5b09294fcd5e092d19cb8a9fd557c17e1e540671
ecd3e3db1278e851c315aa9b9c29a8a6979a4d123775e5059e1f44285f831e5f
GET /api/videos/E2EJ3 HTTP/1.1
Host: panel.javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 58
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dwYMGbPuemZcBNzh9vMwCPcoP1ERtammUm%2FPBZDIW2K0E7ZeOxZHOqvDkOB1qFmOkCIsvtA9udXzJqHYY%2BdPv6q2XiC5B7Rq6Q44lQbAOeQNPUXemkuF50RKrfUTYsG9glWUCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f693d98256a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.ktkjmp.com/adsbygoogle.js
200 OK 16 B URL GET HTTP/2 video.ktkjmp.com/adsbygoogle.js
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectvideo.ktkjmp.com
Fingerprint02:C1:75:9D:DD:6A:66:20:9E:A3:46:1B:5E:A4:87:83:5A:09:92:93
ValiditySun, 02 Jul 2023 00:00:00 GMT - Mon, 01 Jul 2024 23:59:59 GMT
Hash 3d7f7a60216d40dea48e495fef6903c9
fecdb5184f55cf012563d78940eb97b10b9cc99b
96d83ac9f20fc0b88404f307f135e212642e02d6ea295c96b28aed0d771a224f
GET /adsbygoogle.js HTTP/1.1
Host: video.ktkjmp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlrdr.com/
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/javascript
content-length: 16
x-amz-id-2: JkCGjUrgnBgB5Ldx8o/A8ASqNLV5nPIAdv57lupABlhL2wyLLTncvB9KXBxRs01tDEzM0AFmFH4=
x-amz-request-id: 3YWDZBTT5KXYP4SY
last-modified: Thu, 10 Mar 2022 13:52:07 GMT
etag: "3d7f7a60216d40dea48e495fef6903c9"
x-amz-meta-s3cmd-attrs: atime:1646920284/ctime:1646920283/gid:20/gname:staff/md5:3d7f7a60216d40dea48e495fef6903c9/mode:33188/mtime:1646920283/uid:501/uname:mikhailchubar
x-amz-version-id: eIgLIBoMMcsEXtxOH6UDjWyfAquRpkIG
access-control-allow-origin: https://creative.xlrdr.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: HIT
age: 513
expires: Sat, 23 Sep 2023 22:48:40 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f697dc0056a8-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
imaginestandingharvest.com/sbar.json?key=2ef41dd6bdb358bdf7d02bce45635537&uuid=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1
200 OK 3.6 kB URL GET HTTP/1.1 imaginestandingharvest.com/sbar.json?key=2ef41dd6bdb358bdf7d02bce45635537&uuid=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectimaginestandingharvest.com
FingerprintB1:F0:19:A8:92:1B:50:8F:02:7A:0A:34:5C:99:1D:B9:79:D9:89:54
ValiditySat, 16 Sep 2023 03:11:21 GMT - Fri, 15 Dec 2023 03:11:20 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (6251), with no line terminators
Hash 241b19959c46720eccc661d89e98e3d8
d2552530792880d66cdd89282e1d264f4843f47a
c3fb1f87802c54c73c65405f199948ab25b0b5bcc4dd87b9f7c29ad12544eef8
GET /sbar.json?key=2ef41dd6bdb358bdf7d02bce45635537&uuid=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1 HTTP/1.1
Host: imaginestandingharvest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 23 Sep 2023 18:48:40 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://javflag.com
Access-Control-Allow-Origin: https://javflag.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16353405; expires=Sun, 24 Sep 2023 18:48:40 GMT; secure; SameSite=None
uid_id2=f466fc22-1b51-4663-81da-7ecda77a6b48:1:1; expires=Sat, 30 Sep 2023 18:48:40 GMT; secure; SameSite=None
pdhtkv=true; expires=Sun, 24 Sep 2023 18:48:40 GMT; secure; SameSite=None
uncs=1; expires=Sun, 24 Sep 2023 18:48:40 GMT; secure; SameSite=None
pdhtkv29=true; expires=Sun, 24 Sep 2023 18:48:40 GMT; secure; SameSite=None
uncs29=1; expires=Sun, 24 Sep 2023 18:48:40 GMT; secure; SameSite=None
slec2ef41dd6bdb358bdf7d02bce45635537=[4376831]; expires=Sat, 23 Sep 2023 18:48:45 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0cc4af6b69cd83e00b68c5cbdf633dd6
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
c0.jdbstatic.com/thumbs/e2/E2EJ3.jpg
200 OK 15 kB URL GET HTTP/2 c0.jdbstatic.com/thumbs/e2/E2EJ3.jpg
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjdbstatic.com
FingerprintF0:F4:F0:50:7D:E0:86:0A:08:F4:67:D2:A5:8B:92:AE:16:A4:66:7A
ValidityTue, 15 Aug 2023 11:23:30 GMT - Mon, 13 Nov 2023 11:23:29 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 147x200, components 3\012- data
Hash 002b08ab6fb2d290c2e71034c20a5201
3c861300bf56e7434c219012e6409e9c84ddef4f
bda1b35f22da0c22cbb4bbe110e5dd220d965b67ac4bcc3aa3e89feac806ba5f
GET /thumbs/e2/E2EJ3.jpg HTTP/1.1
Host: c0.jdbstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: image/jpeg
content-length: 15295
last-modified: Sun, 08 May 2022 15:14:14 GMT
etag: "002b08ab6fb2d290c2e71034c20a5201"
x-amz-meta-mtime: 1559229624
cache-control: max-age=31536000
cf-cache-status: HIT
age: 97737
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uBNYnFP9ZQJ%2FM09O7pzL946lTIPgDemQI3CyDP1Yll7M3VdxX8kG1C7N0aOjqYx0RzacKcaFkh49CiHBBeSfxBBxsNvhxupb8lNcmp4y0JWT9gI3O%2FxvaqM3CbXXOpZSCXJD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b4f698bc4856a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
c0.jdbstatic.com/thumbs/y0/Y0k6.jpg
200 OK 11 kB URL GET HTTP/2 c0.jdbstatic.com/thumbs/y0/Y0k6.jpg
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjdbstatic.com
FingerprintF0:F4:F0:50:7D:E0:86:0A:08:F4:67:D2:A5:8B:92:AE:16:A4:66:7A
ValidityTue, 15 Aug 2023 11:23:30 GMT - Mon, 13 Nov 2023 11:23:29 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 147x200, components 3\012- data
Hash 9ed7ec69e49e6e1da87bd49d69c7797c
4ab9f0e3bf8d695f65ad5f7a3bcd8e404f5b7cb4
ccfeba12bbea31f3d73eebc40ff8f9bc6e5d5e45c3124d2422da407e8d166798
GET /thumbs/y0/Y0k6.jpg HTTP/1.1
Host: c0.jdbstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: image/jpeg
content-length: 11353
last-modified: Sun, 08 May 2022 15:45:46 GMT
etag: "9ed7ec69e49e6e1da87bd49d69c7797c"
x-amz-meta-mtime: 1559318755
cache-control: max-age=31536000
cf-cache-status: HIT
age: 405823
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nnKqnWFxg7tQpIW9aH64qRsC8J6tU8O9hqJrPbIVkg%2BrtBl02sQATzvdqMwe21%2F78vDGNOvzn%2B913V6kkvR2hlEb%2FfeqFELMnd1xd15At7mL329pViokxLp6mbOFM6zeaMgs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b4f698bc4b56a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
c0.jdbstatic.com/thumbs/1a/1ApJY.jpg
200 OK 20 kB URL GET HTTP/3 c0.jdbstatic.com/thumbs/1a/1ApJY.jpg
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjdbstatic.com
FingerprintF0:F4:F0:50:7D:E0:86:0A:08:F4:67:D2:A5:8B:92:AE:16:A4:66:7A
ValidityTue, 15 Aug 2023 11:23:30 GMT - Mon, 13 Nov 2023 11:23:29 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 147x200, components 3\012- data
Hash f3fc8c54558b914cb4067fa0c08f5253
397fab27b446313a41a37be26946f002029b64e3
a4cee3a7b3ec4214c1046a4970dabfa45aae40d227001a713a6c813f00de540e
GET /thumbs/1a/1ApJY.jpg HTTP/1.1
Host: c0.jdbstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: image/jpeg
content-length: 19646
last-modified: Sun, 08 May 2022 14:54:51 GMT
etag: "f3fc8c54558b914cb4067fa0c08f5253"
x-amz-meta-mtime: 1559073818
cache-control: max-age=31536000
cf-cache-status: HIT
age: 64901
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JRMrB4vwfsPUTPH2FYyLu7QhRyFyXPibTBNAxJXP1cIkkNs1l6mrhqEbzuL7AHxAmErhA3HrjhhpmPkaRX5kunX0EOE6ejvQYIRvZH5e3hOTUeD8iWach9QU5Mtikfs4NP94"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b4f69a2ae65694-OSL
alt-svc: h3=":443"; ma=86400
c0.jdbstatic.com/thumbs/qv/QVkKG.jpg
200 OK 16 kB URL GET HTTP/3 c0.jdbstatic.com/thumbs/qv/QVkKG.jpg
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjdbstatic.com
FingerprintF0:F4:F0:50:7D:E0:86:0A:08:F4:67:D2:A5:8B:92:AE:16:A4:66:7A
ValidityTue, 15 Aug 2023 11:23:30 GMT - Mon, 13 Nov 2023 11:23:29 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 147x200, components 3\012- data
Hash f6d7242b85bde066a19579fac3d898fe
c0f05f907360f52663ebd35c50e2c145b5ebe033
14657c6ff0ab4a6d190bb3c4bf2219c0dd00eebce1c1997a53d9abd20f3a169f
GET /thumbs/qv/QVkKG.jpg HTTP/1.1
Host: c0.jdbstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: image/jpeg
content-length: 15843
last-modified: Sun, 08 May 2022 15:35:26 GMT
etag: "f6d7242b85bde066a19579fac3d898fe"
x-amz-meta-mtime: 1559238223
cache-control: max-age=31536000
cf-cache-status: HIT
age: 683379
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4WlQukS5muL%2BTI0StO3WeCvm8%2Be5xWhSy6om%2BbdODVmQIY2qx7ao7PdbuYNQng%2Byfh6Vjhq4s9xUqTpkglA8NFyi9z%2F%2B8VqUkvbEEu3dPjPSYQs47%2FSA2Y5M3Rq6dQchknc1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b4f69a3ae95694-OSL
alt-svc: h3=":443"; ma=86400
javflag.com/_next/static/media/revicons.e8746a624ed098489406e6113d185258.woff
200 OK 7.5 kB URL GET HTTP/3 javflag.com/_next/static/media/revicons.e8746a624ed098489406e6113d185258.woff
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type Web Open Font Format, TrueType, length 7536, version 1.0\012- data
Hash 04eb8fc57f27498e5ae37523e3bfb2c7
d942ae11706c3f7e511e3c49b0e4574d7ad199c4
f7b9c3065e55fa3b9e320093612e7b30dcb14355a44ec461247b495a3e729686
GET /_next/static/media/revicons.e8746a624ed098489406e6113d185258.woff HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/_next/static/css/8e6c477525b7a21e2138.css
Cookie: cf_clearance=N3Egs7VJHWGq6gism9GrDTzXnV6BN.TxqPL.gEQVyUI-1695494920-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1695494920; dom3ic8zudi28v8lr6fgphwffqoz0j6c=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=ponderriding.com; sb_main_2ef41dd6bdb358bdf7d02bce45635537=1; sb_count_2ef41dd6bdb358bdf7d02bce45635537=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: application/font-woff
content-length: 7536
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
etag: "62a8b159-1d70"
expires: Sun, 08 Oct 2023 10:55:17 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 187313
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cTB5eD%2BpxRQxrFQf7L1ADtP%2FRBlFMNOPhVLJpizEawVK6XH8Q8unPLyi4h99W03uZf172kUwEuYuWNv2kNMdSa7JGAVD8S9LFo8RtOsi2WcZ7wVO32MHx8vo80hTtg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f69a3c2d56b5-OSL
alt-svc: h3=":443"; ma=86400
static.adxadserv.com/css/wm.css
200 OK 172 kB URL GET HTTP/2 static.adxadserv.com/css/wm.css
IP
ASN #60068 Datacamp Limited
Requested by https://ads.adxadserv.com/ad?spotid=60fa6cc461d6e22a417e5fc1&type=300x250&output=html&extra1=0&ref=https%3A//javflag.com/en/v/a8mPO&dt=1695494919778&screen=1280x1024&tags=
Certificate IssuerLet's Encrypt
Subject1585977359.rsc.cdn77.org
Fingerprint26:4A:39:EC:01:61:D6:23:44:7B:C3:D2:43:10:60:39:D9:E6:7B:CA
ValidityWed, 13 Sep 2023 18:58:11 GMT - Tue, 12 Dec 2023 18:58:10 GMT
File type gzip compressed data, from Unix\012- data
Size 172 kB (171704 bytes)
Hash 9dc87c8e62a009427a8d0588d77e822e
1e147402d29a29837e76f4f09274e7692aac2401
c94ed78eb57b080980d0efe415ffea9c369ede14334ee415c4f5e554672a5c47
GET /css/wm.css HTTP/1.1
Host: static.adxadserv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Mon, 03 Aug 2020 09:41:06 GMT
etag: W/"5f27dbb2-711"
server: CDN77-Turbo
x-77-nzt: AblMCQ0jOT7/I2YMAA
x-77-nzt-ray: c0a4cc2873e8d9b208330f653db60b00
x-accel-expires: @1695719141
x-accel-date: 1694682341
x-cache: HIT
x-age: 812579
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 812579
content-encoding: gzip
X-Firefox-Spdy: h2
javflag.com/_next/static/chunks/pages/search-b95157036ade5e0e9a5a.js
200 OK 3.3 kB URL GET HTTP/3 javflag.com/_next/static/chunks/pages/search-b95157036ade5e0e9a5a.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (8903), with no line terminators
Hash 516246dab89d0ca988983bac94c587f4
a7ee940ce36b8b75be7ed3f773cd30abbecfdf73
d5ceeda03165d045a4434eb4a2c0e4c2c92b297287054c957db9fa8195d5c98b
GET /_next/static/chunks/pages/search-b95157036ade5e0e9a5a.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Cookie: cf_clearance=pIdWu2gNLSLsWkFnSUzrTm1vEr4VsxQQiawFdEbLjUs-1695494916-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1695494916; dom3ic8zudi28v8lr6fgphwffqoz0j6c=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=ponderriding.com; sb_main_2ef41dd6bdb358bdf7d02bce45635537=1; sb_count_2ef41dd6bdb358bdf7d02bce45635537=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-22c7"
expires: Wed, 20 Sep 2023 13:20:58 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 356900
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B%2Bf9MbJ3lglokMTrrouLtI29%2B6CNVJ%2BT4T3tgwSfiPo4Ibr9%2FME4p3HE447Jx7%2B6T5srGffatskR5NWyfgnplPKdvutSUdqz0Bgu%2BT7qSlyMmoSqtIUM1097GS%2Bz5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6943d5256b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
img.strpst.com/thumbs/1695494850/122457947_webp
200 OK 9.7 kB URL GET HTTP/2 img.strpst.com/thumbs/1695494850/122457947_webp
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectimg.strpst.com
FingerprintED:62:74:FE:E4:F5:89:43:B3:49:55:FE:18:19:0D:29:24:96:75:BC
ValidityMon, 03 Apr 2023 00:00:00 GMT - Tue, 02 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash febb029c31647cf16b494f0e35d479bb
6ae122ae93b2924f10deb0489d19b5cb9f797180
ea8900a25a4a8735d79702fadf44f599b079cb1b45b7d1c60a1af14548ee813f
GET /thumbs/1695494850/122457947_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: image/webp
content-length: 9748
etag: "febb029c31647cf16b494f0e35d479bb"
last-modified: Sat, 23 Sep 2023 18:47:12 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 65
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f69bbe7256ab-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
go.xlrdr.com/abc.gif?sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&modelsLimit=1&actionButtonPlacement=bottom&thumbSizeKey=big&hideButtonOnSmallSpots=1&hideTitleOnSmallSpots=1&hideModelNameOnSmallSpots=1&buttonColor=%23DC0C2C&liveBadgeColor=%2300bd8f&language=en&thumbFit=cover&quality=original&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=1&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Fr.trackwilltrk.com%2F&i=0&ib=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A416%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A271%2C%22duration%22%3A29%2C%22transferSize%22%3A4625%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A272%2C%22duration%22%3A46%2C%22transferSize%22%3A80518%7D%5D&mh=-127218053
200 OK 103 B URL GET HTTP/3 go.xlrdr.com/abc.gif?sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&modelsLimit=1&actionButtonPlacement=bottom&thumbSizeKey=big&hideButtonOnSmallSpots=1&hideTitleOnSmallSpots=1&hideModelNameOnSmallSpots=1&buttonColor=%23DC0C2C&liveBadgeColor=%2300bd8f&language=en&thumbFit=cover&quality=original&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=1&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Fr.trackwilltrk.com%2F&i=0&ib=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A416%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A271%2C%22duration%22%3A29%2C%22transferSize%22%3A4625%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A272%2C%22duration%22%3A46%2C%22transferSize%22%3A80518%7D%5D&mh=-127218053
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectxlrdr.com
FingerprintB7:7A:2F:CD:F6:76:0D:74:98:F0:DA:47:69:84:7D:8C:4E:2C:2D:63
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash 8c99886486b9a004383cb4df29011c43
d79ca4754481fc59598bc08fcdf354900918bffe
bda00b0f6892b1c6991e793b42654ad1807694e2ffabcbc4eb1399379737ef6c
GET /abc.gif?sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&modelsLimit=1&actionButtonPlacement=bottom&thumbSizeKey=big&hideButtonOnSmallSpots=1&hideTitleOnSmallSpots=1&hideModelNameOnSmallSpots=1&buttonColor=%23DC0C2C&liveBadgeColor=%2300bd8f&language=en&thumbFit=cover&quality=original&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=1&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Fr.trackwilltrk.com%2F&i=0&ib=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A416%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A271%2C%22duration%22%3A29%2C%22transferSize%22%3A4625%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A272%2C%22duration%22%3A46%2C%22transferSize%22%3A80518%7D%5D&mh=-127218053 HTTP/1.1
Host: go.xlrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: image/gif
content-length: 103
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28upDCGznfDm9XVDxnWfPhahVbGaJT2QEdHaXufgx; SameSite=None; Secure; path=/; expires=Sun, 24-Sep-23 18:48:41 GMT; HttpOnly
server: cloudflare
cf-ray: 80b4f69b9e4db4fa-OSL
alt-svc: h3=":443"; ma=86400
panel.javflag.com/api/videos/qDVx9
200 OK 15 kB URL GET HTTP/2 panel.javflag.com/api/videos/qDVx9
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type JSON data\012- , ASCII text, with very long lines (12968), with no line terminators
Hash 7634fde843c4a4dfe8a4114d5ad81bf6
701a1da0aed33c32e94ca6a56b87ac93b708a683
91df5f6e283ab6b8a0d51e7f48f9d3e81315e2cae0c241450f96d370ce81a8cd
GET /api/videos/qDVx9 HTTP/1.1
Host: panel.javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 55
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X12Gv8OKe303zDVMIbrdAEK27SGaceumJbPTIUtn7RANbCk4B%2FHvGNbsjXBaLFeoVubq252y35NlcfpAp3FAoUwOoLILF3%2F8%2BEctOwUN%2FDXcHQYfoPiKLZezzAiKq%2BHXEY0RbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f693d98856a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
panel.javflag.com/api/videos/eKEdb
200 OK 11 kB URL GET HTTP/2 panel.javflag.com/api/videos/eKEdb
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash f213a83c43d4cf517a37e2a1210d62fa
0d2daea203199cf64908a9cf6a1610470bc03687
4fe55541fa6bc6b7666a29eb67480d3c3c2c46ed3878df0b28f88913630dd6f8
GET /api/videos/eKEdb HTTP/1.1
Host: panel.javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 51
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2psA8e%2B7etnJr8P1hpQmaJDq1%2FsHyYTdStK%2Fm3Rjo6enfhvK8x7ngO5cHsxctjlMhymjSGKg5PdUt9hq7gaRfFn8VkDQPLVHuHAAB86uF%2Ba5WYKTN323T7uEAYdPvqQ0ET4dgw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f693f99a56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
panel.javflag.com/api/videos/QVkKG
200 OK 16 kB URL GET HTTP/2 panel.javflag.com/api/videos/QVkKG
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type JSON data\012- , ASCII text, with very long lines (7436), with no line terminators
Hash c72f6001bb6e750ee30204d82dff1919
99d365761085a18d91029cc7a7367024bdd88724
f4e1fe5873324c9eec75c882e60e73b731f51b5b117d8a5355da9bd66f99b98a
GET /api/videos/QVkKG HTTP/1.1
Host: panel.javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 53
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CS2dXN0UXBftphPvkXszjFJ9nCYg6W6l3H6IAB1k6t2G5VnM7JhzBiRsI5gm6Gsrzg6rT68IrxE0maR3%2BB5r%2B3lfQqeKJFoAXwOyUgCIuFuBw%2FBF44xMXWeWKV4EBNkWN50bFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f693d96f56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
go.xhamsterlive.com/checkUrl
200 OK 15 B URL GET HTTP/2 go.xhamsterlive.com/checkUrl
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint96:3A:C0:13:A0:41:D1:27:EA:68:12:D3:99:23:71:C5:8E:E5:C9:44
ValidityWed, 03 May 2023 00:00:00 GMT - Thu, 02 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7fb97eb7c8636552ad068f6d56b5ea34
b69679936779fb02503bc0fe1374a737cc762ecb
e78008828abaa93c4462e326ef384dcda1443352a0f24bdeedada6a6fdbfd1d5
GET /checkUrl HTTP/1.1
Host: go.xhamsterlive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlrdr.com/
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: application/json
content-length: 15
access-control-allow-origin: https://creative.xlrdr.com
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28upDCGznfDm9XVE9SipefN9YVHPoXyPqGmqtiD24; SameSite=None; Secure; path=/; expires=Sun, 24-Sep-23 18:48:41 GMT; HttpOnly
_cfuvid=O0RKH5sfviXhhW2_7ua1PBLDqtvMlQLydb64GnLtN1M-1695494921789-0-604800000; path=/; domain=.xhamsterlive.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 80b4f69cf98f56aa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
c0.jdbstatic.com/thumbs/zn/znwE.jpg
200 OK 12 kB URL GET HTTP/2 c0.jdbstatic.com/thumbs/zn/znwE.jpg
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjdbstatic.com
FingerprintF0:F4:F0:50:7D:E0:86:0A:08:F4:67:D2:A5:8B:92:AE:16:A4:66:7A
ValidityTue, 15 Aug 2023 11:23:30 GMT - Mon, 13 Nov 2023 11:23:29 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 147x200, components 3\012- data
Hash 5e8be601ae6d922483994023e69336a2
66586c5f47afc44b124f006dba0b68e0e6e78528
2442d3934b48e36dc479a09376ec889e5976d765150805407d23ebca49540b6d
GET /thumbs/zn/znwE.jpg HTTP/1.1
Host: c0.jdbstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: image/jpeg
content-length: 12326
last-modified: Sun, 08 May 2022 15:51:17 GMT
etag: "5e8be601ae6d922483994023e69336a2"
x-amz-meta-mtime: 1559275682
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oiIe00pocfVlaCvN7ohWWyBCFD9hII6ugvplolySx1MNHo7T9PjK1xaN0iFQOvwHdYnTbeIErA9uUrmw1mSH5hLWgILfQmhjnIE5y5vJBnOvO90afzk5tHYZS63kR8KQMMdc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b4f6986bf856a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
c0.jdbstatic.com/thumbs/nw/NwEvr.jpg
200 OK 8.9 kB URL GET HTTP/2 c0.jdbstatic.com/thumbs/nw/NwEvr.jpg
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjdbstatic.com
FingerprintF0:F4:F0:50:7D:E0:86:0A:08:F4:67:D2:A5:8B:92:AE:16:A4:66:7A
ValidityTue, 15 Aug 2023 11:23:30 GMT - Mon, 13 Nov 2023 11:23:29 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 147x200, components 3\012- data
Hash 3cf936eed5ca48f0d5cb53eeb015048d
6dd84a8bb5e8b77edd7db34157920ea8065bc933
fffc8ff123fb7a2e9e36238dea3e6895a69041f6009b61df97831ee26939b4d7
GET /thumbs/nw/NwEvr.jpg HTTP/1.1
Host: c0.jdbstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: image/jpeg
content-length: 8874
last-modified: Sun, 08 May 2022 15:28:35 GMT
etag: "3cf936eed5ca48f0d5cb53eeb015048d"
x-amz-meta-mtime: 1559228340
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L2vaHWY%2BMZarZwrP4OmLcyy1qzPqGwW6AZscSPRjllJfALqI4EYlBmO1jUyzkViNbqx0hFo0FgP%2BC6xpKddbQWCNKl7dk3V096bX2fuqauipBoK9SLgUfOY%2Fq3tR3FkdzcUL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b4f6986bf556a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
c0.jdbstatic.com/thumbs/qd/qDVx9.jpg
200 OK 15 kB URL GET HTTP/2 c0.jdbstatic.com/thumbs/qd/qDVx9.jpg
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjdbstatic.com
FingerprintF0:F4:F0:50:7D:E0:86:0A:08:F4:67:D2:A5:8B:92:AE:16:A4:66:7A
ValidityTue, 15 Aug 2023 11:23:30 GMT - Mon, 13 Nov 2023 11:23:29 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 147x200, components 3\012- data
Hash a08c354b936b11724baeb68350298c61
50569e463cbd647b829b81559debcac804c9cee2
4f0f688cdfcb652ad16a4233dcc2d288d3ed1cef9066cdc39de8e76f28a3088f
GET /thumbs/qd/qDVx9.jpg HTTP/1.1
Host: c0.jdbstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: image/jpeg
content-length: 14979
last-modified: Sun, 08 May 2022 15:34:12 GMT
etag: "a08c354b936b11724baeb68350298c61"
x-amz-meta-mtime: 1559188227
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xaGEI43JCX7pvt9QpFgRE6qzyTAtwyaRhBqHrCy%2B4YayO8xwvR%2Bnaw33mnsoa0UMiPso5OnQ4YvzF1SwKyxiZl6ucACA6G%2FVvAK8wuE3yBduIGqJHNArxuq923t2nQjsqs6G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b4f698bc4a56a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
c0.jdbstatic.com/thumbs/ek/eKEdb.jpg
200 OK 15 kB URL GET HTTP/2 c0.jdbstatic.com/thumbs/ek/eKEdb.jpg
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjdbstatic.com
FingerprintF0:F4:F0:50:7D:E0:86:0A:08:F4:67:D2:A5:8B:92:AE:16:A4:66:7A
ValidityTue, 15 Aug 2023 11:23:30 GMT - Mon, 13 Nov 2023 11:23:29 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 147x200, components 3\012- data
Hash 21935d0ffa563fb65f7e80a33acf61ee
5f4f0a6137e2ac2c8ce2269a042c2c56dc3885d6
97f8ecd41b419044b68bb907f5f1549c6759cc172804de96825e23eecd397f97
GET /thumbs/ek/eKEdb.jpg HTTP/1.1
Host: c0.jdbstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: image/jpeg
content-length: 15254
last-modified: Sun, 08 May 2022 15:15:19 GMT
etag: "21935d0ffa563fb65f7e80a33acf61ee"
x-amz-meta-mtime: 1559252959
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sF5bMllIYHF94ordSQ19omB3HJ1aedYS8gAzNlN8b61iF2%2F94gNMTJ%2BTJV5SlOs6CVvM6rw3xRpTDyz0KXK%2BSnO47FDxobmAzLIhhtJLoiAXQ0w7v7KaNpaYTE%2B5TJc9qpWW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b4f698bc5156a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
go.xlrdr.com/checkDomainResult
204 No Content 0 B URL POST HTTP/3 go.xlrdr.com/checkDomainResult
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectxlrdr.com
FingerprintB7:7A:2F:CD:F6:76:0D:74:98:F0:DA:47:69:84:7D:8C:4E:2C:2D:63
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /checkDomainResult HTTP/1.1
Host: go.xlrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlrdr.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 172
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Sat, 23 Sep 2023 18:48:41 GMT
access-control-allow-origin: https://creative.xlrdr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=04dToPfSdwpmYL4m1jLmKA6zXQ14ZyXggDsqA7FVyv; SameSite=None; Secure; path=/; expires=Sun, 24-Sep-23 18:48:41 GMT; HttpOnly
server: cloudflare
cf-ray: 80b4f69df81fb4fa-OSL
alt-svc: h3=":443"; ma=86400
c0.jdbstatic.com/thumbs/me/me8d5.jpg
200 OK 32 kB URL GET HTTP/2 c0.jdbstatic.com/thumbs/me/me8d5.jpg
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjdbstatic.com
FingerprintF0:F4:F0:50:7D:E0:86:0A:08:F4:67:D2:A5:8B:92:AE:16:A4:66:7A
ValidityTue, 15 Aug 2023 11:23:30 GMT - Mon, 13 Nov 2023 11:23:29 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x200, components 3\012- data
Hash 0bcaf3284cad9e17bb205973e0a76758
38cabc00556e99a6a46ace2ec4b48dfe6ed71685
de7bbad7ecbaeef8cb78474bfeed79d02a85cf8f55f2e671095a290d7032b70f
GET /thumbs/me/me8d5.jpg HTTP/1.1
Host: c0.jdbstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: image/jpeg
content-length: 31690
last-modified: Sun, 08 May 2022 15:24:30 GMT
etag: "0bcaf3284cad9e17bb205973e0a76758"
x-amz-meta-mtime: 1559147347
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ywSER9OxDsV17exWW9w1Sv61VqHWHk1XWbDiUPAUCbncs8xKOUvKIUuydd6rTjtZ3XZJ%2F8vFHQTvvjEhAJuDhDcEm9X67LjdPUX3zqPVreO6cT%2FX43lNDj8ZuwqK48H4ucWN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b4f6986bf656a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
c0.jdbstatic.com/thumbs/78/78W4.jpg
200 OK 15 kB URL GET HTTP/3 c0.jdbstatic.com/thumbs/78/78W4.jpg
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjdbstatic.com
FingerprintF0:F4:F0:50:7D:E0:86:0A:08:F4:67:D2:A5:8B:92:AE:16:A4:66:7A
ValidityTue, 15 Aug 2023 11:23:30 GMT - Mon, 13 Nov 2023 11:23:29 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 147x200, components 3\012- data
Hash 3d477c7ab4a2cf2b464ce5b01b944f11
3da9130014b001d922da08400ff21c064f3dbe0a
b476f802108ca7fa87af83114083991fb8f4e352e4b8dea88c1656fa99212fc4
GET /thumbs/78/78W4.jpg HTTP/1.1
Host: c0.jdbstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: image/jpeg
content-length: 14707
last-modified: Sun, 08 May 2022 15:01:46 GMT
etag: "3d477c7ab4a2cf2b464ce5b01b944f11"
x-amz-meta-mtime: 1559374237
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S%2BFVar0awnJtwPq0EldPJE8L%2FWTgZ7rLmvQTDLu3x6cVRbOyIuBjRdOSWIJrWJcx4w8gUGPtTF43rymT0iGh7e71CoJfcD4KaQ2NTk3ponxeMhfLLGr5EltnivFE1g7E%2BDPw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b4f699daad5694-OSL
alt-svc: h3=":443"; ma=86400
imaginestandingharvest.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F24%2F54%2F4e%2F24544ed07f7394384bbb75023b9b0b3a%2F1591713925.html&l=1274&fd=612
200 OK 0 B URL GET HTTP/1.1 imaginestandingharvest.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F24%2F54%2F4e%2F24544ed07f7394384bbb75023b9b0b3a%2F1591713925.html&l=1274&fd=612
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectimaginestandingharvest.com
FingerprintB1:F0:19:A8:92:1B:50:8F:02:7A:0A:34:5C:99:1D:B9:79:D9:89:54
ValiditySat, 16 Sep 2023 03:11:21 GMT - Fri, 15 Dec 2023 03:11:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F24%2F54%2F4e%2F24544ed07f7394384bbb75023b9b0b3a%2F1591713925.html&l=1274&fd=612 HTTP/1.1
Host: imaginestandingharvest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Cookie: u_pl=16353405; uid_id2=f466fc22-1b51-4663-81da-7ecda77a6b48:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2ef41dd6bdb358bdf7d02bce45635537=[4376831]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 23 Sep 2023 18:48:41 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.cloudimagesb.com/si/05/c8/20/05c820d9ce67af6dea2e5441dbe3e8f9/1683231080.png
200 OK 39 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/05/c8/20/05c820d9ce67af6dea2e5441dbe3e8f9/1683231080.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
FingerprintAA:0D:43:1A:D3:E4:C6:42:86:E6:B6:6B:B0:1E:22:41:C9:F8:8C:A9
ValidityThu, 27 Jul 2023 23:07:11 GMT - Wed, 25 Oct 2023 23:07:10 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 6451b63b68b5068db02571051f6f6a30
32badef5d69090b4d2ea7b300bb5264938e198ef
b1b0a314a2d4924b2849fec48b7863ccc68413e58330d99f6ad901bfa6282819
GET /si/05/c8/20/05c820d9ce67af6dea2e5441dbe3e8f9/1683231080.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:42 GMT
content-type: image/png
content-length: 39220
server: nginx/1.21.6
last-modified: Thu, 04 May 2023 20:11:29 GMT
etag: "64541171-9934"
expires: Mon, 25 Sep 2023 18:48:42 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
c0.jdbstatic.com/thumbs/pr/Pr3N.jpg
200 OK 22 kB URL GET HTTP/2 c0.jdbstatic.com/thumbs/pr/Pr3N.jpg
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjdbstatic.com
FingerprintF0:F4:F0:50:7D:E0:86:0A:08:F4:67:D2:A5:8B:92:AE:16:A4:66:7A
ValidityTue, 15 Aug 2023 11:23:30 GMT - Mon, 13 Nov 2023 11:23:29 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 147x200, components 3\012- data
Hash 573cc2a3a0248a4a090d9384389c5161
f77c51b356862a6fed8ac4b4093781a17c1e0606
c3a977d63ff08fe7c3b88b10e6d805c0b9ca0caf5296bb0f8e153f41b9eb3154
GET /thumbs/pr/Pr3N.jpg HTTP/1.1
Host: c0.jdbstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:42 GMT
content-type: image/jpeg
content-length: 21704
last-modified: Sun, 08 May 2022 15:32:11 GMT
etag: "573cc2a3a0248a4a090d9384389c5161"
x-amz-meta-mtime: 1559328322
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hgsvGmzbYsJ1mhIWhFbcREPz1Rg5VoguzYjGKZ9W8%2BBDVzX0zmVwQkCu2Gpam6mVvHIHVzim%2FbeQj%2FIi73k6AselufEWOfU47PVX6rypHcIGBvUm3e%2FMsLlSn03%2FTrpbwHqL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b4f698cc6956a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/b3/dd/fd/b3ddfd7cf6f212b3bce3129fb7a007fc/1683231156.png
200 OK 65 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/b3/dd/fd/b3ddfd7cf6f212b3bce3129fb7a007fc/1683231156.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
FingerprintAA:0D:43:1A:D3:E4:C6:42:86:E6:B6:6B:B0:1E:22:41:C9:F8:8C:A9
ValidityThu, 27 Jul 2023 23:07:11 GMT - Wed, 25 Oct 2023 23:07:10 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 887812a53b8ea2dbad33f6ae105b8c2d
f83d97ef46827200fa62093ed09b4b6fa25b26d8
9443edf293511b0732211234002c799508a2bfc63a3e28a57d7b12ee30f277e9
GET /si/b3/dd/fd/b3ddfd7cf6f212b3bce3129fb7a007fc/1683231156.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:42 GMT
content-type: image/png
content-length: 64601
server: nginx/1.21.6
last-modified: Thu, 04 May 2023 20:12:45 GMT
etag: "645411bd-fc59"
expires: Mon, 25 Sep 2023 18:48:42 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
c0.jdbstatic.com/thumbs/3p/3Prz.jpg
200 OK 13 kB URL GET HTTP/3 c0.jdbstatic.com/thumbs/3p/3Prz.jpg
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjdbstatic.com
FingerprintF0:F4:F0:50:7D:E0:86:0A:08:F4:67:D2:A5:8B:92:AE:16:A4:66:7A
ValidityTue, 15 Aug 2023 11:23:30 GMT - Mon, 13 Nov 2023 11:23:29 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 147x200, components 3\012- data
Hash 7db7073e50c91017500881a32e98f4fc
6bbf3594d24a40b2550cbf8559e27a4f09aaddc1
03f1196b8fa47c066186a193adc4dc27288e8caf2dca472e4b8956efd03b4df1
GET /thumbs/3p/3Prz.jpg HTTP/1.1
Host: c0.jdbstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:42 GMT
content-type: image/jpeg
content-length: 12995
last-modified: Sun, 08 May 2022 14:57:13 GMT
etag: "7db7073e50c91017500881a32e98f4fc"
x-amz-meta-mtime: 1559301830
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vgFWFOOwOx86MdC3w0Mo9i%2F%2FicRnT0kFtEr5upBq9%2FHsKKlcGxlMjqdg%2FRhnRj6k1HnUvNP95mPkl81InerOy3WKtouCeG%2FxyreUhwDMJfjbr3aT6i9STkPHcH9RUeHGQZ%2F8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b4f69a1adc5694-OSL
alt-svc: h3=":443"; ma=86400
b-hls-24.doppiocdn.com/hls/122457947/122457947_480p_init_zYenpsww4LzKBmhW.mp4
200 OK 1.2 kB URL GET HTTP/2 b-hls-24.doppiocdn.com/hls/122457947/122457947_480p_init_zYenpsww4LzKBmhW.mp4
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type ISO Media, MP4 Base Media v5 \012- data
Hash c88ea22e566a5fe8b7429e1554d4870f
7b406c6af960035b1bd40f30bb140dfa9653409c
f5aeda6883991e46d812c1ffc23796c3dd3dbd2e05791ec83f26b31a36182536
GET /hls/122457947/122457947_480p_init_zYenpsww4LzKBmhW.mp4 HTTP/1.1
Host: b-hls-24.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:42 GMT
content-type: video/mp4
content-length: 1217
last-modified: Sat, 23 Sep 2023 18:38:09 GMT
etag: "650f3091-4c1"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 5
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f69efacb56a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
javflag.com/_next/static/chunks/403-44dc8afa31e4922c0b7f.js
200 OK 23 kB URL GET HTTP/3 javflag.com/_next/static/chunks/403-44dc8afa31e4922c0b7f.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (30945), with no line terminators
Hash fd46ba7b440692ce7678f3be4b77a3e1
67b56f4f32b378c71aabc1d04bab71909fc4a3a1
47a3d470519ca50c438a5fcc158ca717122b5b7cdd66380f7281107924cf214a
GET /_next/static/chunks/403-44dc8afa31e4922c0b7f.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-78e1"
expires: Wed, 04 Oct 2023 06:19:49 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 831724
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FC9AEUEYZqECWNvN5oYpQcQs5jKoeuaBWYXyn43XL1odeF5auUjxXyL3V%2FDsIajeuKPQ3L5f8gO%2B%2BdqaP2wMSiH%2FwdjG1a0FPC7mpCJ%2FGpRopfW1kqogOfzHEiNlMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6763f6856b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
b-hls-24.doppiocdn.com/hls/122457947/122457947_480p_311_YnWP4tu9g77vB6CL_1695494913.mp4
200 OK 324 kB URL GET HTTP/2 b-hls-24.doppiocdn.com/hls/122457947/122457947_480p_311_YnWP4tu9g77vB6CL_1695494913.mp4
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
Size 324 kB (324227 bytes)
Hash f99b4211be799d554ac5e7ea2b802738
a894eafd1c908f3e0fc959fe8115094432eda4a0
d5fa83ac2d0e2929cd1fe6d3be60e84505b7714e621620c10ae21042db6bb2ce
GET /hls/122457947/122457947_480p_311_YnWP4tu9g77vB6CL_1695494913.mp4 HTTP/1.1
Host: b-hls-24.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:42 GMT
content-type: video/mp4
content-length: 324227
last-modified: Sat, 23 Sep 2023 18:48:35 GMT
etag: "650f3303-4f283"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 5
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f69f2afc56a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/img/close.png
200 OK 4.0 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/img/close.png
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint48:B7:50:3B:95:5B:52:CB:74:D5:D6:39:E2:DD:12:9D:05:51:D6:87
ValidityWed, 23 Aug 2023 16:10:20 GMT - Tue, 21 Nov 2023 16:10:19 GMT
File type PNG image data, 500 x 500, 8-bit gray+alpha, non-interlaced\012- data
Hash 23e9690b0e7ac26868363a6248f44467
d7ad0eae64e0c1e65b12eda0aa9d2b91996dd64f
f362c67320d739ccf3bea21f857b9620075bd20ceacda8c51261b9612fe28395
GET /sb/notifications/dating/default/us/desk-all/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:42 GMT
content-type: image/png
content-length: 4022
last-modified: Tue, 14 Apr 2020 14:09:22 GMT
etag: "5e95c412-fb6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 25277170
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RzXSmYbQ39gT5Hu4hXxo0WfsJNRDYpgWezMlJmC14LdoQGRSYkfqiJxa4dVq2MsD%2BGVJpWJ0rDbhEYi1Xl3Ugs80t405bwqHe6o3SUlqEw3g7yrSyfHn6OtmRpiEppvkX7c5BZW1uqSi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f69f2e2b23d1-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
c0.jdbstatic.com/thumbs/rd/Rdbr4.jpg
200 OK 18 kB URL GET HTTP/3 c0.jdbstatic.com/thumbs/rd/Rdbr4.jpg
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjdbstatic.com
FingerprintF0:F4:F0:50:7D:E0:86:0A:08:F4:67:D2:A5:8B:92:AE:16:A4:66:7A
ValidityTue, 15 Aug 2023 11:23:30 GMT - Mon, 13 Nov 2023 11:23:29 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 147x200, components 3\012- data
Hash 14004e739395a6829c4518ce2445b3f0
9a854942f1601b02b2d89fa224d0523d079fd9e5
5aa05a7a2a6d16badccea10c59365d1a02de88df7a94dd271aae7e175d1347cf
GET /thumbs/rd/Rdbr4.jpg HTTP/1.1
Host: c0.jdbstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:42 GMT
content-type: image/jpeg
content-length: 17860
last-modified: Sun, 08 May 2022 15:37:24 GMT
etag: "14004e739395a6829c4518ce2445b3f0"
x-amz-meta-mtime: 1559219351
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5KWYozDy98HEgl1K%2FJHT1IGkEi6txatn8gv2g2FV2p1N1sZelj0aUmGcmr1tMyObDwAQzi9vx%2FnKSfrzGM1IVee95%2BPUWkKfeUr4YepqtaMNAKofzbdOavDk6fbZymi3ukOw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b4f69a2ae35694-OSL
alt-svc: h3=":443"; ma=86400
panel.javflag.com/api/videos/78W4
200 OK 20 kB URL GET HTTP/2 panel.javflag.com/api/videos/78W4
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash f213a83c43d4cf517a37e2a1210d62fa
0d2daea203199cf64908a9cf6a1610470bc03687
4fe55541fa6bc6b7666a29eb67480d3c3c2c46ed3878df0b28f88913630dd6f8
GET /api/videos/78W4 HTTP/1.1
Host: panel.javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 59
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vhiorJ44ssvyNbkqW9pbgn6eRW8GPdk0wRHCwm1xbIMhmtyQAqt6coNesyVUjZbX0K3X9TDhkDPlY0uBHSnz9p4Ol2vKT2nr4BualTHASLO430%2B6636DgF7uPEK%2Fy7eJUjJV3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f693c96c56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
b-hls-24.doppiocdn.com/hls/122457947/122457947_480p_312_0B9fB0s7L8EhmpwC_1695494915.mp4
200 OK 314 kB URL GET HTTP/3 b-hls-24.doppiocdn.com/hls/122457947/122457947_480p_312_0B9fB0s7L8EhmpwC_1695494915.mp4
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
Size 314 kB (314454 bytes)
Hash cae369b4c083f8166bd501eb276efb69
2625809ccfb7d1ffdbe8cd8de0bb21594d28a28d
1f616ce9e2eaad77a86737fd4b780a817ffd109c89ae689362ddd0e34dbee320
GET /hls/122457947/122457947_480p_312_0B9fB0s7L8EhmpwC_1695494915.mp4 HTTP/1.1
Host: b-hls-24.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:42 GMT
content-type: video/mp4
content-length: 314454
last-modified: Sat, 23 Sep 2023 18:48:37 GMT
etag: "650f3305-4cc56"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 3
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f69ffc3a568a-OSL
alt-svc: h3=":443"; ma=86400
imaginestandingharvest.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fjs%2Fscript.js&l=386&fd=425
200 OK 0 B URL GET HTTP/1.1 imaginestandingharvest.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fjs%2Fscript.js&l=386&fd=425
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectimaginestandingharvest.com
FingerprintB1:F0:19:A8:92:1B:50:8F:02:7A:0A:34:5C:99:1D:B9:79:D9:89:54
ValiditySat, 16 Sep 2023 03:11:21 GMT - Fri, 15 Dec 2023 03:11:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fjs%2Fscript.js&l=386&fd=425 HTTP/1.1
Host: imaginestandingharvest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Cookie: u_pl=16353405; uid_id2=f466fc22-1b51-4663-81da-7ecda77a6b48:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2ef41dd6bdb358bdf7d02bce45635537=[4376831]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 23 Sep 2023 18:48:42 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
imaginestandingharvest.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fanimate.css&l=79245&fd=463
200 OK 0 B URL GET HTTP/1.1 imaginestandingharvest.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fanimate.css&l=79245&fd=463
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectimaginestandingharvest.com
FingerprintB1:F0:19:A8:92:1B:50:8F:02:7A:0A:34:5C:99:1D:B9:79:D9:89:54
ValiditySat, 16 Sep 2023 03:11:21 GMT - Fri, 15 Dec 2023 03:11:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fanimate.css&l=79245&fd=463 HTTP/1.1
Host: imaginestandingharvest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Cookie: u_pl=16353405; uid_id2=f466fc22-1b51-4663-81da-7ecda77a6b48:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2ef41dd6bdb358bdf7d02bce45635537=[4376831]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 23 Sep 2023 18:48:42 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/css/style.css
200 OK 1.5 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/css/style.css
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint48:B7:50:3B:95:5B:52:CB:74:D5:D6:39:E2:DD:12:9D:05:51:D6:87
ValidityWed, 23 Aug 2023 16:10:20 GMT - Tue, 21 Nov 2023 16:10:19 GMT
Hash ff9ebedb55b053ebd14efcce6b3917e0
9b306adb30092f39235392926189c4a1e3816bfa
ffcde61128702ad9b659eaf18c732dafc248344c80260cee28f49f300521a2ed
GET /sb/notifications/dating/default/us/desk-all/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:42 GMT
content-type: text/css
last-modified: Fri, 27 Aug 2021 11:38:00 GMT
etag: W/"6128ce98-169c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T8nzHY3eJFkGjFi%2BatNNtkgS5PkUpoyVYMlMPwp%2FakutZtemlyzyXH30yqIx4u0OBapE6etEGXw398AoQXr3HDhb47pZ%2B0zL60tutB%2Fn1x7m%2BriFNPADT0uiBZ7yDnPsRISLDxi0sLVs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f69effa9776e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 10:05:24 GMT
expires: Sat, 21 Sep 2024 10:05:24 GMT
cache-control: public, max-age=31536000
age: 117798
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 04:50:55 GMT
expires: Fri, 20 Sep 2024 04:50:55 GMT
cache-control: public, max-age=31536000
age: 223067
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
imaginestandingharvest.com/pixel/sbs?c=1
200 OK 0 B URL GET HTTP/1.1 imaginestandingharvest.com/pixel/sbs?c=1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectimaginestandingharvest.com
FingerprintB1:F0:19:A8:92:1B:50:8F:02:7A:0A:34:5C:99:1D:B9:79:D9:89:54
ValiditySat, 16 Sep 2023 03:11:21 GMT - Fri, 15 Dec 2023 03:11:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbs?c=1 HTTP/1.1
Host: imaginestandingharvest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Cookie: u_pl=16353405; uid_id2=f466fc22-1b51-4663-81da-7ecda77a6b48:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2ef41dd6bdb358bdf7d02bce45635537=[4376831]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 18:48:42 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
imaginestandingharvest.com/impr.gif?sid=H4sIAAAAAAAC%2F1RST4scRRytTvYg5mAigngQ5pCDgjvb3dPzZ80huMaR4OaPiWJuUv96Utnqrraqe3qyIKwGZI%2FjN%2Bh9k03QhKAfQNFZD8pCMB0Q9uAigl9AIeBBlJldXP1B8XtV7xW836v6ZKvYJz4Kute%2FYNaV1nSp3fQbL10LgjONVZUWo8ao13m%2FE51p2OGrgb%2Fc9F9uvCn5mlkK%2FcD3Az9o9JWVsRktBUHQ9KGy%2B8tBc9lvRmEzaEcY2f%2FvXeHBUQ9iuE%2BehRL10%2FcfRFB8ijT54px0a7nJXnkjKTTNjcVQ3H03XUtNmSI5grH1EKd3D9Uw7lH%2Fa5h0e24YZvivkKmaeL%2F9CpbePXQJNtw%2BMMo0ZAomTqAcTiH1FIpOwc0tKPGIAFzg4iWkyZ2Lxpb05gFLZ2xNFp78AVXWZOHn55AmD1a0GjWuGl3kyqQOo7iCGk2hBlNkxQ7y9WNQ5Q54%2FjGUeEiWnqwiTW5fctpAib3TcdTpxDwMFwPWDhajTqe12AsEXexKLmi3Szss6s0TUmoKFU%2Bh5RjUeShmS3koYg9F5iERe40uj3o90WsLKjkPWRz04iiOlin3Y%2B63lkMUfDbDGHk2BtdjcLuBzG5gTY1hi2%2Fgrldw4hhcXhPv7Q0MRYVSEpSOoKQEpSIoc4JyWG0L7UJX3RHaFSw47OFhb1UTkw%2B26LbJBzIlW9k%2BOTUP78%2FND7Em9xqhjKNAiA4TrNXuMRF3hR8yLqN2p9Vut7pwqoJyx%2BajrquaPN%2F%2FCJmqycLmYzC6A6d3wNVJ0OJF0HLSDX3Q65Oo52M9vXeDDmNNB01uEghTIcsXkN%2F0tvQ%2BeWFuY%2BX7vyH57tkfybzAbYXMVrihviMY6M3JFVOS21dM6ciXl7JcJWqdzt73ak5zefzzt%2BTN0lhx%2Fpwbf%2FYanxEzeP8d6fJVmgqVDhy5t6KEkLZvLJfkq%2FPuPckuF%2B76SmHTIlu9%2FHr%2FfJJZ6Zwy6RRU1YRMPwBXNTnx18P53z3907dQdgpbVEiKXXJYUGYHPNuAy478O0Ng9ZGGZR7KoprYkB0dalWT5qlfoOXu2R%2BunWQX6t9BWQUn%2F3PxCG%2B5TQysB5rfQppUGNoKQ12B6jFccXySZ3b37OPWvMC0N2HaereZtvrTg4Cd2mtw7ksasG4gpZDtFudRh%2FdYJ25FXdlrizZyV8tnWk%2F9AwAA%2F%2F8BAAD%2F%2FxCt9%2F2MBAAA
200 OK 7 B URL GET HTTP/1.1 imaginestandingharvest.com/impr.gif?sid=H4sIAAAAAAAC%2F1RST4scRRytTvYg5mAigngQ5pCDgjvb3dPzZ80huMaR4OaPiWJuUv96Utnqrraqe3qyIKwGZI%2FjN%2Bh9k03QhKAfQNFZD8pCMB0Q9uAigl9AIeBBlJldXP1B8XtV7xW836v6ZKvYJz4Kute%2FYNaV1nSp3fQbL10LgjONVZUWo8ao13m%2FE51p2OGrgb%2Fc9F9uvCn5mlkK%2FcD3Az9o9JWVsRktBUHQ9KGy%2B8tBc9lvRmEzaEcY2f%2FvXeHBUQ9iuE%2BehRL10%2FcfRFB8ijT54px0a7nJXnkjKTTNjcVQ3H03XUtNmSI5grH1EKd3D9Uw7lH%2Fa5h0e24YZvivkKmaeL%2F9CpbePXQJNtw%2BMMo0ZAomTqAcTiH1FIpOwc0tKPGIAFzg4iWkyZ2Lxpb05gFLZ2xNFp78AVXWZOHn55AmD1a0GjWuGl3kyqQOo7iCGk2hBlNkxQ7y9WNQ5Q54%2FjGUeEiWnqwiTW5fctpAib3TcdTpxDwMFwPWDhajTqe12AsEXexKLmi3Szss6s0TUmoKFU%2Bh5RjUeShmS3koYg9F5iERe40uj3o90WsLKjkPWRz04iiOlin3Y%2B63lkMUfDbDGHk2BtdjcLuBzG5gTY1hi2%2Fgrldw4hhcXhPv7Q0MRYVSEpSOoKQEpSIoc4JyWG0L7UJX3RHaFSw47OFhb1UTkw%2B26LbJBzIlW9k%2BOTUP78%2FND7Em9xqhjKNAiA4TrNXuMRF3hR8yLqN2p9Vut7pwqoJyx%2BajrquaPN%2F%2FCJmqycLmYzC6A6d3wNVJ0OJF0HLSDX3Q65Oo52M9vXeDDmNNB01uEghTIcsXkN%2F0tvQ%2BeWFuY%2BX7vyH57tkfybzAbYXMVrihviMY6M3JFVOS21dM6ciXl7JcJWqdzt73ak5zefzzt%2BTN0lhx%2Fpwbf%2FYanxEzeP8d6fJVmgqVDhy5t6KEkLZvLJfkq%2FPuPckuF%2B76SmHTIlu9%2FHr%2FfJJZ6Zwy6RRU1YRMPwBXNTnx18P53z3907dQdgpbVEiKXXJYUGYHPNuAy478O0Ng9ZGGZR7KoprYkB0dalWT5qlfoOXu2R%2BunWQX6t9BWQUn%2F3PxCG%2B5TQysB5rfQppUGNoKQ12B6jFccXySZ3b37OPWvMC0N2HaereZtvrTg4Cd2mtw7ksasG4gpZDtFudRh%2FdYJ25FXdlrizZyV8tnWk%2F9AwAA%2F%2F8BAAD%2F%2FxCt9%2F2MBAAA
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectimaginestandingharvest.com
FingerprintB1:F0:19:A8:92:1B:50:8F:02:7A:0A:34:5C:99:1D:B9:79:D9:89:54
ValiditySat, 16 Sep 2023 03:11:21 GMT - Fri, 15 Dec 2023 03:11:20 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RST4scRRytTvYg5mAigngQ5pCDgjvb3dPzZ80huMaR4OaPiWJuUv96Utnqrraqe3qyIKwGZI%2FjN%2Bh9k03QhKAfQNFZD8pCMB0Q9uAigl9AIeBBlJldXP1B8XtV7xW836v6ZKvYJz4Kute%2FYNaV1nSp3fQbL10LgjONVZUWo8ao13m%2FE51p2OGrgb%2Fc9F9uvCn5mlkK%2FcD3Az9o9JWVsRktBUHQ9KGy%2B8tBc9lvRmEzaEcY2f%2FvXeHBUQ9iuE%2BehRL10%2FcfRFB8ijT54px0a7nJXnkjKTTNjcVQ3H03XUtNmSI5grH1EKd3D9Uw7lH%2Fa5h0e24YZvivkKmaeL%2F9CpbePXQJNtw%2BMMo0ZAomTqAcTiH1FIpOwc0tKPGIAFzg4iWkyZ2Lxpb05gFLZ2xNFp78AVXWZOHn55AmD1a0GjWuGl3kyqQOo7iCGk2hBlNkxQ7y9WNQ5Q54%2FjGUeEiWnqwiTW5fctpAib3TcdTpxDwMFwPWDhajTqe12AsEXexKLmi3Szss6s0TUmoKFU%2Bh5RjUeShmS3koYg9F5iERe40uj3o90WsLKjkPWRz04iiOlin3Y%2B63lkMUfDbDGHk2BtdjcLuBzG5gTY1hi2%2Fgrldw4hhcXhPv7Q0MRYVSEpSOoKQEpSIoc4JyWG0L7UJX3RHaFSw47OFhb1UTkw%2B26LbJBzIlW9k%2BOTUP78%2FND7Em9xqhjKNAiA4TrNXuMRF3hR8yLqN2p9Vut7pwqoJyx%2BajrquaPN%2F%2FCJmqycLmYzC6A6d3wNVJ0OJF0HLSDX3Q65Oo52M9vXeDDmNNB01uEghTIcsXkN%2F0tvQ%2BeWFuY%2BX7vyH57tkfybzAbYXMVrihviMY6M3JFVOS21dM6ciXl7JcJWqdzt73ak5zefzzt%2BTN0lhx%2Fpwbf%2FYanxEzeP8d6fJVmgqVDhy5t6KEkLZvLJfkq%2FPuPckuF%2B76SmHTIlu9%2FHr%2FfJJZ6Zwy6RRU1YRMPwBXNTnx18P53z3907dQdgpbVEiKXXJYUGYHPNuAy478O0Ng9ZGGZR7KoprYkB0dalWT5qlfoOXu2R%2BunWQX6t9BWQUn%2F3PxCG%2B5TQysB5rfQppUGNoKQ12B6jFccXySZ3b37OPWvMC0N2HaereZtvrTg4Cd2mtw7ksasG4gpZDtFudRh%2FdYJ25FXdlrizZyV8tnWk%2F9AwAA%2F%2F8BAAD%2F%2FxCt9%2F2MBAAA HTTP/1.1
Host: imaginestandingharvest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Cookie: u_pl=16353405; uid_id2=f466fc22-1b51-4663-81da-7ecda77a6b48:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2ef41dd6bdb358bdf7d02bce45635537=[4376831]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 23 Sep 2023 18:48:42 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6799da310cd57b218fa0a19983dfe6d6
Strict-Transport-Security: max-age=0; includeSubdomains
adxadserv.com/px/heartbeat/v1?pv_uid=b696cb2a-0c1a-4855-82d1-6bdff980e60a&t_op=5.514&p_nn=adxad-rtb&fpid_sa=1695494920428&fpid=a3cc1d999abb8e6c9780f25bb2ddb94d&feid_sa=1695494920428&sid_sa=1695494920428&feid=5158ef1690f6fe7e12955e4f26cd0340&sid=791f0fcddc6420b1076f75f9c19a24a6&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=javflag.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=0&lb=0&cd=24&hc=48&dm=-1&dt=0&ed=0&sr=5497558139904&fb=10384
200 OK 0 B URL POST HTTP/1.1 adxadserv.com/px/heartbeat/v1?pv_uid=b696cb2a-0c1a-4855-82d1-6bdff980e60a&t_op=5.514&p_nn=adxad-rtb&fpid_sa=1695494920428&fpid=a3cc1d999abb8e6c9780f25bb2ddb94d&feid_sa=1695494920428&sid_sa=1695494920428&feid=5158ef1690f6fe7e12955e4f26cd0340&sid=791f0fcddc6420b1076f75f9c19a24a6&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=javflag.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=0&lb=0&cd=24&hc=48&dm=-1&dt=0&ed=0&sr=5497558139904&fb=10384
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://ads.adxadserv.com/ad?spotid=60fa6cc461d6e22a417e5fc1&type=300x250&output=html&extra1=0&ref=https%3A//javflag.com/en/v/a8mPO&dt=1695494919778&screen=1280x1024&tags=
Certificate IssuerLet's Encrypt
Subjectadxadserv.com
FingerprintEC:5B:70:8C:C3:4D:22:CB:BB:DC:30:33:17:B2:17:AE:6F:22:35:B3
ValidityWed, 02 Aug 2023 10:52:22 GMT - Tue, 31 Oct 2023 10:52:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /px/heartbeat/v1?pv_uid=b696cb2a-0c1a-4855-82d1-6bdff980e60a&t_op=5.514&p_nn=adxad-rtb&fpid_sa=1695494920428&fpid=a3cc1d999abb8e6c9780f25bb2ddb94d&feid_sa=1695494920428&sid_sa=1695494920428&feid=5158ef1690f6fe7e12955e4f26cd0340&sid=791f0fcddc6420b1076f75f9c19a24a6&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=javflag.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=0&lb=0&cd=24&hc=48&dm=-1&dt=0&ed=0&sr=5497558139904&fb=10384 HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1
Origin: https://ads.adxadserv.com
DNT: 1
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 23 Sep 2023 18:48:45 GMT
Content-Length: 0
Connection: keep-alive
adxadserv.com/px/heartbeat/v1?pv_uid=b696cb2a-0c1a-4855-82d1-6bdff980e60a&t_op=20.523&p_nn=adxad-rtb&fpid_sa=1695494920428&fpid=a3cc1d999abb8e6c9780f25bb2ddb94d&feid_sa=1695494920428&sid_sa=1695494920428&feid=5158ef1690f6fe7e12955e4f26cd0340&sid=791f0fcddc6420b1076f75f9c19a24a6&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=javflag.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=0&lb=0&cd=24&hc=48&dm=-1&dt=0&ed=0&sr=5497558139904&fb=10384
0 B URL adxadserv.com/px/heartbeat/v1?pv_uid=b696cb2a-0c1a-4855-82d1-6bdff980e60a&t_op=20.523&p_nn=adxad-rtb&fpid_sa=1695494920428&fpid=a3cc1d999abb8e6c9780f25bb2ddb94d&feid_sa=1695494920428&sid_sa=1695494920428&feid=5158ef1690f6fe7e12955e4f26cd0340&sid=791f0fcddc6420b1076f75f9c19a24a6&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=javflag.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=0&lb=0&cd=24&hc=48&dm=-1&dt=0&ed=0&sr=5497558139904&fb=10384
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectadxadserv.com
FingerprintEC:5B:70:8C:C3:4D:22:CB:BB:DC:30:33:17:B2:17:AE:6F:22:35:B3
ValidityWed, 02 Aug 2023 10:52:22 GMT - Tue, 31 Oct 2023 10:52:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /px/heartbeat/v1?pv_uid=b696cb2a-0c1a-4855-82d1-6bdff980e60a&t_op=20.523&p_nn=adxad-rtb&fpid_sa=1695494920428&fpid=a3cc1d999abb8e6c9780f25bb2ddb94d&feid_sa=1695494920428&sid_sa=1695494920428&feid=5158ef1690f6fe7e12955e4f26cd0340&sid=791f0fcddc6420b1076f75f9c19a24a6&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=javflag.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=0&lb=0&cd=24&hc=48&dm=-1&dt=0&ed=0&sr=5497558139904&fb=10384 HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1
Origin: https://ads.adxadserv.com
DNT: 1
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 23 Sep 2023 18:49:00 GMT
Content-Length: 0
Connection: keep-alive
javflag.com/_next/static/chunks/commons-d26294306f8886ab045a.js
200 OK 51 kB URL GET HTTP/3 javflag.com/_next/static/chunks/commons-d26294306f8886ab045a.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (51390), with no line terminators
Hash 08b65bbc93f3d0b0acee9e9d5441482c
4833a383a3cfe1477f40c22e68d9f7537e1a1838
5d7bac66c1bcabb87dd39777882e81b91935a6908d420b2e3b7c9eeda524de67
GET /_next/static/chunks/commons-d26294306f8886ab045a.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-c8be"
expires: Sat, 02 Sep 2023 06:29:01 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 1964209
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F2Mnf4TVDVWTm39d0Rg86HJ8DyomacxRQ9UnhxUNVetOxjdRC96Nw9sREHsBDfW2I400PH35u2HMO0PrEDWCBHabh4WV%2F4mjthk0iZAngGPCW8yTy%2FlhYznEPM60wQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6762f6256b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
panel.javflag.com/api/videos/1ApJY
200 OK 15 kB URL GET HTTP/2 panel.javflag.com/api/videos/1ApJY
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type JSON data\012- , ASCII text, with very long lines (15341), with no line terminators
Hash 76272f98d751d7c8398b669e519299df
a8edb3a2269e81762a3df1febe25a7598b207c99
5db8c9b89925f411b8d6b0274a167ea4bdcb2511447af3abcddf32f6ad2bfb62
GET /api/videos/1ApJY HTTP/1.1
Host: panel.javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 59
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vIHgPgOcjo1YGHhcu7WgeESmGIC1C%2BTNzfDT3Vdh98HrSP71zNMF5lPJCoDJmz3dThlBaa0z6IDfKKxIRn%2FJJDVUen6PQNuFWQu%2BxKPLZG25WwG47vmXpKwbQGZl11tmfJduUg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f693d96e56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
creative.xlrdr.com/widgets/v4/Universal/hls.4cfa5b780bfed20a8b26.js
200 OK 61 B URL GET HTTP/3 creative.xlrdr.com/widgets/v4/Universal/hls.4cfa5b780bfed20a8b26.js
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectxlrdr.com
FingerprintB7:7A:2F:CD:F6:76:0D:74:98:F0:DA:47:69:84:7D:8C:4E:2C:2D:63
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 22f22b49cc901aa95826401f7ce0930c
6471abdd35ab6d511b67d73ad1375f1ee0f255de
0fae8b03858a764bad3e9af19bfc924ead5b9e25c760432c19e91cba3dff1cf3
GET /widgets/v4/Universal/hls.4cfa5b780bfed20a8b26.js HTTP/1.1
Host: creative.xlrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Cookie: __cflb=02DiuDFRFiBZBvMSLtr56RYDQPp7N2PDTbsa6EAfMUpLc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 14 Sep 2023 12:18:22 GMT
etag: W/"6502fa0e-3d"
expires: Sat, 23 Sep 2023 18:48:37 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 10
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f69cff6ab4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
javflag.com/_next/static/chunks/728-52901c2761b19a292dc9.js
200 OK 15 kB URL GET HTTP/3 javflag.com/_next/static/chunks/728-52901c2761b19a292dc9.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (14733), with no line terminators
Hash ff0e401de0e0edaa8ea722e6b922410b
0f7cb23c52b768a0146e01863751beaf80960c5b
9d3f8a563ac29048ac0d30ba505ec2d7fe9de1ad446a415dbb87bd7adc3dea4d
GET /_next/static/chunks/728-52901c2761b19a292dc9.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-398d"
expires: Sat, 16 Sep 2023 09:44:17 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 1251913
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fd2dBFqWBd7F8WqjZkUWj%2FEF1jnqf3yCf0ngZT8dKg2thpicT1Ec6sy2bckKNHF%2F7lmQ9atc91KKT%2ByjnPzTp8y76Jzwlj8LD07jIst5lrEAtga%2B9ipZguS%2FnuAKgw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6764f7c56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
c0.jdbstatic.com/thumbs/45/45x06.jpg
200 OK 12 kB URL GET HTTP/2 c0.jdbstatic.com/thumbs/45/45x06.jpg
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjdbstatic.com
FingerprintF0:F4:F0:50:7D:E0:86:0A:08:F4:67:D2:A5:8B:92:AE:16:A4:66:7A
ValidityTue, 15 Aug 2023 11:23:30 GMT - Mon, 13 Nov 2023 11:23:29 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 147x200, components 3\012- data
Hash 07820479a95306af52b1bc8429db2c8a
71c65f1f7771ae2f084ba4623dcffd21f950d182
1226233f7e124a5263c74e33f70e89515815faf0ec2e5f70a250763b328b0318
GET /thumbs/45/45x06.jpg HTTP/1.1
Host: c0.jdbstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: image/jpeg
content-length: 11929
last-modified: Sun, 08 May 2022 14:58:47 GMT
etag: "07820479a95306af52b1bc8429db2c8a"
x-amz-meta-mtime: 1559249047
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9kUw8%2F7D5tnocuuA%2FQd0sutebOjrk30vBLetqpeImvd0CyLcJI%2F0B5ZeUeDult4%2FBEbz%2FJ9Lsf2%2FBGbq4N3Dc4Bv9r7J1%2BVuxlBkdHJ0yx7jYOeHQjtM%2FJ038HC6HoHzs6kd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b4f6984bc256a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
c0.jdbstatic.com/thumbs/dn/DnwEp.jpg
200 OK 14 kB URL GET HTTP/2 c0.jdbstatic.com/thumbs/dn/DnwEp.jpg
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjdbstatic.com
FingerprintF0:F4:F0:50:7D:E0:86:0A:08:F4:67:D2:A5:8B:92:AE:16:A4:66:7A
ValidityTue, 15 Aug 2023 11:23:30 GMT - Mon, 13 Nov 2023 11:23:29 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 147x200, components 3\012- data
Hash ca2da033c985a81bfdfe075aef7abf56
af753d086068ebd8517a04b5388efb38c147225b
52831da2caa264b72675365981ddc98983f5c684014c55de9e238655f34093f3
GET /thumbs/dn/DnwEp.jpg HTTP/1.1
Host: c0.jdbstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: image/jpeg
content-length: 14199
last-modified: Sun, 08 May 2022 15:13:35 GMT
etag: "ca2da033c985a81bfdfe075aef7abf56"
x-amz-meta-mtime: 1583645571
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uGN0d9g3Lt8Oe11INQzfrO6mDMntVS%2FUitImPOYF8s11Dgh28d%2F5l64MUWHN6ysMNx7hUJSSPdZ7uE6sAPIlsQTy9xUwv0pzGLK6lNI7f4R0Ek1hiA5a216nY5ZaBwvtZrwz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b4f6986bf156a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
javflag.com/_next/static/bnYr1uSKwC65k62TJb7Wt/_buildManifest.js
200 OK 1.5 kB URL GET HTTP/3 javflag.com/_next/static/bnYr1uSKwC65k62TJb7Wt/_buildManifest.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (1606), with no line terminators
Hash ec84a9780a24bded5c85fab1b8e66961
4b4cf3f932cb59f2fac380f9bb6e5e597755a5f5
7aec5e525dd974a94453dcf02d9a6505c367b65510873ae1ea5ece108c89895b
GET /_next/static/bnYr1uSKwC65k62TJb7Wt/_buildManifest.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:36 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-5f8"
expires: Thu, 07 Sep 2023 18:43:11 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 1964209
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2BAWGiTc6d%2B3HP0kOexSeqrz88RLRYzfr9%2FxGnGAd6GSoR3uPzle6hgzh%2FslzhNuvJ8PWpYM%2B%2B6HlTb3psjHBW1vTBe%2BDr6AmH2Fnv%2BAtUFP1WXplFqYw1%2BjaTL8Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f67a2be756b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
go.xlrdr.com/thumbs/view
200 OK 223 B IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectxlrdr.com
FingerprintB7:7A:2F:CD:F6:76:0D:74:98:F0:DA:47:69:84:7D:8C:4E:2C:2D:63
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 962c347497d5e5d1ec45c3815f816d66
eb6bcbf81f857a5c1c8bc167e9df87df2f197c76
eea71007e8e071006fa3fee0fd8f6f00d00a343104b981cb388867f23fb22b53
POST /thumbs/view HTTP/1.1
Host: go.xlrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlrdr.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 88
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: application/json
access-control-allow-origin: https://creative.xlrdr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28upDCGznfDm9XVDxnWfPhahVbGaJT2QEdHaXufgx; SameSite=None; Secure; path=/; expires=Sun, 24-Sep-23 18:48:41 GMT; HttpOnly
server: cloudflare
cf-ray: 80b4f69c6f0ab4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
panel.javflag.com/api/videos/NwEvr
200 OK 41 B URL GET HTTP/2 panel.javflag.com/api/videos/NwEvr
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 50fae772c31e057531af94e3a1936fe8
0e1277242882ac51da099cfe4b51e59392b08fd9
3308ce9ac633d28d6001971d573507c52733976fb5a7ffc4700f09a86e6ab452
GET /api/videos/NwEvr HTTP/1.1
Host: panel.javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 56
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0GnYA8dtCxr1SSlPHprB7weHIvCrIAb3rYQi2yShtAuPgX3S14Gg%2FpVBdP3ociZb07a3R4D4NElxAqOJYlnCk8%2BC3TBzbQFNjER34BPP%2BdSb9rT%2FAKNEmVXm33dMg7TGBo7f3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f693d97556a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
b-hls-24.doppiocdn.com/hls/122457947/122457947_480p.m3u8
200 OK 730 B URL GET HTTP/3 b-hls-24.doppiocdn.com/hls/122457947/122457947_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (748), with no line terminators
Hash 6b0179e1f57b5a39347e6ee050db2b85
75d05ee7fe93bb840aa2d8539b9a971a9594930f
23bb306524a8878b8b96f7191f0feb4666e30fbff86656e8227b9f40bc497665
GET /hls/122457947/122457947_480p.m3u8 HTTP/1.1
Host: b-hls-24.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:44 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Sat, 23 Sep 2023 18:48:43 GMT
x-proxy-cache: HIT
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 80b4f6aaffef568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
javflag.com/_next/static/chunks/95b64a6e-4af705ca1f0d5b3bb69e.js
200 OK 591 B URL GET HTTP/3 javflag.com/_next/static/chunks/95b64a6e-4af705ca1f0d5b3bb69e.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (601), with no line terminators
Hash 2582f5a09857a6499d83d0fdc7da5224
96acfb2ad27adcfb26535f4b12468569487c9439
c31f2a36ac66e918385498ee83bb9997bb4050f274e9ee52cfda0c61c06e03ae
GET /_next/static/chunks/95b64a6e-4af705ca1f0d5b3bb69e.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-24f"
expires: Sat, 07 Oct 2023 19:47:30 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 1251913
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i2yHZtfxrrKgcdacJQTy%2BeHQjTd%2FxoH1MhCra6QydNZsEX5E%2FbQz1f9HPouHaJG4dL%2FE7fKo23hhi0fA3Lzapo%2FcQ3RVd%2BudRNEfnvHsGtJK3k90JWpiiaMEnUmfCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6763f6b56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
static.adxadserv.com/js/adserv-slider.js
200 OK 3.5 kB URL GET HTTP/2 static.adxadserv.com/js/adserv-slider.js
IP
ASN #60068 Datacamp Limited
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subject1585977359.rsc.cdn77.org
Fingerprint26:4A:39:EC:01:61:D6:23:44:7B:C3:D2:43:10:60:39:D9:E6:7B:CA
ValidityWed, 13 Sep 2023 18:58:11 GMT - Tue, 12 Dec 2023 18:58:10 GMT
File type ASCII text, with very long lines (3666), with no line terminators
Hash 09452546c36db71c226901f500ee86ed
7813b4a6b0c0fa57a2306bcdf5f502376de6a96e
878de7a3c145c50693e618054562df4bc0c6a8aa330732df38a28281de718263
GET /js/adserv-slider.js HTTP/1.1
Host: static.adxadserv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:36 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 15 Nov 2019 09:32:36 GMT
etag: W/"5dce70b4-dae"
server: CDN77-Turbo
x-77-nzt: AblMCQ0T4///NhcMAA
x-77-nzt-ray: c0a4cc2873e8d9b204330f6532315417
x-accel-expires: @1695739342
x-accel-date: 1694702542
x-cache: HIT
x-age: 792374
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 792374
content-encoding: gzip
X-Firefox-Spdy: h2
b-hls-24.doppiocdn.com/hls/122457947/122457947_480p.m3u8
200 OK 730 B URL GET HTTP/3 b-hls-24.doppiocdn.com/hls/122457947/122457947_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (748), with no line terminators
Hash 628594beabe8cf54e94e11da73b0a0b3
a8786c7d2fb77f3b0c07f7122254eefa91307e40
beecce7aeea6b5d88fcdf21e185b06e0fb7c1a5bf6bd321b57703019a3830945
GET /hls/122457947/122457947_480p.m3u8 HTTP/1.1
Host: b-hls-24.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:46 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Sat, 23 Sep 2023 18:48:45 GMT
x-proxy-cache: HIT
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 80b4f6b77a3c568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
javflag.com/_next/static/chunks/6728d85a-128fa6c6183991a87602.js
200 OK 549 B URL GET HTTP/3 javflag.com/_next/static/chunks/6728d85a-128fa6c6183991a87602.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (581), with no line terminators
Hash bdf2f0de638820be4385b48ab5fb3aa6
67b855a30b3a3c41ff25f67c478d8bf53653d43a
37d4adb278dc5e2b1935151e00ae956cf9b6d6491565790a7701055325671737
GET /_next/static/chunks/6728d85a-128fa6c6183991a87602.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Cookie: cf_clearance=pIdWu2gNLSLsWkFnSUzrTm1vEr4VsxQQiawFdEbLjUs-1695494916-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1695494916; dom3ic8zudi28v8lr6fgphwffqoz0j6c=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=ponderriding.com; sb_main_2ef41dd6bdb358bdf7d02bce45635537=1; sb_count_2ef41dd6bdb358bdf7d02bce45635537=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-225"
expires: Sat, 07 Oct 2023 21:20:00 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 727574
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UTzTPUDvATDEVX7fM6LBcYqK2MJYdHtk%2FPzIBMJ7NXgBShcGiBsvpifP13XpqgPQyuCh%2FSWraJTJq6xVYaqqDYj0pu%2F5l%2FaWViQxzmYGNkra8FpXdAK%2BBxjiek9qTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6943d4d56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
panel.javflag.com/api/videos/Rdbr4
200 OK 6.5 kB URL GET HTTP/2 panel.javflag.com/api/videos/Rdbr4
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type troff or preprocessor input, ASCII text, with very long lines (7671), with no line terminators
Hash aa4bbec373996268a322fd8aa8b0ab67
6773224661c7d0057a171845b2b01222f1f8b70d
fc0eabd1da747c1791903310b96f97b4528c81f90afe08c312e2f1f9ec82d08c
GET /api/videos/Rdbr4 HTTP/1.1
Host: panel.javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 54
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1c%2ByWPU67%2BAP5%2FUcBiJv6Dd4lsHnV%2FbycWyhu0O1cxUmUaeHat%2F%2B%2BrUXpoO8gJIBauSg2HurxuYzP64iph7CCZB65xhS8IVfSv3dUeuJgiU65CHi5KWZxQAlA0JEYKY4w4nJSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f693f99f56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
javflag.com/_next/static/chunks/main-1e26b85ce0e87daf93d6.js
200 OK 19 kB URL GET HTTP/3 javflag.com/_next/static/chunks/main-1e26b85ce0e87daf93d6.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (19100), with no line terminators
Hash fe7cfcc060bbce71bf48a833e27d1138
b9c1ef915b2115106830df1260a75143989ee500
03ce9e5b4b2dfbc50a4ff66faac0fcf646fe94f368fa1d27a2df2ab650e783d6
GET /_next/static/chunks/main-1e26b85ce0e87daf93d6.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-4a9c"
expires: Wed, 04 Oct 2023 08:52:02 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 831724
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NlgMK3rlgzLRISOjnbm543u%2FqZ8%2BWVtfAPdTfbE56%2FEeZyZDuuqQK%2FpB%2FtB8qMqm1uHEL0%2F7XIHpXwyvyTPPIeSh%2B3fnSCsG7djrfWwfr%2BMBmDqDwIbaQLH2jJVZMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6763f6356b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
javflag.com/_next/static/chunks/402-c2d34baecd40b2f08488.js
200 OK 49 kB URL GET HTTP/3 javflag.com/_next/static/chunks/402-c2d34baecd40b2f08488.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (48996), with no line terminators
Hash 2943d794051029d82cae17cca96cf220
441b09e622b8837f1d41bdee28517a83978edbec
2c6f77bbc8c73427e75b6e9a6792b8cb484775cc48a4d4fc3854b98046974736
GET /_next/static/chunks/402-c2d34baecd40b2f08488.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Cookie: cf_clearance=pIdWu2gNLSLsWkFnSUzrTm1vEr4VsxQQiawFdEbLjUs-1695494916-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1695494916; dom3ic8zudi28v8lr6fgphwffqoz0j6c=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=ponderriding.com; sb_main_2ef41dd6bdb358bdf7d02bce45635537=1; sb_count_2ef41dd6bdb358bdf7d02bce45635537=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-bf64"
expires: Sat, 07 Oct 2023 18:58:27 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 356900
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WX3p3ezXwAY1ENeH1NCHa4hCuD2EBm72wczHKd1NZp2n3EXRAwLfkOlCnqsSFh%2F7rMMG5%2By2dm5jfnoHE0pwDVwCWnkUsibfrkfSOy11hTzxWWYEldnWi1Z1Urinmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6943d5856b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/css/animate.css
200 OK 79 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/css/animate.css
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint48:B7:50:3B:95:5B:52:CB:74:D5:D6:39:E2:DD:12:9D:05:51:D6:87
ValidityWed, 23 Aug 2023 16:10:20 GMT - Tue, 21 Nov 2023 16:10:19 GMT
Hash 80047eaa13ebd50c50e8a9753621e430
9c503e07d130572a0eaf51f7c02cbd4cf6213fe3
3f831a59615f8d5d40b4340b2836f91438c876f8dbce75f78e38360d6fe0f429
GET /sb/notifications/dating/default/us/desk-all/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/js/script.js
200 OK 386 B URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/js/script.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint48:B7:50:3B:95:5B:52:CB:74:D5:D6:39:E2:DD:12:9D:05:51:D6:87
ValidityWed, 23 Aug 2023 16:10:20 GMT - Tue, 21 Nov 2023 16:10:19 GMT
File type ASCII text, with very long lines (399), with no line terminators
Hash 022602a468da44628060800173771da2
9be813fbfebbcb2aa46d8c6b8abec68b3d16c89c
6742c376e658c34d09b2dc5772bd798e3cd52bb265758bac5bce184f8ee7b5cc
GET /sb/notifications/dating/default/us/desk-all/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:42 GMT
content-type: application/javascript
last-modified: Tue, 14 Apr 2020 14:09:27 GMT
etag: W/"5e95c417-182"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v5I%2FLxlGad%2B4xe72R2zFroVBF1ytx%2FcQZzoXlVoXIrKVfloWhpJktM8vNctflzcfpE3n%2B%2BAHhh%2Bi70u3UE0u0wctP9VykFZ3aSF44Z4zJ23ci6xCeQhXZmcIEmeIUjwredx6DuhKpgfo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f69e9f24776e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
javflag.com/_next/static/css/8e6c477525b7a21e2138.css
200 OK 11 kB URL GET HTTP/3 javflag.com/_next/static/css/8e6c477525b7a21e2138.css
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (10858), with no line terminators
Hash cc503a4e43ad92bc295d9b318d36cf60
2656ebfb6ade3726e27d14e679aff71488a7b23d
e28361aa6e9dcb3eff2c13b586bb050d3d8964c9dadb394adf3fadffdc67703d
GET /_next/static/css/8e6c477525b7a21e2138.css HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: text/css
cache-control: max-age=2592000
cf-bgj: minify
cf-polished: origSize=10867
etag: W/"62a8b159-2a73"
expires: Mon, 25 Sep 2023 10:36:36 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 1251913
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f9qEk3H%2BYn9BUSK5Ekur7StdZKvDk7D24nOX3xIcfZHB0M1QOTRxeVt3ajvKCy7bzjFCAr4hNCsCFByymK4r3euXIucT9zxEwvGIBDUCkmjB7%2FMwwYPC2geSBSnIVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6762f5d56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
javflag.com/_next/static/chunks/webpack-a076f800ce26b2c48758.js
200 OK 2.0 kB URL GET HTTP/3 javflag.com/_next/static/chunks/webpack-a076f800ce26b2c48758.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (2056), with no line terminators
Hash b08d2874efc481d14eac7285a5159ab5
a6628900e87ef9aa16220dd747bcaa0bdc348d24
79f292fb9b7d5f6f5f0e459c1987aa54f7e87506f6e143abe4faa349d4f8a199
GET /_next/static/chunks/webpack-a076f800ce26b2c48758.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-7e9"
expires: Mon, 04 Sep 2023 04:31:22 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 1964209
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DGJghNlsdFTRsrJJnlbD7IoGtywF7xe48%2FemFYfARMh2A2bag1HhFcUx0OVw3vSqEiTjseffqfL4fP1SihsymLw62T1d2%2BoT%2BaUHElBF1xcpPth3owe3PYiU%2FigM2w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6762f5f56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
panel.javflag.com/api/videos/AqgKq
200 OK 14 kB URL GET HTTP/2 panel.javflag.com/api/videos/AqgKq
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type JSON data\012- , ASCII text, with very long lines (13965), with no line terminators
Hash 31e77de5ed6cca6a61f394b780648b3d
cb3bd9fbc2ea5e9ed2764f022911e3a4529e4b42
209234acedc21f9813743fc54cc900b979201e52afe2bcf644c023e101994199
GET /api/videos/AqgKq HTTP/1.1
Host: panel.javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 56
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b0cHM69LuYkYxrSb8DLvbpDnlTMT5uoTpJSPvrrXLUG56CMJ41ztOBiZNpwfhEpKrZdVdt%2B9wJVXQi1k5%2FFN2epgDpEyUoaFTlF5tpadFu9C1CcTm6LgI8601sEbnpsMZyYWKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f693d97356a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
javflag.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
302 Found 7.3 kB URL GET HTTP/3 javflag.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sat, 23 Sep 2023 18:48:36 GMT
access-control-allow-origin: *
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/dffb14d6/main.js
cache-control: max-age=300, public
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m%2FLyfyxzFb0cWWdV47Jvi%2BmPAQdHyoBx2WLX4UxGAriGKu9NKdTr1w%2BzrmGvr%2BrbCwibNGoEe4%2Bj1iGF1aDyEFGDfoFbLq0aU4NjoP3XBSFouRnGutVP3X%2BPC24PHQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f67a8c5556b5-OSL
alt-svc: h3=":443"; ma=86400
panel.javflag.com/api/videos/3Prz
200 OK 7.1 kB URL GET HTTP/2 panel.javflag.com/api/videos/3Prz
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type troff or preprocessor input, ASCII text, with very long lines (8459), with no line terminators
Hash 3a217f697499a5a8d1fe8a33798c458d
390d8ea52402fb3b1ca967a3137097733c2d0f40
7b07fd9bcc9b4be89d3eff4ff92a97bc177e270fd4754666da1ab047e392868b
GET /api/videos/3Prz HTTP/1.1
Host: panel.javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 51
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BZmlhQoEnCV5jFsgvqEP%2BZZ%2BMxKpKqYr2%2FS%2BQAesa3MiUeFnRL5PqEfQO6RDIe3%2BZPJntITzrpXc2ci8tR2Q2IMAqiy5dB%2B9xrUCr3aEj0oqUgnumQIMYkKU451wCmMrxhPicg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f693f99b56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
200 OK 4.5 MB URL User Request GET HTTP/2 IP
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
Size 4.5 MB (4470654 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en/v/a8mPO HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a3XN73NeTxxXfAH5hKl2ehOLEOVTORr3E0Xzib115WUjT%2BPBZr2dZ8WWfvucmqHuvUMonmllrfijhePc57gJqo%2BicgermRxuUMEux8zr78deww7SaAaSO9pm2x2jNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f66f880156b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
creative.xlrdr.com/widgets/v4/Universal/vendors~hls.13f01a3a9d7e36c14415.js
200 OK 178 kB URL GET HTTP/3 creative.xlrdr.com/widgets/v4/Universal/vendors~hls.13f01a3a9d7e36c14415.js
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectxlrdr.com
FingerprintB7:7A:2F:CD:F6:76:0D:74:98:F0:DA:47:69:84:7D:8C:4E:2C:2D:63
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (45140)
Size 178 kB (177865 bytes)
Hash 4a1e862a348e6713dfcce18e9cda2f42
47bed78ef29844bec68da443a6b0add48936b61b
b3b83266dde6fa2870ddc1cc812233d8baa03727cd4d65733ed5ee7a4fbb4490
GET /widgets/v4/Universal/vendors~hls.13f01a3a9d7e36c14415.js HTTP/1.1
Host: creative.xlrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Cookie: __cflb=02DiuDFRFiBZBvMSLtr56RYDQPp7N2PDTbsa6EAfMUpLc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 14 Sep 2023 12:18:22 GMT
etag: W/"6502fa0e-2b6c9"
expires: Sat, 23 Sep 2023 18:48:32 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 10
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f69cef5eb4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
200 OK 6.8 kB URL GET HTTP/3 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49
ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
File type ASCII text, with very long lines (7013), with no line terminators
Hash 49475c425d6c00477bb339179326c49b
bd97deeb753f44f43a21feafa92d98239fa511bd
598841a98ad357d2896d2f093ea3e4e1d44e24b3351268ffd45e61ff8c1d0e09
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 23 Sep 2023 18:48:42 GMT
date: Sat, 23 Sep 2023 18:48:42 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
panel.javflag.com/api/videos/kbqN
200 OK 13 kB URL GET HTTP/2 panel.javflag.com/api/videos/kbqN
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type JSON data\012- , ASCII text, with very long lines (13340), with no line terminators
Hash c4d0a9fe3492c2e4cfb2275bda61cd08
cb01cf4d7f65375d6c9a3be2f8c4fa312cb7928d
2349033ba2c7ac0d1dbb0e9901ba7e92ed836f2966603af09f42e51555505882
GET /api/videos/kbqN HTTP/1.1
Host: panel.javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 51
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i1a5T3ggS0hqd1fAEr5Au9lQe9my%2Bl9v6BiKjrMU52mPULevi2dtVrcXDZOLdQESDZmTq8Bh1Puoln%2FFD9NLCaQ7SF0Y2munMi6NG%2BGRTkBOrVRn43wS6N55QcyhiN%2BZDiJr3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f693f9a256a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
panel.javflag.com/api/videos/q6Ja
200 OK 6.8 kB URL GET HTTP/2 panel.javflag.com/api/videos/q6Ja
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type troff or preprocessor input, ASCII text, with very long lines (8081), with no line terminators
Hash 2e512784476a7ee4d2b0ec9bbd895aac
86c148dc04e8dfc723599a0cb5a6b418ce3e473d
355381f76af9fa12decd2f87c900c78255896de313bb60908cf420caf1a00538
GET /api/videos/q6Ja HTTP/1.1
Host: panel.javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 53
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W2KQBWXlqmWiLRXh76Dh6nAf%2FSDi0QaUvdBHOfJJDJAPSsNffOzJNawVzrVc6gzWapO63jeDF1ZaAbD9dzLA1lQJSoKYhP%2FP%2BEocRr8X7MMDyVHd0hQesz873RR22RT%2Frb303w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f693f9a556a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
javflag.com/_next/static/chunks/pages/index-3dc32ec9897c6af24aeb.js
200 OK 12 kB URL GET HTTP/3 javflag.com/_next/static/chunks/pages/index-3dc32ec9897c6af24aeb.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (11569), with no line terminators
Hash bc73992037cbb45251a58a3f0a9cc21c
c9bcde4040ea68bba3b922887e5a5a8022f44cda
52ef61b2a0aa81453c9498c90b2ba63aa010ec192e97f21e1269c7b734d27cc7
GET /_next/static/chunks/pages/index-3dc32ec9897c6af24aeb.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Cookie: cf_clearance=pIdWu2gNLSLsWkFnSUzrTm1vEr4VsxQQiawFdEbLjUs-1695494916-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1695494916; dom3ic8zudi28v8lr6fgphwffqoz0j6c=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=ponderriding.com; sb_main_2ef41dd6bdb358bdf7d02bce45635537=1; sb_count_2ef41dd6bdb358bdf7d02bce45635537=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-2d31"
expires: Mon, 25 Sep 2023 19:33:42 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 1841067
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S7Cw07kgZnLyRJkJLZ5Yrd3ru3fLiiNRH2l%2FSJ2VzVj8IzrGjbUKuyf%2F2RjU8iiwOcXCDBn%2FXbAuqmdRGB8oKAuTNlCc5PRQHsPZmsW%2B7zDcX4u8k7ICe4mW8XKxsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6944d6d56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
panel.javflag.com/api/videos/znwE
200 OK 14 kB URL GET HTTP/2 panel.javflag.com/api/videos/znwE
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type JSON data\012- , ASCII text, with very long lines (13814), with no line terminators
Hash 2e9c0e2cc0c62d5398e172774afb1c38
313cd1e0c1deec4ec00e0fb882a623d4488721c8
1ae1edf2bd9788d09a9f39afc9fecf52a1bfb55e87282ca9bec60934fabb87b5
GET /api/videos/znwE HTTP/1.1
Host: panel.javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 56
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0IdbATENzJ5WMRibheRwY1ateuHbIfe1QXI%2BzhAggIUeNQkpBPz2d6kphKmt480P3aWd54hSwr44zby%2Bn0sA6rQ9GUDG%2FGTUgRqMMHu5XX%2B91XXUMfTGHyslA4mzTk1k4laWNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f693d97756a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
go.xlrdr.com/api/models?tag=girls%2Fasian&forceClient=1&stripcashR=0&limit=1&usePreroll&webp=1
200 OK 1.7 kB URL GET HTTP/3 go.xlrdr.com/api/models?tag=girls%2Fasian&forceClient=1&stripcashR=0&limit=1&usePreroll&webp=1
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectxlrdr.com
FingerprintB7:7A:2F:CD:F6:76:0D:74:98:F0:DA:47:69:84:7D:8C:4E:2C:2D:63
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1809), with no line terminators
Hash 6b24ce8c28459e910c2294afad4ce4a0
13f1e124b37c3bbeffa286961f45ff59c3797152
bd0fb41ee504f10797920b16def140b064fbc18b43cac6d5e8e6d4949d50968f
GET /api/models?tag=girls%2Fasian&forceClient=1&stripcashR=0&limit=1&usePreroll&webp=1 HTTP/1.1
Host: go.xlrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlrdr.com/
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: application/json
access-control-allow-origin: https://creative.xlrdr.com
access-control-allow-credentials: true
vary: Origin, Accept-Encoding
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Sat, 23 Sep 2023 18:48:02 GMT
cf-cache-status: HIT
age: 17
server: cloudflare
cf-ray: 80b4f69add9fb4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
b-hls-24.doppiocdn.com/hls/122457947/122457947_480p.m3u8
200 OK 730 B URL GET HTTP/2 b-hls-24.doppiocdn.com/hls/122457947/122457947_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (748), with no line terminators
Hash 072d8897186996e8be6cd1f5d617333e
0d378418635c590270feefb0481479fb4f761f5a
977dda9c6d9fe9cc531ccb8f3a51df41ece6a54dc51b9e0f678769032c7b209d
GET /hls/122457947/122457947_480p.m3u8 HTTP/1.1
Host: b-hls-24.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:42 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Sat, 23 Sep 2023 18:48:41 GMT
x-proxy-cache: HIT
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 80b4f69edaa456a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 2d28646f29940c0f002bf9828e0540fe
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sat, 23 Sep 2023 18:48:39 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ljw%2FXobl52BpLQ3w21kR%2FDHpSwGQci%2BGwp2OzSDAtsSIlwtENKuZgBbD7b5bl6caIRK9InBTam6RQmVmj6E66ob5yHIp32F8DCtMWRVa6Uyqez9WN%2BkfIlNlIeIqEbKfl8syNX4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f68ffe45368f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
javflag.com/_next/static/css/a65c1f345e5c263283f9.css
200 OK 11 kB URL GET HTTP/3 javflag.com/_next/static/css/a65c1f345e5c263283f9.css
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (11197), with no line terminators
Hash fdcaeffe57098a9e5753408f0e49c0b3
3ea9ba58fecff2ae16b97e660fa07b45d5c5600a
ac63df3e3fe0825c3098da9b0a562134082638bf9c14d98f11da17a7f128b33e
GET /_next/static/css/a65c1f345e5c263283f9.css HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javflag.com/en/v/a8mPO
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=pIdWu2gNLSLsWkFnSUzrTm1vEr4VsxQQiawFdEbLjUs-1695494916-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1695494916; dom3ic8zudi28v8lr6fgphwffqoz0j6c=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=ponderriding.com; sb_main_2ef41dd6bdb358bdf7d02bce45635537=1; sb_count_2ef41dd6bdb358bdf7d02bce45635537=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: text/css
cache-control: max-age=2592000
cf-bgj: minify
cf-polished: origSize=11210
etag: W/"62a8b159-2bca"
expires: Sat, 07 Oct 2023 18:48:45 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 356900
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8k1gN66l9eNS4IHNYyNxckdAZS8G%2Fw0%2BKa3v2wzb6GNoNMCQKyeO5lWrZbGSaxpSlkrjEW6l4RBZ%2FOV3NPJtiDcwwSSpM2KZ0sUP1%2BAzzqUrtZFG1L4Gk6Q8fsYjOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6943d5456b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
javflag.com/_next/static/chunks/29107295-0a512dfc9452434e3c9c.js
200 OK 72 kB URL GET HTTP/3 javflag.com/_next/static/chunks/29107295-0a512dfc9452434e3c9c.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash ba756b1fa3ebf916468e9457a12c645d
ee9606fc2824b3580436f041570929b2325c5fa7
338f99e901fcb761903c04d154b485a03896f987a5f6cba549ec3ea40e3c60cf
GET /_next/static/chunks/29107295-0a512dfc9452434e3c9c.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Cookie: cf_clearance=pIdWu2gNLSLsWkFnSUzrTm1vEr4VsxQQiawFdEbLjUs-1695494916-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1695494916; dom3ic8zudi28v8lr6fgphwffqoz0j6c=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=ponderriding.com; sb_main_2ef41dd6bdb358bdf7d02bce45635537=1; sb_count_2ef41dd6bdb358bdf7d02bce45635537=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-117f9"
expires: Sat, 07 Oct 2023 21:54:26 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 727574
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BRSG7Cyqd6%2FIgmNy592s6O6SwR7yIwbXotFw%2BWcBcGDxTgPcmTDUxzMYFk8mH%2BP%2Frt1%2B6AWf4gCFPgTnM0tHPWGYWbKt0xrsin1v7rZ9IlL1mIrBhcSwLOterrxJvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6943d5656b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
poweredby.jads.co/adshow.php?adzone=947357
200 OK 4.6 kB URL GET HTTP/1.1 poweredby.jads.co/adshow.php?adzone=947357
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4792), with no line terminators
Hash e020488d45557f73f3926c67c81d5341
7a60f7fb6b8ad3485dfc2a8539a7bd5f77a4c5c1
de4b8f369709819bd9340d3b8e1c80a425a46d44d69e274c0ee227bcae87cb1a
GET /adshow.php?adzone=947357 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 23 Sep 2023 18:48:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=5e144b2c0388603e962b4deafce10257; expires=Sun, 22-Sep-2024 18:48:37 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps42805=1; expires=Sun, 24-Sep-2023 18:48:37 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjExODA0MDc7aToxNjk1NzU0MTE3O30%3D; expires=Tue, 26-Sep-2023 18:48:37 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Tue, 26-Sep-2023 18:48:37 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
fonts.googleapis.com/css?family=Ubuntu&display=swap
200 OK 1.9 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Ubuntu&display=swap
IP
Requested by https://ads.adxadserv.com/ad?spotid=60fa6cc461d6e22a417e5fc1&type=300x250&output=html&extra1=0&ref=https%3A//javflag.com/en/v/a8mPO&dt=1695494919778&screen=1280x1024&tags=
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49
ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
File type ASCII text, with very long lines (1920), with no line terminators
Hash bac8c0acfd05e532050648a2118aa2dd
c3a585733918dae1a7ab58f740622055560c0770
154dd3054e01133ab38a433b6b9c06a1c01bde95f19f1a9c28c94d9e938f003c
GET /css?family=Ubuntu&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.adxadserv.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 23 Sep 2023 18:48:40 GMT
date: Sat, 23 Sep 2023 18:48:40 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
edge-hls.doppiocdn.com/hls/122457947/master/122457947_480p.m3u8
200 OK 227 B URL GET HTTP/2 edge-hls.doppiocdn.com/hls/122457947/master/122457947_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with no line terminators
Hash 675d8d3b7e17f5e8e6dff4ba215a2667
b42f75dcd5efb60c94479b0e172c165b282551c2
83250f6d8ccbb22cf180e3632712be0426564bf8fdef87d2ebf78e30af99ed5c
GET /hls/122457947/master/122457947_480p.m3u8 HTTP/1.1
Host: edge-hls.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Sat, 23 Sep 2023 18:48:39 GMT
x-proxy-cache: MISS
cache-control: public, max-age=3, s-maxage=3
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 80b4f69e29de56a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
barnabaslinger.com/2e/f4/1d/2ef41dd6bdb358bdf7d02bce45635537.js
200 OK 37 kB URL GET HTTP/1.1 barnabaslinger.com/2e/f4/1d/2ef41dd6bdb358bdf7d02bce45635537.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectbarnabaslinger.com
FingerprintA1:79:FD:AC:7C:C1:24:2F:80:32:0C:DA:4B:29:FA:84:C7:B5:51:6A
ValidityWed, 20 Sep 2023 06:08:22 GMT - Tue, 19 Dec 2023 06:08:21 GMT
File type ASCII text, with very long lines (37153), with no line terminators
Hash 62fd2bd7e95187274c082ec6a27ebb87
8c9f326c4d3d232e3e485af518af31950ea6458c
a1d1781a236dfe300b49d76e3ed50432a21a6c9c3d921f7391b2d8cfc579aeda
GET /2e/f4/1d/2ef41dd6bdb358bdf7d02bce45635537.js HTTP/1.1
Host: barnabaslinger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 23 Sep 2023 18:48:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7d07a538f8ebd0fa9e6eba317668b1b9
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
b-hls-24.doppiocdn.com/hls/122457947/122457947_480p.m3u8
200 OK 730 B URL GET HTTP/3 b-hls-24.doppiocdn.com/hls/122457947/122457947_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (748), with no line terminators
Hash 795df9b8e30d682bd93f0784c553bd1d
3278781c94748f908e404194745ee6c7841a428a
58ac9aeea9dfb6ff92a49d445c894ae4d7a290653708a8adb8e2981abd8f1251
GET /hls/122457947/122457947_480p.m3u8 HTTP/1.1
Host: b-hls-24.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:48 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Sat, 23 Sep 2023 18:48:47 GMT
x-proxy-cache: HIT
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 80b4f6c3fd89568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
javflag.com/_next/static/chunks/pages/_app-bf0549db33ad911dc73b.js
200 OK 39 kB URL GET HTTP/3 javflag.com/_next/static/chunks/pages/_app-bf0549db33ad911dc73b.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (39336), with no line terminators
Hash 8f8995c07e6a0e0d2504c8eb357492a9
daa5b34d962888dc7e16a586f8a263a028925d6b
c5a2ed488abd0abf3dd43baa136df75d7dd4f801e7085dc0e28c610d45f22300
GET /_next/static/chunks/pages/_app-bf0549db33ad911dc73b.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-99a8"
expires: Mon, 25 Sep 2023 12:55:51 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 1964209
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=egBw705SRGRmZiLJVnF5QqgUHpPIHX7afgpzUQ4rpkFBejj2GhcEARi%2FV4S6WvCXVdU%2BURrtmEkuwsiBbZfeJJu0FNjRDP3n99CpuioRi15i3jnEMhozfv%2FSza83HQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6763f6a56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
lilacsloppy.com/watch.1150317757379.js?key=e92baac9f9527ad976b281842138525b&kw=%5B%22javflag%22%2C%22-%22%2C%22%E5%A4%AB%E3%81%AE%E7%9B%AE%E3%81%AE%E5%89%8D%E3%81%A7%E7%8A%AF%E3%81%95%E3%82%8C%E3%81%A6-%22%2C%22%E6%AF%8D%E4%B9%B3%E8%B2%B8%E5%88%A5%E8%8D%98%22%2C%22%E8%91%B5%E3%81%82%E3%81%92%E3%81%AF%22%5D&refer=https%3A%2F%2Fjavflag.com%2Fen%2Fv%2Fa8mPO&tz=0&dev=e&res=14.2079&uuid=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1&shu=752f1f0d7416b669bca0597f425fdfb40c2e69ebe806bbea5764026713588eee1e8d96608c163d6bc352c887d557a718840a6978867a21eb1beac2c26d6994bf4bd907f8ee2c888b52a1a431e8ad4ab30872133149d7d39d09f648e8c8f38c5162&pst=1695494980&rmtc=t
200 OK 3.4 kB URL GET HTTP/1.1 lilacsloppy.com/watch.1150317757379.js?key=e92baac9f9527ad976b281842138525b&kw=%5B%22javflag%22%2C%22-%22%2C%22%E5%A4%AB%E3%81%AE%E7%9B%AE%E3%81%AE%E5%89%8D%E3%81%A7%E7%8A%AF%E3%81%95%E3%82%8C%E3%81%A6-%22%2C%22%E6%AF%8D%E4%B9%B3%E8%B2%B8%E5%88%A5%E8%8D%98%22%2C%22%E8%91%B5%E3%81%82%E3%81%92%E3%81%AF%22%5D&refer=https%3A%2F%2Fjavflag.com%2Fen%2Fv%2Fa8mPO&tz=0&dev=e&res=14.2079&uuid=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1&shu=752f1f0d7416b669bca0597f425fdfb40c2e69ebe806bbea5764026713588eee1e8d96608c163d6bc352c887d557a718840a6978867a21eb1beac2c26d6994bf4bd907f8ee2c888b52a1a431e8ad4ab30872133149d7d39d09f648e8c8f38c5162&pst=1695494980&rmtc=t
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectlilacsloppy.com
Fingerprint61:42:8D:7F:1F:9E:5E:99:C6:26:9F:97:2E:54:59:AB:93:1B:0E:3A
ValidityThu, 14 Sep 2023 11:06:53 GMT - Wed, 13 Dec 2023 11:06:52 GMT
File type HTML document, ASCII text, with very long lines (3387), with no line terminators
Hash 6f5fa5e24c91f88ebb055c29c9517f6c
dbfda8ba2a715c3454fa5768626fc6d1c1f40ed0
60f30431444ddd4d9e87767347973facf62d772afe9a9b8a7d4a2f22c25902bf
GET /watch.1150317757379.js?key=e92baac9f9527ad976b281842138525b&kw=%5B%22javflag%22%2C%22-%22%2C%22%E5%A4%AB%E3%81%AE%E7%9B%AE%E3%81%AE%E5%89%8D%E3%81%A7%E7%8A%AF%E3%81%95%E3%82%8C%E3%81%A6-%22%2C%22%E6%AF%8D%E4%B9%B3%E8%B2%B8%E5%88%A5%E8%8D%98%22%2C%22%E8%91%B5%E3%81%82%E3%81%92%E3%81%AF%22%5D&refer=https%3A%2F%2Fjavflag.com%2Fen%2Fv%2Fa8mPO&tz=0&dev=e&res=14.2079&uuid=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1&shu=752f1f0d7416b669bca0597f425fdfb40c2e69ebe806bbea5764026713588eee1e8d96608c163d6bc352c887d557a718840a6978867a21eb1beac2c26d6994bf4bd907f8ee2c888b52a1a431e8ad4ab30872133149d7d39d09f648e8c8f38c5162&pst=1695494980&rmtc=t HTTP/1.1
Host: lilacsloppy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
Referer: https://javflag.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=16240982; ain=eyJhbGciOiJIUzI1NiJ9.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.80-aAcG1LD1VbtLpFRFcIhVUKVmgOdISoeE_7L31_OI
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 18:48:40 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://javflag.com
Access-Control-Allow-Origin: https://javflag.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=f466fc22-1b51-4663-81da-7ecda77a6b48:1:1; expires=Sat, 30 Sep 2023 18:48:40 GMT; secure; SameSite=None
iprc72e525cc759bbb598692fe11fce3feec=4471463; expires=Sun, 24 Sep 2023 18:48:40 GMT; secure; SameSite=None
pdhtkv=true; expires=Sun, 24 Sep 2023 18:48:40 GMT; secure; SameSite=None
uncs=1; expires=Sun, 24 Sep 2023 18:48:40 GMT; secure; SameSite=None
pdhtkv5=true; expires=Sun, 24 Sep 2023 18:48:40 GMT; secure; SameSite=None
uncs5=1; expires=Sun, 24 Sep 2023 18:48:40 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5e3fb354ea231105bbcdb21924269ca5
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
addresseepaper.com/sfp.js
0 B URL GET addresseepaper.com/sfp.js
IP
Requested by https://javflag.com/en/v/a8mPO
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
javflag.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
200 OK 1.2 kB URL GET HTTP/3 javflag.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type HTML document, ASCII text, with very long lines (1271), with no line terminators
Hash 40d981045a7516cdadd00e8dccc9c58d
8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3
71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript
last-modified: Wed, 20 Sep 2023 08:17:07 GMT
etag: W/"650aaa83-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eP590yiTBDUX16Ze1%2BMrOuosd7znZ1orVvo4BnzisaEAcWFZoGQL6mzrokUnE%2F8YpWwek1Ef21if%2BYPFqQvYpREr0k86AP5nvz2VAejvk1MHm%2BGdYR%2FG%2FSy%2FOBxHDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f67889ab56b5-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Mon, 25 Sep 2023 18:48:35 GMT
cache-control: max-age=172800, public
content-encoding: gzip
creative.xlrdr.com/widgets/v4/Universal/main.db756385c0227d15048c.js
200 OK 282 kB URL GET HTTP/3 creative.xlrdr.com/widgets/v4/Universal/main.db756385c0227d15048c.js
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectxlrdr.com
FingerprintB7:7A:2F:CD:F6:76:0D:74:98:F0:DA:47:69:84:7D:8C:4E:2C:2D:63
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Size 282 kB (281634 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /widgets/v4/Universal/main.db756385c0227d15048c.js HTTP/1.1
Host: creative.xlrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 14 Sep 2023 12:18:22 GMT
etag: W/"6502fa0e-44c22"
expires: Sat, 23 Sep 2023 18:48:45 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 3
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f69699f1b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
panel.javflag.com/api/videos/DnwEp
200 OK 12 kB URL GET HTTP/2 panel.javflag.com/api/videos/DnwEp
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type JSON data\012- , ASCII text, with very long lines (12040), with no line terminators
Hash 2d9fb2445f6d0e00e7ae7d76115b735f
4bb62253955a349a6e9faffbd4db250062dba173
fbc28edccd6c012a81ee577df471f3ee6c57f2814151f655d5c32e62611f3d6d
GET /api/videos/DnwEp HTTP/1.1
Host: panel.javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 56
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7IR2iqYIubECigT7knKpfEr5JZfWm0jEp8RFAqAZzcVDawS4%2FYtDWtkwLHJSbFVlWtqDJ6X%2FqGTAMtVdUdYUbVwtABtFgaqm0HL2elAl1gBL0jymJTZjNCErZLwky91Wu5yM7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f693d97156a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
javflag.com/_next/static/chunks/1bfc9850-2366894811a52c0c0f11.js
200 OK 1.8 kB URL GET HTTP/3 javflag.com/_next/static/chunks/1bfc9850-2366894811a52c0c0f11.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (1839), with no line terminators
Hash 04f5cecaa92c31fc6186b0a54a78e104
0a3bb6cca91abc20d0071ef9c83edb3dd4273cc8
9d693d292a8b9fa499b4c5a46c74103c9181bdfaf4ebad742cbf02015ea6b9b1
GET /_next/static/chunks/1bfc9850-2366894811a52c0c0f11.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-715"
expires: Fri, 06 Oct 2023 23:27:45 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 356911
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F8If2KeSTu8hmtJxlsMUbA3%2FkGt0l2RAmJJKUQ9EHG%2Bl03u95o5CSQbe9Bfq6YurJgk0YK0UKwp8wCbLluCJ54N4DKn96iLA0VwL5pvVgbI7xKHyLDUtQab365P9nA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6763f6c56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
panel.javflag.com/api/videos/me8d5
200 OK 6.1 kB URL GET HTTP/2 panel.javflag.com/api/videos/me8d5
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type troff or preprocessor input, ASCII text, with very long lines (7235), with no line terminators
Hash e1b14653cc1f294ea668c42748a8414e
b6b8f1a4a12505e750c4b8ab92d2205a6eaac602
5a97cf58adf9112ce2f23c24aba0b4f5f7400ab1094b1ac2d8a7705e93fa13c9
GET /api/videos/me8d5 HTTP/1.1
Host: panel.javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 58
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ihTXOZlaybfItdArtKYnykHvgAhg9%2Bk7ySfGTmDGA6M6CsF7ZEMwHx8TrKn6omf2gZ2Ath2jI8vZZ4%2BebfTj8oQS5Zzsdbb37PdwO6Sn%2FMYu4Jyeo%2FKVed2GEXQ335TvQnY8yQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f693d97656a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
javflag.com/_next/static/css/8e6c477525b7a21e2138.css
200 OK 11 kB URL GET HTTP/3 javflag.com/_next/static/css/8e6c477525b7a21e2138.css
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (10858), with no line terminators
Hash cc503a4e43ad92bc295d9b318d36cf60
2656ebfb6ade3726e27d14e679aff71488a7b23d
e28361aa6e9dcb3eff2c13b586bb050d3d8964c9dadb394adf3fadffdc67703d
GET /_next/static/css/8e6c477525b7a21e2138.css HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javflag.com/en/v/a8mPO
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=pIdWu2gNLSLsWkFnSUzrTm1vEr4VsxQQiawFdEbLjUs-1695494916-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1695494916; dom3ic8zudi28v8lr6fgphwffqoz0j6c=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=ponderriding.com; sb_main_2ef41dd6bdb358bdf7d02bce45635537=1; sb_count_2ef41dd6bdb358bdf7d02bce45635537=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: text/css
cache-control: max-age=2592000
cf-bgj: minify
cf-polished: origSize=10867
etag: W/"62a8b159-2a73"
expires: Mon, 25 Sep 2023 10:36:36 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 1251918
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BExWoqrzZsQ68wEJeVKAN%2FRd7Rqlqt16A3ADka7NIDnrdY0e3pGqLB5Qoij%2FJ7P4iGp2%2F25vwzz4N7FIAtavCJTGY74A848W2AF%2BKA5g6GUqPlaE%2BiBlfjckOumO7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6943d4a56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
javflag.com/cdn-cgi/apps/head/eqvK8VR8hiV-oWoKRWKnWSx24Hw.js
200 OK 4.2 kB URL GET HTTP/3 javflag.com/cdn-cgi/apps/head/eqvK8VR8hiV-oWoKRWKnWSx24Hw.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (4283), with no line terminators
Hash e5494e18524916cb0f8c33afd15f019d
329564ac1dc9a12aefc2c83e7382d750943890e5
744db248bd45594433085fffb6960ecd85fd20ec6f1db7ed3d00097d72a04a3f
GET /cdn-cgi/apps/head/eqvK8VR8hiV-oWoKRWKnWSx24Hw.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: I2JwSnuV8aiJuvyR4Kf9K4Tnc2A2i3Jb0qzyPxg8eXasB71TjuChSEGmPD5AXOhew4+1yt3VpnQ=
x-amz-request-id: A2ZRDZEC7QCAP8TF
cache-control: public, max-age=31536000
last-modified: Sat, 05 Jun 2021 15:23:51 GMT
x-amz-version-id: BpzTvMe2uK2cEHeQ_WRpUBJ2uI.NQfVs
etag: W/"212edacc088d2662764eb3ea51ef5a4f"
cf-cache-status: HIT
age: 1964209
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jwxiDe4NGAJGNQesWzZdq%2FI542By1hg7AD2t4gxc6aa5AONn2LF1cil1CSKV52kRPukhhp8Kes2aRf%2F1Lhzuy9rJWMoCLHMC60e5IqhV1%2BanVRztmyoFk1UCg04PZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6762f5756b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
creative.xlrdr.com/widgets/v4/Universal/main.db756385c0227d15048c.css
200 OK 13 kB URL GET HTTP/3 creative.xlrdr.com/widgets/v4/Universal/main.db756385c0227d15048c.css
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectxlrdr.com
FingerprintB7:7A:2F:CD:F6:76:0D:74:98:F0:DA:47:69:84:7D:8C:4E:2C:2D:63
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (13396), with no line terminators
Hash d55b785d72863fbb8425a36b7d675ec2
546cda15b6fb2a67ce1f102dc82eefb6f749f9c3
a4d09f6a50b6d96e7f22ab12f406dcf44be0d815105018cc5c7f1105fbf597f7
GET /widgets/v4/Universal/main.db756385c0227d15048c.css HTTP/1.1
Host: creative.xlrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: text/css
last-modified: Thu, 14 Sep 2023 12:18:22 GMT
etag: W/"6502fa0e-3454"
expires: Sat, 23 Sep 2023 18:48:38 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 3
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f69699e5b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
javflag.com/_next/static/chunks/a00da3a2-99ba11ce2617a9b60d65.js
200 OK 73 kB URL GET HTTP/3 javflag.com/_next/static/chunks/a00da3a2-99ba11ce2617a9b60d65.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9b4638df641bc003869be8b5a2aacd78
5f5f4f704199a50de647db26569fe933b46cca9e
47f26a76991ea8877a3014e46aed23fd6f29f5e8159026229c27a26ea917eec2
GET /_next/static/chunks/a00da3a2-99ba11ce2617a9b60d65.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-11e18"
expires: Tue, 26 Sep 2023 07:57:51 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 1637185
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kiwBYbZH5VMZMWBX%2FKRZY1aOMt%2BTb09XF%2BFW26pCtLNgxePMe%2B3l12WBhNkCfc62ZWkEG29qPW%2FumHReLF6EmYmPx%2FJJBPh9IuWLWlA81q1FnjLrpgr%2Fu8QtvBvTxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6763f6656b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
c0.jdbstatic.com/covers/a8/a8mPO.jpg
200 OK 171 kB URL GET HTTP/2 c0.jdbstatic.com/covers/a8/a8mPO.jpg
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjdbstatic.com
FingerprintF0:F4:F0:50:7D:E0:86:0A:08:F4:67:D2:A5:8B:92:AE:16:A4:66:7A
ValidityTue, 15 Aug 2023 11:23:30 GMT - Mon, 13 Nov 2023 11:23:29 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x600, components 3\012- data
Size 171 kB (171053 bytes)
Hash 4fb5c272c6adc00fd49b6b32602e08df
1f9c72765331ca377ba490c55fe1bc2fb09cb32d
3499c0a20ecc2ed3817996bd235036fc0574a5600cc4a8233ac7f183b411b83b
GET /covers/a8/a8mPO.jpg HTTP/1.1
Host: c0.jdbstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: image/jpeg
content-length: 171053
last-modified: Thu, 12 May 2022 03:01:34 GMT
etag: "4fb5c272c6adc00fd49b6b32602e08df"
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HHCvN%2FPlvVHF%2BOS7x6%2BquIgLE%2Bi73BpCRlH2GqhMQnpRL6z4FFtZuKjjZgRthhKarhIeA1%2BarxMv7hQP1yPC6HVeakXRLc8y6qkFGiYFoeQYy9F4WskLyl53v%2Ffa9V3tbPwg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b4f692ad3e56a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
panel.javflag.com/api/videos/Pr3N
200 OK 41 B URL GET HTTP/2 panel.javflag.com/api/videos/Pr3N
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 50fae772c31e057531af94e3a1936fe8
0e1277242882ac51da099cfe4b51e59392b08fd9
3308ce9ac633d28d6001971d573507c52733976fb5a7ffc4700f09a86e6ab452
GET /api/videos/Pr3N HTTP/1.1
Host: panel.javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 55
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xd2GibAGBAQcCc3hHBtoAJCa%2FSwZ7HMXvZLqyomTIWCLrPWOYW2AwTL9RT6lxjMUl9oE1GCXPw2K%2BLCpjS4pUuItRMpJLYzqJnBYaKiulomJOYEve0WdXuugDNZZb%2BCPZVzfuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f693f9a456a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
go.xlrdr.com/config?url=https%3A%2F%2Fcreative.xlrdr.com%2Fwidgets%2Fv4%2FUniversal%3Ftag%3Dgirls%2Fasian%26thumbsMargin%3D0%26gridRows%3D1%26gridColumns%3D1%26sourceId%3D300asrsasgirlwlcop%26creativeId%3D300asrsasgirlwlcop%26responsive%3D0%26hideButton%3D1%26hideTitle%3D1%26userId%3D2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d%26autoplay%3Dall%26autoplayForce%3D1%26showModal%3Dsignup%26memberId%3D%7Bclickid%7D
200 OK 6.6 kB URL GET HTTP/2 go.xlrdr.com/config?url=https%3A%2F%2Fcreative.xlrdr.com%2Fwidgets%2Fv4%2FUniversal%3Ftag%3Dgirls%2Fasian%26thumbsMargin%3D0%26gridRows%3D1%26gridColumns%3D1%26sourceId%3D300asrsasgirlwlcop%26creativeId%3D300asrsasgirlwlcop%26responsive%3D0%26hideButton%3D1%26hideTitle%3D1%26userId%3D2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d%26autoplay%3Dall%26autoplayForce%3D1%26showModal%3Dsignup%26memberId%3D%7Bclickid%7D
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectxlrdr.com
FingerprintB7:7A:2F:CD:F6:76:0D:74:98:F0:DA:47:69:84:7D:8C:4E:2C:2D:63
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (8648), with no line terminators
Hash 63918f25909c1dcd8b288732c6ff67c5
d0af98e0a7fb50b5551bb14f19e04d7a965290d9
7218b5c10e908d1715074cff54cdaa64e8d441e50a374afff9c4da0d09440cb1
GET /config?url=https%3A%2F%2Fcreative.xlrdr.com%2Fwidgets%2Fv4%2FUniversal%3Ftag%3Dgirls%2Fasian%26thumbsMargin%3D0%26gridRows%3D1%26gridColumns%3D1%26sourceId%3D300asrsasgirlwlcop%26creativeId%3D300asrsasgirlwlcop%26responsive%3D0%26hideButton%3D1%26hideTitle%3D1%26userId%3D2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d%26autoplay%3Dall%26autoplayForce%3D1%26showModal%3Dsignup%26memberId%3D%7Bclickid%7D HTTP/1.1
Host: go.xlrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlrdr.com/
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
access-control-allow-origin: https://creative.xlrdr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Sat, 23 Sep 2023 18:04:28 GMT
cf-cache-status: HIT
age: 225
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f697fd090b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
c0.jdbstatic.com/thumbs/aq/AqgKq.jpg
200 OK 11 kB URL GET HTTP/2 c0.jdbstatic.com/thumbs/aq/AqgKq.jpg
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjdbstatic.com
FingerprintF0:F4:F0:50:7D:E0:86:0A:08:F4:67:D2:A5:8B:92:AE:16:A4:66:7A
ValidityTue, 15 Aug 2023 11:23:30 GMT - Mon, 13 Nov 2023 11:23:29 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 147x200, components 3\012- data
Hash 30485e197f141f2d5a87470ba3c8c02f
37a788f0adbebf58245a0c84590c280da2579b11
3f9f921c57fce756996df2b16cfa1ac9523e67d9b7f1ca3142aab0f93c9672e1
GET /thumbs/aq/AqgKq.jpg HTTP/1.1
Host: c0.jdbstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: image/jpeg
content-length: 11321
last-modified: Sun, 08 May 2022 15:09:17 GMT
etag: "30485e197f141f2d5a87470ba3c8c02f"
x-amz-meta-mtime: 1559074193
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n1yjtHABqrkYJp9UI7QAwtghB%2F5qzlGTsPqK%2BWjESNNK3NXdcBV2mKXyKTjn1%2FzNXChUjaMwY7bB2ItYIoOMVOkR0IXoArZhUr6RngTA2Uqg3irT%2BBUvQ0BLtaGYQyk1G9jK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b4f6986bf456a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.barscreative1.com/sb/au/24/54/4e/24544ed07f7394384bbb75023b9b0b3a/1591713925.html
200 OK 1.3 kB URL GET HTTP/2 cdn.barscreative1.com/sb/au/24/54/4e/24544ed07f7394384bbb75023b9b0b3a/1591713925.html
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectcdn.barscreative1.com
FingerprintCB:0F:87:85:B0:83:8B:5C:86:E5:81:91:9D:F5:ED:C4:A2:B6:B1:BE
ValidityTue, 12 Sep 2023 01:01:21 GMT - Mon, 11 Dec 2023 01:01:20 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (1388), with no line terminators
Hash 1e11fba825d4244ebfc11b9784c9744f
86f24edfd397e9f4d65e589ceb97196b71d2d828
7737a119c12f495c4f32f75686c087c59387d5f851ec8c5443a385dda8c5df76
GET /sb/au/24/54/4e/24544ed07f7394384bbb75023b9b0b3a/1591713925.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:41 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Sat, 07 May 2022 03:21:27 GMT
etag: W/"6275e5b7-4fa"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Sat, 23 Sep 2023 19:48:41 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
200 OK 811 B URL GET HTTP/2 creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
IP
Requested by https://r.trackwilltrk.com/s1/6f077301-542e-438f-9945-662f1f933fe8?externalId=c058f9ac-425b-416f-9aaa-dbff5f10be55&cv1=c058f9ac-425b-416f-9aaa-dbff5f10be55&cv2=3169587e34ed0405b1c2f0fec1e75538&cv3=desktop&cv4=64c90bb261d6e24e4a75a4a1&cv5=64c90ba461d6e255f81c8f58&cv6=en&cv7=javflag.com&cv8=Firefox&cv9=60fa6cc461d6e22a417e5fc1&cv10=qp_adxad_stub3_300x250
Certificate IssuerCloudflare, Inc.
Subjectxlrdr.com
FingerprintB7:7A:2F:CD:F6:76:0D:74:98:F0:DA:47:69:84:7D:8C:4E:2C:2D:63
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (872), with no line terminators
Hash 17fa1bbd330dbff3acaa048cf96baebc
f1ae5e002903be6b6e9f96d4f04295c333073a82
0048b7c2fe1e8aeeda2ee555c1a289ebf582592b6dbc2f0132971bf8e15663b2
GET /widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid} HTTP/1.1
Host: creative.xlrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r.trackwilltrk.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: text/html
last-modified: Thu, 14 Sep 2023 12:16:52 GMT
expires: Sat, 23 Sep 2023 18:48:39 GMT
cache-control: max-age=10
strict-transport-security: max-age=15768000
pragma: public
report-to: { "endpoints":[{ "url": "https://go.stripchat.com/report" }], "group": "default", "max_age": 1048576 }
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: HIT
age: 5
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6956a53b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
javflag.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
302 Found 7.3 kB URL GET HTTP/3 javflag.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=pIdWu2gNLSLsWkFnSUzrTm1vEr4VsxQQiawFdEbLjUs-1695494916-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1695494916; dom3ic8zudi28v8lr6fgphwffqoz0j6c=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=ponderriding.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sat, 23 Sep 2023 18:48:39 GMT
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/dffb14d6/main.js
vary: accept-encoding
cache-control: max-age=300, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tQAoLd4pzAkGlY5p7OF8ldvvVjg8WN7DCWtU9IZoJPegekN7xoWJyegSMNqaI5ohAXBCQSm6flZpRDTWQre60n4EECpNzusjSDHzDTQ%2BZGfaDghtyo4yloDNa30HUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f69049aa56b5-OSL
alt-svc: h3=":443"; ma=86400
javflag.com/_next/static/chunks/57-7020e17ef63c36c0fcd5.js
200 OK 19 kB URL GET HTTP/3 javflag.com/_next/static/chunks/57-7020e17ef63c36c0fcd5.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (18582), with no line terminators
Hash cb062bebb762f30b41a26a4d4e65a6d2
3e274a6eb95ffc672834fa59520b50039e69d987
5f6f5127a2bb4cfbd9ec377cdd83240b4503976e0dfc35727c3acecec7f6e142
GET /_next/static/chunks/57-7020e17ef63c36c0fcd5.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-4896"
expires: Sat, 07 Oct 2023 19:14:16 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 1251913
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3hzHNZ5edIXP8tU8plUEmlD4%2BTtcyjBUa%2BB%2FDfGwQbaG0Uz1x0rzOxPpf1w58cyWAY%2BGqCiRFDzpzWBdjQ40VJNWXmXRsAeEZzoO555Bb1qwwzaDM4LWOf3qOyWeZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6764f7b56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
c0.jdbstatic.com/thumbs/q6/q6Ja.jpg
200 OK 14 kB URL GET HTTP/3 c0.jdbstatic.com/thumbs/q6/q6Ja.jpg
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjdbstatic.com
FingerprintF0:F4:F0:50:7D:E0:86:0A:08:F4:67:D2:A5:8B:92:AE:16:A4:66:7A
ValidityTue, 15 Aug 2023 11:23:30 GMT - Mon, 13 Nov 2023 11:23:29 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 147x200, components 3\012- data
Hash c7dcc7f81d1b7dfb618cf50e2871db12
ded1d0eda3bcf580af81b8879977ab1ce952b93f
3cebce59ac3a9ee52dba3dcebab257ceccb729a56f6aa683dbfcf7c87a7eedb7
GET /thumbs/q6/q6Ja.jpg HTTP/1.1
Host: c0.jdbstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:42 GMT
content-type: image/jpeg
content-length: 13987
last-modified: Sun, 08 May 2022 15:33:15 GMT
etag: "c7dcc7f81d1b7dfb618cf50e2871db12"
x-amz-meta-mtime: 1559301833
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FgLFUh2bCPNumLTOl1edX%2BwTR9vLeWsBAlSgmx%2B6IkfavbfgAZedjhuwq%2Ffl61V3Wd4LP3H0ziWpV%2FRD19BL77XIdgz4jfmMg0uXPbjiSsjp04X1BIvWTxsH3UEiZ14DukWr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b4f69a2ae55694-OSL
alt-svc: h3=":443"; ma=86400
panel.javflag.com/api/videos/45x06
200 OK 19 kB URL GET HTTP/2 panel.javflag.com/api/videos/45x06
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type JSON data\012- , ASCII text, with very long lines (19210), with no line terminators
Hash ca9eaac4efec3d94697546dab309ddfb
3db3ef4044d2009dd553900e56fffc1b6ce5387d
003302664af032d3a13809e3961c0cbd3359c41b4b00bd5c95d516ec7e379aa4
GET /api/videos/45x06 HTTP/1.1
Host: panel.javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 53
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=exTBaMaYe%2BmELe78hDbiSPJxIQmEpCrpg48T8224j0nrxEXkbuXXnUehZhisyIJ4JBBN38ptFyrMokP13qx9VjJ8pA1J7BFeI8rlXZDlh0cVQRn4HULYa356lmF5OpnS1JNyPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f693d97056a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
javflag.com/_next/static/chunks/567-6477c388b17ac228d4ee.js
200 OK 30 kB URL GET HTTP/3 javflag.com/_next/static/chunks/567-6477c388b17ac228d4ee.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (29724), with no line terminators
Hash 6910b416c269368ca2747688cc98b052
57f39402eac25b7c1ae9aed6783e8984af936683
7a29af8d44e6159ac5cbfb0a1c9b0651fe91e78d3b0c8bb5dce4083f93a19d76
GET /_next/static/chunks/567-6477c388b17ac228d4ee.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Cookie: cf_clearance=pIdWu2gNLSLsWkFnSUzrTm1vEr4VsxQQiawFdEbLjUs-1695494916-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1695494916; dom3ic8zudi28v8lr6fgphwffqoz0j6c=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=ponderriding.com; sb_main_2ef41dd6bdb358bdf7d02bce45635537=1; sb_count_2ef41dd6bdb358bdf7d02bce45635537=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
etag: W/"62a8b159-741c"
expires: Sat, 07 Oct 2023 21:20:00 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 356900
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=19orxo3fipk1s97j9%2BnK49D7brBs8jFZHECygOENnS79eOt7dl37MVMonrzc0n1xWSbuKyeGlVsjGesUKJi%2BBr%2B3855UFvBnDmp5qxhaq72%2BFmSherZhHap35r6ycg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6943d5156b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
imaginestandingharvest.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSX2sdRRydbfMg9sFWBPFBuA99UDA3u3v3%2FrMPxVivFNOmtop9k9mZ2ZtpZnfWmd27NwEhWpA8Xr%2FB5tykQRuKfgBFb3xQAsVuQciDQQS%2FgELBB1HuTTD6g%2BF3Zs4ZOL8z88lWfkRc5PSwd02vS6XoQrPu1l667XmXaksyyYe1Yaf1fiu4VDODVz23W3dfrr0p2Kpe8F3PdT3Xq%2FWkEZEeLnieV3ch072uV%2B%2B69cCve80AQ%2FP%2Fvc0dWOqAD47Is5C8enrvQQDJJkjiL64Iu5rp9JU34lzRTBsM%2BO67yWqiiwTxKYyMgyjZPVFD20e9r6GTnZlh6MG%2FwlBWxPntV4TJ7olLhIOdY6OhgkgQ8nMoBhMINYGkEzB9F5I%2FIgDjuL6MJL53XZuCrh2zdMpWZO7JH5BFReZ%2Bfg5J%2FGBRyWHtllZ5JnViMYxKyOEEsj9Bmu8jWz8DWeyDZR9D8odk4ckSknh72SoNyQ8vRkGrFTHfn%2FfCpjcftFqN%2BY7H6XxbME7bbdoKg84sISknkNEESoxArYN8uqSDPHKQpw5iflhrs6DT4Z0mp4IxP4y8ThREQZcyN2Juo%2BsjZ9MZRsjSEZgagZkNpGYDq3IEk38Du1LC8jOwWUWctzcw4CUKQVBYgoISFJKgyAiKQbnDlfVteY8rm4feSfdPeqMc66y%2FRXd01hcJ2UqPyIVZeH9ufohVcVjzRRR4nLdCHjaanZBHbe76IRNBs9VoNhttWFlC2jOzUddlRZ7vfYRUVmRu8zFCug%2Br9sHkedD8RdBi3PZd0JVx0HGxnty%2FQweRov060zG4LpFmc8jWnC11RF6Y2Vj8%2Fm8IdnD5RzIrMFMiNSXuyO8I%2BmpzfFMXZPumLiz5cjnNZCzX6fR9b2U0E2c%2Ff0usFdrwq1fs6LPX2JSYwr13hM2WaMJl0rfk%2FqLkXJieNkyQr67a90R4I7cri7lJ8nTpxuu9q3FqhLVSJxNQWREy%2BQBMVuTcXw9nf%2FfiT99CmglMXiLOD8hJQep9sHQDNj31bzWBUaeaMHVQ5OXY%2BOHpoZIVqV%2F4BUocXP7h9vnwWvU7aFjCiv9cPMVbdhN944Bmd5HEJQamxECVoGoEm58dZ6k5uPy4MSuEyhmHyjjboTLq0%2BOArTysibZodbuBG7S564YB932vKRhtBLRLfT9qI7OVeKbx1D8AAAD%2F%2FwEAAP%2F%2F74pf7YwEAAA%3D
200 OK 0 B URL GET HTTP/1.1 imaginestandingharvest.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSX2sdRRydbfMg9sFWBPFBuA99UDA3u3v3%2FrMPxVivFNOmtop9k9mZ2ZtpZnfWmd27NwEhWpA8Xr%2FB5tykQRuKfgBFb3xQAsVuQciDQQS%2FgELBB1HuTTD6g%2BF3Zs4ZOL8z88lWfkRc5PSwd02vS6XoQrPu1l667XmXaksyyYe1Yaf1fiu4VDODVz23W3dfrr0p2Kpe8F3PdT3Xq%2FWkEZEeLnieV3ch072uV%2B%2B69cCve80AQ%2FP%2Fvc0dWOqAD47Is5C8enrvQQDJJkjiL64Iu5rp9JU34lzRTBsM%2BO67yWqiiwTxKYyMgyjZPVFD20e9r6GTnZlh6MG%2FwlBWxPntV4TJ7olLhIOdY6OhgkgQ8nMoBhMINYGkEzB9F5I%2FIgDjuL6MJL53XZuCrh2zdMpWZO7JH5BFReZ%2Bfg5J%2FGBRyWHtllZ5JnViMYxKyOEEsj9Bmu8jWz8DWeyDZR9D8odk4ckSknh72SoNyQ8vRkGrFTHfn%2FfCpjcftFqN%2BY7H6XxbME7bbdoKg84sISknkNEESoxArYN8uqSDPHKQpw5iflhrs6DT4Z0mp4IxP4y8ThREQZcyN2Juo%2BsjZ9MZRsjSEZgagZkNpGYDq3IEk38Du1LC8jOwWUWctzcw4CUKQVBYgoISFJKgyAiKQbnDlfVteY8rm4feSfdPeqMc66y%2FRXd01hcJ2UqPyIVZeH9ufohVcVjzRRR4nLdCHjaanZBHbe76IRNBs9VoNhttWFlC2jOzUddlRZ7vfYRUVmRu8zFCug%2Br9sHkedD8RdBi3PZd0JVx0HGxnty%2FQweRov060zG4LpFmc8jWnC11RF6Y2Vj8%2Fm8IdnD5RzIrMFMiNSXuyO8I%2BmpzfFMXZPumLiz5cjnNZCzX6fR9b2U0E2c%2Ff0usFdrwq1fs6LPX2JSYwr13hM2WaMJl0rfk%2FqLkXJieNkyQr67a90R4I7cri7lJ8nTpxuu9q3FqhLVSJxNQWREy%2BQBMVuTcXw9nf%2FfiT99CmglMXiLOD8hJQep9sHQDNj31bzWBUaeaMHVQ5OXY%2BOHpoZIVqV%2F4BUocXP7h9vnwWvU7aFjCiv9cPMVbdhN944Bmd5HEJQamxECVoGoEm58dZ6k5uPy4MSuEyhmHyjjboTLq0%2BOArTysibZodbuBG7S564YB932vKRhtBLRLfT9qI7OVeKbx1D8AAAD%2F%2FwEAAP%2F%2F74pf7YwEAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectimaginestandingharvest.com
FingerprintB1:F0:19:A8:92:1B:50:8F:02:7A:0A:34:5C:99:1D:B9:79:D9:89:54
ValiditySat, 16 Sep 2023 03:11:21 GMT - Fri, 15 Dec 2023 03:11:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSX2sdRRydbfMg9sFWBPFBuA99UDA3u3v3%2FrMPxVivFNOmtop9k9mZ2ZtpZnfWmd27NwEhWpA8Xr%2FB5tykQRuKfgBFb3xQAsVuQciDQQS%2FgELBB1HuTTD6g%2BF3Zs4ZOL8z88lWfkRc5PSwd02vS6XoQrPu1l667XmXaksyyYe1Yaf1fiu4VDODVz23W3dfrr0p2Kpe8F3PdT3Xq%2FWkEZEeLnieV3ch072uV%2B%2B69cCve80AQ%2FP%2Fvc0dWOqAD47Is5C8enrvQQDJJkjiL64Iu5rp9JU34lzRTBsM%2BO67yWqiiwTxKYyMgyjZPVFD20e9r6GTnZlh6MG%2FwlBWxPntV4TJ7olLhIOdY6OhgkgQ8nMoBhMINYGkEzB9F5I%2FIgDjuL6MJL53XZuCrh2zdMpWZO7JH5BFReZ%2Bfg5J%2FGBRyWHtllZ5JnViMYxKyOEEsj9Bmu8jWz8DWeyDZR9D8odk4ckSknh72SoNyQ8vRkGrFTHfn%2FfCpjcftFqN%2BY7H6XxbME7bbdoKg84sISknkNEESoxArYN8uqSDPHKQpw5iflhrs6DT4Z0mp4IxP4y8ThREQZcyN2Juo%2BsjZ9MZRsjSEZgagZkNpGYDq3IEk38Du1LC8jOwWUWctzcw4CUKQVBYgoISFJKgyAiKQbnDlfVteY8rm4feSfdPeqMc66y%2FRXd01hcJ2UqPyIVZeH9ufohVcVjzRRR4nLdCHjaanZBHbe76IRNBs9VoNhttWFlC2jOzUddlRZ7vfYRUVmRu8zFCug%2Br9sHkedD8RdBi3PZd0JVx0HGxnty%2FQweRov060zG4LpFmc8jWnC11RF6Y2Vj8%2Fm8IdnD5RzIrMFMiNSXuyO8I%2BmpzfFMXZPumLiz5cjnNZCzX6fR9b2U0E2c%2Ff0usFdrwq1fs6LPX2JSYwr13hM2WaMJl0rfk%2FqLkXJieNkyQr67a90R4I7cri7lJ8nTpxuu9q3FqhLVSJxNQWREy%2BQBMVuTcXw9nf%2FfiT99CmglMXiLOD8hJQep9sHQDNj31bzWBUaeaMHVQ5OXY%2BOHpoZIVqV%2F4BUocXP7h9vnwWvU7aFjCiv9cPMVbdhN944Bmd5HEJQamxECVoGoEm58dZ6k5uPy4MSuEyhmHyjjboTLq0%2BOArTysibZodbuBG7S564YB932vKRhtBLRLfT9qI7OVeKbx1D8AAAD%2F%2FwEAAP%2F%2F74pf7YwEAAA%3D HTTP/1.1
Host: imaginestandingharvest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Cookie: u_pl=16353405; uid_id2=f466fc22-1b51-4663-81da-7ecda77a6b48:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2ef41dd6bdb358bdf7d02bce45635537=[4376831]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 23 Sep 2023 18:48:41 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: dda79ff2b5346661a99dab67f1e7eda0
Strict-Transport-Security: max-age=0; includeSubdomains
adxadserv.com/px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D60fa6cc461d6e22a417e5fc1%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fjavflag.com%252Fen%252Fv%252Fa8mPO%2526dt%253D1695494919778%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fjavflag.com%252F&d_r=1&d_s=1280x1024&d_w=300x250&t_s=1695494920145&t_i=1695494920428&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=b696cb2a-0c1a-4855-82d1-6bdff980e60a&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=cfad3425-5a41-11ee-92f5-e25a5bb9767f&spid=60fa6cc461d6e22a417e5fc1&fpid_sa=1695494920428&fpid=&feid_sa=1695494920428&sid_sa=1695494920428&feid=5158ef1690f6fe7e12955e4f26cd0340&sid=791f0fcddc6420b1076f75f9c19a24a6&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=javflag.com&s_rst=1&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.512
200 OK 0 B URL GET HTTP/1.1 adxadserv.com/px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D60fa6cc461d6e22a417e5fc1%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fjavflag.com%252Fen%252Fv%252Fa8mPO%2526dt%253D1695494919778%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fjavflag.com%252F&d_r=1&d_s=1280x1024&d_w=300x250&t_s=1695494920145&t_i=1695494920428&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=b696cb2a-0c1a-4855-82d1-6bdff980e60a&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=cfad3425-5a41-11ee-92f5-e25a5bb9767f&spid=60fa6cc461d6e22a417e5fc1&fpid_sa=1695494920428&fpid=&feid_sa=1695494920428&sid_sa=1695494920428&feid=5158ef1690f6fe7e12955e4f26cd0340&sid=791f0fcddc6420b1076f75f9c19a24a6&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=javflag.com&s_rst=1&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.512
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://ads.adxadserv.com/ad?spotid=60fa6cc461d6e22a417e5fc1&type=300x250&output=html&extra1=0&ref=https%3A//javflag.com/en/v/a8mPO&dt=1695494919778&screen=1280x1024&tags=
Certificate IssuerLet's Encrypt
Subjectadxadserv.com
FingerprintEC:5B:70:8C:C3:4D:22:CB:BB:DC:30:33:17:B2:17:AE:6F:22:35:B3
ValidityWed, 02 Aug 2023 10:52:22 GMT - Tue, 31 Oct 2023 10:52:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D60fa6cc461d6e22a417e5fc1%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fjavflag.com%252Fen%252Fv%252Fa8mPO%2526dt%253D1695494919778%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fjavflag.com%252F&d_r=1&d_s=1280x1024&d_w=300x250&t_s=1695494920145&t_i=1695494920428&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=b696cb2a-0c1a-4855-82d1-6bdff980e60a&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=cfad3425-5a41-11ee-92f5-e25a5bb9767f&spid=60fa6cc461d6e22a417e5fc1&fpid_sa=1695494920428&fpid=&feid_sa=1695494920428&sid_sa=1695494920428&feid=5158ef1690f6fe7e12955e4f26cd0340&sid=791f0fcddc6420b1076f75f9c19a24a6&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=javflag.com&s_rst=1&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.512 HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 23 Sep 2023 18:48:40 GMT
Content-Length: 0
Connection: keep-alive
ponderriding.com/ntv.json?key=32ef2a2504620607fa5a59dd0d7fa048&vstc=3
200 OK 13 kB URL GET HTTP/1.1 ponderriding.com/ntv.json?key=32ef2a2504620607fa5a59dd0d7fa048&vstc=3
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectponderriding.com
Fingerprint04:FA:28:9B:C5:4E:3E:C2:F7:B4:B7:DE:CA:79:BE:73:62:80:5C:84
ValidityThu, 14 Sep 2023 11:16:23 GMT - Wed, 13 Dec 2023 11:16:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ntv.json?key=32ef2a2504620607fa5a59dd0d7fa048&vstc=3 HTTP/1.1
Host: ponderriding.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 18:48:37 GMT
Content-Type: application/json
Content-Length: 13320
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://javflag.com
Access-Control-Allow-Origin: https://javflag.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16241006; expires=Sun, 24 Sep 2023 18:48:37 GMT; secure; SameSite=None
pdhtkv=true; expires=Sun, 24 Sep 2023 18:48:37 GMT; secure; SameSite=None
uncs=1; expires=Sun, 24 Sep 2023 18:48:37 GMT; secure; SameSite=None
pdhtkv49=true; expires=Sun, 24 Sep 2023 18:48:37 GMT; secure; SameSite=None
uncs49=1; expires=Sun, 24 Sep 2023 18:48:37 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7176afb096f4513ee5955dd91e8d29e3
Strict-Transport-Security: max-age=0; includeSubdomains
c0.jdbstatic.com/thumbs/kb/kbqN.jpg
200 OK 20 kB URL GET HTTP/3 c0.jdbstatic.com/thumbs/kb/kbqN.jpg
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjdbstatic.com
FingerprintF0:F4:F0:50:7D:E0:86:0A:08:F4:67:D2:A5:8B:92:AE:16:A4:66:7A
ValidityTue, 15 Aug 2023 11:23:30 GMT - Mon, 13 Nov 2023 11:23:29 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 147x200, components 3\012- data
Hash 3968f2c73231214cb0aae401f0de0dae
6a6b34063667946f3439f66d5c2363ef64257198
c129ecface4dd8e47ffb39363a23848fa7c70b43039afe3bed47c9135429ed81
GET /thumbs/kb/kbqN.jpg HTTP/1.1
Host: c0.jdbstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:42 GMT
content-type: image/jpeg
content-length: 20320
last-modified: Sun, 08 May 2022 15:22:11 GMT
etag: "3968f2c73231214cb0aae401f0de0dae"
x-amz-meta-mtime: 1559359501
cache-control: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wPfrP3Erm0sPXTxtHrgp2xSaJOhCTUB7G5bGAf3MEoLMcPQIOZvkXZKjGoFDp9KBfMRZF4yCSCfMI5hNAk7FojJS4a4ugJ1K%2FeX%2FVJAeVGfAqjbjpWFbEznTdpbOx%2FJ8ZBRe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b4f69a2ade5694-OSL
alt-svc: h3=":443"; ma=86400
imaginestandingharvest.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fstyle.css&l=5788&fd=493
200 OK 0 B URL GET HTTP/1.1 imaginestandingharvest.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fstyle.css&l=5788&fd=493
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerLet's Encrypt
Subjectimaginestandingharvest.com
FingerprintB1:F0:19:A8:92:1B:50:8F:02:7A:0A:34:5C:99:1D:B9:79:D9:89:54
ValiditySat, 16 Sep 2023 03:11:21 GMT - Fri, 15 Dec 2023 03:11:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fstyle.css&l=5788&fd=493 HTTP/1.1
Host: imaginestandingharvest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Cookie: u_pl=16353405; uid_id2=f466fc22-1b51-4663-81da-7ecda77a6b48:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2ef41dd6bdb358bdf7d02bce45635537=[4376831]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 18:48:42 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
panel.javflag.com/api/videos/Y0k6
200 OK 15 kB URL GET HTTP/2 panel.javflag.com/api/videos/Y0k6
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type JSON data\012- , ASCII text, with very long lines (14768), with no line terminators
Hash 7ea6e4cb1b6a1278e865dd7adb8dcb1b
2cf39d4333c2bf6cdce4b3f64feabb1ba574e7f8
e61eb9ee3935d53a8b01c505ab0dd3a7d4f8236532a57a44edd230c841dda270
GET /api/videos/Y0k6 HTTP/1.1
Host: panel.javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javflag.com
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
cache-control: no-cache, private
x-ratelimit-limit: 60
x-ratelimit-remaining: 51
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FW44PnEjE%2BPLAvVPS8vs3vlRWcBijSXYJFssOv2Cqag%2Bn3UeW9Bwi1tAhZ8Y52LVeA14IhfATsIQhfvvMae9j9cwRk021j8c%2BwO09yFa67wwtmRuy7wPz32lLiWgHix8Ni59XA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b4f693f99656a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
javflag.com/_next/static/css/84aee5c14f65a18b4255.css
200 OK 12 kB URL GET HTTP/3 javflag.com/_next/static/css/84aee5c14f65a18b4255.css
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type ASCII text, with very long lines (12020), with no line terminators
Hash 554f2fe53ad7e514ad819ca5ed231ef2
ff30da8e718ebae32c58abebc2edd76cab9adea9
113e242e71cb89ccdbda64098ea863ec8f2e2ca43bcab7e48001a586cc1fb775
GET /_next/static/css/84aee5c14f65a18b4255.css HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javflag.com/en/v/a8mPO
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=pIdWu2gNLSLsWkFnSUzrTm1vEr4VsxQQiawFdEbLjUs-1695494916-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1695494916; dom3ic8zudi28v8lr6fgphwffqoz0j6c=f466fc22-1b51-4663-81da-7ecda77a6b48%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=ponderriding.com; sb_main_2ef41dd6bdb358bdf7d02bce45635537=1; sb_count_2ef41dd6bdb358bdf7d02bce45635537=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: text/css
cache-control: max-age=2592000
cf-bgj: minify
cf-polished: origSize=12033
etag: W/"62a8b159-2f01"
expires: Thu, 07 Sep 2023 21:18:48 GMT
last-modified: Tue, 14 Jun 2022 16:03:37 GMT
cf-cache-status: HIT
age: 1838258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yJr3QbAZeDYHyqKERIjjD5ubmXwZoVPaAjTdPPvnYcaQfdl0NquO0AoDaT%2FNbrRKJhD95Myf8AlDqHMjcxMyejXocGj12gzK2st6WtTnSEoJ5XTsPtw147w4KSDcdQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6944d6e56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
creative.xlrdr.com/widgets/v4/Universal/lang/en.json
200 OK 172 B URL GET HTTP/3 creative.xlrdr.com/widgets/v4/Universal/lang/en.json
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectxlrdr.com
FingerprintB7:7A:2F:CD:F6:76:0D:74:98:F0:DA:47:69:84:7D:8C:4E:2C:2D:63
ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 402f4a06b5dcf96d25dd4ff1f840784b
edebb253af01ef1882f424ee6278368485898d62
bd570b38d9d687c593545a7b250570605c601381f3d3d5263346b295e12a55ba
GET /widgets/v4/Universal/lang/en.json HTTP/1.1
Host: creative.xlrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:40 GMT
content-type: application/json
last-modified: Thu, 14 Sep 2023 12:16:52 GMT
etag: W/"6502f9b4-ac"
expires: Sat, 23 Sep 2023 18:48:41 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
set-cookie: __cflb=02DiuDFRFiBZBvMSLtr56RYDQPp7N2PDTbsa6EAfMUpLc; SameSite=None; Secure; path=/; expires=Sun, 24-Sep-23 18:48:40 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6974a9bb4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
b-hls-24.doppiocdn.com/hls/122457947/122457947_480p.m3u8
200 OK 730 B URL GET HTTP/3 b-hls-24.doppiocdn.com/hls/122457947/122457947_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (748), with no line terminators
Hash 222627ec52e227e790c0b20b8130de21
cc5b430e806d48afb285d64c1c5b3f4612f93ea8
49ae4193496d28b28505d71e99fa9aefec978ef378210ce6729db16341f97fc1
GET /hls/122457947/122457947_480p.m3u8 HTTP/1.1
Host: b-hls-24.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:50 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Sat, 23 Sep 2023 18:48:49 GMT
x-proxy-cache: HIT
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 80b4f6d09fc4568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
javflag.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
200 OK 1.2 kB URL GET HTTP/3 javflag.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
Requested by https://javflag.com/en/v/a8mPO
Certificate IssuerGoogle Trust Services LLC
Subjectjavflag.com
FingerprintA6:05:5C:EE:2C:89:96:1C:48:A1:70:52:9F:B1:2D:20:82:C7:A8:5C
ValidityTue, 22 Aug 2023 08:25:11 GMT - Mon, 20 Nov 2023 08:25:10 GMT
File type HTML document, ASCII text, with very long lines (1271), with no line terminators
Hash 40d981045a7516cdadd00e8dccc9c58d
8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3
71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: javflag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javflag.com/en/v/a8mPO
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:35 GMT
content-type: application/javascript
last-modified: Wed, 20 Sep 2023 08:17:07 GMT
etag: W/"650aaa83-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gKKiLWgIID5bqQejPQKFRLxYrqN5prQLlrN2iULwjt6PsWfMLE8o9bsjJ7TzUlWwLSWk4QpGuKhuDZs%2FEgdERGFVVAaEQStpUjjWapx3aXdccwmFN8sAC7yPgbjhfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b4f6765f9356b5-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Mon, 25 Sep 2023 18:48:35 GMT
cache-control: max-age=172800, public
content-encoding: gzip
b-hls-24.doppiocdn.com/hls/122457947/122457947_480p.m3u8
200 OK 730 B URL GET HTTP/3 b-hls-24.doppiocdn.com/hls/122457947/122457947_480p.m3u8
IP
Requested by https://creative.xlrdr.com/widgets/v4/Universal?tag=girls/asian&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300asrsasgirlwlcop&creativeId=300asrsasgirlwlcop&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (748), with no line terminators
Hash eab3d7dc666b87d5c4a2b5ad60d612f5
beed35286db1fa5462937c313f3b54fd718e8c63
989b92bbea4cfb492f48286434fa9d784117896c2a4d81363b33ef136b74b022
GET /hls/122457947/122457947_480p.m3u8 HTTP/1.1
Host: b-hls-24.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.xlrdr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 23 Sep 2023 18:48:52 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Sat, 23 Sep 2023 18:48:51 GMT
x-proxy-cache: MISS
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 80b4f6dd0a78568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
188.114.97.1
104.18.59.150
173.233.137.52
185.98.53.17
185.76.9.19
35.157.129.203
0.0.0.0