{"report_id":"1d0365f6-e5f2-4d61-83a0-37425e7dbfa6","version":6,"status":"done","tags":[],"date":"2023-12-05T01:46:12Z","url":{"schema":"http","addr":"javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.3.82","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"title":"Download Page - Javgg.net"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:05:31Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"video.ktkjmp.com","ip":{"addr":"104.18.62.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-08-07","domain_rank":23778,"first_seen":"2020-10-02 10:52:19","last_seen":"2023-12-04 05:09:09","alert_count":0,"request_count":1,"received_data":1012,"sent_data":454,"comment":"","tags":null,"fingerprints":null},{"fqdn":"js.cabnnr.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-08-30","domain_rank":37463,"first_seen":"2021-08-30 14:50:21","last_seen":"2023-12-04 19:54:16","alert_count":0,"request_count":1,"received_data":23070,"sent_data":421,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.google.com","ip":{"addr":"142.250.150.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":81,"first_seen":"2016-03-20 13:44:49","last_seen":"2023-12-04 09:41:10","alert_count":0,"request_count":3,"received_data":5303,"sent_data":1773,"comment":"","tags":null,"fingerprints":null},{"fqdn":"edge-hls.doppiocdn.com","ip":{"addr":"104.18.63.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-16","domain_rank":0,"first_seen":"2022-11-01 13:03:56","last_seen":"2023-12-04 05:09:10","alert_count":0,"request_count":1,"received_data":670,"sent_data":486,"comment":"","tags":null,"fingerprints":null},{"fqdn":"f7642e332d.6771600c3f.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":322,"sent_data":893,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.jads.co","ip":{"addr":"205.185.216.42","port":443,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"domain_registered":"2012-05-17","domain_rank":46788,"first_seen":"2019-12-04 09:50:06","last_seen":"2023-12-03 06:42:44","alert_count":0,"request_count":6,"received_data":1568402,"sent_data":3895,"comment":"","tags":null,"fingerprints":null},{"fqdn":"creative.mnaspm.com","ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-05","domain_rank":0,"first_seen":"2023-10-04 13:20:24","last_seen":"2023-12-03 14:32:15","alert_count":0,"request_count":10,"received_data":710746,"sent_data":9062,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fp.metricswpsh.com","ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-10-29","domain_rank":0,"first_seen":"2022-04-22 13:20:32","last_seen":"2023-12-04 17:54:52","alert_count":0,"request_count":2,"received_data":804,"sent_data":1029,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.tsyndicate.com","ip":{"addr":"8.248.225.238","port":443,"asn":3356,"as":"LEVEL3","country":"United States","country_code":"US"},"domain_registered":"2017-03-08","domain_rank":16265,"first_seen":"2017-07-04 08:00:09","last_seen":"2023-12-03 05:17:09","alert_count":0,"request_count":2,"received_data":15931,"sent_data":863,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.tapioni.com","ip":{"addr":"104.22.39.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-05-27","domain_rank":167297,"first_seen":"2021-07-01 12:46:55","last_seen":"2023-12-04 14:26:50","alert_count":0,"request_count":1,"received_data":1253,"sent_data":404,"comment":"","tags":null,"fingerprints":null},{"fqdn":"poweredby.jads.co","ip":{"addr":"185.94.236.253","port":443,"asn":42567,"as":"Mojohost B.v.","country":"Netherlands","country_code":"NL"},"domain_registered":"2012-05-17","domain_rank":30525,"first_seen":"2019-12-04 11:34:12","last_seen":"2023-12-03 06:42:42","alert_count":0,"request_count":13,"received_data":26934,"sent_data":6328,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10 13:11:19","last_seen":"2023-11-19 18:48:38","alert_count":0,"request_count":1,"received_data":666,"sent_data":562,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nereserv.com","ip":{"addr":"167.235.163.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-12-21","domain_rank":40015,"first_seen":"2020-12-21 12:07:56","last_seen":"2023-12-04 18:40:27","alert_count":0,"request_count":1,"received_data":320,"sent_data":592,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.strpst.com","ip":{"addr":"104.18.63.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-05-31","domain_rank":12993,"first_seen":"2021-06-03 10:45:56","last_seen":"2023-12-04 18:41:21","alert_count":0,"request_count":1,"received_data":5429,"sent_data":459,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2015-04-17 22:46:33","last_seen":"2023-12-04 05:09:04","alert_count":0,"request_count":2,"received_data":84773,"sent_data":1026,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.74.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":12905,"first_seen":"2013-08-16 11:51:31","last_seen":"2023-12-04 08:14:01","alert_count":0,"request_count":1,"received_data":32084,"sent_data":436,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.bookmsg.com","ip":{"addr":"94.130.197.138","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-09-15","domain_rank":47495,"first_seen":"2020-11-24 15:56:32","last_seen":"2023-12-04 13:44:47","alert_count":0,"request_count":4,"received_data":3452,"sent_data":2170,"comment":"","tags":null,"fingerprints":null},{"fqdn":"btds.zog.link","ip":{"addr":"109.206.176.75","port":443,"asn":50245,"as":"Serverel Inc.","country":"Netherlands","country_code":"NL"},"domain_registered":"2015-01-11","domain_rank":38469,"first_seen":"2019-10-07 23:35:03","last_seen":"2023-12-03 06:07:30","alert_count":0,"request_count":1,"received_data":366,"sent_data":831,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.1vag.com","ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2018-03-20","domain_rank":48829,"first_seen":"2021-02-10 16:12:50","last_seen":"2023-12-02 17:48:32","alert_count":0,"request_count":1,"received_data":465,"sent_data":513,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stripchat.com","ip":{"addr":"104.18.63.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2006-02-13","domain_rank":10390,"first_seen":"2016-06-13 12:24:50","last_seen":"2023-12-04 14:21:01","alert_count":0,"request_count":2,"received_data":45287,"sent_data":976,"comment":"","tags":null,"fingerprints":null},{"fqdn":"5f25d.dappaa.site","ip":{"addr":"135.181.208.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2023-06-29","domain_rank":0,"first_seen":"2023-06-29 14:28:52","last_seen":"2023-06-29 14:28:52","alert_count":0,"request_count":7,"received_data":233604,"sent_data":3604,"comment":"","tags":null,"fingerprints":null},{"fqdn":"go.hpyjmp.com","ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-01-23","domain_rank":58500,"first_seen":"2020-08-14 07:58:20","last_seen":"2023-11-25 04:48:37","alert_count":0,"request_count":1,"received_data":1329,"sent_data":809,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.56.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":1294,"first_seen":"2019-09-24 16:34:56","last_seen":"2023-12-04 06:35:54","alert_count":0,"request_count":1,"received_data":20383,"sent_data":496,"comment":"","tags":null,"fingerprints":null},{"fqdn":"notification.tubecup.net","ip":{"addr":"138.201.237.88","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2008-09-26","domain_rank":8210,"first_seen":"2019-08-30 11:36:01","last_seen":"2023-12-02 04:53:23","alert_count":0,"request_count":1,"received_data":1397,"sent_data":478,"comment":"","tags":null,"fingerprints":null},{"fqdn":"6a1d032c40.b65415fde6.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":3,"request_count":3,"received_data":608201,"sent_data":1391,"comment":"","tags":null,"fingerprints":null},{"fqdn":"b-hls-20.doppiocdn.com","ip":{"addr":"104.18.63.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-16","domain_rank":0,"first_seen":"2022-03-01 19:02:33","last_seen":"2023-11-19 20:22:14","alert_count":0,"request_count":4,"received_data":393776,"sent_data":2033,"comment":"","tags":null,"fingerprints":null},{"fqdn":"433bb3d20f.6542309b8a.com","ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":3,"request_count":3,"received_data":7233,"sent_data":8692,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rtbrenab.com","ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2023-07-17","domain_rank":0,"first_seen":"2023-07-17 17:41:28","last_seen":"2023-11-19 16:42:40","alert_count":0,"request_count":2,"received_data":2448,"sent_data":3416,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xhamsterlive.com","ip":{"addr":"104.18.63.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-03-30","domain_rank":20594,"first_seen":"2015-10-09 03:55:47","last_seen":"2023-11-28 04:59:09","alert_count":0,"request_count":1,"received_data":594,"sent_data":438,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tsyndicate.com","ip":{"addr":"136.243.51.205","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2017-03-08","domain_rank":13042,"first_seen":"2017-03-16 10:04:54","last_seen":"2023-12-04 13:47:03","alert_count":0,"request_count":1,"received_data":4988,"sent_data":656,"comment":"","tags":null,"fingerprints":null},{"fqdn":"js.capndr.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-08-30","domain_rank":316718,"first_seen":"2021-08-30 14:51:01","last_seen":"2023-12-03 09:55:25","alert_count":0,"request_count":1,"received_data":374,"sent_data":408,"comment":"","tags":null,"fingerprints":null},{"fqdn":"storage.multstorage.com","ip":{"addr":"172.67.174.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2023-09-22","domain_rank":0,"first_seen":"2023-09-22 14:56:00","last_seen":"2023-12-04 01:55:15","alert_count":0,"request_count":1,"received_data":1565,"sent_data":533,"comment":"","tags":null,"fingerprints":null},{"fqdn":"javgg.net","ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2020-12-07","domain_rank":293169,"first_seen":"2020-12-07 15:08:28","last_seen":"2023-12-03 19:02:01","alert_count":0,"request_count":9,"received_data":230888,"sent_data":7049,"comment":"","tags":null,"fingerprints":null},{"fqdn":"go.mnaspm.com","ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-05","domain_rank":0,"first_seen":"2023-10-04 13:16:29","last_seen":"2023-12-03 05:39:46","alert_count":0,"request_count":6,"received_data":83206,"sent_data":4627,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"b65415fde6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"6542309b8a.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"6542309b8a.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"6542309b8a.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"6771600c3f.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"b65415fde6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"b65415fde6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"javgg.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6000e980031672fd4d0f111d4c8de071","sha1":"d0d906178e06177ff5f9409ebc8afa7a5a3cf716","sha256":"ddff13fccb0b6ed6f52948536b5ca285a749affd2666721b81d3639d879024ec","sha512":"76bed6f4edaa6ba7c33b805d8dbb181d3caf4c86b07d2139bbbc63d3c3cac0f92df0ed91e73a46371269ba37e8c79f541d990bbad2028e320e4e6553e4f26d32","ssdeep":"96:hpt85OOQvQASY3bn/JVGtPEu2bhSlcvBEp9W5usXBYIXJmsqmXVFSV+LwtycmWKy:btKOZvQoEP99IZbLwvKT8aBp7VTRLvMV","tlshash":"70e1e8cb394b706203723cbb425f645bd11e9f961c885c86ca58c4e8ba7034945efea6","size":7360,"data":"","first_seen":"2023-12-05T02:46:19Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"975000000c000003003c00c0000c00000000cc33030000f0c0000c3c0c3000003cc000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-15T20:31:43.474339Z","times_seen":80856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/cdn-cgi/apps/head/M89UaTsofQaKWze2ZVBaZiwO3NQ.js","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b0a08b0788119bcdf7f140530b6c9cc","sha1":"e51f56f722fbc221f4f76ac719a984ee7a5a88c2","sha256":"4b3936b68ccb722baee876605703338a260a706a666fcd11ee47b6089a56d2db","sha512":"a811c13d99110e70c659976206dafb3b6cf7c6fbca7afcf3fa5678a78d9475ccff07fa9523610f60831a09653c98db27dee704daf95e4acaafd11d01e5a57887","ssdeep":"96:6I8DsSH1u71csiORJI2dhV49X96bAuTfGsksXtceLqmdZpJvPHUvKCo:6pDH1u71/RJIkhG590ltce2mnptPHUiB","tlshash":"3eb1b7aa3c64c13aacef275f0f671edaf6a8916744504c73b276c4575ca1bb2c253432","size":5185,"data":"","first_seen":"2023-03-07T12:04:59Z","last_seen":"2024-08-21T06:49:55.079449Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c85bdf9d587e61e44778b84f7dfb0820","sha1":"0505916a7e11871228b05d4cfce5a5c1c8413cf6","sha256":"d64140783c4998306f7cba3b6e55e9086166aaa27b2865f6bdaae346d88c631c","sha512":"b108cf8d0951725bc3a45c7f7296176492f741c2fc8f27686319b2c72152dcb733b6d31a3034ffd557d71543e34ec7e18509724e7332c2b01ad30b4e2c64a058","ssdeep":"","tlshash":"5d2176541cca28f806c655e82776d25de332300c3843a111bd36a05405a3f9eb4f67ca","size":1432,"data":"","first_seen":"2023-08-04T15:46:36Z","last_seen":"2024-08-21T09:43:29.65272Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6622176d681536112b1362012c962f01","sha1":"9608e85a518e75d62c855f5abff0e7fc49450e9a","sha256":"8317a8da4cfda39ac5b64f36aeb0bb3f44ae8e5ec25d24518412c2da53fc3fed","sha512":"2bcd7604648f8f42675390a14bd8a9416a894c20e5e27ca353375304392721e409f0fbcc0d86c00f7fc507e808549e313337cf1baddc1301af8d9762af6b7ff4","ssdeep":"","tlshash":"d2b0123912770f557821900e0342c518464305078fe064cf3b9d06e43bdb13b941420d","size":101,"data":"","first_seen":"2023-09-15T14:50:03Z","last_seen":"2024-08-21T06:49:55.067239Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fd3a9fe61a101e0783bd17aa8360f9c","sha1":"dac50474981b64a1a9d2807ebc97d920ae91e580","sha256":"510854671d347c1a0cc465149df564204a73e5751be3321c22ed660af2871cd6","sha512":"85c59f08ff6022b4ed75f7c8b4ed9e2aadd48a5970c2f2ccd5d0a514e331f78c66ce38f75bf804e7c5dfe281413acd04ddcda77f77132add72a7d3f33dff2e14","ssdeep":"","tlshash":"25d095714957c83433d4104f60f5f259361111d81f136d0042cedc1f9510dd34551d58","size":247,"data":"","first_seen":"2024-08-20T16:45:01.929041Z","last_seen":"2024-08-20T16:45:01.929041Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5f25d.dappaa.site/Qwx3iw5.js","fqdn":"5f25d.dappaa.site","domain":"dappaa.site","tld":"site"},"ip":{"addr":"135.181.208.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a761bae4530f6bfb270abfa75b1cb9b","sha1":"617e8fd84f14b7a601d055c6ff2ad09441e823c6","sha256":"8e629883ac62697032eb697449e83a2969d69e7e8adb7a624157e6e1a4afc13e","sha512":"8840b7b2560e2fe6a05638a07f17f254478f5082076234e01b742ae958d7ce3456296b88b7f6fb8dc304fcdb414e8b161f241360d3fa842e746bdb3147112461","ssdeep":"3072:nIQZd+XlymROPOdYSWnKfpkOeY/yt3NwFcQ3:7d+1y7OdYUfp068WFv3","tlshash":"1734a689b6c1b1a502e371f8016f450af23b7904754ec5c2f169d6d1aeb9b0ea937f38","size":236201,"data":"","first_seen":"2023-11-30T14:56:36Z","last_seen":"2023-12-18T08:20:45Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"57148f46501f62ebc9340fa30257dae2","sha1":"5b869f00f57ad833038559b563a9b1e79fcebb0d","sha256":"507232baac4ddc02187490e9ca76ee0998cd8f6bfd0a9f3218e2314c8e85bafb","sha512":"317c416a07df5be47b7df875fb12f89000ac365119ed80114cf7ec6ec5aaffa477592772ee89b1c2c2f53f067de401e6a0344c19559758866cb360e411b6d2f5","ssdeep":"","tlshash":"20a002b7f682603c456272b41329769df96f091487d02c5c57416670a0713e75605049","size":64,"data":"","first_seen":"2023-09-15T14:50:03Z","last_seen":"2024-08-21T06:49:55.068801Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/adgpt.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.22.39.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b93fe1dfb3b9596da09b9eee17a9006f","sha1":"89aeae49cadfb3ba7cc66702b3a18403e1ae5b2e","sha256":"fdf9db0f687a66cd7c0d22c8589cca33edacca3079971d3d1a21675ca5c917bc","sha512":"ba0d7d3840676f33ab3410226d84302b262ad7c43dce2210dcdc92cad20bce07c0f61cf732f7aa81849ce7436726f8326dd2b0c8c72b1ef45775eed1349dd474","ssdeep":"","tlshash":"9e4133963eb0ede183d7550c312f4849f27d35b083a6d8c257e5caa83e785892191e8e","size":2028,"data":"","first_seen":"2023-11-30T14:56:36Z","last_seen":"2023-12-18T08:20:45Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.mnaspm.com/LPOmega/main.d5bb40f50c46b20ec9c1.js","fqdn":"creative.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99e1ee3c248b25f2044084de6c2e3e49","sha1":"b062e6e5374432b9c30609b4e113fcff47bcfd88","sha256":"f578b0f672273c7e94b503f8481383eb3a9ee493b5591f51313c0200249066dd","sha512":"fe9c30710e0162ac8fa94293ac05d0ac2f12fd086c63311e868a2abc4d096b9c4607e1878e2cfdfa6af266944d06c97f102d09c181228346a6c26f0fafe3e0a0","ssdeep":"3072:ZGJnZyaBYwU7+O+1l39NYDGLr93uHgw41Gcezdta2AajX3rR8JOT5Y7a9mVCpNoX:QJJe7a1leGHBRepfpo5uEXa2f","tlshash":"da64f6ccb6d5f0a543d3a2b5403f600bf37a6854b85dd450e626d9e47c7a88ea223f2d","size":329329,"data":"","first_seen":"2023-11-24T04:23:20Z","last_seen":"2024-08-20T18:05:58.18597Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.56.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd1d068fdb5fe90b6c05a5b3940e088c","sha1":"0d96f9df8772633a9df4c81cf323a4ef8998ba59","sha256":"6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101","sha512":"7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30","ssdeep":"384:XrqR6Q0npafIm4rKi/BwEXN1w29mItq0W5i6G:Q70nBrKuB0Uqti6G","tlshash":"c692a6daba85723613f76076913f220b733b356528068458d22ad7c12c7d68f6317f6e","size":19986,"data":"","first_seen":"2023-10-13T06:51:00Z","last_seen":"2026-04-09T22:50:09.66145Z","times_seen":17320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"185.94.236.253","port":443,"asn":42567,"as":"Mojohost B.v.","country":"Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc8141c4650030c41f6a98026b12ce80","sha1":"af5618f7e467a207d4c64627be580283ab5640cd","sha256":"5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51","sha512":"70fc6246b67dd18b92661c9562020cc9256a9f2aa500017bc79e71b9528251dc241505b58efe58174e0268d6cd44a2158c25f5cb6217ea25a6ea73f58e99ca86","ssdeep":"","tlshash":"16815f6b3659f835488b9e7b21bf5e283673a9060f078414469cdc2cc47cdfa053bd85","size":3758,"data":"","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-04-12T21:21:39.953238Z","times_seen":2113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/adshow.php?adzone=1029723","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"185.94.236.253","port":443,"asn":42567,"as":"Mojohost B.v.","country":"Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b9e23fc9496c68d9651058548fde6b98","sha1":"20242917a6cf716f467f2609a401d5eaeb9791bb","sha256":"70da2f7aa28af2308cb27ef29a8902ce44b9ab7ad0be4ac94d25359765c320ba","sha512":"926a0edaa2e2713a416bc3d75057a7ec788557c7a19f9f5fb7c404413a8ae2b8f2169663268d1ebb6517a50937ed82b44a6880a0e228801edb96ec19ae03719e","ssdeep":"","tlshash":"5da002b7f682603c442272b41319758df96f0914c7902c5877416670a0713e7a605049","size":64,"data":"","first_seen":"2023-09-15T14:50:03Z","last_seen":"2024-08-21T06:49:55.069725Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1a863702f0dff0483ee6b597e9908f93","sha1":"b75c04b2311c22ab55c42d25ba1970d96b0aecd4","sha256":"1bb165164a0165cd74e728a44cd36df8fc3f2115c631d824640bbfb21f6f2614","sha512":"908edaf61022ebd51ff4fb3207c21a712f51b3003739095142ac55031faeea1573477a3acdf68a64942b889ac3a2f8dbd8e784859a88479f9027e010c94373ba","ssdeep":"","tlshash":"5df068d3b438709397d2b054604e6728ac6691d42bf4c46293d95cb36c7409c683c56f","size":640,"data":"","first_seen":"2024-08-20T16:45:01.932952Z","last_seen":"2024-08-20T16:45:01.932952Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/cdn-cgi/zaraz/s.js?z=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","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f52fd67a70435a1bded28652c6da4b2","sha1":"efa071ced195b442bf36abf58090ed498788bac2","sha256":"f433755e9e5007f19fb877765040d0d3633e1530722c55d999a077e291bd71ee","sha512":"437e0790e600416a334c0d1810cb668b43bbfef3f935b73aaf5ec885aa9b63fc97fefb8c5eb29fedc0ec3fa41ead875910d78f3d3ef0819553bb708ee3867718","ssdeep":"96:ib57vFgJBJoSzaSIF32tp5E9Q5ar/MYW6FQGz9SxoNOme7vS0GW/SVlALrbA1A9:ib57qJqSIF3yjqMYWGQGlNF2K0+VlAL5","tlshash":"70c1eaa4ad99343709cfb26fb06e12c0f4baa154b0a11450c98c5cc99dfdf7e359ae4e","size":6031,"data":"","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5f25d.dappaa.site/api/users/406710?host=javgg.net\u0026ev=211\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fjavgg.net%2Fdownload%2FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%3D%3D\u0026i=1\u0026s1=%25IntertitialDesktop%25","fqdn":"5f25d.dappaa.site","domain":"dappaa.site","tld":"site"},"ip":{"addr":"135.181.208.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"73f98918fbde36840e608e91a49a351f","sha1":"3867ac7e766a29986b53f620386d279b29914db0","sha256":"bd09c224d69081a02a70c2232bd8752e93bfd7ce793c43ca068f76b4edefdd7a","sha512":"11f9c99d7ef752d40ecc0e5fb7326915c528938055e80781bb5d49b2abf8fa328242b90aa24c41a40d720972ab63b102aa90c64bd5768de837f0da5435da90ba","ssdeep":"","tlshash":"111123e601af5fab5201d05d613b2af5635c2d489df04843b5df006900dfb41b5d4f4b","size":906,"data":"","first_seen":"2024-08-20T16:45:01.93398Z","last_seen":"2024-08-20T16:45:01.93398Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5bff98444a86d049b3854b602e5b93a","sha1":"9d7ae60bbb2fb702f7f718b8e08aece024497230","sha256":"4812016a728fe4ac2914f8a7f3b3ea328177e95e6ba29bd7e757fab25c88d0f1","sha512":"29fc3929b301354d7615a1e5898827cc56bf47eb56583cd9c47bba56d067c8e80ac9ec832786a3766e3e1511a6f1a8a1cf797fcd435494806ded5a55e0c96244","ssdeep":"96:HWJnGwVvxkh0NhBaJzOHp+G1EbCQiQZAJ1tTBn0yXS+tpTQxA:2owhxf9H9eWQVAhB08TH","tlshash":"92d1f1f6b97b334d979371ea2d161041500098a903adbc98fa64f2d5fcb4cfe192b350","size":6402,"data":"","first_seen":"2023-08-01T22:49:14Z","last_seen":"2025-11-15T07:18:43.025864Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a018998e624650aee74a761e8e88a322","sha1":"1819f3af99c1184e069db22167c2f3cb034bed56","sha256":"e6e27e451cdf0774d98424149fd05d06647519d266d565ac436ec3adfadd3c07","sha512":"6ad4a70995c4326a161fc559114e847600c259cfed2e84a644b3d4a8e0bcbc0ca884e819954f1bc1c215b7928b7cc81a3ff98bad3c764e1a22d4f5a41c0f9976","ssdeep":"","tlshash":"d5d0a71df5ac6600493b30b408776b0c7e3a740835072141995c16d01f28ddc450be8b","size":231,"data":"","first_seen":"2023-09-15T14:50:03Z","last_seen":"2024-08-21T06:49:55.072988Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6a1d032c40.b65415fde6.com/e9888d79e7fb4bee037592776d9d7dd4.js","fqdn":"6a1d032c40.b65415fde6.com","domain":"b65415fde6.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1921240690aab70adaf5b379b94b3185","sha1":"9fa83c75665a217ce7b2a5b2a7fcec43cf0c19ec","sha256":"25ab37f5254eae1598cd8d0bd1017f7a32d421a1a2b3418aa41589eb5e993efd","sha512":"a3e3143afc3bfd9976e1b5a050d5af07501e543dfd0d83d8eb00f6df43e83fe726690565ea891fbddf6a54f658e1409f8b68bc9b9407e1d6815da450added620","ssdeep":"12288:7dL+/A6cuHgORb3Sy+SmID6n4d9gqJ8woDM3eBzt1o9xsX:7dL4AOg4b3S+gsgLIOaKX","tlshash":"c3c45b6131802039717fc496926b278e733cb507e9174e59faafabe483e6d44f236790","size":554094,"data":"","first_seen":"2023-11-30T11:53:15Z","last_seen":"2024-08-20T17:21:40.756115Z","times_seen":174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/build.m.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"712d64373dd416d618af872f8df81075","sha1":"9483668da79d6fed279e6050ace3cc7b2c211bc0","sha256":"2acb8b5e738c3e88e2f8a111c5fbb60bc81e724f230d3fce37fc78652c615570","sha512":"ea1ff273cbcf191d2d8ef1e0eb99aec97a8f7a99dacfcf69dbff9c1cc8da05ae44233a29c725d6c8f9fe2603985e22a980261314760e90b2a1b4fd188c6a9ce2","ssdeep":"1536:UtdtUtBt16Ob+96Q8nSalwVDgnlS1EvRrpIKz4d0l:eLen496QzgnlS14co","tlshash":"dc334d443a50747481fb406ba47f4709b3383907e8074818f56dedeabbb8d8962b6f79","size":54229,"data":"","first_seen":"2023-11-24T10:57:25Z","last_seen":"2024-08-20T18:04:30.186363Z","times_seen":293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"178e01cbc68fcbc203954f0d7ba1b843","sha1":"39c1774eaecc22e1d4f0bd2e3a41079b03cc863e","sha256":"1844efccdfcbffc70fb5efa4121d7d2d92dfaaef9479a2feb67e56917e1b484d","sha512":"a691e882130563d793ce35088be19c64d5709308797484d400bbe49933bd0ac6b5efff4aa80a560000cdb7e0e95508011ae4cc3ccf3be86533c32f747b97bd01","ssdeep":"","tlshash":"e4a002bbf682613c442672b41319758df96f0a1487902c5857416670a0713eb5605049","size":64,"data":"","first_seen":"2023-09-15T14:50:03Z","last_seen":"2024-08-21T06:49:55.073686Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5f25d.dappaa.site/api/users/310148?host=javgg.net\u0026ev=211\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fjavgg.net%2Fdownload%2FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%3D%3D\u0026i=1\u0026s1=%25IntertitialDesktop%25","fqdn":"5f25d.dappaa.site","domain":"dappaa.site","tld":"site"},"ip":{"addr":"135.181.208.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"34807f62470560fb8b9e0833c0fa8be7","sha1":"70029fc1053762fc7f0e9fdf7ce83eb372b923b0","sha256":"9969cd48c9e27280ed19a97be7158c016f51ed451ef2959f13623100cc8de06b","sha512":"f9707093ea2a6db98d0a728f72b648f81a74720d1e9fa8b5567cde7c0b1ec18079b80aaddb7e795ccb716e1483f03569dc20cb966fb71a34b6e6c2976b8f0fe9","ssdeep":"","tlshash":"3001fe86451c1af6570c40a7ba3d4e5a8dad05397744550bfb541f4e07cf5c602d015b","size":702,"data":"","first_seen":"2024-08-20T16:45:01.938586Z","last_seen":"2024-08-20T16:45:01.938586Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6a1d032c40.b65415fde6.com/c1c4fab3e4d825cf95ab773a3377267d.js","fqdn":"6a1d032c40.b65415fde6.com","domain":"b65415fde6.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bb89ad4630a4d7b22eb0c216dc936b5","sha1":"8f0e16dc1352baf000d5fb66f4952426fc4ebc92","sha256":"8f75cea3fd587c1b227d39bc957979b13093c6d2ad246d756effc43acde47977","sha512":"884dbf34d82c5e688702fbbdd816259a190de3e7ac0ed7c03c39633893b19c60fad3c2674294fe5e3cef73421ae41dd4cd6d76b5b8f35988d49643fd5597df06","ssdeep":"3072:G2Fg5FW2xJOOKNW1IJOO6/9j0a8oYPasJOOsXJOO8ySS:G2FCxxJOg1IJOh/9j0a8o6JOJJObySS","tlshash":"9bf3f7ccf2c3b07543e76164943f2106f33a6916b4498458e666e8d1bcb898e923bf79","size":165885,"data":"","first_seen":"2023-12-04T13:36:01Z","last_seen":"2024-08-20T16:49:43.231811Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.multstorage.com/log/count.html","fqdn":"storage.multstorage.com","domain":"multstorage.com","tld":"com"},"ip":{"addr":"172.67.174.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f697a0f2411e463adbc1211493fe5a6","sha1":"93c154152bda427938543b8efbd8d3b594abbac7","sha256":"08a5735f5232b651af89f552e8d0fb7b21d6605fba48f335318699d80d12703e","sha512":"4dc32d6712d024f1a2f8b2dd33749a075f13f69a2f7af664c3b5d61e31a74e81eeee3b8e1cd6f893fe0a324adef1772e340df95e338de0e47afe5c0d19e9fd10","ssdeep":"","tlshash":"b001640ef6406c6c886188be396a3d2228b1a015547a6da17425e9827b808ee8163bc2","size":718,"data":"","first_seen":"2023-09-18T17:19:52Z","last_seen":"2025-03-01T23:33:09.846843Z","times_seen":12563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ebc87e87fdd31f39c37893da1f5e597","sha1":"b33ad23f870934eac1ae6e9e2dd17a54ba0e21cc","sha256":"5df416be3ca42f52617814b3b896cd370f7ffd4e8776cbef64addd3c71d98455","sha512":"915f4b4e47d9cf6036c3d3210374d1991feff6f43df430544d98818e4886bee75e6d4ba8c5f62b45d62f8a0acfb130a8902a016e8b776c288c3b1e875a4d67af","ssdeep":"","tlshash":"7fa002f7f682603c442372b41319758df96f191897902c5857416a70a0713e75605049","size":64,"data":"","first_seen":"2023-09-15T14:50:03Z","last_seen":"2024-08-21T06:49:55.074638Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9c2355c1862f27be33f1d1c490852011","sha1":"df4b4ecfcbcb400ba65c6db887bb7b0c34967fc2","sha256":"cd886e4500625ef3ab17e2ecc8d0d25c8545ab87769755796aa71a412f19c2f3","sha512":"41d0b64eff9df12d714c5eb18dceebeccc0b30351c7d45a532a5a7bb5bcb0601a9dc8a9852888a922b926b3afbdb70cdcea781cde42e8013238eafda8e3e1e40","ssdeep":"","tlshash":"81b012bc74043078507328e1113fedea73d2142334c358015b05cda89cb0d7ed0098ec","size":98,"data":"","first_seen":"2023-04-12T12:52:26Z","last_seen":"2024-08-21T09:40:16.312553Z","times_seen":850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5f25d.dappaa.site/api/users/406939?host=javgg.net\u0026ev=211\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fjavgg.net%2Fdownload%2FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%3D%3D\u0026i=1\u0026s1=%25IntertitialDesktop%25","fqdn":"5f25d.dappaa.site","domain":"dappaa.site","tld":"site"},"ip":{"addr":"135.181.208.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"6eee2e09f437990195bb4de7a56799d0","sha1":"9c8b8de6f74bac75a282c79b5828526961e09818","sha256":"89f5b07fc495f676fab8b9a00cdc67aeeaa1b812b29fb9948dc18224749dba64","sha512":"2bd4ff0d2461120ef1abbfeec358abe1b0cf702051227b1a9a33666c4528d9432a328c5ff2d371487cb1c648664c785e047efd4db7002947a88fe81f8608f043","ssdeep":"","tlshash":"fd1100ea41afafaa5300d01e503b2af4635c2d489ee48443b5ce011d00ef74571d4f06","size":907,"data":"","first_seen":"2024-08-20T16:45:01.94323Z","last_seen":"2024-08-20T16:45:01.94323Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/cdn-cgi/apps/body/AB9f-K672Ygo6-QjbJbi_OuWbG8.js","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e49cfccbd8a19265e672e2618578a39","sha1":"d24f67fd8bb5b72c41c32d7764706234c32cc899","sha256":"9ac8fafce1df003f50e0e3d9c906b6d60de0db2fb72a50f48a663cfcb50d0d67","sha512":"30786cf60bf581159f33170ef034b5a7a3b58906165a45d808aaeea438856ee1aea96626de8baf59f72fd9a8b85bb506414c502e9dcad1549341c853b5e952eb","ssdeep":"96:HfcPu96yipw0FlzC7nJGjzowRH0HP/F9vOL8rKUY8Mzt0rLGTG:Hfku96yie0fSnJGjzowt4P/F9GLpIcgV","tlshash":"dfb19492b431432010db16cf2a639b9c3ab1d2a9061040a1d4bec76f58b1fb2f6af576","size":5312,"data":"","first_seen":"2023-03-07T12:04:59Z","last_seen":"2024-08-21T06:49:55.084481Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/interstitial.ts.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"8.248.225.238","port":443,"asn":3356,"as":"LEVEL3","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3db8af2d4adc9a658c6dad2842af78f9","sha1":"7066ff7c3e9fe2ed1def69769bf7f3a64fc0c57b","sha256":"fee87ce1c02eef2e5b44cfe56cbf8c1d73fbca45f1cdc72b79e796cb6ee3cbe3","sha512":"ade5204e90144008c41914cbd862fe57f5280c206b35c6e8e2d764039cb6b32926a624568c9cde34a43b107db53ed64b107d0c8e2fe06e191be3a9e09e5126f0","ssdeep":"192:p59TOxDa0MbpOIWtloml5EWKT0IU+3ZlZLE+Qncgp5MgL40xYXF6FQZPjlTld47r:p5pkalgfkob+Fic4M0I/pdu7f","tlshash":"e26209d879e72d7090f2913d706fa330737915946ea40c01a47b98942afbd8af17eb6c","size":15538,"data":"","first_seen":"2023-10-20T23:51:50Z","last_seen":"2024-08-21T04:00:39.47655Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0003bd922d872e81b42b7da6b8a3284","sha1":"0e40a9656b991c8cb603f2f5681f88fe2fffb829","sha256":"e5bb203060407ca7bc98416a90eaa9699ed7ea09d23d5abb211408add1ae899f","sha512":"0d5d0050d3a6104c02213cd5bccb721a13b15dd0433b400a3fac38c795126585b5b6b56bc7dd3783496442d7bfc56b80fb566cd58697cf628b9e5aff31e92146","ssdeep":"","tlshash":"3ba002b7f682603c442276b41319758df96f091487902c595741aa70a0713e75605049","size":64,"data":"","first_seen":"2023-09-15T14:50:03Z","last_seen":"2024-08-21T06:49:55.080064Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.6.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89664,"data":"","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-04-15T20:15:04.832387Z","times_seen":28195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.mnaspm.com/LPOmega/hls.4cfa5b780bfed20a8b26.js","fqdn":"creative.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"22f22b49cc901aa95826401f7ce0930c","sha1":"6471abdd35ab6d511b67d73ad1375f1ee0f255de","sha256":"0fae8b03858a764bad3e9af19bfc924ead5b9e25c760432c19e91cba3dff1cf3","sha512":"c37dafc2a1afd6bc747d4847383135d8fec8ed886c1985c4ecc9246e034695ae92c499168d401e35fa0e756fb539c7415845f4fe2f2171ce2d866928da3e67b4","ssdeep":"","tlshash":"1da002331111bc19e1bc00496352a7f03c5900092f0a0ce01f0104713032e1b8c905c7","size":61,"data":"","first_seen":"2023-03-14T06:30:24Z","last_seen":"2026-04-05T03:11:43.755126Z","times_seen":2444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.mnaspm.com/LPOmega/vendors~hls.0d45af8f1e202112dd0a.js","fqdn":"creative.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5560d3d9d4d3b5d533550b6a3719ad06","sha1":"8a923212bb611763c1609ab743d113214cc27c17","sha256":"63cf9fda52eb82dd5f9d18cd15e54af4ee08a7a37c6f0fdd09cc34fbfa598e06","sha512":"9ccc6b532fda90f16f2ab5f41835db06b719351ff70d6c45193a324d31d7da52593312d1bb67add133798cb458f77c7fb5666fc37610a097c1ae935832cc7f17","ssdeep":"3072:B5HXautd6Ey2MMo+a9IX/LWFhKNAP3E/aht4:DKUIEy2Moa9IjWrKNG3E/wO","tlshash":"3b042aee36947856438361a4503f46976236bc096408d06cbb5bfaee1d7cc4ab13bf78","size":177865,"data":"","first_seen":"2023-10-14T20:50:01Z","last_seen":"2024-08-21T04:43:00.687097Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f96a3e232ce12d85eb9ce27898f7cc5d","sha1":"9e70d7ea9e70db8e74c1673a0273ea7e5bc5dad0","sha256":"42b9613cad936a783b6d086c0bae31b632aac2ef496b2293dbd3bd402f47365c","sha512":"0f7f29c7784a6f4968a8f642bb2b4f27b3f687130c5f38e94421e0580877ab5a7834ad6aa0bb95d18217bc43b2825d170567ecc1c7a3b4f50fb2b7b928bd4feb","ssdeep":"","tlshash":"20114f3921e8a13ec3c6609e20bde7ac3e7c60962e0b5040816ddc2dac10d57d85fdbe","size":1074,"data":"","first_seen":"2024-08-20T16:45:01.946252Z","last_seen":"2024-08-20T16:45:01.946252Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:57.719Z","timestamp":1701740757719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 03 Jul 2023 00:00:00 GMT","end":"Tue, 02 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D","sha256":"D9:9E:DA:D7:6F:5A:E0:87:16:F3:3E:A0:A8:34:8B:84:B7:B0:98:30:2D:18:D8:53:E6:3C:09:06:19:48:07:54"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:52 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 5631\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e5f-7918\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 769940\r\nexpires: Sun, 24 Nov 2024 01:45:52 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=tNjRamEWse4oLoWcMdTTV6UnQk%2FDw8E9fA0NfIM6X%2FqanR5a08j8Mwi5h0YzuGn22jjfZ5LAT0XQkAoAK1fRdWBGUF0psnTaek%2BNyBBtI6hYROu%2FC7QxqUsvLbjZKrsd9nWrb26e\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 83089cb3fa1556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5631,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-04-15T20:30:55.231709Z","times_seen":243912,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":16,"dns":1,"connect":4,"send":0,"wait":6,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.6.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:57.732Z","timestamp":1701740757732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"CC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42","sha256":"9A:90:D4:1D:0C:D1:CA:9D:4D:19:37:44:C4:E6:E4:28:27:C0:F5:0A:9C:B4:56:89:C4:D1:8A:63:A7:01:28:54"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31100\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Nov 2023 19:52:50 GMT\r\nexpires: Thu, 28 Nov 2024 19:52:50 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Thu, 08 Sep 2022 18:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 453182\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31100,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65447)","md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-04-15T20:15:04.832387Z","times_seen":28195,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":4,"connect":8,"send":0,"wait":9,"receive":8,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5f25d.dappaa.site/c2zHvw9.js","fqdn":"5f25d.dappaa.site","domain":"dappaa.site","tld":"site"},"ip":{"addr":"135.181.208.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:57.730Z","timestamp":1701740757730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"5f25a.dappaa.site","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Nov 2023 09:27:10 GMT","end":"Sun, 11 Feb 2024 09:27:09 GMT"},"fingerprint":{"sha1":"ED:39:E9:89:76:BC:5A:5D:20:61:0F:0E:66:27:F5:A1:61:75:DC:78","sha256":"28:DD:C5:D6:46:2C:6D:3B:0C:5A:37:92:47:55:B2:B0:08:1C:DB:67:4D:D2:D3:46:4F:98:F5:1A:04:0D:AE:42"}}},"request":{"raw":"GET /c2zHvw9.js HTTP/1.1\r\nHost: 5f25d.dappaa.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 05 Dec 2023 01:45:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 75986\r\nlast-modified: Thu, 30 Nov 2023 11:46:10 GMT\r\nvary: Accept-Encoding\r\netag: \"65687602-128d2\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncf-cache-status: HIT\r\nage: 59\r\ncf-ray: 82e2de9effc04e1c-HEL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75986,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65503), with no line terminators","md5":"6a761bae4530f6bfb270abfa75b1cb9b","sha1":"617e8fd84f14b7a601d055c6ff2ad09441e823c6","sha256":"8e629883ac62697032eb697449e83a2969d69e7e8adb7a624157e6e1a4afc13e","sha512":"8840b7b2560e2fe6a05638a07f17f254478f5082076234e01b742ae958d7ce3456296b88b7f6fb8dc304fcdb414e8b161f241360d3fa842e746bdb3147112461","ssdeep":"3072:nIQZd+XlymROPOdYSWnKfpkOeY/yt3NwFcQ3:7d+1y7OdYUfp068WFv3","tlshash":"1734a689b6c1b1a502e371f8016f450af23b7904754ec5c2f169d6d1aeb9b0ea937f38","first_seen":"2023-11-30T14:56:36Z","last_seen":"2023-12-18T08:20:45Z","times_seen":113,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":97,"connect":20,"send":0,"wait":13,"receive":29,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5f25d.dappaa.site/Qwx3iw5.js","fqdn":"5f25d.dappaa.site","domain":"dappaa.site","tld":"site"},"ip":{"addr":"135.181.208.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:57.726Z","timestamp":1701740757726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"5f25a.dappaa.site","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Nov 2023 09:27:10 GMT","end":"Sun, 11 Feb 2024 09:27:09 GMT"},"fingerprint":{"sha1":"ED:39:E9:89:76:BC:5A:5D:20:61:0F:0E:66:27:F5:A1:61:75:DC:78","sha256":"28:DD:C5:D6:46:2C:6D:3B:0C:5A:37:92:47:55:B2:B0:08:1C:DB:67:4D:D2:D3:46:4F:98:F5:1A:04:0D:AE:42"}}},"request":{"raw":"GET /Qwx3iw5.js HTTP/1.1\r\nHost: 5f25d.dappaa.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 05 Dec 2023 01:45:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 75986\r\nlast-modified: Thu, 30 Nov 2023 11:46:10 GMT\r\nvary: Accept-Encoding\r\netag: \"65687602-128d2\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncf-cache-status: HIT\r\nage: 59\r\ncf-ray: 82e2de9effc04e1c-HEL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75986,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65503), with no line terminators","md5":"6a761bae4530f6bfb270abfa75b1cb9b","sha1":"617e8fd84f14b7a601d055c6ff2ad09441e823c6","sha256":"8e629883ac62697032eb697449e83a2969d69e7e8adb7a624157e6e1a4afc13e","sha512":"8840b7b2560e2fe6a05638a07f17f254478f5082076234e01b742ae958d7ce3456296b88b7f6fb8dc304fcdb414e8b161f241360d3fa842e746bdb3147112461","ssdeep":"3072:nIQZd+XlymROPOdYSWnKfpkOeY/yt3NwFcQ3:7d+1y7OdYUfp068WFv3","tlshash":"1734a689b6c1b1a502e371f8016f450af23b7904754ec5c2f169d6d1aeb9b0ea937f38","first_seen":"2023-11-30T14:56:36Z","last_seen":"2023-12-18T08:20:45Z","times_seen":113,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":142,"dns":100,"connect":20,"send":0,"wait":41,"receive":23,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5f25d.dappaa.site/jXswbg5.js","fqdn":"5f25d.dappaa.site","domain":"dappaa.site","tld":"site"},"ip":{"addr":"135.181.208.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:57.723Z","timestamp":1701740757723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"5f25a.dappaa.site","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Nov 2023 09:27:10 GMT","end":"Sun, 11 Feb 2024 09:27:09 GMT"},"fingerprint":{"sha1":"ED:39:E9:89:76:BC:5A:5D:20:61:0F:0E:66:27:F5:A1:61:75:DC:78","sha256":"28:DD:C5:D6:46:2C:6D:3B:0C:5A:37:92:47:55:B2:B0:08:1C:DB:67:4D:D2:D3:46:4F:98:F5:1A:04:0D:AE:42"}}},"request":{"raw":"GET /jXswbg5.js HTTP/1.1\r\nHost: 5f25d.dappaa.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 05 Dec 2023 01:45:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 75986\r\nlast-modified: Thu, 30 Nov 2023 11:46:10 GMT\r\nvary: Accept-Encoding\r\netag: \"65687602-128d2\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncf-cache-status: HIT\r\nage: 59\r\ncf-ray: 82e2de9effc04e1c-HEL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75986,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65503), with no line terminators","md5":"6a761bae4530f6bfb270abfa75b1cb9b","sha1":"617e8fd84f14b7a601d055c6ff2ad09441e823c6","sha256":"8e629883ac62697032eb697449e83a2969d69e7e8adb7a624157e6e1a4afc13e","sha512":"8840b7b2560e2fe6a05638a07f17f254478f5082076234e01b742ae958d7ce3456296b88b7f6fb8dc304fcdb414e8b161f241360d3fa842e746bdb3147112461","ssdeep":"3072:nIQZd+XlymROPOdYSWnKfpkOeY/yt3NwFcQ3:7d+1y7OdYUfp068WFv3","tlshash":"1734a689b6c1b1a502e371f8016f450af23b7904754ec5c2f169d6d1aeb9b0ea937f38","first_seen":"2023-11-30T14:56:36Z","last_seen":"2023-12-18T08:20:45Z","times_seen":113,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":148,"dns":100,"connect":20,"send":0,"wait":61,"receive":23,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/interstitial.ts.css","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"8.248.225.238","port":443,"asn":3356,"as":"LEVEL3","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:57.721Z","timestamp":1701740757721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 14 Jun 2023 00:00:00 GMT","end":"Sun, 14 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"B6:87:8F:D6:E3:48:CF:61:4E:55:B9:6B:66:FC:B2:13:7F:A0:0D:BA","sha256":"46:FA:A5:F7:83:7D:D2:D7:E7:02:EB:C2:AB:DE:3C:E1:98:3D:0B:FD:9D:DD:35:B6:36:79:23:13:66:4A:30:CE"}}},"request":{"raw":"GET /sdk/v1/interstitial.ts.css HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:52 GMT\r\ncontent-type: text/css\r\ncontent-length: 8914\r\nserver: nginx\r\nlast-modified: Mon, 16 Oct 2023 07:52:02 GMT\r\netag: \"652ceba2-22d2\"\r\nx-robots-tag: noindex, nofollow\r\nage: 4297624\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8914,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8914), with no line terminators","md5":"37a4c1426a9518ad582f5120d0d7066f","sha1":"2bf81ae33b28c866e81ea9b97d2bf9c7908e0443","sha256":"5c892ca9a8b5bd1d9a4a32a19daf779efda9740eeb7a6ef7b737946ade7bb021","sha512":"1835a1b728235f3e8a4b3b23c155f604e08712ea1761236d7591be8f272c4bfcd75eb46b359e3c66c37f0012cf4fd610f5042061bf1d0e6e21d4b19695d83129","ssdeep":"96:uoozJ7To0PZ1rr91rJZnvATJrBRp6heRaq1T1gDSnWLr3fAAiAJAVUQ5gkitFnJz:qPnOXa5Sn6PAZseUhnfh","tlshash":"8b02407149e22e57dd33d259a1846af403b4c8059ff25aafb93b7d1442cb28fb22db44","first_seen":"2023-10-13T09:37:52Z","last_seen":"2024-08-21T04:53:54.342232Z","times_seen":34,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":239,"dns":110,"connect":1,"send":0,"wait":2,"receive":16,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/interstitial.ts.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"8.248.225.238","port":443,"asn":3356,"as":"LEVEL3","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:57.722Z","timestamp":1701740757722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 14 Jun 2023 00:00:00 GMT","end":"Sun, 14 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"B6:87:8F:D6:E3:48:CF:61:4E:55:B9:6B:66:FC:B2:13:7F:A0:0D:BA","sha256":"46:FA:A5:F7:83:7D:D2:D7:E7:02:EB:C2:AB:DE:3C:E1:98:3D:0B:FD:9D:DD:35:B6:36:79:23:13:66:4A:30:CE"}}},"request":{"raw":"GET /sdk/v1/interstitial.ts.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6412\r\nserver: nginx\r\nlast-modified: Mon, 16 Oct 2023 07:52:02 GMT\r\nx-robots-tag: noindex, nofollow\r\nvary: Accept-Encoding\r\netag: W/\"652ceba2-3cb2\"\r\ncontent-encoding: gzip\r\nage: 4297624\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6412,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15449)","md5":"3db8af2d4adc9a658c6dad2842af78f9","sha1":"7066ff7c3e9fe2ed1def69769bf7f3a64fc0c57b","sha256":"fee87ce1c02eef2e5b44cfe56cbf8c1d73fbca45f1cdc72b79e796cb6ee3cbe3","sha512":"ade5204e90144008c41914cbd862fe57f5280c206b35c6e8e2d764039cb6b32926a624568c9cde34a43b107db53ed64b107d0c8e2fe06e191be3a9e09e5126f0","ssdeep":"192:p59TOxDa0MbpOIWtloml5EWKT0IU+3ZlZLE+Qncgp5MgL40xYXF6FQZPjlTld47r:p5pkalgfkob+Fic4M0I/pdu7f","tlshash":"e26209d879e72d7090f2913d706fa330737915946ea40c01a47b98942afbd8af17eb6c","first_seen":"2023-10-20T23:51:50Z","last_seen":"2024-08-21T04:00:39.47655Z","times_seen":32,"resource_available":true,"data":null}},"time_used":719,"timings":{"blocked":352,"dns":111,"connect":1,"send":0,"wait":2,"receive":1,"ssl":248},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"185.94.236.253","port":443,"asn":42567,"as":"Mojohost B.v.","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.247Z","timestamp":1701740758247,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 26 Dec 2022 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB","sha256":"0F:63:44:A5:4C:F5:99:71:ED:3B:7C:66:EE:A7:8B:A9:8B:6D:DE:B9:33:65:7C:13:92:3A:35:43:7E:A7:64:D5"}}},"request":{"raw":"GET /js/jads.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 05 Dec 2023 01:45:52 GMT\r\nContent-Type: text/html\r\nContent-Length: 178\r\nConnection: keep-alive\r\nLocation: jads2.js\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":178,"size_decoded":0,"mime_type":"application/x-javascript","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text, with CRLF line terminators","md5":"cd2e0e43980a00fb6a2742d3afd803b8","sha1":"81ffbd1712afe8cdf138b570c0fc9934742c33c1","sha256":"bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d","sha512":"0344c6b2757d4d787ed4a31ec7043c9dc9bf57017e451f60cecb9ad8f5febf64acf2a6c996346ae4b23297623ebf747954410aee27ee3c2f3c6ccd15a15d0f2d","ssdeep":"","tlshash":"60c012a9ab026cc9a8973b3866c3a190e2ec80649bd9491112a45a47f08b19b9ec23d1","first_seen":"2023-04-05T03:10:45Z","last_seen":"2025-03-01T20:29:44.66739Z","times_seen":16591,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":91,"dns":1,"connect":38,"send":0,"wait":24,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"185.94.236.253","port":443,"asn":42567,"as":"Mojohost B.v.","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.247Z","timestamp":1701740758247,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 26 Dec 2022 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB","sha256":"0F:63:44:A5:4C:F5:99:71:ED:3B:7C:66:EE:A7:8B:A9:8B:6D:DE:B9:33:65:7C:13:92:3A:35:43:7E:A7:64:D5"}}},"request":{"raw":"GET /js/jads.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 05 Dec 2023 01:45:52 GMT\r\nContent-Type: text/html\r\nContent-Length: 178\r\nConnection: keep-alive\r\nLocation: jads2.js\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":178,"size_decoded":0,"mime_type":"application/x-javascript","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text, with CRLF line terminators","md5":"cd2e0e43980a00fb6a2742d3afd803b8","sha1":"81ffbd1712afe8cdf138b570c0fc9934742c33c1","sha256":"bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d","sha512":"0344c6b2757d4d787ed4a31ec7043c9dc9bf57017e451f60cecb9ad8f5febf64acf2a6c996346ae4b23297623ebf747954410aee27ee3c2f3c6ccd15a15d0f2d","ssdeep":"","tlshash":"60c012a9ab026cc9a8973b3866c3a190e2ec80649bd9491112a45a47f08b19b9ec23d1","first_seen":"2023-04-05T03:10:45Z","last_seen":"2025-03-01T20:29:44.66739Z","times_seen":16591,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":91,"dns":1,"connect":38,"send":0,"wait":24,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5f25d.dappaa.site/api/settings/406710","fqdn":"5f25d.dappaa.site","domain":"dappaa.site","tld":"site"},"ip":{"addr":"135.181.208.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.209Z","timestamp":1701740758209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"5f25a.dappaa.site","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Nov 2023 09:27:10 GMT","end":"Sun, 11 Feb 2024 09:27:09 GMT"},"fingerprint":{"sha1":"ED:39:E9:89:76:BC:5A:5D:20:61:0F:0E:66:27:F5:A1:61:75:DC:78","sha256":"28:DD:C5:D6:46:2C:6D:3B:0C:5A:37:92:47:55:B2:B0:08:1C:DB:67:4D:D2:D3:46:4F:98:F5:1A:04:0D:AE:42"}}},"request":{"raw":"GET /api/settings/406710 HTTP/1.1\r\nHost: 5f25d.dappaa.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javgg.net/\r\nOrigin: https://javgg.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 05 Dec 2023 01:45:52 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"gzip compressed data, from Unix\\012- data","md5":"f3fccaae70a241f46a83ca29272a4768","sha1":"7e88c941ddf25977a7e462ed743b37fb63076796","sha256":"93f3165dd35171da04d95f414a7ac7133dbd7adf4f69be660781cd533c9f5adc","sha512":"539dc3289887c4b7d88506d64a38f79a8338ab83f568ee02f1cc91b5bb7f74a66732ec82c6ea6c80aedbacff46229b8d11bccc7f53297b2f77fad16ed5f976bf","ssdeep":"","tlshash":"2fd0a79c67132c89f493373926c76040e5ac912856d8440101a84617f08f1874dc12d0","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/adgpt.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.22.39.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.206Z","timestamp":1701740758206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Thu, 29 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"67:5F:F1:E0:0C:5E:00:4E:6A:BF:B1:5F:40:29:66:0E:3F:9C:24:5F","sha256":"B3:16:4F:76:63:FB:F4:9C:99:A2:DB:FC:B1:E2:52:7D:05:73:98:9B:F2:89:16:49:60:53:32:34:89:F2:AC:1D"}}},"request":{"raw":"GET /adgpt.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 818\r\nlast-modified: Thu, 30 Nov 2023 11:46:10 GMT\r\nvary: Accept-Encoding\r\netag: \"65687602-332\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncf-cache-status: HIT\r\nage: 395832\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 83089cb7cf2f5f09-ARN\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":818,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2028), with no line terminators","md5":"b93fe1dfb3b9596da09b9eee17a9006f","sha1":"89aeae49cadfb3ba7cc66702b3a18403e1ae5b2e","sha256":"fdf9db0f687a66cd7c0d22c8589cca33edacca3079971d3d1a21675ca5c917bc","sha512":"ba0d7d3840676f33ab3410226d84302b262ad7c43dce2210dcdc92cad20bce07c0f61cf732f7aa81849ce7436726f8326dd2b0c8c72b1ef45775eed1349dd474","ssdeep":"","tlshash":"9e4133963eb0ede183d7550c312f4849f27d35b083a6d8c257e5caa83e785892191e8e","first_seen":"2023-11-30T14:56:36Z","last_seen":"2023-12-18T08:20:45Z","times_seen":113,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":136,"dns":64,"connect":23,"send":0,"wait":16,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"185.94.236.253","port":443,"asn":42567,"as":"Mojohost B.v.","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.247Z","timestamp":1701740758247,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 26 Dec 2022 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB","sha256":"0F:63:44:A5:4C:F5:99:71:ED:3B:7C:66:EE:A7:8B:A9:8B:6D:DE:B9:33:65:7C:13:92:3A:35:43:7E:A7:64:D5"}}},"request":{"raw":"GET /js/jads.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 05 Dec 2023 01:45:52 GMT\r\nContent-Type: text/html\r\nContent-Length: 178\r\nConnection: keep-alive\r\nLocation: jads2.js\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":178,"size_decoded":0,"mime_type":"application/x-javascript","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text, with CRLF line terminators","md5":"cd2e0e43980a00fb6a2742d3afd803b8","sha1":"81ffbd1712afe8cdf138b570c0fc9934742c33c1","sha256":"bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d","sha512":"0344c6b2757d4d787ed4a31ec7043c9dc9bf57017e451f60cecb9ad8f5febf64acf2a6c996346ae4b23297623ebf747954410aee27ee3c2f3c6ccd15a15d0f2d","ssdeep":"","tlshash":"60c012a9ab026cc9a8973b3866c3a190e2ec80649bd9491112a45a47f08b19b9ec23d1","first_seen":"2023-04-05T03:10:45Z","last_seen":"2025-03-01T20:29:44.66739Z","times_seen":16591,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":91,"dns":1,"connect":38,"send":0,"wait":24,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"185.94.236.253","port":443,"asn":42567,"as":"Mojohost B.v.","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.247Z","timestamp":1701740758247,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 26 Dec 2022 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB","sha256":"0F:63:44:A5:4C:F5:99:71:ED:3B:7C:66:EE:A7:8B:A9:8B:6D:DE:B9:33:65:7C:13:92:3A:35:43:7E:A7:64:D5"}}},"request":{"raw":"GET /js/jads.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Tue, 05 Dec 2023 01:45:52 GMT\r\nContent-Type: text/html\r\nContent-Length: 178\r\nConnection: keep-alive\r\nLocation: jads2.js\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":178,"size_decoded":0,"mime_type":"application/x-javascript","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text, with CRLF line terminators","md5":"cd2e0e43980a00fb6a2742d3afd803b8","sha1":"81ffbd1712afe8cdf138b570c0fc9934742c33c1","sha256":"bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d","sha512":"0344c6b2757d4d787ed4a31ec7043c9dc9bf57017e451f60cecb9ad8f5febf64acf2a6c996346ae4b23297623ebf747954410aee27ee3c2f3c6ccd15a15d0f2d","ssdeep":"","tlshash":"60c012a9ab026cc9a8973b3866c3a190e2ec80649bd9491112a45a47f08b19b9ec23d1","first_seen":"2023-04-05T03:10:45Z","last_seen":"2025-03-01T20:29:44.66739Z","times_seen":16591,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":91,"dns":1,"connect":38,"send":0,"wait":24,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads2.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"185.94.236.253","port":443,"asn":42567,"as":"Mojohost B.v.","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.858Z","timestamp":1701740758858,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 26 Dec 2022 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB","sha256":"0F:63:44:A5:4C:F5:99:71:ED:3B:7C:66:EE:A7:8B:A9:8B:6D:DE:B9:33:65:7C:13:92:3A:35:43:7E:A7:64:D5"}}},"request":{"raw":"GET /js/jads2.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javgg.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 05 Dec 2023 01:45:52 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 20 Sep 2023 21:26:09 GMT\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nETag: W/\"650b6371-eae\"\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1719,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (3758), with no line terminators","md5":"bc8141c4650030c41f6a98026b12ce80","sha1":"af5618f7e467a207d4c64627be580283ab5640cd","sha256":"5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51","sha512":"70fc6246b67dd18b92661c9562020cc9256a9f2aa500017bc79e71b9528251dc241505b58efe58174e0268d6cd44a2158c25f5cb6217ea25a6ea73f58e99ca86","ssdeep":"","tlshash":"16815f6b3659f835488b9e7b21bf5e283673a9060f078414469cdc2cc47cdfa053bd85","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-04-12T21:21:39.953238Z","times_seen":2113,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":82,"dns":7,"connect":22,"send":0,"wait":22,"receive":1,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/do2/8a7beb149723440aa81c2cd9412ec1a1/interstitial?w=1280\u0026h=1024\u0026domain=javgg.net\u0026rnd=0.4080379128889765\u0026keywords=Download%20Page%20-%20Javgg.net%2CNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg\u0026tz=0","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"136.243.51.205","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.144Z","timestamp":1701740758144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Nov 2023 09:06:58 GMT","end":"Sat, 10 Feb 2024 09:06:57 GMT"},"fingerprint":{"sha1":"F2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E","sha256":"4B:5E:81:D5:B5:E3:AE:59:8C:0C:2F:E4:CD:A4:8E:10:9D:0D:AC:0F:57:F0:D4:B3:77:66:D1:DB:D0:A4:F3:E4"}}},"request":{"raw":"GET /do2/8a7beb149723440aa81c2cd9412ec1a1/interstitial?w=1280\u0026h=1024\u0026domain=javgg.net\u0026rnd=0.4080379128889765\u0026keywords=Download%20Page%20-%20Javgg.net%2CNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg\u0026tz=0 HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://javgg.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 05 Dec 2023 01:45:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://javgg.net\r\naccess-control-allow-methods: POST, GET, HEAD\r\naccess-control-allow-headers: Accept, X-Requested-With, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding, *\r\nx-api-version: 2\r\nx-request-id: 5b3084b75ed85fe9\r\nset-cookie: ts_uid=f2e25971-6bf4-4f58-bc59-30a0006926cf; expires=Wed, 05 Jun 2024 01:45:52 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, no-transform\r\nx-robots-tag: none, noindex, nofollow\r\nreport-to: { \"url\": \"https://pxl.tsyndicate.com/api/v1/heavy-ad/report\", \"max_age\": 86401 }\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4074,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON data\\012- , ASCII text, with very long lines (7048), with no line terminators","md5":"a752f5a05c8078594f9ddd5649436528","sha1":"e5b61508383f5cffcc8483f7588d3d4cfe8d8d5e","sha256":"0f2fd9339120d4a1689133f0f5430054e930615f241f4e80bd1032f2bebfc2c5","sha512":"5f32f1dde4a28107e11bcc4d4f84280d116a8a7060380fdc1d367a0994bd73ecd730c07f5b32a158f525cba58c32c31829e1edbe3f72e8d71da1817dd6b10f37","ssdeep":"192:4XPWG71qAKv5njIuiT0jW1/ZxYejNNxkGDncTynF5Vi0fpm:4u6QAG5jV80jWdZWejnqqcmnvxm","tlshash":"5ce1387633507cb8488b8a3f01afaa98327ba6340f97488b5b9ca435867cdc7053e485","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":164,"dns":28,"connect":45,"send":0,"wait":51,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads2.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"185.94.236.253","port":443,"asn":42567,"as":"Mojohost B.v.","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.858Z","timestamp":1701740758858,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 26 Dec 2022 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB","sha256":"0F:63:44:A5:4C:F5:99:71:ED:3B:7C:66:EE:A7:8B:A9:8B:6D:DE:B9:33:65:7C:13:92:3A:35:43:7E:A7:64:D5"}}},"request":{"raw":"GET /js/jads2.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javgg.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 05 Dec 2023 01:45:53 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 20 Sep 2023 21:26:09 GMT\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nETag: W/\"650b6371-eae\"\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1719,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (3758), with no line terminators","md5":"bc8141c4650030c41f6a98026b12ce80","sha1":"af5618f7e467a207d4c64627be580283ab5640cd","sha256":"5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51","sha512":"70fc6246b67dd18b92661c9562020cc9256a9f2aa500017bc79e71b9528251dc241505b58efe58174e0268d6cd44a2158c25f5cb6217ea25a6ea73f58e99ca86","ssdeep":"","tlshash":"16815f6b3659f835488b9e7b21bf5e283673a9060f078414469cdc2cc47cdfa053bd85","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-04-12T21:21:39.953238Z","times_seen":2113,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":82,"dns":7,"connect":22,"send":0,"wait":22,"receive":1,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/cdn-cgi/zaraz/s.js?z=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","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.336Z","timestamp":1701740758336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javgg.net","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Nov 2023 16:24:54 GMT","end":"Tue, 20 Feb 2024 16:24:53 GMT"},"fingerprint":{"sha1":"45:D3:AB:61:30:E6:69:38:10:E0:E3:2B:42:36:A1:D8:1C:AB:4C:79","sha256":"05:F1:69:E7:5B:39:72:97:71:4E:32:7C:21:28:B9:06:22:92:77:04:40:E9:36:B6:C5:8A:BD:17:45:C9:75:11"}}},"request":{"raw":"GET /cdn-cgi/zaraz/s.js?z=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 HTTP/1.1\r\nHost: javgg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javgg.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: https://javgg.net\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Set-Cookie, Cache-Control\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-max-age: 600\r\nset-cookie: google-analytics_v4_ef3e__engagementStart=1701740752599; Domain=javgg.net; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_ef3e__counter=1; Domain=javgg.net; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_ef3e__ga4sid=1929733268; Domain=javgg.net; Path=/; Max-Age=1800; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_ef3e__session_counter=1; Domain=javgg.net; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_ef3e__ga4=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6; Domain=javgg.net; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_ef3e___z_ga_audiences=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6; Domain=javgg.net; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax\ngoogle-analytics_v4_ef3e__let=1701740752599; Domain=javgg.net; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=3w%2BQBYD9mPg6WVg3ZjlF%2F4i7Tno7jmL3u8fbxiqHno%2BM%2BU4ZHVRgUw8ausLy4wlaz6a2p8lWjAlbuDDf2Bx2kfzsTMyB9wRpFRkMv%2BXjJm3VwuWUaF%2FZrSnqaQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 83089cb7b9adb50b-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4150,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (4085)","md5":"7f52fd67a70435a1bded28652c6da4b2","sha1":"efa071ced195b442bf36abf58090ed498788bac2","sha256":"f433755e9e5007f19fb877765040d0d3633e1530722c55d999a077e291bd71ee","sha512":"437e0790e600416a334c0d1810cb668b43bbfef3f935b73aaf5ec885aa9b63fc97fefb8c5eb29fedc0ec3fa41ead875910d78f3d3ef0819553bb708ee3867718","ssdeep":"96:ib57vFgJBJoSzaSIF32tp5E9Q5ar/MYW6FQGz9SxoNOme7vS0GW/SVlALrbA1A9:ib57qJqSIF3yjqMYWGQGlNF2K0+VlAL5","tlshash":"70c1eaa4ad99343709cfb26fb06e12c0f4baa154b0a11450c98c5cc99dfdf7e359ae4e","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/adshow.php?adzone=1029724","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"185.94.236.253","port":443,"asn":42567,"as":"Mojohost B.v.","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.718Z","timestamp":1701740758718,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 26 Dec 2022 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB","sha256":"0F:63:44:A5:4C:F5:99:71:ED:3B:7C:66:EE:A7:8B:A9:8B:6D:DE:B9:33:65:7C:13:92:3A:35:43:7E:A7:64:D5"}}},"request":{"raw":"GET /adshow.php?adzone=1029724 HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 05 Dec 2023 01:45:53 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nX-Powered-By: PHP/5.6.40\r\nP3P: policyref=\"/w3c/p3p.xml\", CP=\"NOI DSP COR NID CUR OUR IND STA\"\r\nSet-Cookie: surferid=d36a1246e74bc8365e7a3aecb3abbea0; expires=Wed, 04-Dec-2024 01:45:53 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co\nimps32597=1; expires=Wed, 06-Dec-2023 01:45:53 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co\njuicy_data_1=YToxOntpOjc2Njk0NTtpOjE3MDE5OTk5NTM7fQ%3D%3D; expires=Fri, 08-Dec-2023 01:45:53 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co\njuicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Fri, 08-Dec-2023 01:45:53 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1638,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document text\\012- exported SGML document, ASCII text, with very long lines (397), with CRLF, LF line terminators","md5":"402e56b2470bc8cab404d3d27ee5e51a","sha1":"3c421c839ef4489247c1064c0ae2397b342d2a3b","sha256":"f897335d3994a4bec45f5a6527514b87d23f550003ca59f35979e6a1c9d34dcf","sha512":"3d036e9af11fbf72dc57488c5b30b30c7f3ae39cccdcd0907172057ebae49ea87abeb8e7f529a0e1c4addeee5b1874b55078953d14c08e382d16cdd1aaf163ca","ssdeep":"","tlshash":"a271855ea3be11759603f036c5bf620834731087169add14fd6ce4968f08a392a75bf9","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":105,"dns":3,"connect":30,"send":0,"wait":37,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads2.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"185.94.236.253","port":443,"asn":42567,"as":"Mojohost B.v.","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.858Z","timestamp":1701740758858,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 26 Dec 2022 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB","sha256":"0F:63:44:A5:4C:F5:99:71:ED:3B:7C:66:EE:A7:8B:A9:8B:6D:DE:B9:33:65:7C:13:92:3A:35:43:7E:A7:64:D5"}}},"request":{"raw":"GET /js/jads2.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javgg.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: surferid=d36a1246e74bc8365e7a3aecb3abbea0; imps12957=1; juicy_data_1=YToxOntpOjc4MzgxNTtpOjE3MDE5OTk5NTM7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 05 Dec 2023 01:45:53 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 20 Sep 2023 21:26:09 GMT\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nETag: W/\"650b6371-eae\"\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1719,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (3758), with no line terminators","md5":"bc8141c4650030c41f6a98026b12ce80","sha1":"af5618f7e467a207d4c64627be580283ab5640cd","sha256":"5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51","sha512":"70fc6246b67dd18b92661c9562020cc9256a9f2aa500017bc79e71b9528251dc241505b58efe58174e0268d6cd44a2158c25f5cb6217ea25a6ea73f58e99ca86","ssdeep":"","tlshash":"16815f6b3659f835488b9e7b21bf5e283673a9060f078414469cdc2cc47cdfa053bd85","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-04-12T21:21:39.953238Z","times_seen":2113,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":82,"dns":7,"connect":22,"send":0,"wait":22,"receive":1,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads2.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"185.94.236.253","port":443,"asn":42567,"as":"Mojohost B.v.","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.858Z","timestamp":1701740758858,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 26 Dec 2022 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB","sha256":"0F:63:44:A5:4C:F5:99:71:ED:3B:7C:66:EE:A7:8B:A9:8B:6D:DE:B9:33:65:7C:13:92:3A:35:43:7E:A7:64:D5"}}},"request":{"raw":"GET /js/jads2.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javgg.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: surferid=d36a1246e74bc8365e7a3aecb3abbea0; imps12957=1; juicy_data_1=YToxOntpOjc4MzgxNTtpOjE3MDE5OTk5NTM7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 05 Dec 2023 01:45:53 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 20 Sep 2023 21:26:09 GMT\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nETag: W/\"650b6371-eae\"\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1719,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (3758), with no line terminators","md5":"bc8141c4650030c41f6a98026b12ce80","sha1":"af5618f7e467a207d4c64627be580283ab5640cd","sha256":"5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51","sha512":"70fc6246b67dd18b92661c9562020cc9256a9f2aa500017bc79e71b9528251dc241505b58efe58174e0268d6cd44a2158c25f5cb6217ea25a6ea73f58e99ca86","ssdeep":"","tlshash":"16815f6b3659f835488b9e7b21bf5e283673a9060f078414469cdc2cc47cdfa053bd85","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-04-12T21:21:39.953238Z","times_seen":2113,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":82,"dns":7,"connect":22,"send":0,"wait":22,"receive":1,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.331Z","timestamp":1701740758331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javgg.net","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Nov 2023 16:24:54 GMT","end":"Tue, 20 Feb 2024 16:24:53 GMT"},"fingerprint":{"sha1":"45:D3:AB:61:30:E6:69:38:10:E0:E3:2B:42:36:A1:D8:1C:AB:4C:79","sha256":"05:F1:69:E7:5B:39:72:97:71:4E:32:7C:21:28:B9:06:22:92:77:04:40:E9:36:B6:C5:8A:BD:17:45:C9:75:11"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: javgg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 05 Dec 2023 01:45:52 GMT\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js\r\ncache-control: max-age=300, public\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=3DM4tsyt3Gh9VT%2F2oml4rS347%2FRWMiK71jxWvL%2BqnJVLbbZh8VB8hgeOoncZlAGDY%2BlgLWRJ%2BWctKzRaIKlLeZcKVoEvTh3iTxcRT6xbgQIHvcYOiZit53ea%2Fw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 83089cb7a9aab50b-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":1807,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"gzip compressed data, from Unix\\012- data","md5":"13cef045fa8f87b15b8d4965306b5a45","sha1":"d3dcfab6e1f9595790318ef7ce3b5dfd68593fc8","sha256":"21f3058be3c5e24d317489e5fe9b9efe3c292e6c0a8eae63644d8ce555e6c897","sha512":"f6bed4ac5e6b6248f8c149da613ff8d35a85c3ab40667d61b194de0c7f48343f3837033fd43f564c15f31bd8e1121fa54a4a0f7b001201307129b9699affba70","ssdeep":"","tlshash":"5d31097993ca180afb96772ea87927a0425b3d8024cfc06366331a9001e2512a5193f2","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/adshow.php?adzone=1029723","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"185.94.236.253","port":443,"asn":42567,"as":"Mojohost B.v.","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.700Z","timestamp":1701740758700,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 26 Dec 2022 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB","sha256":"0F:63:44:A5:4C:F5:99:71:ED:3B:7C:66:EE:A7:8B:A9:8B:6D:DE:B9:33:65:7C:13:92:3A:35:43:7E:A7:64:D5"}}},"request":{"raw":"GET /adshow.php?adzone=1029723 HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 05 Dec 2023 01:45:53 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nX-Powered-By: PHP/5.6.40\r\nP3P: policyref=\"/w3c/p3p.xml\", CP=\"NOI DSP COR NID CUR OUR IND STA\"\r\nSet-Cookie: surferid=d36a1246e74bc8365e7a3aecb3abbea0; expires=Wed, 04-Dec-2024 01:45:53 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co\njuicy_data_1=YTowOnt9; expires=Fri, 08-Dec-2023 01:45:53 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co\njuicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Fri, 08-Dec-2023 01:45:53 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1611,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document text\\012- exported SGML document, ASCII text, with very long lines (355), with CRLF, LF line terminators","md5":"1508b569e17eb4e0ae6bd831db17ead7","sha1":"8bae598536e3b4fc4413edacb2405375994c6349","sha256":"a6fc1acd02f32b7d51251628db396a9b9bdc53bc492c93f17e87b1a3176cf2c2","sha512":"b56b039a4d10e5312a76869b411213359b676e138ab7f2f90968c97dddbaa973987986f198b0ceaeefff62bdddf6b93de5ec2501b0a7b6753c6f4ba9f88acdbe","ssdeep":"","tlshash":"4d71932a63ae1175a603f035c9ffa20834731087159acd14fc6cd4968f08a392a79bf9","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":91,"dns":4,"connect":28,"send":0,"wait":201,"receive":6,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.913Z","timestamp":1701740758913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Oct 2023 01:02:38 GMT","end":"Mon, 22 Jan 2024 01:02:37 GMT"},"fingerprint":{"sha1":"D9:9C:A9:BD:64:40:4E:C3:80:FB:C1:63:4D:D6:8F:A9:F7:83:AC:F4","sha256":"4B:DF:77:02:15:00:E2:D3:11:0B:25:2F:7B:12:1A:F5:CB:BD:55:49:DE:18:3F:34:84:24:2E:6C:1B:53:56:66"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Tue, 05 Dec 2023 01:50:53 GMT\r\ncache-control: max-age=300\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":129,"dns":17,"connect":27,"send":0,"wait":29,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/cdn-cgi/challenge-platform/h/b/jsd/r/83089cb06f79b50b","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.855Z","timestamp":1701740758855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javgg.net","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Nov 2023 16:24:54 GMT","end":"Tue, 20 Feb 2024 16:24:53 GMT"},"fingerprint":{"sha1":"45:D3:AB:61:30:E6:69:38:10:E0:E3:2B:42:36:A1:D8:1C:AB:4C:79","sha256":"05:F1:69:E7:5B:39:72:97:71:4E:32:7C:21:28:B9:06:22:92:77:04:40:E9:36:B6:C5:8A:BD:17:45:C9:75:11"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/r/83089cb06f79b50b HTTP/1.1\r\nHost: javgg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 12340\r\nOrigin: https://javgg.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==\r\nCookie: google-analytics_v4_ef3e__engagementStart=1701740752599; google-analytics_v4_ef3e__counter=1; google-analytics_v4_ef3e__ga4sid=1929733268; google-analytics_v4_ef3e__session_counter=1; google-analytics_v4_ef3e__ga4=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6; google-analytics_v4_ef3e___z_ga_audiences=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6; google-analytics_v4_ef3e__let=1701740752599\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:53 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nset-cookie: cf_clearance=MEi4OcUWcnFpxImdcoRlV3LE5C_fYuEyDUMT8rPx81E-1701740753-0-1-730ca2d2.57dbd4fb.240dfd32-0.2.1701740753; path=/; expires=Wed, 04-Dec-24 01:45:53 GMT; domain=.javgg.net; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=VK5GHsULHU4iJ6IQF1d159zRapfJlz6BnW%2Bt%2BtZTh73I8jUFzxHHtvBkZdR8Y5YO0mQ%2BasUO5C0YdlkocWiuHW%2FtRTEr4LSNzmyqyoQArz4EetTaPHsAayQwtg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 83089cbafabcb50b-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":183446,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"data","md5":"9303141e3e7a4de601d36295c33bc932","sha1":"97707b53015e7b2056e08a4ebb967905df4c5de1","sha256":"c4cdcaf89a169ad7d8215910ba5b391a9c7d52aa23eaf9612a76b26cfc4dbdda","sha512":"99c234012a657a03a6feba9eccdae858647f91b32f471c61666449e83dda45fbf46e2089ba2617149d35a24ae77617e21999b5202fa770e9d668d2b37b2e22da","ssdeep":"3072:G2k7uKax2iOFokmf0Ipd3qlBm78Kvl9Vohma23Ummnils+zW5yHc2hq1f:G2kqnglmff3qlBmQBhQ3U9ilsvoHCf","tlshash":"aa0412d7c9c2e2e0b6e145611e2b10ee404d10d6feacf9fe7c8b2582f546e2e292d517","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.jads.co/network/user47819/12957-1563401670-0779180001563401670.gif","fqdn":"i.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"205.185.216.42","port":443,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poweredby.jads.co/adshow.php?adzone=1029726","date":"2023-12-05T01:45:58.925Z","timestamp":1701740758925,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 26 Dec 2022 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB","sha256":"0F:63:44:A5:4C:F5:99:71:ED:3B:7C:66:EE:A7:8B:A9:8B:6D:DE:B9:33:65:7C:13:92:3A:35:43:7E:A7:64:D5"}}},"request":{"raw":"GET /network/user47819/12957-1563401670-0779180001563401670.gif HTTP/1.1\r\nHost: i.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poweredby.jads.co/\r\nCookie: surferid=d36a1246e74bc8365e7a3aecb3abbea0; imps12957=1; juicy_data_1=YToxOntpOjc2Njk0NTtpOjE3MDE5OTk5NTM7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 05 Dec 2023 01:45:53 GMT\r\nConnection: Keep-Alive\r\nETag: \"1563401670\"\r\nCache-Control: max-age=4930621\r\nContent-Length: 396357\r\nContent-Type: image/gif\r\nLast-Modified: Wed, 17 Jul 2019 22:14:30 GMT\r\nAccept-Ranges: bytes\r\nX-HW: 1701740753.dop208.sk1.t,1701740753.cds224.sk1.shn,1701740753.cds224.sk1.c\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":396357,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 100\\012- data","md5":"a236d410ba75f2059a48310e4d3eb283","sha1":"c493fcc7e423b9ca8b74ce720880e7fc3523f723","sha256":"62b8bfeefdb670cd71951902d5e2eb19113e31db274f11075c30762a9eda028f","sha512":"e6f6e8c4ea31600bdcd7faaf9662b4b2bd0089748ef0cb15e835ef867e137dfcf451661cd37a712cc6f668bbc3c45df58585de97fe85a8a26e42f5b348c576f0","ssdeep":"12288:L1KZLThJw6AjYl6+caOwlR2SHwRv/EuejsdOqI7s5f:L6JZblE4NQFMuVf","tlshash":"2584127fd8780c99ec64d8f83e8eb5466bac44c109750e53a9ecc442f8d487e248ebd6","first_seen":"2023-05-25T21:53:57Z","last_seen":"2026-03-24T13:40:00.266602Z","times_seen":18,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":110,"dns":64,"connect":9,"send":0,"wait":9,"receive":58,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.jads.co/1x1.gif","fqdn":"i.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"205.185.216.42","port":443,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poweredby.jads.co/adshow.php?adzone=1029722","date":"2023-12-05T01:45:59.076Z","timestamp":1701740759076,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 26 Dec 2022 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB","sha256":"0F:63:44:A5:4C:F5:99:71:ED:3B:7C:66:EE:A7:8B:A9:8B:6D:DE:B9:33:65:7C:13:92:3A:35:43:7E:A7:64:D5"}}},"request":{"raw":"GET /1x1.gif HTTP/1.1\r\nHost: i.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poweredby.jads.co/\r\nCookie: surferid=d36a1246e74bc8365e7a3aecb3abbea0; imps12957=1; juicy_data_1=YTowOnt9; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 05 Dec 2023 01:45:53 GMT\r\nConnection: Keep-Alive\r\nETag: \"1478208967\"\r\nCache-Control: max-age=18536943\r\nContent-Length: 27460\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 03 Nov 2016 21:36:07 GMT\r\nAccept-Ranges: bytes\r\nX-HW: 1701740753.dop216.sk1.t,1701740753.cds253.sk1.shn,1701740753.dop216.sk1.t,1701740753.cds215.sk1.c\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27460,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 250x250, components 3\\012- data","md5":"2acfb73fd2df022a7dad5595adef5bda","sha1":"939b803ea641bd427b7599f92a816262e7a5bf48","sha256":"3d4610a2ab69d08e54685d0d3cfcf03ec663bacff8cc89a1e0a2904a7769e641","sha512":"5978a8866bbb30d409f728c4cc1081af19e3dcaedf2e4f0e1d9e40b75c0e80ecd6474cff4204114716f30ac832bfdb6787726caf504d2305332f151664d3e15d","ssdeep":"384:EtC6Y5SnG2H+o8Lqp74pgtIeFat/EfoTDOiSQKoobxx/hjDVhVwvqMXW7C+VKq4c:/BH2XaqpsIIHHpKd9XJwnVoKqee","tlshash":"7fc2ae2963e21d4ee0ce1c56d175c2eaa3a74314c84fa660f095c5c3e3ba705b71adac","first_seen":"2023-05-07T23:47:12Z","last_seen":"2026-03-30T22:49:11.821235Z","times_seen":1232,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.jads.co/ads/user186477/ad1988299-1699943636.gif","fqdn":"i.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"205.185.216.42","port":443,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poweredby.jads.co/adshow.php?adzone=1029723","date":"2023-12-05T01:45:59.130Z","timestamp":1701740759130,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 26 Dec 2022 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB","sha256":"0F:63:44:A5:4C:F5:99:71:ED:3B:7C:66:EE:A7:8B:A9:8B:6D:DE:B9:33:65:7C:13:92:3A:35:43:7E:A7:64:D5"}}},"request":{"raw":"GET /ads/user186477/ad1988299-1699943636.gif HTTP/1.1\r\nHost: i.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poweredby.jads.co/\r\nCookie: surferid=d36a1246e74bc8365e7a3aecb3abbea0; imps12957=1; juicy_data_1=YTowOnt9; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 05 Dec 2023 01:45:53 GMT\r\nConnection: Keep-Alive\r\nETag: \"1699943636\"\r\nCache-Control: max-age=29739018\r\nContent-Length: 17931\r\nContent-Type: image/gif\r\nLast-Modified: Tue, 14 Nov 2023 06:33:56 GMT\r\nAccept-Ranges: bytes\r\nX-HW: 1701740753.dop208.sk1.t,1701740753.cds224.sk1.shn,1701740753.dop208.sk1.t,1701740753.cds260.sk1.c\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17931,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 100\\012- data","md5":"884b71d952ecbcab2d28080e4a58b36a","sha1":"e75d389acecdc258872b10af3616e6fbba886eb2","sha256":"27398b2ca615e27f09695d4459fff98f29f25f9863951bc65a50bcf3c928d146","sha512":"4faa47343a98fcf409067b860b2c7f63e3cddf5fb77e75d6a61f744dd7bf802b23560ce0dff1f2c07a23d417bb4c46cd9c9b2797641b21ec38889d9f87e8ed9a","ssdeep":"","tlshash":"","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/wp-content/uploads/2020/07/140_Gg_logo_logos-512.png","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:59.148Z","timestamp":1701740759148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javgg.net","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Nov 2023 16:24:54 GMT","end":"Tue, 20 Feb 2024 16:24:53 GMT"},"fingerprint":{"sha1":"45:D3:AB:61:30:E6:69:38:10:E0:E3:2B:42:36:A1:D8:1C:AB:4C:79","sha256":"05:F1:69:E7:5B:39:72:97:71:4E:32:7C:21:28:B9:06:22:92:77:04:40:E9:36:B6:C5:8A:BD:17:45:C9:75:11"}}},"request":{"raw":"GET /wp-content/uploads/2020/07/140_Gg_logo_logos-512.png HTTP/1.1\r\nHost: javgg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==\r\nCookie: google-analytics_v4_ef3e__engagementStart=1701740752599; google-analytics_v4_ef3e__counter=1; google-analytics_v4_ef3e__ga4sid=1929733268; google-analytics_v4_ef3e__session_counter=1; google-analytics_v4_ef3e__ga4=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6; google-analytics_v4_ef3e___z_ga_audiences=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6; google-analytics_v4_ef3e__let=1701740752599; cf_clearance=MEi4OcUWcnFpxImdcoRlV3LE5C_fYuEyDUMT8rPx81E-1701740753-0-1-730ca2d2.57dbd4fb.240dfd32-0.2.1701740753\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1338\r\ncache-control: max-age=2678400\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=2026\r\ncontent-disposition: inline; filename=\"140_Gg_logo_logos-512.webp\"\r\nvary: Accept\r\netag: \"61f924d6-7ea\"\r\nexpires: Wed, 03 Jan 2024 06:12:52 GMT\r\nlast-modified: Tue, 01 Feb 2022 12:17:26 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 69995\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=J7eWFmk7b6IXycyZuicgQWpzV2b5cwtd9GBhn%2Bun5108qTvB7r9Db6YKqeHAXF9lsIhhzoelfmkLIKZUvZaK2rW6oF3PABEgbImEcKuhTeFCxWa32KDObsGcyg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 83089cbcbb4fb50b-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1338,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image\\012- data","md5":"2ef0c03c5cf9d345f34a683ebe225edc","sha1":"b66c819b6b33baaf2af6a4032f2a53b5cbd15ff1","sha256":"ea23aa416c911cb9090481e9a0a05e5601e1626e0b14ebd08a525a1b9a648162","sha512":"69084f920761d5ed4d38459ccbf8ea4899b161864f78e0a16983dda31d5c46746ca736802a0af4893eb9236ff08f628d27e52e1549fa38190c6be85cfb32b78c","ssdeep":"","tlshash":"9621831a92083d2b5d0d1c499cdeecbc1a776f8627c781e602627f0c7f7490af3946a4","first_seen":"2023-05-07T17:53:49Z","last_seen":"2025-08-12T00:06:00.395405Z","times_seen":26,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.jads.co/network/user500/32597-1558023042-0056384001558023042.gif","fqdn":"i.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"205.185.216.10","port":443,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poweredby.jads.co/adshow.php?adzone=1029722","date":"2023-12-05T01:45:59.072Z","timestamp":1701740759072,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 26 Dec 2022 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB","sha256":"0F:63:44:A5:4C:F5:99:71:ED:3B:7C:66:EE:A7:8B:A9:8B:6D:DE:B9:33:65:7C:13:92:3A:35:43:7E:A7:64:D5"}}},"request":{"raw":"GET /network/user500/32597-1558023042-0056384001558023042.gif HTTP/1.1\r\nHost: i.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poweredby.jads.co/\r\nCookie: surferid=d36a1246e74bc8365e7a3aecb3abbea0; imps12957=1; juicy_data_1=YTowOnt9; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 05 Dec 2023 01:45:53 GMT\r\nConnection: Keep-Alive\r\nETag: \"1558023042\"\r\nCache-Control: max-age=15377410\r\nContent-Length: 514676\r\nContent-Type: image/gif\r\nLast-Modified: Thu, 16 May 2019 16:10:42 GMT\r\nAccept-Ranges: bytes\r\nX-HW: 1701740753.dop224.sk1.t,1701740753.cds223.sk1.shn,1701740753.dop224.sk1.t,1701740753.cds256.sk1.c\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":514676,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 100\\012- data","md5":"d40b89a25be4e04a183a9fc50dfb3917","sha1":"b8241934a168ebe828f6d559db00649e3162cb9a","sha256":"59839af79fe0357ad2129241fe70fddda18ae8f38834efabdd029cea8794effd","sha512":"83354e072426a7d92804816921858c760c249898f80d216d00ba1d3c1582b37d63addce29e9e64dc5f477c39c20b80f797108a58aee1530ed8669136ace92000","ssdeep":"","tlshash":"","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":51,"dns":2,"connect":8,"send":0,"wait":11,"receive":50,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/adshow.php?adzone=1029725","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"185.94.236.253","port":443,"asn":42567,"as":"Mojohost B.v.","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.652Z","timestamp":1701740758652,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 26 Dec 2022 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB","sha256":"0F:63:44:A5:4C:F5:99:71:ED:3B:7C:66:EE:A7:8B:A9:8B:6D:DE:B9:33:65:7C:13:92:3A:35:43:7E:A7:64:D5"}}},"request":{"raw":"GET /adshow.php?adzone=1029725 HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 05 Dec 2023 01:45:53 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nX-Powered-By: PHP/5.6.40\r\nP3P: policyref=\"/w3c/p3p.xml\", CP=\"NOI DSP COR NID CUR OUR IND STA\"\r\nSet-Cookie: surferid=232037a74d6774a4891dd6a242e396b3; expires=Wed, 04-Dec-2024 01:45:52 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co\nimps30553=1; expires=Wed, 06-Dec-2023 01:45:53 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co\njuicy_data_1=YToxOntpOjcxMzIyNjtpOjE3MDE5OTk5NTI7fQ%3D%3D; expires=Fri, 08-Dec-2023 01:45:52 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co\njuicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Fri, 08-Dec-2023 01:45:52 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1641,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document text\\012- exported SGML document, ASCII text, with very long lines (408), with CRLF, LF line terminators","md5":"15b679fb9ef27ed45f63097356e0791c","sha1":"698e5543eb9db489b659e34980d5a2b4b25000fc","sha256":"a3c775805974d978e23b29248823d84f16f5005cfe34e48e67a96b26f363d7c3","sha512":"b2a566f60f6e2467f5b87b98a76a34ba909cfb69d94d1ddb9c59627befea170563ec5b1648f680fc1e23a08ef3f22bac504c95ff15e0f0e5e207c4caa304dc37","ssdeep":"","tlshash":"7571832aa3ae11759603f036c9bf620434731187568acd14fd6ce496cf08a392a79ff9","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":61,"dns":1,"connect":22,"send":0,"wait":479,"receive":4,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ads/ga-audiences?t=sr\u0026aip=1\u0026_r=4\u0026v=1\u0026_v=j86\u0026tid=G-JC97W0KNHW\u0026cid=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6\u0026_u=KGDAAEADQAAAAC%7E\u0026z=1393040572\u0026slf_rd=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:59.131Z","timestamp":1701740759131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:57 GMT","end":"Mon, 15 Jan 2024 11:24:56 GMT"},"fingerprint":{"sha1":"B0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1","sha256":"8E:7A:F4:2A:73:D7:C2:C9:1E:EC:59:1E:76:11:A4:E4:8D:03:F6:64:60:A2:8A:86:33:52:6B:1D:FE:19:FA:8D"}}},"request":{"raw":"GET /ads/ga-audiences?t=sr\u0026aip=1\u0026_r=4\u0026v=1\u0026_v=j86\u0026tid=G-JC97W0KNHW\u0026cid=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6\u0026_u=KGDAAEADQAAAAC%7E\u0026z=1393040572\u0026slf_rd=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javgg.net/\r\nOrigin: https://javgg.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 05 Dec 2023 01:45:53 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\naccess-control-allow-origin: https://javgg.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1\\012- data","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-15T20:38:07.708449Z","times_seen":798132,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":65,"dns":13,"connect":10,"send":0,"wait":22,"receive":1,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.jads.co/network/user22416/30553-1544525869-0417811001544525869.gif","fqdn":"i.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"205.185.216.10","port":443,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poweredby.jads.co/adshow.php?adzone=1029725","date":"2023-12-05T01:45:59.251Z","timestamp":1701740759251,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 26 Dec 2022 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB","sha256":"0F:63:44:A5:4C:F5:99:71:ED:3B:7C:66:EE:A7:8B:A9:8B:6D:DE:B9:33:65:7C:13:92:3A:35:43:7E:A7:64:D5"}}},"request":{"raw":"GET /network/user22416/30553-1544525869-0417811001544525869.gif HTTP/1.1\r\nHost: i.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poweredby.jads.co/\r\nCookie: surferid=232037a74d6774a4891dd6a242e396b3; imps12957=1; juicy_data_1=YToxOntpOjcxMzIyNjtpOjE3MDE5OTk5NTI7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1; imps30553=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 05 Dec 2023 01:45:53 GMT\r\nConnection: Keep-Alive\r\nETag: \"1544525869\"\r\nCache-Control: max-age=15622459\r\nContent-Length: 426439\r\nContent-Type: image/gif\r\nLast-Modified: Tue, 11 Dec 2018 10:57:49 GMT\r\nAccept-Ranges: bytes\r\nX-HW: 1701740753.dop224.sk1.t,1701740753.cds223.sk1.shn,1701740753.dop224.sk1.t,1701740753.cds209.sk1.c\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":426439,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 100\\012- data","md5":"587089b6fa0f42ff77bd761bd8ba2639","sha1":"a9d49e636359df14c4466cedfdef9fd76153cfbe","sha256":"436d6ea2e5e852845794e3a13131ba7c30788fbed77d28b5b493f828069551d3","sha512":"62aad629bc3b8204f0d22c76b9b08b883c809af06ceafc9fe06d24d9c09916dbdd5f0e9424e23a5b8f12c4d40fb7a55e8d74b01aa85e9e156548b911c638cca5","ssdeep":"12288:AGQXveclP81XS0N9Ts3SggMac8fvPTkvrwt6MltKQKZtVHGkKV:6feoPui0NFsBaFfHTWKn0vFKV","tlshash":"7a94232aef020d0987753536bfa3c0a6487655d852ade331259dd4e079e8ffe286c43d","first_seen":"2023-05-25T18:40:28Z","last_seen":"2024-08-21T06:41:09.224901Z","times_seen":11,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":11,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/cdn-cgi/rum?","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:59.327Z","timestamp":1701740759327,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javgg.net","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Nov 2023 16:24:54 GMT","end":"Tue, 20 Feb 2024 16:24:53 GMT"},"fingerprint":{"sha1":"45:D3:AB:61:30:E6:69:38:10:E0:E3:2B:42:36:A1:D8:1C:AB:4C:79","sha256":"05:F1:69:E7:5B:39:72:97:71:4E:32:7C:21:28:B9:06:22:92:77:04:40:E9:36:B6:C5:8A:BD:17:45:C9:75:11"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: javgg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 8623\r\nOrigin: https://javgg.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==\r\nCookie: google-analytics_v4_ef3e__engagementStart=1701740752599; google-analytics_v4_ef3e__counter=1; google-analytics_v4_ef3e__ga4sid=1929733268; google-analytics_v4_ef3e__session_counter=1; google-analytics_v4_ef3e__ga4=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6; google-analytics_v4_ef3e___z_ga_audiences=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6; google-analytics_v4_ef3e__let=1701740752599; cf_clearance=MEi4OcUWcnFpxImdcoRlV3LE5C_fYuEyDUMT8rPx81E-1701740753-0-1-730ca2d2.57dbd4fb.240dfd32-0.2.1701740753\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 05 Dec 2023 01:45:53 GMT\r\naccess-control-allow-origin: https://javgg.net\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 83089cbdebccb50b-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.hpyjmp.com/smartpop/ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026sourceId=308287\u0026p1=4184345\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi","fqdn":"go.hpyjmp.com","domain":"hpyjmp.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:59.322Z","timestamp":1701740759322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.hpyjmp.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Wed, 03 May 2023 00:00:00 GMT","end":"Wed, 01 May 2024 23:59:59 GMT"},"fingerprint":{"sha1":"06:6D:F2:34:8B:FE:41:6A:B2:EC:D4:12:2E:DB:59:83:1F:C9:4F:5F","sha256":"4C:42:00:09:BC:39:F1:7E:05:A1:A4:70:9A:1C:C6:50:F7:88:8E:8D:F2:0E:45:E8:8E:52:54:F2:38:D7:D1:14"}}},"request":{"raw":"GET /smartpop/ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026sourceId=308287\u0026p1=4184345\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi HTTP/1.1\r\nHost: go.hpyjmp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 05 Dec 2023 01:45:53 GMT\r\ncontent-length: 0\r\nlocation: https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nset-cookie: _var=810710.32240_NGNmOGEwYjY=; Path=/; Expires=Thu, 04 Jan 2024 01:45:53 GMT; HttpOnly; SameSite=Strict\n__cflb=0H28upDCGznfDm9XVE9Kb8v5TrfcnGC15xFdYuejETn; SameSite=None; Secure; path=/; expires=Wed, 06-Dec-23 01:45:53 GMT; HttpOnly\r\nserver: cloudflare\r\ncf-ray: 83089cbe5be5b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":70,"dns":41,"connect":1,"send":0,"wait":30,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5f25d.dappaa.site/api/users/310148?host=javgg.net\u0026ev=211\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fjavgg.net%2Fdownload%2FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%3D%3D\u0026i=1\u0026s1=%25IntertitialDesktop%25","fqdn":"5f25d.dappaa.site","domain":"dappaa.site","tld":"site"},"ip":{"addr":"135.181.208.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:59.353Z","timestamp":1701740759353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"5f25a.dappaa.site","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Nov 2023 09:27:10 GMT","end":"Sun, 11 Feb 2024 09:27:09 GMT"},"fingerprint":{"sha1":"ED:39:E9:89:76:BC:5A:5D:20:61:0F:0E:66:27:F5:A1:61:75:DC:78","sha256":"28:DD:C5:D6:46:2C:6D:3B:0C:5A:37:92:47:55:B2:B0:08:1C:DB:67:4D:D2:D3:46:4F:98:F5:1A:04:0D:AE:42"}}},"request":{"raw":"GET /api/users/310148?host=javgg.net\u0026ev=211\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fjavgg.net%2Fdownload%2FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%3D%3D\u0026i=1\u0026s1=%25IntertitialDesktop%25 HTTP/1.1\r\nHost: 5f25d.dappaa.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nCookie: nauid=7T4fPrRoxf8vQaKMxO7T\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 05 Dec 2023 01:45:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":954,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"gzip compressed data, from Unix\\012- data","md5":"6858ad9d0bae22f6c97fb6498471f772","sha1":"c5b8d6a8e43c931ed1cecce2b35c67c7ad5f633f","sha256":"86e7baf743aff2e063ecd5306f39038783686a6fb7b078896ed59295e10be9bf","sha512":"18a67acf03738ec218fa4e52057434caef6a3ba71bba550879d81e4c49e2c533c0f5419316e5c91c56a47e15bbe8a485631adbaffc5c88d9a4f02fbec2f7a7a0","ssdeep":"","tlshash":"a6110ce509523f90dd50ef9649fcfa69d070b76458c0a1d202d082c0ee5337f101514d","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notification.tubecup.net/tags?tag_id=9321\u0026timezone_olson=UTC\u0026version_name=c","fqdn":"notification.tubecup.net","domain":"tubecup.net","tld":"net"},"ip":{"addr":"138.201.237.88","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:59.324Z","timestamp":1701740759324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Nov 2023 09:29:43 GMT","end":"Wed, 07 Feb 2024 09:29:42 GMT"},"fingerprint":{"sha1":"0D:7A:7C:53:DB:15:35:28:E9:E6:2B:90:43:BB:EF:E5:AB:BE:DA:E3","sha256":"67:63:01:E6:2E:AB:0A:EE:AB:6C:9A:A7:AC:AE:15:68:14:6F:AE:53:46:38:1B:3E:AF:EA:A7:94:0F:87:0D:D2"}}},"request":{"raw":"GET /tags?tag_id=9321\u0026timezone_olson=UTC\u0026version_name=c HTTP/1.1\r\nHost: notification.tubecup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://javgg.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.2\r\ndate: Tue, 05 Dec 2023 01:45:53 GMT\r\ncontent-type: application/json\r\ncontent-length: 1020\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1020,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with very long lines (2922), with no line terminators","md5":"49c612f41e9941cb191b0921fdb5a108","sha1":"d2bcfffc3cc19256f81613c7bfb2a6806e0394bf","sha256":"90364fe40de58dcb35aa1fbae8bb67a3fb28e5bf78211c1ef0a3894f3789ab2d","sha512":"ea7c8543d7103659043fd8a597d926237056176b8fb1188f89947e28570b45625a7b80e6607f2fb18f1dee6d65938632dff901cc247ec8d05dd33cc0d9047ee4","ssdeep":"","tlshash":"3351a6a89d68c8f7d1f5018be5857602966d2193e0c47e1df47e8e7805ff9a51322217","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":221,"dns":54,"connect":52,"send":0,"wait":55,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"video.ktkjmp.com/adsbygoogle.js","fqdn":"video.ktkjmp.com","domain":"ktkjmp.com","tld":"com"},"ip":{"addr":"104.18.62.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:45:59.760Z","timestamp":1701740759760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"video.ktkjmp.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Sun, 02 Jul 2023 00:00:00 GMT","end":"Mon, 01 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"02:C1:75:9D:DD:6A:66:20:9E:A3:46:1B:5E:A4:87:83:5A:09:92:93","sha256":"74:DA:37:80:95:41:EC:C0:24:96:73:F3:FC:AC:A2:9A:1A:78:E8:58:0C:92:1C:1A:63:1A:8E:DF:05:40:39:F8"}}},"request":{"raw":"GET /adsbygoogle.js HTTP/1.1\r\nHost: video.ktkjmp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.mnaspm.com/\r\nOrigin: https://creative.mnaspm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 16\r\nx-amz-id-2: eOt3YX0Nm2YrsRFghHjY+ldPpZhMsRS8Tg9HXo+sQY2MfQ8piotah5MMqRgsIwcNTLmVbQ2iqoU=\r\nx-amz-request-id: Y49M74J1R1NSP1TJ\r\nlast-modified: Thu, 10 Mar 2022 13:52:07 GMT\r\netag: \"3d7f7a60216d40dea48e495fef6903c9\"\r\nx-amz-meta-s3cmd-attrs: atime:1646920284/ctime:1646920283/gid:20/gname:staff/md5:3d7f7a60216d40dea48e495fef6903c9/mode:33188/mtime:1646920283/uid:501/uname:mikhailchubar\r\nx-amz-version-id: eIgLIBoMMcsEXtxOH6UDjWyfAquRpkIG\r\naccess-control-allow-origin: https://creative.mnaspm.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\ncf-cache-status: HIT\r\nage: 5786\r\nexpires: Tue, 05 Dec 2023 05:45:54 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83089cc0ea77b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"3d7f7a60216d40dea48e495fef6903c9","sha1":"fecdb5184f55cf012563d78940eb97b10b9cc99b","sha256":"96d83ac9f20fc0b88404f307f135e212642e02d6ea295c96b28aed0d771a224f","sha512":"8e5056a5835b9925597eba1c09197a103477e087cbb74acf40afb00133b9c6b981625d25af2f02cf64931cfb58faf161398b06d793609f6781ce9d1d80f0b26e","ssdeep":"","tlshash":"296000000ccc00333c0030000c0000c3300c0f3000003000300c003f00c0c0c30c003c","first_seen":"2023-04-05T14:13:49Z","last_seen":"2025-01-27T06:20:12.886858Z","times_seen":5473,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":48,"dns":27,"connect":1,"send":0,"wait":19,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=9321","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:59.711Z","timestamp":1701740759711,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Nov 2023 09:29:43 GMT","end":"Wed, 07 Feb 2024 09:29:42 GMT"},"fingerprint":{"sha1":"0D:7A:7C:53:DB:15:35:28:E9:E6:2B:90:43:BB:EF:E5:AB:BE:DA:E3","sha256":"67:63:01:E6:2E:AB:0A:EE:AB:6C:9A:A7:AC:AE:15:68:14:6F:AE:53:46:38:1B:3E:AF:EA:A7:94:0F:87:0D:D2"}}},"request":{"raw":"OPTIONS /fp?tag_id=9321 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://javgg.net/\r\nOrigin: https://javgg.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Tue, 05 Dec 2023 01:45:54 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://javgg.net\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":168,"dns":8,"connect":47,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6a1d032c40.b65415fde6.com/c1c4fab3e4d825cf95ab773a3377267d.js","fqdn":"6a1d032c40.b65415fde6.com","domain":"b65415fde6.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.337Z","timestamp":1701740758337,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6a1d032c40.b65415fde6.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Dec 2023 02:20:27 GMT","end":"Fri, 01 Mar 2024 02:20:26 GMT"},"fingerprint":{"sha1":"82:52:5D:FA:0B:FC:52:0F:E3:C3:D0:90:4F:5C:16:FD:D6:C4:8B:37","sha256":"BB:E2:DF:83:06:AC:BF:1C:09:E1:AE:C4:36:DD:B1:9C:5C:7E:4F:42:33:B2:9B:C2:A0:00:B3:E6:C4:A4:8A:5D"}}},"request":{"raw":"GET /c1c4fab3e4d825cf95ab773a3377267d.js HTTP/1.1\r\nHost: 6a1d032c40.b65415fde6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://javgg.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Mon, 04 Dec 2023 11:23:10 GMT\r\netag: W/\"656db69e-287fd\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 05 Dec 2023 01:50:52 GMT\r\ncache-control: max-age=300\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51078,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65527), with no line terminators","md5":"31fc74350d3db6298a85dfb6ca2cbcfb","sha1":"8cede48d2927eb1f9b1db8b7e0489a76c28c9207","sha256":"f778e4b1b4c5467f7579e32fd69b319b56f466932230ce74898fd7f3c64081b9","sha512":"d2607349dd8521037b428e77a19df3b3eb3fe8c899d58c40376681f94dba0a2401361465ce3994823f5fb10637b61bbb8c338c76bd89c144094ad2488705be16","ssdeep":"3072:G2Fg5FW2xJOOKNW1IJOO6/9j0a8oYPasJOOsXJOO8ySx:G2FCxxJOg1IJOh/9j0a8o6JOJJObySx","tlshash":"26f3f8ccf2c7b07543e76124943f2106f33a6916b4498458e666e8d1bcb8d8e923bf79","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":271,"dns":66,"connect":26,"send":0,"wait":61,"receive":0,"ssl":181},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"b65415fde6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.mnaspm.com/config?url=https%3A%2F%2Fcreative.mnaspm.com%2FLPOmega%3Faction%3DsbSignupWithModel%26campaignId%3Debdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d%26campaignType%3Dsmartpop%26creativeId%3D47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69%26iterationId%3D764445%26masterSmartpopId%3D1738%26memberId%3DJ0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi%26p1%3D4184345%26quality%3D240p%26ruleId%3D12%26smartpopId%3D1589%26sourceId%3D308287%26usePreroll%3D0%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D32240","fqdn":"go.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:45:59.757Z","timestamp":1701740759757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mnaspm.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 20 Oct 2023 15:37:06 GMT","end":"Thu, 18 Jan 2024 15:37:05 GMT"},"fingerprint":{"sha1":"D2:26:54:49:EC:5C:B3:8E:40:54:41:6D:0E:21:1C:E8:A8:48:BD:EE","sha256":"04:D5:0C:A3:E2:91:E9:33:B5:54:7C:7F:1F:6E:7C:3A:6B:C0:8B:CB:C4:09:60:05:F4:2D:A7:B9:86:DF:9D:35"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.mnaspm.com%2FLPOmega%3Faction%3DsbSignupWithModel%26campaignId%3Debdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d%26campaignType%3Dsmartpop%26creativeId%3D47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69%26iterationId%3D764445%26masterSmartpopId%3D1738%26memberId%3DJ0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi%26p1%3D4184345%26quality%3D240p%26ruleId%3D12%26smartpopId%3D1589%26sourceId%3D308287%26usePreroll%3D0%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D32240 HTTP/1.1\r\nHost: go.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.mnaspm.com/\r\nOrigin: https://creative.mnaspm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://creative.mnaspm.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nlast-modified: Tue, 05 Dec 2023 01:45:54 GMT\r\ncf-cache-status: MISS\r\nset-cookie: __cflb=02DiuDFRFiBZBvMSLtr4BTSnpWHamtv7KsVb1QrnEpRtG; SameSite=None; Secure; path=/; expires=Wed, 06-Dec-23 01:45:54 GMT; HttpOnly\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83089cc0ca2c56a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78847,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text","md5":"904e0fe13a57fe47eae93e5ef219a87f","sha1":"5c8efc9b59af930730f4cc7f00c60b2817e5a3e9","sha256":"633c09f68caa631aabaa512e122ec2fe9f3aa9a5fd7583ca01340e125b798ecd","sha512":"2e755472dc47b498e05a7c38a177635b28efcbcc50035c1bb539085831a79aae6242be5eb34a62d661510701e28c3a5ea4e5a36fb1044e587963e114dd9cd0c7","ssdeep":"192:uwUAXwqGzoKXt6xYr14E8nyayq6/7VzRloqJekyq/7VzRloqJeW:uwUVqytXQ01llf0q7","tlshash":"d4e134ef822e65f207944d5e7e5fa8c86d5d80d74e8148ebdc49c834826c3b112b7b9e","first_seen":"2023-12-02T15:35:47Z","last_seen":"2023-12-05T02:46:20Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":22,"dns":1,"connect":2,"send":0,"wait":52,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=9321","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:59.711Z","timestamp":1701740759711,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Nov 2023 09:29:43 GMT","end":"Wed, 07 Feb 2024 09:29:42 GMT"},"fingerprint":{"sha1":"0D:7A:7C:53:DB:15:35:28:E9:E6:2B:90:43:BB:EF:E5:AB:BE:DA:E3","sha256":"67:63:01:E6:2E:AB:0A:EE:AB:6C:9A:A7:AC:AE:15:68:14:6F:AE:53:46:38:1B:3E:AF:EA:A7:94:0F:87:0D:D2"}}},"request":{"raw":"POST /fp?tag_id=9321 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 23165\r\nOrigin: https://javgg.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Tue, 05 Dec 2023 01:45:54 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://javgg.net\r\nSet-Cookie: id=8064251664979457414; Expires=Wed, 04 Dec 2024 01:45:54 GMT; Secure; SameSite=None\r\nVary: Origin\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":58,"size_decoded":0,"mime_type":"text/plain","magic":"JSON data\\012- , ASCII text","md5":"49cb75c0da6be8cc97daea0ae2498649","sha1":"1dd230c3f22a2308b9c091fe1e952b5e8d44bc88","sha256":"3f61f6927c8c29196e623750a164dcd6895cc2dc3a592ccc5d755b3d4d407841","sha512":"0b968141d8c39e0a6375d5f5cac7946c099fcf450ff90897662a492bbf45d56ea448caafd35e732c2fcf5c3897de5966950e9326a99f1f20c6bea5a81f77ace6","ssdeep":"","tlshash":"a1a00288688a0af6d0b080a0c37d231d0d8774210cc0a0c105624650805862123bec0b","first_seen":"2023-11-25T10:42:40Z","last_seen":"2024-08-20T17:59:54.086532Z","times_seen":1030,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":168,"dns":8,"connect":47,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.mnaspm.com/abc.gif?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240\u0026modelsLimit=1\u0026thumbFit=cover\u0026language=en\u0026stripcashR=0\u0026thumbType=default\u0026messagesLimit=30\u0026theme=dark\u0026agev=0\u0026ageVerificationTheme=dark\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026userType=newuser\u0026modelsCount=1\u0026segment=hls-newAPI\u0026landing=LPOmega\u0026referrer=https%3A%2F%2Fjavgg.net%2F\u0026i=0\u0026ib=0\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A418%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A274%2C%22duration%22%3A16%2C%22transferSize%22%3A13508%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A275%2C%22duration%22%3A26%2C%22transferSize%22%3A98131%7D%5D\u0026mh=841340463","fqdn":"go.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:46:00.159Z","timestamp":1701740760159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mnaspm.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 20 Oct 2023 15:37:06 GMT","end":"Thu, 18 Jan 2024 15:37:05 GMT"},"fingerprint":{"sha1":"D2:26:54:49:EC:5C:B3:8E:40:54:41:6D:0E:21:1C:E8:A8:48:BD:EE","sha256":"04:D5:0C:A3:E2:91:E9:33:B5:54:7C:7F:1F:6E:7C:3A:6B:C0:8B:CB:C4:09:60:05:F4:2D:A7:B9:86:DF:9D:35"}}},"request":{"raw":"GET /abc.gif?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240\u0026modelsLimit=1\u0026thumbFit=cover\u0026language=en\u0026stripcashR=0\u0026thumbType=default\u0026messagesLimit=30\u0026theme=dark\u0026agev=0\u0026ageVerificationTheme=dark\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026userType=newuser\u0026modelsCount=1\u0026segment=hls-newAPI\u0026landing=LPOmega\u0026referrer=https%3A%2F%2Fjavgg.net%2F\u0026i=0\u0026ib=0\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A418%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A274%2C%22duration%22%3A16%2C%22transferSize%22%3A13508%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A275%2C%22duration%22%3A26%2C%22transferSize%22%3A98131%7D%5D\u0026mh=841340463 HTTP/1.1\r\nHost: go.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.mnaspm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cflb=02DiuDFRFiBZBvMSLtrsnD7QZBLqqpmg3jrGNvvUmAJpt; SameSite=None; Secure; path=/; expires=Wed, 06-Dec-23 01:45:54 GMT; HttpOnly\r\nserver: cloudflare\r\ncf-ray: 83089cc31db2b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103,"size_decoded":0,"mime_type":"image/gif","magic":"data","md5":"8c99886486b9a004383cb4df29011c43","sha1":"d79ca4754481fc59598bc08fcdf354900918bffe","sha256":"bda00b0f6892b1c6991e793b42654ad1807694e2ffabcbc4eb1399379737ef6c","sha512":"1a44f60174aed5a5bb4d0b16b3102bdc52ec0cec8c6e15a5e0628b66c868c13af92151c7164821855a7e62aba53b2d47dcff6517f558cea07e4e6c8f939fd8d0","ssdeep":"","tlshash":"96b0125fc086e1300c58306bc6b72a1742f015002b0aca61e8b26b138e071df7131d80","first_seen":"2023-04-07T00:29:15Z","last_seen":"2026-04-13T05:24:10.642608Z","times_seen":5420,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/build.m.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:59.734Z","timestamp":1701740759734,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.cabnnr.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Oct 2023 13:02:54 GMT","end":"Sat, 20 Jan 2024 13:02:53 GMT"},"fingerprint":{"sha1":"3A:29:AE:AD:75:BB:08:B4:F0:B7:22:4E:50:FB:7E:47:1C:0B:9B:33","sha256":"54:3C:3E:A8:BB:EF:9B:4B:A4:03:7E:8F:14:51:D7:2E:63:7C:7F:F1:24:CB:1F:ED:67:D2:4E:A6:36:C3:84:13"}}},"request":{"raw":"GET /banner-admanager/build.m.js HTTP/1.1\r\nHost: js.cabnnr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 24 Nov 2023 09:13:53 GMT\r\netag: W/\"65606951-d3d5\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 05 Dec 2023 01:50:54 GMT\r\ncache-control: max-age=300\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22708,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"gzip compressed data, from Unix\\012- data","md5":"edef774ca2faade731ab330db6b2818b","sha1":"98221e471067667dec5fb0069ef2fb4e24ba3c99","sha256":"b183e543f5cd56fbd0ec3f020273ab7ed21187395063242eb0af037f0c1fb4e2","sha512":"af4e5552ea81be05159a4db22615a7efda69bcb6e902b1933f39b2cb9f1fba86aa009252674efd5d04bd11beee3e1d37929cca295bb234164995723c2b2662a3","ssdeep":"384:OZY9TXq6ZstGU6GrvZurPvCbHkkiAgAhSQxbUL7HsTBf7NHbc1SrFOdKtUsEvu49:O698tGqvZurHCbHkx4jxeuB7Nw1sF+zl","tlshash":"2aa2e11275ab2e5d3b78336495be99120dda0fba96cc9d4ead4f40438c770f833342a2","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":98,"dns":12,"connect":30,"send":0,"wait":26,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.mnaspm.com/app/domain-checker/get-check","fqdn":"go.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:46:00.122Z","timestamp":1701740760122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mnaspm.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 20 Oct 2023 15:37:06 GMT","end":"Thu, 18 Jan 2024 15:37:05 GMT"},"fingerprint":{"sha1":"D2:26:54:49:EC:5C:B3:8E:40:54:41:6D:0E:21:1C:E8:A8:48:BD:EE","sha256":"04:D5:0C:A3:E2:91:E9:33:B5:54:7C:7F:1F:6E:7C:3A:6B:C0:8B:CB:C4:09:60:05:F4:2D:A7:B9:86:DF:9D:35"}}},"request":{"raw":"GET /app/domain-checker/get-check HTTP/1.1\r\nHost: go.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.mnaspm.com/\r\nOrigin: https://creative.mnaspm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://creative.mnaspm.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cflb=0H28upDCGznfDm9XVDQgYY38nUsBbmdTmUvQ9kvydLx; SameSite=None; Secure; path=/; expires=Wed, 06-Dec-23 01:45:54 GMT; HttpOnly\r\nserver: cloudflare\r\ncf-ray: 83089cc2dda5b500-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":123,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text","md5":"f08b6f0a734391245a2c419ecaee78f4","sha1":"04dc5afeca66a168f6daeef095ae6176483fe181","sha256":"cebf7820843467a6d89c28e8d71ccf342a413a62a7661405f9829e4bfe4fa29a","sha512":"f1c206eb0c67ee8af7c6b6392fda5df3f1965de493e534228912659b56e07aacc8fc4be67914cb7bb429865b3e7e36995e126cdb387ec1427acd2955f943a7d9","ssdeep":"","tlshash":"dfc09b1b400db153cdd0a5d6393da144551644d509025cd55dd8786580d81315473d45","first_seen":"2023-11-23T20:01:01Z","last_seen":"2024-08-20T18:08:09.716048Z","times_seen":38,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?site=native-push\u0026wl=1\u0026event_id=def249f1-9fdd-489a-9b67-3c1e40ef60f2\u0026subid=1824673469\u0026sid=2297567554\u0026spot_id=8005\u0026created_at=2023-12-05\u0026timezone=0\u0026ver=8.121.0\u0026is_native=1","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"167.235.163.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:46:00.117Z","timestamp":1701740760117,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Nov 2023 09:29:43 GMT","end":"Wed, 07 Feb 2024 09:29:42 GMT"},"fingerprint":{"sha1":"0D:7A:7C:53:DB:15:35:28:E9:E6:2B:90:43:BB:EF:E5:AB:BE:DA:E3","sha256":"67:63:01:E6:2E:AB:0A:EE:AB:6C:9A:A7:AC:AE:15:68:14:6F:AE:53:46:38:1B:3E:AF:EA:A7:94:0F:87:0D:D2"}}},"request":{"raw":"GET /in/dip?site=native-push\u0026wl=1\u0026event_id=def249f1-9fdd-489a-9b67-3c1e40ef60f2\u0026subid=1824673469\u0026sid=2297567554\u0026spot_id=8005\u0026created_at=2023-12-05\u0026timezone=0\u0026ver=8.121.0\u0026is_native=1 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://javgg.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":174,"dns":18,"connect":54,"send":0,"wait":51,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.mnaspm.com/LPOmega/images/grinning.png","fqdn":"creative.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:46:00.411Z","timestamp":1701740760411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mnaspm.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 20 Oct 2023 15:37:06 GMT","end":"Thu, 18 Jan 2024 15:37:05 GMT"},"fingerprint":{"sha1":"D2:26:54:49:EC:5C:B3:8E:40:54:41:6D:0E:21:1C:E8:A8:48:BD:EE","sha256":"04:D5:0C:A3:E2:91:E9:33:B5:54:7C:7F:1F:6E:7C:3A:6B:C0:8B:CB:C4:09:60:05:F4:2D:A7:B9:86:DF:9D:35"}}},"request":{"raw":"GET /LPOmega/images/grinning.png HTTP/1.1\r\nHost: creative.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.mnaspm.com/LPOmega/main.d5bb40f50c46b20ec9c1.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 5479\r\nlast-modified: Thu, 30 Nov 2023 11:55:19 GMT\r\netag: \"65687827-1567\"\r\nexpires: Tue, 05 Dec 2023 01:45:57 GMT\r\ncache-control: max-age=10\r\npragma: public\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nset-cookie: __cflb=0H28upDCGznfDm9XVDEEFVkNrzLraWxchuLTBhv2qnU; SameSite=None; Secure; path=/; expires=Wed, 06-Dec-23 01:45:54 GMT; HttpOnly\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83089cc4be3cb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5479,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 884, 8-bit colormap, non-interlaced\\012- data","md5":"5af4d9c5ba05b53e47070ec48148ca4e","sha1":"f14ecb751314b6ee971952fe1c1def65e2c3fd0e","sha256":"02e7449cdbc58f561527c5765cd520a19132bbe3385e7bbf1b7141a5b9534c80","sha512":"8bedd0a3196ac7898ade76441e2fddd71625313907b140999afdb4e94e69a41c75821c54af8c34e5947697f861a04a592f2e86d740d19eebcd18de80e314eacc","ssdeep":"96:hjTGCriByvFeNnS9kZODwey+ma8PZGb4EFXM0VJsCu79lbadzufs+s6I9Kd9:7eBMFeNnS9HUG8PyFXx8l4uL5Isd9","tlshash":"6bb18d3623549ca3ef05d6fdd909aa0cc1848cecfe7e67a396453821eb50f595815a09","first_seen":"2023-06-16T03:38:40Z","last_seen":"2026-04-13T09:58:25.01978Z","times_seen":25,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.mnaspm.com/app/domain-checker/check-result","fqdn":"go.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:46:00.414Z","timestamp":1701740760414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mnaspm.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 20 Oct 2023 15:37:06 GMT","end":"Thu, 18 Jan 2024 15:37:05 GMT"},"fingerprint":{"sha1":"D2:26:54:49:EC:5C:B3:8E:40:54:41:6D:0E:21:1C:E8:A8:48:BD:EE","sha256":"04:D5:0C:A3:E2:91:E9:33:B5:54:7C:7F:1F:6E:7C:3A:6B:C0:8B:CB:C4:09:60:05:F4:2D:A7:B9:86:DF:9D:35"}}},"request":{"raw":"POST /app/domain-checker/check-result HTTP/1.1\r\nHost: go.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.mnaspm.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 174\r\nOrigin: https://creative.mnaspm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\naccess-control-allow-origin: https://creative.mnaspm.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cflb=02DiuDFRFiBZBvMSLtrsn3TfoaR3cJpttPHJPdtydfe4t; SameSite=None; Secure; path=/; expires=Wed, 06-Dec-23 01:45:54 GMT; HttpOnly\r\nserver: cloudflare\r\ncf-ray: 83089cc4be3eb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.mnaspm.com/LPOmega/images/ok.png","fqdn":"creative.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:46:00.413Z","timestamp":1701740760413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mnaspm.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 20 Oct 2023 15:37:06 GMT","end":"Thu, 18 Jan 2024 15:37:05 GMT"},"fingerprint":{"sha1":"D2:26:54:49:EC:5C:B3:8E:40:54:41:6D:0E:21:1C:E8:A8:48:BD:EE","sha256":"04:D5:0C:A3:E2:91:E9:33:B5:54:7C:7F:1F:6E:7C:3A:6B:C0:8B:CB:C4:09:60:05:F4:2D:A7:B9:86:DF:9D:35"}}},"request":{"raw":"GET /LPOmega/images/ok.png HTTP/1.1\r\nHost: creative.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.mnaspm.com/LPOmega/main.d5bb40f50c46b20ec9c1.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 7526\r\nlast-modified: Thu, 30 Nov 2023 11:55:19 GMT\r\netag: \"65687827-1d66\"\r\nexpires: Tue, 05 Dec 2023 01:45:57 GMT\r\ncache-control: max-age=10\r\npragma: public\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nset-cookie: __cflb=02DiuDFRFiBZBvMSLtsgHAphT8dt9Y3eZwY2NQWQ73gyA; SameSite=None; Secure; path=/; expires=Wed, 06-Dec-23 01:45:54 GMT; HttpOnly\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83089cc4be3db500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7526,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 1092, 8-bit colormap, non-interlaced\\012- data","md5":"254d661d7701301a7f5fb80a09d69fe6","sha1":"9a7b541726304a4d1f5ac37ce7c569f0a2d72015","sha256":"33660144b545778fd721e6a68f76f8fb1e3ae7f6707311ae0899b180f9bc553f","sha512":"c8d186efc4bd501c2d394a6a8d189023716bea8a49ec709797f6df15f390e219e7a4084d3bf490ea6f02607aa5ea157cb4f95cffb618187cceb4f733ed8b0067","ssdeep":"","tlshash":"","first_seen":"2023-12-05T02:46:20Z","last_seen":"2026-02-08T12:17:36.247231Z","times_seen":4,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.mnaspm.com/api/models?quality=240p\u0026forceClient=1\u0026stripcashR=0\u0026limit=1\u0026usePreroll=0\u0026webp=1","fqdn":"go.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:46:00.103Z","timestamp":1701740760103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mnaspm.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 20 Oct 2023 15:37:06 GMT","end":"Thu, 18 Jan 2024 15:37:05 GMT"},"fingerprint":{"sha1":"D2:26:54:49:EC:5C:B3:8E:40:54:41:6D:0E:21:1C:E8:A8:48:BD:EE","sha256":"04:D5:0C:A3:E2:91:E9:33:B5:54:7C:7F:1F:6E:7C:3A:6B:C0:8B:CB:C4:09:60:05:F4:2D:A7:B9:86:DF:9D:35"}}},"request":{"raw":"GET /api/models?quality=240p\u0026forceClient=1\u0026stripcashR=0\u0026limit=1\u0026usePreroll=0\u0026webp=1 HTTP/1.1\r\nHost: go.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.mnaspm.com/\r\nOrigin: https://creative.mnaspm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://creative.mnaspm.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nlast-modified: Tue, 05 Dec 2023 01:45:33 GMT\r\ncf-cache-status: HIT\r\nage: 10\r\nserver: cloudflare\r\ncf-ray: 83089cc28d8db500-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":643,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with very long lines (1700), with no line terminators","md5":"85ef5510b5ad33d6171fa3c33f079ec1","sha1":"7c1a51669cc13b699f57a3998a71b2bf851ba55f","sha256":"83880268e00d486af8ad10c164e9eacd054903232e50cd7849035c194b168582","sha512":"091586c54f8d6a3db916b7f411aa9a7f3fc389f4c4fd70ee5b21058a9f6ec85cdbd06f5c1bd7860495a702701515c0066d3440b50adcf29e1be572ec12637279","ssdeep":"","tlshash":"ff31caf7a6cc5d6e1f4e25c4ac8d7c08c5470c273ae9b2e6859c8e0505b3dde3218956","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.150.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:46:00.510Z","timestamp":1701740760510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 20 Nov 2023 08:09:49 GMT","end":"Mon, 12 Feb 2024 08:09:48 GMT"},"fingerprint":{"sha1":"F3:FB:54:1B:21:E9:69:01:41:02:BB:D0:97:A2:BA:45:72:5A:71:D8","sha256":"52:D6:51:A4:34:2E:B5:57:93:3C:CE:1B:94:0A:2B:6F:3B:BE:DF:41:C4:50:F4:5D:01:23:34:CC:BC:A5:9E:B1"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:ztGBb4PV8FXYGfWEi-P63nX1ngqd7w:zSe6SSXiiaD8GY0V; Expires=Thu, 04-Dec-2025 01:45:54 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=ASKXGp1yDXu1g_0rp1ZOl205-eBHwsQsPK6ORQYfodtcULgpoUAa27xs3NaV7w1o1cHI6VOowv-twQ\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: unsafe-none\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-A8TThzq8rY6v4I0Fsly5ig' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":86,"dns":0,"connect":16,"send":0,"wait":28,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=ASKXGp1yDXu1g_0rp1ZOl205-eBHwsQsPK6ORQYfodtcULgpoUAa27xs3NaV7w1o1cHI6VOowv-twQ","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.150.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:46:00.651Z","timestamp":1701740760651,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 20 Nov 2023 08:09:49 GMT","end":"Mon, 12 Feb 2024 08:09:48 GMT"},"fingerprint":{"sha1":"F3:FB:54:1B:21:E9:69:01:41:02:BB:D0:97:A2:BA:45:72:5A:71:D8","sha256":"52:D6:51:A4:34:2E:B5:57:93:3C:CE:1B:94:0A:2B:6F:3B:BE:DF:41:C4:50:F4:5D:01:23:34:CC:BC:A5:9E:B1"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=ASKXGp1yDXu1g_0rp1ZOl205-eBHwsQsPK6ORQYfodtcULgpoUAa27xs3NaV7w1o1cHI6VOowv-twQ HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:Q3rj98f7Ama7YgFP2jmMAA84QjMP1g:aCMvkmB7LSfxzHVn;Path=/;Expires=Thu, 04-Dec-2025 01:45:54 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=ASKXGp1NQT9M0P7OJadXSKObrUegzHh9q9IaIVaQ5ZOIAyRSLUDLd9BTQ6a-c6yFRhU_pDNUShsSIA\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S704852539%3A1701740754952026\u0026theme=glif\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-security-policy: script-src 'nonce-6ZiuOC4qAikOQz3-WbGiXw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 405\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":405,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document, ASCII text, with very long lines (396)","md5":"2dbcac1076288aee9869d0ed4982dc1d","sha1":"b1f9666dde2dd18408d08cc156e0a206579fe8f9","sha256":"c66f98b189b852e2cd0dfbc6ed66f082d81c2437d01fb2c40b776013524b5681","sha512":"617ec87fb8f6c7e080eda27b0804f6e6a772ab5b14c075cdd9c4d80c829cf8e848c34cbcc843bd02e0b9fa5e1ac1f5ec23cea80d40412c8407c06952b10e829d","ssdeep":"","tlshash":"b2f0c0ae0cdb04d994837cf69024a08c843464643ad7a5f9b1e66312419981711157b6","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b-hls-20.doppiocdn.com/hls/84739822/84739822_240p_init_4s1wx4cCF8qG5j0h.mp4","fqdn":"b-hls-20.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.18.63.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:46:00.696Z","timestamp":1701740760696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Sat, 21 Jan 2023 00:00:00 GMT","end":"Sun, 21 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13","sha256":"D5:03:42:AF:0E:C5:33:C5:B8:32:C8:30:8D:1E:16:AE:21:A2:21:BE:3F:EB:AE:AD:A7:F3:4F:3A:9B:26:2E:4B"}}},"request":{"raw":"GET /hls/84739822/84739822_240p_init_4s1wx4cCF8qG5j0h.mp4 HTTP/1.1\r\nHost: b-hls-20.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://creative.mnaspm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.mnaspm.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1217\r\nlast-modified: Tue, 05 Dec 2023 01:43:49 GMT\r\netag: \"656e8055-4c1\"\r\ncache-control: public, max-age=60, s-maxage=60\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 38\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83089cc69a5bb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1217,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v5 \\012- data","md5":"1a78c1b13dca86cd7831e4c715f1aa16","sha1":"c062a25038267a142fd568fa2c14d3dd2fdb2648","sha256":"e72012e4788e88a85dd7125625416011cd260dbb900eed2f729e2c8e32dadd30","sha512":"fc7abb34ce19c122466b42d82886b4e6769de6f281d71437e744ba8e4bb87cd0faa4e7347578fd9c75560ad6dab6a4355be6f2bd4c816ccf1ad9725eae3fdda7","ssdeep":"","tlshash":"fa2149f723240d82c210c6384515531a2392ebf56abeb3878e8351891d3e7c19f71d1f","first_seen":"2023-09-29T10:29:53Z","last_seen":"2024-08-21T05:32:47.160726Z","times_seen":66,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b-hls-20.doppiocdn.com/hls/84739822/84739822_240p_58_jSPPWILsmxKSS89U_1701740745.mp4","fqdn":"b-hls-20.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.18.63.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:46:00.751Z","timestamp":1701740760751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Sat, 21 Jan 2023 00:00:00 GMT","end":"Sun, 21 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13","sha256":"D5:03:42:AF:0E:C5:33:C5:B8:32:C8:30:8D:1E:16:AE:21:A2:21:BE:3F:EB:AE:AD:A7:F3:4F:3A:9B:26:2E:4B"}}},"request":{"raw":"GET /hls/84739822/84739822_240p_58_jSPPWILsmxKSS89U_1701740745.mp4 HTTP/1.1\r\nHost: b-hls-20.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://creative.mnaspm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.mnaspm.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:55 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 166922\r\nlast-modified: Tue, 05 Dec 2023 01:45:47 GMT\r\netag: \"656e80cb-28c0a\"\r\ncache-control: public, max-age=60, s-maxage=60\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 5\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83089cc6ea77b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":166922,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"b1e778a660c99cb73ae16a914d3d51f3","sha1":"8ce5b6598409e11bcd998f4a21e231a1a53792e2","sha256":"8bd3cdf02e7e2e6570354cf0d1811379c1edda68f6ccad7107651af52de1b439","sha512":"859eed74bbcfef029fe5c74469546a91de54dc316570d5cd822c2dd77b689654301cd0fc463ca52ba4169c84e42320cdb34549a10f2b2e437a9165ea0c4da6a1","ssdeep":"3072:VkujFldIGnrW3G2+5krRbR8RRX59JYvtQKaZZlDMDSzE:VkqvIG2h+5CZR45zctQdlu","tlshash":"2ff3126d0b54e91dd73d6df0184f9b245436b1f1c3e2b88728dbba84ac5ab84923a1d3","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":7,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.mnaspm.com/LPOmega/vendors~hls.0d45af8f1e202112dd0a.js","fqdn":"creative.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:46:00.420Z","timestamp":1701740760420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mnaspm.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 20 Oct 2023 15:37:06 GMT","end":"Thu, 18 Jan 2024 15:37:05 GMT"},"fingerprint":{"sha1":"D2:26:54:49:EC:5C:B3:8E:40:54:41:6D:0E:21:1C:E8:A8:48:BD:EE","sha256":"04:D5:0C:A3:E2:91:E9:33:B5:54:7C:7F:1F:6E:7C:3A:6B:C0:8B:CB:C4:09:60:05:F4:2D:A7:B9:86:DF:9D:35"}}},"request":{"raw":"GET /LPOmega/vendors~hls.0d45af8f1e202112dd0a.js HTTP/1.1\r\nHost: creative.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 30 Nov 2023 11:58:38 GMT\r\netag: W/\"656878ee-2b6c9\"\r\nexpires: Tue, 05 Dec 2023 01:46:00 GMT\r\ncache-control: max-age=10\r\npragma: public\r\ncf-cache-status: HIT\r\nage: 4\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83089cc4ce41b500-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":277929,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (45140)","md5":"5560d3d9d4d3b5d533550b6a3719ad06","sha1":"8a923212bb611763c1609ab743d113214cc27c17","sha256":"63cf9fda52eb82dd5f9d18cd15e54af4ee08a7a37c6f0fdd09cc34fbfa598e06","sha512":"9ccc6b532fda90f16f2ab5f41835db06b719351ff70d6c45193a324d31d7da52593312d1bb67add133798cb458f77c7fb5666fc37610a097c1ae935832cc7f17","ssdeep":"3072:B5HXautd6Ey2MMo+a9IX/LWFhKNAP3E/aht4:DKUIEy2Moa9IjWrKNG3E/wO","tlshash":"3b042aee36947856438361a4503f46976236bc096408d06cbb5bfaee1d7cc4ab13bf78","first_seen":"2023-10-14T20:50:01Z","last_seen":"2024-08-21T04:43:00.687097Z","times_seen":30,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"433bb3d20f.6542309b8a.com/in/multy","fqdn":"433bb3d20f.6542309b8a.com","domain":"6542309b8a.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:46:00.494Z","timestamp":1701740760494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"6542309b8a.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Dec 2023 06:09:54 GMT","end":"Sun, 03 Mar 2024 06:09:53 GMT"},"fingerprint":{"sha1":"66:AF:B1:A9:06:88:99:9D:57:82:08:47:45:5A:51:3E:94:9F:5D:D5","sha256":"CB:21:7F:23:36:68:AE:53:C4:E8:01:64:14:C8:DB:F5:CA:A9:DB:B9:0A:A7:92:5F:AD:FF:49:E0:95:CE:EF:C4"}}},"request":{"raw":"POST /in/multy HTTP/1.1\r\nHost: 433bb3d20f.6542309b8a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1654\r\nOrigin: https://javgg.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 05 Dec 2023 01:45:55 GMT\r\ncontent-type: application/json\r\ncontent-length: 6214\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6214,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with very long lines (45973), with no line terminators","md5":"037e7dd05758a3bc91e2cffacd1c9582","sha1":"da38b4a02925d571a59dabc8a8d308d6237d1e67","sha256":"fff8b21c954cd0c66e6e15f865f722e724873adffd1c78fca8ea5a10714aa1e2","sha512":"2681b4d08fd0e7e1e9f5d58a023db2a089310072704d6c811f3f61f0fb2bad9e9fd45dc6c9ba6aecca0a44b1076ccd811f58b14e3351d11d9372f4c1c1de0373","ssdeep":"768:dZGKeZHitucKvuNjzuNjPucK/uhfituNj3ZGKeZBWuSKPuzjTuzjvuSKfuhpWuzJ:dct6ucSuNPuNTucuuhf6uNTcKuSquzPo","tlshash":"78237db80997ce781eaac94b51327890775397879fab42e4ffb9542e90d6c45320fc8c","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"6542309b8a.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"433bb3d20f.6542309b8a.com/in/show/?tag_ab=c\u0026site_id=318005\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=mq\u0026pr=\u0026banner_width=300\u0026banner_height=100\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=1\u0026conditions=dch_ip,tz_offset,all\u0026ssp=3964\u0026page=https%3A%2F%2Fjavgg.net%2Fdownload%2FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%3D%3D\u0026refdom=javgg.net\u0026auction_time=1701740754\u0026subid=1824673469\u0026sid=2297567554\u0026tcid=0\u0026ver=8.121.0\u0026ver_c=\u0026spot_id=8005\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2023-12-05\u0026iabcat=IAB25-3\u0026keywords=japanese\u0026user_fp=17694828828993508365\u0026score=61.90823680719142\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1824673469%26spot_id%3D8005%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fjavgg.net%252Fdownload%252FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%253D%253D%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=8fc5a3949d58ed66158a5da3a7b48b19\u0026url=https%3A%2F%2Fr-eu.tsyndicate.com%2Fdo2%2Fdirect%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQDpyFIuC8uVjxDEYzYmTYMBPGRpgWOMbAmNGCxgwZNFqIGZODTIsyYsSUySEjB80cOEU4nCMmDRmFOraIiIEDpo0bM2jYyCGii8MxbpDGWAnDYZg6YzDakLEVhoyeMGjgmFGDKVQaMoSKKEoGYxo6Zdp8iSHXoJ2FNmzQkOoQTh0xC2uwleEVzkUdZ2nEsDEUjkQdkm_YqIEDh8MyeOh8mWMZo0E9b9yU2dvZhtwxbR7XmB0DplcyZhY2nOvGzcKoMnDkyEFZRBs3HhnamBGDRuHjyWPcgAGjeB2-OgbSsThHx4sXc9BsdEEm9ZoyeQ6GYeNizJs2L-jIgbjmR5we09FgyXEmCQwmNIjhRhpyldcGRmqEYccZZ7igmkRXhXHZFsxZlZEcYekAgwvUSVeDQ2LkpkMMLtTWWW1XwaEXHBhO5IJaN3woghx2PBaDjGWMoaKLMTpURx0EZifdVGoF15RwObAFw1qbyZXGYyLkQGIOG8JVYg00yFVHGBg18YYeabDBRhgv1MAhCChckYYb5d0xBwhOUAHCVhzuAIKabghmJx56gkDjiDCYCUMKIByR4xpvvCADDGVtFQMIRqQhRxlmvIHHC1sJ-lqGIjjxhFxvyPHFGJx6KhcbnBbhRIFl2PHFpGxMVMMNNzCJA3UOyXGGb5BxtttBroohx0KdOQTsF228URdkONhAkQhkyPHGbw69gZRzF1qaR2K5UooRGtvB0d13CS7Y4IMvtOkGG28Y9IITR8QgBxluWIHHFVc4ZoURZ-hhBRZWvPHEFXPYMUYMWeShRRtj5JGFG1rAIMUaWqBBBhFCvOGEG04YoRIMekRRBRpOkCGDFlJUQZYVTswghBVhcDxEGFXAEYMW9RohxRE1yGHFGT30INccNGIkLR0ShtpCHQPS0UJ15I1xA6hE_8VsT4vOsNIMxnJ60BdkSC0XHQeOOJ10NMAQI7Zkx2U2ozekvXatnj1ExqtlkPaFhBOdHbfaWH7m6noI0YEUhTVYGIYYl0FL6VdsQJgRqgt1JcIYycHQhwIBAQ%253D%253D%26s%3D9dcbadbbef692fd28296a234f4be12dac172caa5ebc3e2e20d1272c0dd44fc591701740754\u0026icons=AFERRKBL-athZ2ZPnGbnOErjbpThnuvwW9DnGAa7YdE9-V9d4HCHGzM_Vepn9yefEOvoT9TW3MKoweVJGWiQM-V-nDl4EFfs823ppkFCFzFhsAAkffRzK7rHEbXdoWpxuq8FQCXgjq6ZSHNAOmxgjPlCUveTNLjZmgc5nOE7y-Wv85tm0w\u0026ext_cid=0\u0026pop_price=0.0014874999999999999\u0026pop_ecpm=0.059976879583278776\u0026px_id=8005\u0026min_cpm=0.05136482070190707\u0026out_id=1\u0026campaign_type=lq-pop-ext\u0026aid=2010\u0026cid=10966\u0026uniq=\u0026mid=6210022904835187342\u0026skin_id=2\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=1.3180737413466026\u0026cpm=0\u0026verify_hash=30765a0e9bb07c80b29e17e206b67b8e\u0026is_native=3\u0026real_bid=1.3180737413466026\u0026pop_real_cpm=1.4875\u0026pop_real_bid=0.0013180737413466025\u0026original_bid_usd=1.4875\u0026original_bid=1.4875\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=4,5,27,129,130,108,0\u0026need_redirect_show=0\u0026applied_features=prod,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp\u0026site=native-push-adult\u0026price=1.4875\u0026hostname=auc-inpage-hz-9-c\u0026auc_type=1\u0026pop_type=1\u0026is_pop_cpc=0\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.0014874999999999999\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026mlf=1\u0026mlc=1\u0026st=0.04\u0026cpa=fe7b1b5f-ab62-4975-adeb-5e970e40879c","fqdn":"433bb3d20f.6542309b8a.com","domain":"6542309b8a.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:46:01.084Z","timestamp":1701740761084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"6542309b8a.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Dec 2023 06:09:54 GMT","end":"Sun, 03 Mar 2024 06:09:53 GMT"},"fingerprint":{"sha1":"66:AF:B1:A9:06:88:99:9D:57:82:08:47:45:5A:51:3E:94:9F:5D:D5","sha256":"CB:21:7F:23:36:68:AE:53:C4:E8:01:64:14:C8:DB:F5:CA:A9:DB:B9:0A:A7:92:5F:AD:FF:49:E0:95:CE:EF:C4"}}},"request":{"raw":"GET /in/show/?tag_ab=c\u0026site_id=318005\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=mq\u0026pr=\u0026banner_width=300\u0026banner_height=100\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=1\u0026conditions=dch_ip,tz_offset,all\u0026ssp=3964\u0026page=https%3A%2F%2Fjavgg.net%2Fdownload%2FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%3D%3D\u0026refdom=javgg.net\u0026auction_time=1701740754\u0026subid=1824673469\u0026sid=2297567554\u0026tcid=0\u0026ver=8.121.0\u0026ver_c=\u0026spot_id=8005\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2023-12-05\u0026iabcat=IAB25-3\u0026keywords=japanese\u0026user_fp=17694828828993508365\u0026score=61.90823680719142\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1824673469%26spot_id%3D8005%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fjavgg.net%252Fdownload%252FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%253D%253D%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=8fc5a3949d58ed66158a5da3a7b48b19\u0026url=https%3A%2F%2Fr-eu.tsyndicate.com%2Fdo2%2Fdirect%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQDpyFIuC8uVjxDEYzYmTYMBPGRpgWOMbAmNGCxgwZNFqIGZODTIsyYsSUySEjB80cOEU4nCMmDRmFOraIiIEDpo0bM2jYyCGii8MxbpDGWAnDYZg6YzDakLEVhoyeMGjgmFGDKVQaMoSKKEoGYxo6Zdp8iSHXoJ2FNmzQkOoQTh0xC2uwleEVzkUdZ2nEsDEUjkQdkm_YqIEDh8MyeOh8mWMZo0E9b9yU2dvZhtwxbR7XmB0DplcyZhY2nOvGzcKoMnDkyEFZRBs3HhnamBGDRuHjyWPcgAGjeB2-OgbSsThHx4sXc9BsdEEm9ZoyeQ6GYeNizJs2L-jIgbjmR5we09FgyXEmCQwmNIjhRhpyldcGRmqEYccZZ7igmkRXhXHZFsxZlZEcYekAgwvUSVeDQ2LkpkMMLtTWWW1XwaEXHBhO5IJaN3woghx2PBaDjGWMoaKLMTpURx0EZifdVGoF15RwObAFw1qbyZXGYyLkQGIOG8JVYg00yFVHGBg18YYeabDBRhgv1MAhCChckYYb5d0xBwhOUAHCVhzuAIKabghmJx56gkDjiDCYCUMKIByR4xpvvCADDGVtFQMIRqQhRxlmvIHHC1sJ-lqGIjjxhFxvyPHFGJx6KhcbnBbhRIFl2PHFpGxMVMMNNzCJA3UOyXGGb5BxtttBroohx0KdOQTsF228URdkONhAkQhkyPHGbw69gZRzF1qaR2K5UooRGtvB0d13CS7Y4IMvtOkGG28Y9IITR8QgBxluWIHHFVc4ZoURZ-hhBRZWvPHEFXPYMUYMWeShRRtj5JGFG1rAIMUaWqBBBhFCvOGEG04YoRIMekRRBRpOkCGDFlJUQZYVTswghBVhcDxEGFXAEYMW9RohxRE1yGHFGT30INccNGIkLR0ShtpCHQPS0UJ15I1xA6hE_8VsT4vOsNIMxnJ60BdkSC0XHQeOOJ10NMAQI7Zkx2U2ozekvXatnj1ExqtlkPaFhBOdHbfaWH7m6noI0YEUhTVYGIYYl0FL6VdsQJgRqgt1JcIYycHQhwIBAQ%253D%253D%26s%3D9dcbadbbef692fd28296a234f4be12dac172caa5ebc3e2e20d1272c0dd44fc591701740754\u0026icons=AFERRKBL-athZ2ZPnGbnOErjbpThnuvwW9DnGAa7YdE9-V9d4HCHGzM_Vepn9yefEOvoT9TW3MKoweVJGWiQM-V-nDl4EFfs823ppkFCFzFhsAAkffRzK7rHEbXdoWpxuq8FQCXgjq6ZSHNAOmxgjPlCUveTNLjZmgc5nOE7y-Wv85tm0w\u0026ext_cid=0\u0026pop_price=0.0014874999999999999\u0026pop_ecpm=0.059976879583278776\u0026px_id=8005\u0026min_cpm=0.05136482070190707\u0026out_id=1\u0026campaign_type=lq-pop-ext\u0026aid=2010\u0026cid=10966\u0026uniq=\u0026mid=6210022904835187342\u0026skin_id=2\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=1.3180737413466026\u0026cpm=0\u0026verify_hash=30765a0e9bb07c80b29e17e206b67b8e\u0026is_native=3\u0026real_bid=1.3180737413466026\u0026pop_real_cpm=1.4875\u0026pop_real_bid=0.0013180737413466025\u0026original_bid_usd=1.4875\u0026original_bid=1.4875\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=4,5,27,129,130,108,0\u0026need_redirect_show=0\u0026applied_features=prod,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp\u0026site=native-push-adult\u0026price=1.4875\u0026hostname=auc-inpage-hz-9-c\u0026auc_type=1\u0026pop_type=1\u0026is_pop_cpc=0\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.0014874999999999999\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026mlf=1\u0026mlc=1\u0026st=0.04\u0026cpa=fe7b1b5f-ab62-4975-adeb-5e970e40879c HTTP/1.1\r\nHost: 433bb3d20f.6542309b8a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 05 Dec 2023 01:45:55 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"6542309b8a.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"433bb3d20f.6542309b8a.com/in/show/?tag_ab=c\u0026site_id=318005\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=mq\u0026pr=\u0026banner_width=300\u0026banner_height=100\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=1\u0026conditions=dch_ip,tz_offset,all\u0026ssp=3964\u0026page=https%3A%2F%2Fjavgg.net%2Fdownload%2FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%3D%3D\u0026refdom=javgg.net\u0026auction_time=1701740754\u0026subid=1824673469\u0026sid=2297567554\u0026tcid=0\u0026ver=8.121.0\u0026ver_c=\u0026spot_id=8005\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2023-12-05\u0026iabcat=IAB25-3\u0026keywords=japanese\u0026user_fp=17694828828993508365\u0026score=61.90823680719142\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1824673469%26spot_id%3D8005%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fjavgg.net%252Fdownload%252FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%253D%253D%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=8fc5a3949d58ed66158a5da3a7b48b19\u0026url=https%3A%2F%2Fr-eu.tsyndicate.com%2Fdo2%2Fdirect%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQDpyFIuC8uVjxDEYzYmTYMBPGRpgWOMbAmNGCxgwZNFqIGZODTIsyYsSUySEjB80cOEU4nCMmDRmFOraIiIEDpo0bM2jYyCGii8MxbpDGWAnDYZg6YzDakLEVhoyeMGjgmFGDKVQaMoSKKEoGYxo6Zdp8iSHXoJ2FNmzQkOoQTh0xC2uwleEVzkUdZ2nEsDEUjkQdkm_YqIEDh8MyeOh8mWMZo0E9b9yU2dvZhtwxbR7XmB0DplcyZhY2nOvGzcKoMnDkyEFZRBs3HhnamBGDRuHjyWPcgAGjeB2-OgbSsThHx4sXc9BsdEEm9ZoyeQ6GYeNizJs2L-jIgbjmR5we09FgyXEmCQwmNIjhRhpyldcGRmqEYccZZ7igmkRXhXHZFsxZlZEcYekAgwvUSVeDQ2LkpkMMLtTWWW1XwaEXHBhO5IJaN3woghx2PBaDjGWMoaKLMTpURx0EZifdVGoF15RwObAFw1qbyZXGYyLkQGIOG8JVYg00yFVHGBg18YYeabDBRhgv1MAhCChckYYb5d0xBwhOUAHCVhzuAIKabghmJx56gkDjiDCYCUMKIByR4xpvvCADDGVtFQMIRqQhRxlmvIHHC1sJ-lqGIjjxhFxvyPHFGJx6KhcbnBbhRIFl2PHFpGxMVMMNNzCJA3UOyXGGb5BxtttBroohx0KdOQTsF228URdkONhAkQhkyPHGbw69gZRzF1qaR2K5UooRGtvB0d13CS7Y4IMvtOkGG28Y9IITR8QgBxluWIHHFVc4ZoURZ-hhBRZWvPHEFXPYMUYMWeShRRtj5JGFG1rAIMUaWqBBBhFCvOGEG04YoRIMekRRBRpOkCGDFlJUQZYVTswghBVhcDxEGFXAEYMW9RohxRE1yGHFGT30INccNGIkLR0ShtpCHQPS0UJ15I1xA6hE_8VsT4vOsNIMxnJ60BdkSC0XHQeOOJ10NMAQI7Zkx2U2ozekvXatnj1ExqtlkPaFhBOdHbfaWH7m6noI0YEUhTVYGIYYl0FL6VdsQJgRqgt1JcIYycHQhwIBAQ%253D%253D%26s%3D9dcbadbbef692fd28296a234f4be12dac172caa5ebc3e2e20d1272c0dd44fc591701740754\u0026icons=6ckUwUwzD5q0emVIFx4i7CuCxouhiaaZNAm_sNfFJQD43t6VTt2vZJV3kfpu_jzSSUCagyk1_M34YEWoRBHRs27yGm0E7N7TQyXtCdrJcq0496Q2pbdrLSCki0EVFbyS8QkUIplAvhgfs8xCCdWvzL7gqXyAuXMQt_bjtVle7RNlahGNdQ\u0026ext_cid=0\u0026pop_price=0.0014874999999999999\u0026pop_ecpm=0.059976879583278776\u0026px_id=8005\u0026min_cpm=0.05136482070190707\u0026out_id=0\u0026campaign_type=lq-pop-ext\u0026aid=2010\u0026cid=10966\u0026uniq=\u0026mid=6210022904835187342\u0026skin_id=2\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=1.3180737413466026\u0026cpm=0\u0026verify_hash=30765a0e9bb07c80b29e17e206b67b8e\u0026is_native=3\u0026real_bid=1.3180737413466026\u0026pop_real_cpm=1.4875\u0026pop_real_bid=0.0013180737413466025\u0026original_bid_usd=1.4875\u0026original_bid=1.4875\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=5,27,129,130,108,0,4\u0026need_redirect_show=0\u0026applied_features=prod,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp\u0026site=native-push-adult\u0026price=1.4875\u0026hostname=auc-inpage-hz-9-c\u0026auc_type=1\u0026pop_type=1\u0026is_pop_cpc=0\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.0014874999999999999\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026mlf=1\u0026st=0.04\u0026cpa=c89b15e2-0ac9-4de8-89fc-642251ed695e","fqdn":"433bb3d20f.6542309b8a.com","domain":"6542309b8a.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:46:01.101Z","timestamp":1701740761101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"6542309b8a.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Dec 2023 06:09:54 GMT","end":"Sun, 03 Mar 2024 06:09:53 GMT"},"fingerprint":{"sha1":"66:AF:B1:A9:06:88:99:9D:57:82:08:47:45:5A:51:3E:94:9F:5D:D5","sha256":"CB:21:7F:23:36:68:AE:53:C4:E8:01:64:14:C8:DB:F5:CA:A9:DB:B9:0A:A7:92:5F:AD:FF:49:E0:95:CE:EF:C4"}}},"request":{"raw":"GET /in/show/?tag_ab=c\u0026site_id=318005\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=mq\u0026pr=\u0026banner_width=300\u0026banner_height=100\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=1\u0026conditions=dch_ip,tz_offset,all\u0026ssp=3964\u0026page=https%3A%2F%2Fjavgg.net%2Fdownload%2FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%3D%3D\u0026refdom=javgg.net\u0026auction_time=1701740754\u0026subid=1824673469\u0026sid=2297567554\u0026tcid=0\u0026ver=8.121.0\u0026ver_c=\u0026spot_id=8005\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2023-12-05\u0026iabcat=IAB25-3\u0026keywords=japanese\u0026user_fp=17694828828993508365\u0026score=61.90823680719142\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1824673469%26spot_id%3D8005%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fjavgg.net%252Fdownload%252FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%253D%253D%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=8fc5a3949d58ed66158a5da3a7b48b19\u0026url=https%3A%2F%2Fr-eu.tsyndicate.com%2Fdo2%2Fdirect%3Fc%3DAPeIQFMmDJkycuaI0HGDhYgwY-gsjOGQDpyFIuC8uVjxDEYzYmTYMBPGRpgWOMbAmNGCxgwZNFqIGZODTIsyYsSUySEjB80cOEU4nCMmDRmFOraIiIEDpo0bM2jYyCGii8MxbpDGWAnDYZg6YzDakLEVhoyeMGjgmFGDKVQaMoSKKEoGYxo6Zdp8iSHXoJ2FNmzQkOoQTh0xC2uwleEVzkUdZ2nEsDEUjkQdkm_YqIEDh8MyeOh8mWMZo0E9b9yU2dvZhtwxbR7XmB0DplcyZhY2nOvGzcKoMnDkyEFZRBs3HhnamBGDRuHjyWPcgAGjeB2-OgbSsThHx4sXc9BsdEEm9ZoyeQ6GYeNizJs2L-jIgbjmR5we09FgyXEmCQwmNIjhRhpyldcGRmqEYccZZ7igmkRXhXHZFsxZlZEcYekAgwvUSVeDQ2LkpkMMLtTWWW1XwaEXHBhO5IJaN3woghx2PBaDjGWMoaKLMTpURx0EZifdVGoF15RwObAFw1qbyZXGYyLkQGIOG8JVYg00yFVHGBg18YYeabDBRhgv1MAhCChckYYb5d0xBwhOUAHCVhzuAIKabghmJx56gkDjiDCYCUMKIByR4xpvvCADDGVtFQMIRqQhRxlmvIHHC1sJ-lqGIjjxhFxvyPHFGJx6KhcbnBbhRIFl2PHFpGxMVMMNNzCJA3UOyXGGb5BxtttBroohx0KdOQTsF228URdkONhAkQhkyPHGbw69gZRzF1qaR2K5UooRGtvB0d13CS7Y4IMvtOkGG28Y9IITR8QgBxluWIHHFVc4ZoURZ-hhBRZWvPHEFXPYMUYMWeShRRtj5JGFG1rAIMUaWqBBBhFCvOGEG04YoRIMekRRBRpOkCGDFlJUQZYVTswghBVhcDxEGFXAEYMW9RohxRE1yGHFGT30INccNGIkLR0ShtpCHQPS0UJ15I1xA6hE_8VsT4vOsNIMxnJ60BdkSC0XHQeOOJ10NMAQI7Zkx2U2ozekvXatnj1ExqtlkPaFhBOdHbfaWH7m6noI0YEUhTVYGIYYl0FL6VdsQJgRqgt1JcIYycHQhwIBAQ%253D%253D%26s%3D9dcbadbbef692fd28296a234f4be12dac172caa5ebc3e2e20d1272c0dd44fc591701740754\u0026icons=6ckUwUwzD5q0emVIFx4i7CuCxouhiaaZNAm_sNfFJQD43t6VTt2vZJV3kfpu_jzSSUCagyk1_M34YEWoRBHRs27yGm0E7N7TQyXtCdrJcq0496Q2pbdrLSCki0EVFbyS8QkUIplAvhgfs8xCCdWvzL7gqXyAuXMQt_bjtVle7RNlahGNdQ\u0026ext_cid=0\u0026pop_price=0.0014874999999999999\u0026pop_ecpm=0.059976879583278776\u0026px_id=8005\u0026min_cpm=0.05136482070190707\u0026out_id=0\u0026campaign_type=lq-pop-ext\u0026aid=2010\u0026cid=10966\u0026uniq=\u0026mid=6210022904835187342\u0026skin_id=2\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=1.3180737413466026\u0026cpm=0\u0026verify_hash=30765a0e9bb07c80b29e17e206b67b8e\u0026is_native=3\u0026real_bid=1.3180737413466026\u0026pop_real_cpm=1.4875\u0026pop_real_bid=0.0013180737413466025\u0026original_bid_usd=1.4875\u0026original_bid=1.4875\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=5,27,129,130,108,0,4\u0026need_redirect_show=0\u0026applied_features=prod,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp\u0026site=native-push-adult\u0026price=1.4875\u0026hostname=auc-inpage-hz-9-c\u0026auc_type=1\u0026pop_type=1\u0026is_pop_cpc=0\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.0014874999999999999\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026mlf=1\u0026st=0.04\u0026cpa=c89b15e2-0ac9-4de8-89fc-642251ed695e HTTP/1.1\r\nHost: 433bb3d20f.6542309b8a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 05 Dec 2023 01:45:55 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"6542309b8a.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"94.130.197.138","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:46:01.137Z","timestamp":1701740761137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bookmsg.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Nov 2023 01:54:54 GMT","end":"Fri, 09 Feb 2024 01:54:53 GMT"},"fingerprint":{"sha1":"84:FF:B2:EC:22:57:12:AF:98:D1:21:28:6D:29:74:88:74:C2:08:C4","sha256":"76:C6:EA:76:5B:85:E6:4C:0A:78:07:6C:E7:C2:B0:DA:7C:5B:FE:98:A3:7C:02:8B:97:9A:96:15:F6:8A:5C:02"}}},"request":{"raw":"GET /creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 05 Dec 2023 01:45:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 590\r\nlast-modified: Tue, 24 Nov 2020 14:24:12 GMT\r\netag: \"5fbd178c-24e\"\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"debce753f1ce6652c1637491fd72b1b1","sha1":"fd102eb3f058f7a43b0f9ec03541681699f5895e","sha256":"c2443b0a74b25158756abb7aa12832e5442adab247aab6e24514f54396c72579","sha512":"e6d2cf254d5a26736d5661af13d362d94d1aa5745815520cc60224f8a62bda7515ad5234cdc9da12e02fa1c83a50883213fd36fb2bd9f5cc07274e7cc3f9919a","ssdeep":"","tlshash":"f9f047491b1d378638b09d2a9117562408a599a66a00f4ec4d5276552bf81041f3e919","first_seen":"2023-04-08T23:56:39Z","last_seen":"2024-08-21T09:43:13.247705Z","times_seen":1323,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026mlf=1\u0026st=0.04\u0026cpa=0daafb8e-af1a-4567-b535-0d48e24f6291","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"94.130.197.138","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:46:01.143Z","timestamp":1701740761143,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bookmsg.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Nov 2023 01:54:54 GMT","end":"Fri, 09 Feb 2024 01:54:53 GMT"},"fingerprint":{"sha1":"84:FF:B2:EC:22:57:12:AF:98:D1:21:28:6D:29:74:88:74:C2:08:C4","sha256":"76:C6:EA:76:5B:85:E6:4C:0A:78:07:6C:E7:C2:B0:DA:7C:5B:FE:98:A3:7C:02:8B:97:9A:96:15:F6:8A:5C:02"}}},"request":{"raw":"GET /creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026mlf=1\u0026st=0.04\u0026cpa=0daafb8e-af1a-4567-b535-0d48e24f6291 HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 05 Dec 2023 01:45:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 590\r\nlast-modified: Tue, 24 Nov 2020 14:24:12 GMT\r\netag: \"5fbd178c-24e\"\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"debce753f1ce6652c1637491fd72b1b1","sha1":"fd102eb3f058f7a43b0f9ec03541681699f5895e","sha256":"c2443b0a74b25158756abb7aa12832e5442adab247aab6e24514f54396c72579","sha512":"e6d2cf254d5a26736d5661af13d362d94d1aa5745815520cc60224f8a62bda7515ad5234cdc9da12e02fa1c83a50883213fd36fb2bd9f5cc07274e7cc3f9919a","ssdeep":"","tlshash":"f9f047491b1d378638b09d2a9117562408a599a66a00f4ec4d5276552bf81041f3e919","first_seen":"2023-04-08T23:56:39Z","last_seen":"2024-08-21T09:43:13.247705Z","times_seen":1323,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"94.130.197.138","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:46:01.137Z","timestamp":1701740761137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bookmsg.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Nov 2023 01:54:54 GMT","end":"Fri, 09 Feb 2024 01:54:53 GMT"},"fingerprint":{"sha1":"84:FF:B2:EC:22:57:12:AF:98:D1:21:28:6D:29:74:88:74:C2:08:C4","sha256":"76:C6:EA:76:5B:85:E6:4C:0A:78:07:6C:E7:C2:B0:DA:7C:5B:FE:98:A3:7C:02:8B:97:9A:96:15:F6:8A:5C:02"}}},"request":{"raw":"GET /creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 05 Dec 2023 01:45:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 590\r\nlast-modified: Tue, 24 Nov 2020 14:24:12 GMT\r\netag: \"5fbd178c-24e\"\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"debce753f1ce6652c1637491fd72b1b1","sha1":"fd102eb3f058f7a43b0f9ec03541681699f5895e","sha256":"c2443b0a74b25158756abb7aa12832e5442adab247aab6e24514f54396c72579","sha512":"e6d2cf254d5a26736d5661af13d362d94d1aa5745815520cc60224f8a62bda7515ad5234cdc9da12e02fa1c83a50883213fd36fb2bd9f5cc07274e7cc3f9919a","ssdeep":"","tlshash":"f9f047491b1d378638b09d2a9117562408a599a66a00f4ec4d5276552bf81041f3e919","first_seen":"2023-04-08T23:56:39Z","last_seen":"2024-08-21T09:43:13.247705Z","times_seen":1323,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026mlf=1\u0026mlc=1\u0026st=0.04\u0026cpa=8ee459e8-8c61-4b1c-ba48-062daf4fd4d7","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"94.130.197.138","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:46:01.080Z","timestamp":1701740761080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bookmsg.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Nov 2023 01:54:54 GMT","end":"Fri, 09 Feb 2024 01:54:53 GMT"},"fingerprint":{"sha1":"84:FF:B2:EC:22:57:12:AF:98:D1:21:28:6D:29:74:88:74:C2:08:C4","sha256":"76:C6:EA:76:5B:85:E6:4C:0A:78:07:6C:E7:C2:B0:DA:7C:5B:FE:98:A3:7C:02:8B:97:9A:96:15:F6:8A:5C:02"}}},"request":{"raw":"GET /creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026mlf=1\u0026mlc=1\u0026st=0.04\u0026cpa=8ee459e8-8c61-4b1c-ba48-062daf4fd4d7 HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 05 Dec 2023 01:45:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 590\r\nlast-modified: Tue, 24 Nov 2020 14:24:12 GMT\r\netag: \"5fbd178c-24e\"\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"debce753f1ce6652c1637491fd72b1b1","sha1":"fd102eb3f058f7a43b0f9ec03541681699f5895e","sha256":"c2443b0a74b25158756abb7aa12832e5442adab247aab6e24514f54396c72579","sha512":"e6d2cf254d5a26736d5661af13d362d94d1aa5745815520cc60224f8a62bda7515ad5234cdc9da12e02fa1c83a50883213fd36fb2bd9f5cc07274e7cc3f9919a","ssdeep":"","tlshash":"f9f047491b1d378638b09d2a9117562408a599a66a00f4ec4d5276552bf81041f3e919","first_seen":"2023-04-08T23:56:39Z","last_seen":"2024-08-21T09:43:13.247705Z","times_seen":1323,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":234,"dns":20,"connect":50,"send":0,"wait":52,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b-hls-20.doppiocdn.com/hls/84739822/84739822_240p.m3u8","fqdn":"b-hls-20.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.18.63.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:46:00.645Z","timestamp":1701740760645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Sat, 21 Jan 2023 00:00:00 GMT","end":"Sun, 21 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13","sha256":"D5:03:42:AF:0E:C5:33:C5:B8:32:C8:30:8D:1E:16:AE:21:A2:21:BE:3F:EB:AE:AD:A7:F3:4F:3A:9B:26:2E:4B"}}},"request":{"raw":"GET /hls/84739822/84739822_240p.m3u8 HTTP/1.1\r\nHost: b-hls-20.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://creative.mnaspm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.mnaspm.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:56 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 05 Dec 2023 01:45:55 GMT\r\nx-proxy-cache: EXPIRED\r\ncache-control: public, max-age=1, s-maxage=1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 0\r\nserver: cloudflare\r\ncf-ray: 83089cd29bb9568f-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":313,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"3eff54b27a262408a4bd7d7555386457","sha1":"d7d4f6b2e0d87334b81b2a1d02091ee901f38553","sha256":"0594d234bbc6504a772a0096760ad06c149242c5b7d37941ba0e41cf11e79843","sha512":"aab2fefc397cedb9f06f2e5ec8ee93c6380571851fbd5960b5a681e70a2611c9111fe2e3a18d1c6c38ce5db8a42a01a8f2c2456d7dd7fa1b3a0ebb7201e0c9cf","ssdeep":"","tlshash":"d60147f3c71a2d8b688e54cd9c1e7da0e15a0c2b4e5491da79ff428b1861d3f38e0c1a","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.com/banner/in/show/?mid=1691996268279188687\u0026pid=0\u0026site=452788\u0026sc=NO\u0026usage_type=DCH\u0026subid=1822165009\u0026sid=0\u0026cid=0\u0026price=0\u0026is_cpm=0\u0026cpm=0\u0026ecpm=0\u0026crid=\u0026crtid=\u0026tcid=0\u0026out_id=\u0026ver=\u0026ver_c=\u0026refdom=javgg.net\u0026hostname=auc-banner-hz-0\u0026site_id=0\u0026spot_id=452788\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=0\u0026pop_winurl=\u0026ip=91.90.42.154\u0026testab=\u0026px_id=0\u0026adblock=0\u0026auction_host=\u0026mm=\u0026yc=\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=default\u0026iabcat=IAB25\u0026min_cpm=0.0001\u0026placement_type_id=407\u0026skin_test=\u0026verify_hash=\u0026score=1\u0026ml=\u0026tag_ab=c\u0026v2=1\u0026ttl=\u0026space_id=0\u0026banner_width=1\u0026banner_height=1\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D452788%26source%3D1822165009%26idzone%3D0%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D452788%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DDownload%252CPage%252CJavgg.net%2C%26spot_id%3D452788%26p%3Dhttps%253A%252F%252Fjavgg.net%252Fdownload%252FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%253D%253D%26katds_labels%3D%26btype%3D0%26score%3D1%26bf%3D0.0001\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=0\u0026ad_tags=Download%2CPage%2CJavgg.net,\u0026stratagem=\u0026ssp=3972\u0026refresh=1\u0026priority=0\u0026bb=0.0001\u0026label_ids=\u0026site_id64=0\u0026container=ClickadillaTuple\u0026original_bid_usd=0\u0026comeback=\u0026topics=\u0026o_d=\u0026ectr=0","fqdn":"rtbrenab.com","domain":"rtbrenab.com","tld":"com"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:46:03.413Z","timestamp":1701740763413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtbbnr.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Nov 2023 12:45:58 GMT","end":"Thu, 15 Feb 2024 12:45:57 GMT"},"fingerprint":{"sha1":"95:34:E5:C6:3C:8C:8F:5D:19:0D:6B:41:72:00:76:73:85:86:B3:E5","sha256":"EB:5E:57:FD:C8:6C:16:9A:F7:50:BF:DC:BE:1A:E2:58:28:75:DA:65:08:24:D8:14:36:6C:E1:0E:D2:25:3C:48"}}},"request":{"raw":"GET /banner/in/show/?mid=1691996268279188687\u0026pid=0\u0026site=452788\u0026sc=NO\u0026usage_type=DCH\u0026subid=1822165009\u0026sid=0\u0026cid=0\u0026price=0\u0026is_cpm=0\u0026cpm=0\u0026ecpm=0\u0026crid=\u0026crtid=\u0026tcid=0\u0026out_id=\u0026ver=\u0026ver_c=\u0026refdom=javgg.net\u0026hostname=auc-banner-hz-0\u0026site_id=0\u0026spot_id=452788\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=0\u0026pop_winurl=\u0026ip=91.90.42.154\u0026testab=\u0026px_id=0\u0026adblock=0\u0026auction_host=\u0026mm=\u0026yc=\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=default\u0026iabcat=IAB25\u0026min_cpm=0.0001\u0026placement_type_id=407\u0026skin_test=\u0026verify_hash=\u0026score=1\u0026ml=\u0026tag_ab=c\u0026v2=1\u0026ttl=\u0026space_id=0\u0026banner_width=1\u0026banner_height=1\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D452788%26source%3D1822165009%26idzone%3D0%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D452788%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DDownload%252CPage%252CJavgg.net%2C%26spot_id%3D452788%26p%3Dhttps%253A%252F%252Fjavgg.net%252Fdownload%252FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%253D%253D%26katds_labels%3D%26btype%3D0%26score%3D1%26bf%3D0.0001\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=0\u0026ad_tags=Download%2CPage%2CJavgg.net,\u0026stratagem=\u0026ssp=3972\u0026refresh=1\u0026priority=0\u0026bb=0.0001\u0026label_ids=\u0026site_id64=0\u0026container=ClickadillaTuple\u0026original_bid_usd=0\u0026comeback=\u0026topics=\u0026o_d=\u0026ectr=0 HTTP/1.1\r\nHost: rtbrenab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javgg.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.18.0\r\ndate: Tue, 05 Dec 2023 01:45:57 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nlocation: https://btds.zog.link/in/912/?sid=452788\u0026source=1822165009\u0026idzone=0\u0026w=1\u0026h=1\u0026mo=\u0026ve=\u0026site_id=452788\u0026utm1=\u0026utm2=\u0026utm3=\u0026utm4=\u0026ad_tags=Download%2CPage%2CJavgg.net,\u0026spot_id=452788\u0026p=https%3A%2F%2Fjavgg.net%2Fdownload%2FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%3D%3D\u0026katds_labels=\u0026btype=0\u0026score=1\u0026bf=0.0001\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btds.zog.link/in/912/?sid=452788\u0026source=1822165009\u0026idzone=0\u0026w=1\u0026h=1\u0026mo=\u0026ve=\u0026site_id=452788\u0026utm1=\u0026utm2=\u0026utm3=\u0026utm4=\u0026ad_tags=Download%2CPage%2CJavgg.net,\u0026spot_id=452788\u0026p=https%3A%2F%2Fjavgg.net%2Fdownload%2FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%3D%3D\u0026katds_labels=\u0026btype=0\u0026score=1\u0026bf=0.0001","fqdn":"btds.zog.link","domain":"zog.link","tld":"link"},"ip":{"addr":"109.206.176.75","port":443,"asn":50245,"as":"Serverel Inc.","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:46:03.467Z","timestamp":1701740763467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"btds.zog.link","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Nov 2023 03:07:10 GMT","end":"Wed, 21 Feb 2024 03:07:09 GMT"},"fingerprint":{"sha1":"13:D1:CE:5E:F0:64:63:BE:DD:53:63:E6:15:EF:69:41:97:80:31:53","sha256":"1D:7A:52:AD:3B:DD:B9:2F:00:59:99:00:7C:C3:4A:70:03:F4:3B:E5:E6:24:35:8C:AC:37:BC:07:CB:87:8C:9E"}}},"request":{"raw":"GET /in/912/?sid=452788\u0026source=1822165009\u0026idzone=0\u0026w=1\u0026h=1\u0026mo=\u0026ve=\u0026site_id=452788\u0026utm1=\u0026utm2=\u0026utm3=\u0026utm4=\u0026ad_tags=Download%2CPage%2CJavgg.net,\u0026spot_id=452788\u0026p=https%3A%2F%2Fjavgg.net%2Fdownload%2FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%3D%3D\u0026katds_labels=\u0026btype=0\u0026score=1\u0026bf=0.0001 HTTP/1.1\r\nHost: btds.zog.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javgg.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.20.1\r\ndate: Tue, 05 Dec 2023 01:45:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nlocation: https://cdn.1vag.com/1x1.png\r\nvary: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nset-cookie: 912.0=1; expires=Wed, 06 Dec 2023 01:45:57 GMT; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":102,"dns":27,"connect":23,"send":0,"wait":24,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.1vag.com/1x1.png","fqdn":"cdn.1vag.com","domain":"1vag.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:46:03.601Z","timestamp":1701740763601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.1vag.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Nov 2023 03:01:02 GMT","end":"Wed, 21 Feb 2024 03:01:01 GMT"},"fingerprint":{"sha1":"FD:31:7D:44:6D:A2:6D:D1:B7:0A:7B:D0:33:13:B1:60:0C:E2:4B:73","sha256":"1E:40:94:6A:82:E8:F0:7A:1B:5B:8C:7B:E7:5E:84:85:B4:71:91:EF:28:B2:0C:41:8E:0B:B4:C8:DF:83:B0:7B"}}},"request":{"raw":"GET /1x1.png HTTP/1.1\r\nHost: cdn.1vag.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javgg.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 68\r\nserver: nginx/1.20.1\r\nlast-modified: Wed, 15 Apr 2020 13:30:15 GMT\r\netag: \"5e970c67-44\"\r\ncache-control: max-age=3600\r\nx-request-id: d5fc59053c98d0aa8e4910eeb8a3d55f\r\nexpires: Tue, 05 Dec 2023 02:45:58 GMT\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\\012- data","md5":"91e42db1c66c0b276abf6234dc50b2eb","sha1":"c1986af3c26609b8b7d8933f99c51c1a89e9ea6b","sha256":"63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058","sha512":"0b77019542fdb02f72c8407a379579bde36e2fe3af81b1c74553f1b5df2590373bf7e6ff3fefcbdaf0b9a2fcf9b1e57b30d24e29810f0cfaf9d51153415c89ce","ssdeep":"","tlshash":"bea022c223e0ec3cc38c8233c0000230f83000ab08000028202be0202e822e0088c2a2","first_seen":"2023-04-05T22:54:48Z","last_seen":"2026-04-15T20:35:47.317528Z","times_seen":31047,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":147,"dns":78,"connect":25,"send":0,"wait":26,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.515Z","timestamp":1701740758515,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javgg.net","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Nov 2023 16:24:54 GMT","end":"Tue, 20 Feb 2024 16:24:53 GMT"},"fingerprint":{"sha1":"45:D3:AB:61:30:E6:69:38:10:E0:E3:2B:42:36:A1:D8:1C:AB:4C:79","sha256":"05:F1:69:E7:5B:39:72:97:71:4E:32:7C:21:28:B9:06:22:92:77:04:40:E9:36:B6:C5:8A:BD:17:45:C9:75:11"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js HTTP/1.1\r\nHost: javgg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: google-analytics_v4_ef3e__engagementStart=1701740752599; google-analytics_v4_ef3e__counter=1; google-analytics_v4_ef3e__ga4sid=1929733268; google-analytics_v4_ef3e__session_counter=1; google-analytics_v4_ef3e__ga4=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6; google-analytics_v4_ef3e___z_ga_audiences=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6; google-analytics_v4_ef3e__let=1701740752599\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:52 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400, public\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=MXnqLP9%2BhQKiCUZJSPSpDfsJObXvEopcZcaVGpB1UNpn6xGF96YK3azS6uNUjpH7221vM%2FJAJaKfSbb5csTGT56ux%2BALHakTHePYFlRAOZFHu4%2FTjnm9pJSTLA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 83089cb8c9f3b50b-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7360,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (7360), with no line terminators","md5":"6000e980031672fd4d0f111d4c8de071","sha1":"d0d906178e06177ff5f9409ebc8afa7a5a3cf716","sha256":"ddff13fccb0b6ed6f52948536b5ca285a749affd2666721b81d3639d879024ec","sha512":"76bed6f4edaa6ba7c33b805d8dbb181d3caf4c86b07d2139bbbc63d3c3cac0f92df0ed91e73a46371269ba37e8c79f541d990bbad2028e320e4e6553e4f26d32","ssdeep":"96:hpt85OOQvQASY3bn/JVGtPEu2bhSlcvBEp9W5usXBYIXJmsqmXVFSV+LwtycmWKy:btKOZvQoEP99IZbLwvKT8aBp7VTRLvMV","tlshash":"70e1e8cb394b706203723cbb425f645bd11e9f961c885c86ca58c4e8ba7034945efea6","first_seen":"2023-12-05T02:46:19Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/cdn-cgi/apps/head/M89UaTsofQaKWze2ZVBaZiwO3NQ.js","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:57.717Z","timestamp":1701740757717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javgg.net","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Nov 2023 16:24:54 GMT","end":"Tue, 20 Feb 2024 16:24:53 GMT"},"fingerprint":{"sha1":"45:D3:AB:61:30:E6:69:38:10:E0:E3:2B:42:36:A1:D8:1C:AB:4C:79","sha256":"05:F1:69:E7:5B:39:72:97:71:4E:32:7C:21:28:B9:06:22:92:77:04:40:E9:36:B6:C5:8A:BD:17:45:C9:75:11"}}},"request":{"raw":"GET /cdn-cgi/apps/head/M89UaTsofQaKWze2ZVBaZiwO3NQ.js HTTP/1.1\r\nHost: javgg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: tyfUicVbS1srDKKwM5MlD2DrnJpfzprr5vJ5v93soiTv7D9liIg8Y1fsnAyBGe+po37o6lMdvjY=\r\nx-amz-request-id: K9XES7X502A3MZFG\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 19 Jan 2022 02:19:33 GMT\r\nx-amz-version-id: b9Jcnbr4wAr9_Jsm1r9ZeESWLjJKy_fS\r\netag: W/\"6c2479e3ae0f0938b49e2141f0b68b01\"\r\ncf-cache-status: HIT\r\nage: 69138\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=jhyIXDeio8HMoo92atP9YzKsJQxxsThHDyvLElIfHK2V6yR2hIOO4RzhHOA%2BILegxcFBgto%2FfVGee9r2ObjL7i%2Bt3KzODoIgPtTjnuwFZfMmdKQh7MhDTYc58A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83089cb3d8aeb50b-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5185,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5316), with no line terminators","md5":"a9712f0dab8be2fb71bc8d38b325d61f","sha1":"2a1ba0baafc59dfd12953ba293027affcd9b3ddc","sha256":"2f922db57445af89025c7e28b1e71d2868affc3965ed23b2a13de9fbcb44acb6","sha512":"f3c0c9aea5d6a418706e2edeb07065929e56a3886f45ac3bc752bce6d34e34b314e30bc5247dfcc4712f1eaadba5fc76dfa0517238c6232552793b76a28a197f","ssdeep":"96:aI8DsSH1u71csiORJI2dhV49X96bAuTfGsksXtceLqmdZpJvPHUvKCO:apDH1u71/RJIkhG590ltce2mnptPHUix","tlshash":"33b1b7aa3c64c13aacef275f0f671edaf6a8916744504c73b276c4575ca1bb2c253432","first_seen":"2023-05-08T16:07:03Z","last_seen":"2024-08-21T06:49:55.053156Z","times_seen":7,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.mnaspm.com/widgets/AgeVerification/lang/en.json","fqdn":"creative.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:45:59.755Z","timestamp":1701740759755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mnaspm.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 20 Oct 2023 15:37:06 GMT","end":"Thu, 18 Jan 2024 15:37:05 GMT"},"fingerprint":{"sha1":"D2:26:54:49:EC:5C:B3:8E:40:54:41:6D:0E:21:1C:E8:A8:48:BD:EE","sha256":"04:D5:0C:A3:E2:91:E9:33:B5:54:7C:7F:1F:6E:7C:3A:6B:C0:8B:CB:C4:09:60:05:F4:2D:A7:B9:86:DF:9D:35"}}},"request":{"raw":"GET /widgets/AgeVerification/lang/en.json HTTP/1.1\r\nHost: creative.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 30 Nov 2023 11:55:41 GMT\r\netag: W/\"6568783d-f06\"\r\nexpires: Tue, 05 Dec 2023 01:45:51 GMT\r\ncache-control: max-age=10\r\ncf-cache-status: HIT\r\nage: 4\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83089cc09d05b500-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3846,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (3893), with no line terminators","md5":"439492a182f83d206bc2866395232d07","sha1":"f6680107d67d58a60979d0cc5e0df445df20f3c5","sha256":"8cb9b080564a499f7fe089136876d951b70f26d23cbe4fa4078808830b461108","sha512":"71009a4377028412d9979fb22bfc90c91ecc2e7dc1023151b821551c5e78367a0a896ca45d78f8b440bd93ee926740576cd25b49d149ebcea414ab23f4c0c10e","ssdeep":"","tlshash":"258153ae9a4d174642f908903a0ad4e6f75403e0c3eaa010565da57f2bbfedc133dba4","first_seen":"2023-04-11T13:32:10Z","last_seen":"2025-04-04T23:29:03.745101Z","times_seen":706,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edge-hls.doppiocdn.com/hls/84739822/master/84739822_240p.m3u8","fqdn":"edge-hls.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.18.63.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:46:00.516Z","timestamp":1701740760516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Sat, 21 Jan 2023 00:00:00 GMT","end":"Sun, 21 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13","sha256":"D5:03:42:AF:0E:C5:33:C5:B8:32:C8:30:8D:1E:16:AE:21:A2:21:BE:3F:EB:AE:AD:A7:F3:4F:3A:9B:26:2E:4B"}}},"request":{"raw":"GET /hls/84739822/master/84739822_240p.m3u8 HTTP/1.1\r\nHost: edge-hls.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://creative.mnaspm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.mnaspm.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 05 Dec 2023 01:45:53 GMT\r\nx-proxy-cache: EXPIRED\r\ncache-control: public, max-age=3, s-maxage=3\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 0\r\nserver: cloudflare\r\ncf-ray: 83089cc5ca23b509-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":224,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text, with no line terminators","md5":"16c5ba525d5fcfc48b86f807c81cacf2","sha1":"d220b9729d642b7eb699b0ffb78bc91b8c7ef2a8","sha256":"0ec7df47c9a72a1ff70c0b6cb89a0afca1e16d186efbfe6f328a2adf66cad8ac","sha512":"b2ce3d97b640d13389c034af80c9bf211c552203736ffa7b90ffe56f84b2c9c5eaf5dd62303410f72389563bc647494cdb92eb60265d57f94c51fc140cb69f67","ssdeep":"","tlshash":"d8d097f242284c0e280508c90c2d3c00f0432cab0eec60a2407e06d818fbc2a3cacc48","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":72,"dns":29,"connect":2,"send":0,"wait":7,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stripchat.com/api/front/v2/models/username/Cutiepietease02/chat","fqdn":"stripchat.com","domain":"stripchat.com","tld":"com"},"ip":{"addr":"104.18.63.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:46:10.310Z","timestamp":1701740770310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stripchat.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Tue, 31 Jan 2023 00:00:00 GMT","end":"Wed, 31 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"C0:02:7B:8A:1C:D4:CF:03:00:4A:76:E5:EE:AD:2C:13:CC:2D:4E:6A","sha256":"F9:62:3F:67:26:1B:4C:34:A1:98:22:E1:91:18:90:6A:0F:DB:EE:33:3F:A9:18:10:63:63:18:01:22:61:0C:3C"}}},"request":{"raw":"GET /api/front/v2/models/username/Cutiepietease02/chat HTTP/1.1\r\nHost: stripchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.mnaspm.com/\r\nOrigin: https://creative.mnaspm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:46:04 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-api-version: 10.73.3\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\nx-backend: golf-backend-pink-9458fdc6-7jhhx\r\nx-cache-status: STALE\r\naccess-control-allow-origin: https://creative.mnaspm.com\r\nlast-modified: Tue, 05 Dec 2023 01:45:59 GMT\r\ncf-cache-status: HIT\r\nage: 2\r\nserver: cloudflare\r\ncf-ray: 83089d029875b4ed-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22107,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with very long lines (22107), with no line terminators","md5":"e49a8aaccc2330b9287fbfa4f729d087","sha1":"46517c90ff661b42e7cb49ab2ebfc9c487d03c8c","sha256":"c1d3025791c42c7fa6f425ba3480deb0255cc13d3203881124c1833bbf335151","sha512":"b83375cb33c4508d1ad7a05ede7c3cbde3a7b05e9c1fddbaeccb6b605fb3482fbe63be969c8f44bb670054e6c912c0e6b7827e6606ef83ecf2a024d09dfbbc14","ssdeep":"192:bjW9ZTEaM+99m9/WdXX7jYG3J0Z9wt/bupM0OpoGHwFfWs:CFkS10","tlshash":"10a2691c8d6d2e9e690b26c4eb49be4a437868337245bc64e97d872135df9e53c3e803","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.multstorage.com/log/count.html","fqdn":"storage.multstorage.com","domain":"multstorage.com","tld":"com"},"ip":{"addr":"172.67.174.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:59.696Z","timestamp":1701740759696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multstorage.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 20 Nov 2023 10:07:51 GMT","end":"Sun, 18 Feb 2024 10:07:50 GMT"},"fingerprint":{"sha1":"1F:90:8C:BB:6B:B0:99:41:3A:23:DF:A4:57:1A:25:0F:88:BA:C6:DE","sha256":"31:61:02:17:78:05:8F:73:6D:60:A6:EF:A1:4B:9D:6B:58:E7:1D:A1:92:06:E7:85:2D:9A:D6:78:B8:10:63:A9"}}},"request":{"raw":"GET /log/count.html HTTP/1.1\r\nHost: storage.multstorage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 18 Sep 2023 14:39:06 GMT\r\nvary: Accept-Encoding\r\nx-request-id: 4c92d58ad1ea85f5934ac62a716b26f6\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=QbiQwhkkfDozLzDW9XLG30Me6BzXkGd0nizKWqY60%2Fijw1zba95T1sBqb0%2B6LybFbqLZVW5Pn0uIs211%2B9hrAgPTnigMlieOXVqct08HtnqjPyucCCRNYt57l8PtthDacT145xfxAMxyjg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 83089cc08fb25689-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":882,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (919), with no line terminators","md5":"053b1fe641da8057571d40ebaf1624ab","sha1":"09b2648b7d08c84621298f0b939cea5170a65022","sha256":"6606334874a3edb8295831f41d3684433e4553ffe0a72e58c90926e00f39c6a4","sha512":"493eaf06f95b5e78a6f082893254fb6e6591cc6a8dadf7822ed2d20cd4a8571ad8833e09e65a8a8ff871f9149a616ea0ae9489e3ba845c0ed2634b2658587fbb","ssdeep":"","tlshash":"5111040efa407c5c486089fe3fbb393528e1a054606a7e7074a5a9857f818eec5b3fc1","first_seen":"2023-09-18T17:54:25Z","last_seen":"2025-04-06T22:39:05.10795Z","times_seen":8116,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":48,"dns":30,"connect":1,"send":0,"wait":43,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.mnaspm.com/LPExperience/lang/en.json","fqdn":"creative.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:45:59.750Z","timestamp":1701740759750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mnaspm.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 20 Oct 2023 15:37:06 GMT","end":"Thu, 18 Jan 2024 15:37:05 GMT"},"fingerprint":{"sha1":"D2:26:54:49:EC:5C:B3:8E:40:54:41:6D:0E:21:1C:E8:A8:48:BD:EE","sha256":"04:D5:0C:A3:E2:91:E9:33:B5:54:7C:7F:1F:6E:7C:3A:6B:C0:8B:CB:C4:09:60:05:F4:2D:A7:B9:86:DF:9D:35"}}},"request":{"raw":"GET /LPExperience/lang/en.json HTTP/1.1\r\nHost: creative.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 30 Nov 2023 11:54:23 GMT\r\netag: W/\"656877ef-eca\"\r\nexpires: Tue, 05 Dec 2023 01:45:51 GMT\r\ncache-control: max-age=10\r\npragma: public\r\ncf-cache-status: HIT\r\nage: 4\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83089cc09d04b500-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3786,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (4001), with no line terminators","md5":"411e7ac383ad7c4e6a8e93b28eafae61","sha1":"e48ca8fc1e609ab5f79fc89187a7c596e03a2155","sha256":"2c621fc0583f231de2967d6767af0625066d7486918717a1d5b560df9fe1ebb7","sha512":"9900f5aa727d90317c10fca75b929e940f7e66a3b15f1ddee0ca6fe7ccd2aada3aa907f785c816d960fda267b0401183e043dfa6a00c842ab516e5c2f293ee4a","ssdeep":"","tlshash":"4b81552f7e0410b60dd28d27765a4ffbb8c18c1f91b40375695be41f1b174ba523b2a1","first_seen":"2023-06-03T21:46:50Z","last_seen":"2025-02-13T16:48:01.195775Z","times_seen":62,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhamsterlive.com/checkUrl","fqdn":"xhamsterlive.com","domain":"xhamsterlive.com","tld":"com"},"ip":{"addr":"104.18.63.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:46:00.205Z","timestamp":1701740760205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Wed, 03 May 2023 00:00:00 GMT","end":"Thu, 02 May 2024 23:59:59 GMT"},"fingerprint":{"sha1":"96:3A:C0:13:A0:41:D1:27:EA:68:12:D3:99:23:71:C5:8E:E5:C9:44","sha256":"01:86:63:76:30:05:ED:30:73:16:8D:BF:94:DD:31:57:A6:40:81:68:80:31:E1:13:C0:65:D8:9E:92:40:A7:9A"}}},"request":{"raw":"GET /checkUrl HTTP/1.1\r\nHost: xhamsterlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.mnaspm.com/\r\nOrigin: https://creative.mnaspm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\naccess-control-allow-origin: https://creative.mnaspm.com\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cflb=02DiuFLvK1H1SdXppSyXBdwodBSz6GQf2vT5tCBf9o8tC; SameSite=None; Secure; path=/; expires=Wed, 06-Dec-23 00:45:54 GMT; HttpOnly\n_cfuvid=DsFZYw0dlgYRanuI9PknFoZew598XI18wO4MX6Ob_10-1701740754585-0-604800000; path=/; domain=.xhamsterlive.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 83089cc3fa38b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"1d644ae7e24f3430d634f21c1d94a975","sha1":"5752bf80588493a9914d4fddf9ed3b31857d90ac","sha256":"c9df5a7f763aff50375511af681843ba40d4d6ce044521c440515f7e04a2bff7","sha512":"1100e4467c115b5ec21be4b7362bf5b406ac393e6f145f9078a88be5bf8744f5d51c72872085c427b3b52c04719f92465cf56aaf6dcbfaa055a7d2aa7bafab5a","ssdeep":"","tlshash":"107000300800228008802a8822080030000000008020008a2080800880c02220223000","first_seen":"2023-07-16T18:12:53Z","last_seen":"2025-04-05T03:54:15.993201Z","times_seen":840,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":89,"dns":41,"connect":2,"send":0,"wait":31,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/adshow.php?adzone=1029726","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"185.94.236.253","port":443,"asn":42567,"as":"Mojohost B.v.","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.673Z","timestamp":1701740758673,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 26 Dec 2022 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB","sha256":"0F:63:44:A5:4C:F5:99:71:ED:3B:7C:66:EE:A7:8B:A9:8B:6D:DE:B9:33:65:7C:13:92:3A:35:43:7E:A7:64:D5"}}},"request":{"raw":"GET /adshow.php?adzone=1029726 HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 05 Dec 2023 01:45:53 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nX-Powered-By: PHP/5.6.40\r\nP3P: policyref=\"/w3c/p3p.xml\", CP=\"NOI DSP COR NID CUR OUR IND STA\"\r\nSet-Cookie: surferid=d36a1246e74bc8365e7a3aecb3abbea0; expires=Wed, 04-Dec-2024 01:45:53 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co\nimps12957=1; expires=Wed, 06-Dec-2023 01:45:53 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co\njuicy_data_1=YToxOntpOjc4MzgxNTtpOjE3MDE5OTk5NTM7fQ%3D%3D; expires=Fri, 08-Dec-2023 01:45:53 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co\njuicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Fri, 08-Dec-2023 01:45:53 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3614,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document text\\012- exported SGML document, ASCII text, with very long lines (3785), with no line terminators","md5":"8eeae29380afa3f79dd833b897c70a72","sha1":"be462ea1a8414597f9686568875727e4816052f0","sha256":"465f8eb2892b9424c36f16522fd5897809ba928447b5d747f750a8932c9ed26e","sha512":"e2392e61c011fe5d141fadec66e80a07aa42a09ac3a996e7eea781ddff0f7ac41e5335d2f94e6d65dd2d9bb1c6ed95a8fe586541dd6acd3d0e9dc0ebf438fa3c","ssdeep":"","tlshash":"7971842f732c51388603faa9cafb660460b332860292cd68bc6ce44b8745a655635ffc","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":67,"dns":1,"connect":22,"send":0,"wait":76,"receive":5,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","fqdn":"creative.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:59.430Z","timestamp":1701740759430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mnaspm.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 20 Oct 2023 15:37:06 GMT","end":"Thu, 18 Jan 2024 15:37:05 GMT"},"fingerprint":{"sha1":"D2:26:54:49:EC:5C:B3:8E:40:54:41:6D:0E:21:1C:E8:A8:48:BD:EE","sha256":"04:D5:0C:A3:E2:91:E9:33:B5:54:7C:7F:1F:6E:7C:3A:6B:C0:8B:CB:C4:09:60:05:F4:2D:A7:B9:86:DF:9D:35"}}},"request":{"raw":"GET /LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240 HTTP/1.1\r\nHost: creative.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://javgg.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:53 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 30 Nov 2023 11:55:07 GMT\r\nexpires: Tue, 05 Dec 2023 01:45:53 GMT\r\ncache-control: max-age=10\r\nstrict-transport-security: max-age=15768000\r\npragma: public\r\nreport-to: { \"endpoints\":[{ \"url\": \"https://go.stripchat.com/report\" }], \"group\": \"default\", \"max_age\":  1048576 }\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: HIT\r\nage: 10\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83089cbeec1eb515-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":763,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (824), with no line terminators","md5":"eec2f694c63ffe21d5437b378e2eb436","sha1":"4618efb351d0c153d734f179eed375a7e9e348c5","sha256":"4040111ffc4b0b28a7980417fc3258c4b7e9d62339397f3091c4df02288ce905","sha512":"2ddafd1e74cd523f3924c1f753bffc4a4fe8baf804d7ce6930e160998535da3231c26d0c0b3218e523ac914e49f73a440e9b262cdebfe789d9d1a199fcc4aff4","ssdeep":"","tlshash":"e201bd1b40c0d92c0110c98dafd0353d4ec7bc9a2e24e0a1b1c8588ddbecfd54ceb242","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":49,"dns":34,"connect":1,"send":0,"wait":7,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.56.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:57.733Z","timestamp":1701740757733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 10 Apr 2023 00:00:00 GMT","end":"Tue, 09 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"89:79:35:ED:04:A2:CA:50:F7:9A:B8:FE:DF:A5:0C:B1:F2:E6:DD:E8","sha256":"4A:21:87:C4:F3:51:A5:AE:14:5E:BE:9F:5F:A4:21:CE:D6:A0:0E:E1:D2:D3:14:48:22:CB:A0:53:D7:02:D3:62"}}},"request":{"raw":"GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://javgg.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:52 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2023.10.0\"\r\nlast-modified: Tue, 10 Oct 2023 21:38:13 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83089cb40c2256bd-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19986,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (19986), with no line terminators","md5":"dd1d068fdb5fe90b6c05a5b3940e088c","sha1":"0d96f9df8772633a9df4c81cf323a4ef8998ba59","sha256":"6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101","sha512":"7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30","ssdeep":"384:XrqR6Q0npafIm4rKi/BwEXN1w29mItq0W5i6G:Q70nBrKuB0Uqti6G","tlshash":"c692a6daba85723613f76076913f220b733b356528068458d22ad7c12c7d68f6317f6e","first_seen":"2023-10-13T06:51:00Z","last_seen":"2026-04-09T22:50:09.66145Z","times_seen":17320,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":30,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.mnaspm.com/LPOmega/main.d5bb40f50c46b20ec9c1.css","fqdn":"creative.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:45:59.578Z","timestamp":1701740759578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mnaspm.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 20 Oct 2023 15:37:06 GMT","end":"Thu, 18 Jan 2024 15:37:05 GMT"},"fingerprint":{"sha1":"D2:26:54:49:EC:5C:B3:8E:40:54:41:6D:0E:21:1C:E8:A8:48:BD:EE","sha256":"04:D5:0C:A3:E2:91:E9:33:B5:54:7C:7F:1F:6E:7C:3A:6B:C0:8B:CB:C4:09:60:05:F4:2D:A7:B9:86:DF:9D:35"}}},"request":{"raw":"GET /LPOmega/main.d5bb40f50c46b20ec9c1.css HTTP/1.1\r\nHost: creative.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 Nov 2023 11:58:38 GMT\r\netag: W/\"656878ee-11c50\"\r\nexpires: Tue, 05 Dec 2023 01:45:44 GMT\r\ncache-control: max-age=10\r\npragma: public\r\ncf-cache-status: HIT\r\nage: 10\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83089cbf7caab500-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72784,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7a1da6a5889b52ec22683095ade0260d","sha1":"1ebf67fd524021c0e227771ef27b96756591d23d","sha256":"01496eae9ef08eeef6fc7690a189574e60dc777b7ebd3f7be5cbb87b2fe346b5","sha512":"1f803851cfb43d72fd3052fcf562c35c39b033f96ffc7c82e56aa6b9677e8b685f6d268459c982d3db2495779bc1c0a2270c81e85100b727b50f1f2d5245e06e","ssdeep":"1536:UhEZdKu+hmcfYSkeSrJnHgwQP0+52sCY0h7dJkPnPFnAhhJNm80Ydv3/6tP455Ry:bZdKu+hmcfYSkeSrJnHgwQP0+52sCY0a","tlshash":"af63939a7540311a7c1bce62b1545d6b467a8467e6720fbf307a69e987c3acc3333a42","first_seen":"2023-05-20T20:23:39Z","last_seen":"2024-08-21T08:57:18.934421Z","times_seen":38,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5f25d.dappaa.site/api/users/406939?host=javgg.net\u0026ev=211\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fjavgg.net%2Fdownload%2FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%3D%3D\u0026i=1\u0026s1=%25IntertitialDesktop%25","fqdn":"5f25d.dappaa.site","domain":"dappaa.site","tld":"site"},"ip":{"addr":"135.181.208.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:59.340Z","timestamp":1701740759340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"5f25a.dappaa.site","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Nov 2023 09:27:10 GMT","end":"Sun, 11 Feb 2024 09:27:09 GMT"},"fingerprint":{"sha1":"ED:39:E9:89:76:BC:5A:5D:20:61:0F:0E:66:27:F5:A1:61:75:DC:78","sha256":"28:DD:C5:D6:46:2C:6D:3B:0C:5A:37:92:47:55:B2:B0:08:1C:DB:67:4D:D2:D3:46:4F:98:F5:1A:04:0D:AE:42"}}},"request":{"raw":"GET /api/users/406939?host=javgg.net\u0026ev=211\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fjavgg.net%2Fdownload%2FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%3D%3D\u0026i=1\u0026s1=%25IntertitialDesktop%25 HTTP/1.1\r\nHost: 5f25d.dappaa.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 05 Dec 2023 01:45:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: nauid=7T4fPrRoxf8vQaKMxO7T; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":907,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1014), with no line terminators","md5":"17997a301d843c8bfa8208b7be0f0132","sha1":"ae9784a1eeedd49e645390d417eb756a137f1510","sha256":"c10dc89d4934d7c58c3cf5a9676d0967fdace3e5f39973a3a3ac2af018f67250","sha512":"a9df7e1bc995834f8b893b2bdf9a5a644e7055b8b6ce5fe0a3051a24d798847744b16f56e6bcc3cf56efc3a78b786156194a8de33426e7909619c995f5bc2b47","ssdeep":"","tlshash":"c21156a90073df5ad640d72a91332db4238b2d48bee2546265ca311e00ef674b2c5f0a","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f7642e332d.6771600c3f.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI5MDk4MzQxMDQ0MzczNjkyMDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuOTMuMiIsInRhZ19pZCI6OTMyMSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjgxLCJpc192MiI6MSwiaXNfdjJfZW1wdHkiOm51bGwsInVzZXJfa2V5d29yZHMiOiJEb3dubG9hZCUyQ1BhZ2UlMkNKYXZnZy5uZXQifQ==","fqdn":"f7642e332d.6771600c3f.com","domain":"6771600c3f.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:59.702Z","timestamp":1701740759702,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f7642e332d.6771600c3f.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Dec 2023 02:50:30 GMT","end":"Fri, 01 Mar 2024 02:50:29 GMT"},"fingerprint":{"sha1":"38:6E:B4:36:B3:6A:9F:A9:C9:8B:77:46:2F:6E:86:74:D7:23:3E:55","sha256":"AF:DC:E7:04:54:4E:27:35:AF:03:38:A5:9E:83:94:19:46:79:E2:75:B6:C6:6F:28:08:92:A5:83:B6:8B:58:73"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI5MDk4MzQxMDQ0MzczNjkyMDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuOTMuMiIsInRhZ19pZCI6OTMyMSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjgxLCJpc192MiI6MSwiaXNfdjJfZW1wdHkiOm51bGwsInVzZXJfa2V5d29yZHMiOiJEb3dubG9hZCUyQ1BhZ2UlMkNKYXZnZy5uZXQifQ== HTTP/1.1\r\nHost: f7642e332d.6771600c3f.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://javgg.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":171,"dns":80,"connect":26,"send":0,"wait":76,"receive":2,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"6771600c3f.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.mnaspm.com/thumbs/view","fqdn":"go.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:46:00.236Z","timestamp":1701740760236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mnaspm.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 20 Oct 2023 15:37:06 GMT","end":"Thu, 18 Jan 2024 15:37:05 GMT"},"fingerprint":{"sha1":"D2:26:54:49:EC:5C:B3:8E:40:54:41:6D:0E:21:1C:E8:A8:48:BD:EE","sha256":"04:D5:0C:A3:E2:91:E9:33:B5:54:7C:7F:1F:6E:7C:3A:6B:C0:8B:CB:C4:09:60:05:F4:2D:A7:B9:86:DF:9D:35"}}},"request":{"raw":"POST /thumbs/view HTTP/1.1\r\nHost: go.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.mnaspm.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 86\r\nOrigin: https://creative.mnaspm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://creative.mnaspm.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cflb=0H28upDCGznfDm9XVEL2Ezfg4QRCzSityjD5RgnLdkG; SameSite=None; Secure; path=/; expires=Wed, 06-Dec-23 01:45:54 GMT; HttpOnly\r\nserver: cloudflare\r\ncf-ray: 83089cc3ade2b500-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":90,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"8e8d73818e58e7c573abaac9b8056fc8","sha1":"bf95796eda51aa10843a3d7f2d601bbd3854a9c9","sha256":"a8edbe7548083f7bb2a2262d0464c12a61733a5abf72267de11bc5fdb845d8b1","sha512":"a43cb54ab7bf871a7736c29dadf27d4f837c659c178319ecf6b0d5176b93ed6d3ef4ffa0dac6e5c95bbb7b0c024e90443980ccd27d95465807c50d22ee7c7bc9","ssdeep":"","tlshash":"53b012fb108d0f57256cc084380d6c74e3471c093c969346640cb508d01699d50d0cca","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.com/get/?go=1\u0026data=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","fqdn":"rtbrenab.com","domain":"rtbrenab.com","tld":"com"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:46:03.028Z","timestamp":1701740763028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtbbnr.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Nov 2023 12:45:58 GMT","end":"Thu, 15 Feb 2024 12:45:57 GMT"},"fingerprint":{"sha1":"95:34:E5:C6:3C:8C:8F:5D:19:0D:6B:41:72:00:76:73:85:86:B3:E5","sha256":"EB:5E:57:FD:C8:6C:16:9A:F7:50:BF:DC:BE:1A:E2:58:28:75:DA:65:08:24:D8:14:36:6C:E1:0E:D2:25:3C:48"}}},"request":{"raw":"GET /get/?go=1\u0026data=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 HTTP/1.1\r\nHost: rtbrenab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.18.0\r\ndate: Tue, 05 Dec 2023 01:45:57 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nlocation: https://rtbrenab.com/banner/in/show/?mid=1691996268279188687\u0026pid=0\u0026site=452788\u0026sc=NO\u0026usage_type=DCH\u0026subid=1822165009\u0026sid=0\u0026cid=0\u0026price=0\u0026is_cpm=0\u0026cpm=0\u0026ecpm=0\u0026crid=\u0026crtid=\u0026tcid=0\u0026out_id=\u0026ver=\u0026ver_c=\u0026refdom=javgg.net\u0026hostname=auc-banner-hz-0\u0026site_id=0\u0026spot_id=452788\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=0\u0026pop_winurl=\u0026ip=91.90.42.154\u0026testab=\u0026px_id=0\u0026adblock=0\u0026auction_host=\u0026mm=\u0026yc=\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=default\u0026iabcat=IAB25\u0026min_cpm=0.0001\u0026placement_type_id=407\u0026skin_test=\u0026verify_hash=\u0026score=1\u0026ml=\u0026tag_ab=c\u0026v2=1\u0026ttl=\u0026space_id=0\u0026banner_width=1\u0026banner_height=1\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D452788%26source%3D1822165009%26idzone%3D0%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D452788%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DDownload%252CPage%252CJavgg.net%2C%26spot_id%3D452788%26p%3Dhttps%253A%252F%252Fjavgg.net%252Fdownload%252FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%253D%253D%26katds_labels%3D%26btype%3D0%26score%3D1%26bf%3D0.0001\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=0\u0026ad_tags=Download%2CPage%2CJavgg.net,\u0026stratagem=\u0026ssp=3972\u0026refresh=1\u0026priority=0\u0026bb=0.0001\u0026label_ids=\u0026site_id64=0\u0026container=ClickadillaTuple\u0026original_bid_usd=0\u0026comeback=\u0026topics=\u0026o_d=\u0026ectr=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":68,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":638,"timings":{"blocked":257,"dns":52,"connect":49,"send":0,"wait":123,"receive":1,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/cdn-cgi/apps/body/AB9f-K672Ygo6-QjbJbi_OuWbG8.js","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:57.855Z","timestamp":1701740757855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javgg.net","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Nov 2023 16:24:54 GMT","end":"Tue, 20 Feb 2024 16:24:53 GMT"},"fingerprint":{"sha1":"45:D3:AB:61:30:E6:69:38:10:E0:E3:2B:42:36:A1:D8:1C:AB:4C:79","sha256":"05:F1:69:E7:5B:39:72:97:71:4E:32:7C:21:28:B9:06:22:92:77:04:40:E9:36:B6:C5:8A:BD:17:45:C9:75:11"}}},"request":{"raw":"GET /cdn-cgi/apps/body/AB9f-K672Ygo6-QjbJbi_OuWbG8.js HTTP/1.1\r\nHost: javgg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: gZcjeCs1/GD7cgDJdLkwQLNpSMW//Bjos2BNi1DSvB+2Hdm/J3VfAWjSHGmcjFZYGqcA3pen390=\r\nx-amz-request-id: KTBQ069X21B56KJG\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 19 Jan 2022 02:19:33 GMT\r\nx-amz-version-id: JF9JigjF.JPHnrWL2uUG45Fs2iE8y2mk\r\netag: W/\"f86815421a4a198c78096bffd3310ab5\"\r\ncf-cache-status: HIT\r\nage: 69690\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=eq61NeHZ%2BTuitn5HBc7CCOOcwtD5Y%2BS2%2F4qVd5Pfmnl77EY1R%2BqkGo7UXQZ%2BMtc9Cu%2FQpzTnsMO0QLLoXBw662IgOO1h4StWxOT1IARrDhQ1q0dJwzIihzjbBg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83089cb4b8f2b50b-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5312,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5327), with no line terminators","md5":"5d71567755195c7d3b06e832380eaf01","sha1":"9eba1caecdb2021a6c0fb8f173cf1d5dec0150f2","sha256":"3d2abcea0240d2c2f4fb62354ed417604a70950ca63cdd2ee53260627787e66c","sha512":"4f6c46434439b9c1f82f691872f9a5b454969938a152fa0acb9158903b6937ec18bbd521527b13f786ab805702d6a226f3c5d9dea5e0a6deb9d58547d120b93f","ssdeep":"96:nfcPu96yipw0FlzC7nJGjzowRH0HP/F9vOL8rKUY8Mzt0rLGTM:nfku96yie0fSnJGjzowt4P/F9GLpIcgN","tlshash":"88b19492b431432010db16cf2a639b9c3ab1d2a9061040a1d4bec76f58b1fb2f6af576","first_seen":"2023-05-08T16:07:03Z","last_seen":"2024-08-21T06:49:55.062791Z","times_seen":8,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=ASKXGp1NQT9M0P7OJadXSKObrUegzHh9q9IaIVaQ5ZOIAyRSLUDLd9BTQ6a-c6yFRhU_pDNUShsSIA\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S704852539%3A1701740754952026\u0026theme=glif","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.150.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:46:00.723Z","timestamp":1701740760723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 20 Nov 2023 08:02:55 GMT","end":"Mon, 12 Feb 2024 08:02:54 GMT"},"fingerprint":{"sha1":"5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89","sha256":"6B:8C:96:D3:51:1A:FF:CB:54:1F:32:DB:0D:88:85:07:3E:EC:A3:45:E4:10:B4:AC:47:6E:DC:D2:40:6F:0F:80"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=ASKXGp1NQT9M0P7OJadXSKObrUegzHh9q9IaIVaQ5ZOIAyRSLUDLd9BTQ6a-c6yFRhU_pDNUShsSIA\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S704852539%3A1701740754952026\u0026theme=glif HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 05 Dec 2023 01:45:55 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce--gkWIfk6r1wb7cB-jLaFhA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6a1d032c40.b65415fde6.com/967d3c45ff4a9939f9dee02451b1c450/9321?version_name=c","fqdn":"6a1d032c40.b65415fde6.com","domain":"b65415fde6.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.901Z","timestamp":1701740758901,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6a1d032c40.b65415fde6.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Dec 2023 02:20:27 GMT","end":"Fri, 01 Mar 2024 02:20:26 GMT"},"fingerprint":{"sha1":"82:52:5D:FA:0B:FC:52:0F:E3:C3:D0:90:4F:5C:16:FD:D6:C4:8B:37","sha256":"BB:E2:DF:83:06:AC:BF:1C:09:E1:AE:C4:36:DD:B1:9C:5C:7E:4F:42:33:B2:9B:C2:A0:00:B3:E6:C4:A4:8A:5D"}}},"request":{"raw":"GET /967d3c45ff4a9939f9dee02451b1c450/9321?version_name=c HTTP/1.1\r\nHost: 6a1d032c40.b65415fde6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://javgg.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:53 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.18.0\r\ncache-control: max-age=300\r\nexpires: Tue, 05 Dec 2023 01:50:53 GMT\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2053,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (2316), with no line terminators","md5":"a92fa8929956c1d44e15d7be09d67129","sha1":"ac84c8194cedb8330b99b2af59fefff2833c4a28","sha256":"bf9824b529dd24bac17537fac1debedfd3d3f5c61fd790566b77fa9fa99b9a0b","sha512":"d2de8f1853072612fa14a3a3431aa53d4c88fb0305b954131b0c7b9a86cd8e266aa96e597c7c8ea1d5ed8a953fb68e400c089b9cf1a6eadd3ffa4cc05332ff9a","ssdeep":"","tlshash":"e341229ddc18d863c0801d1f67bc7f32558e60da55d63c89e0e94d2d03ba0b1976ba0f","first_seen":"2023-12-05T02:46:20Z","last_seen":"2024-08-20T16:45:01.915158Z","times_seen":5,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"b65415fde6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:59.874Z","timestamp":1701740759874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 03 Jul 2023 00:00:00 GMT","end":"Tue, 02 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D","sha256":"D9:9E:DA:D7:6F:5A:E0:87:16:F3:3E:A0:A8:34:8B:84:B7:B0:98:30:2D:18:D8:53:E6:3C:09:06:19:48:07:54"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://javgg.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 77160\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5eb03e5f-12d68\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 601898\r\nexpires: Sun, 24 Nov 2024 01:45:54 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=IURR%2BxcbEnIoYD8XSa%2Fd7rOzw%2FEyTCkMFnmRuzYi4JMJUwHbdTTsZURFnZ0SuaMPBJeuicQTltsMrh4VoiyZ5LFSAxCxSFuURTqR8o03Ka9cvKmOquBdgnvXR5L4eeFnW7RR%2FCU1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 83089cc20b4c56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77160,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\\012- data","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-15T20:33:16.923615Z","times_seen":427078,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":109,"dns":6,"connect":0,"send":0,"wait":10,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.strpst.com/thumbs/1701740700/84739822_webp","fqdn":"img.strpst.com","domain":"strpst.com","tld":"com"},"ip":{"addr":"104.18.63.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:46:00.148Z","timestamp":1701740760148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.strpst.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 03 Apr 2023 00:00:00 GMT","end":"Tue, 02 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"ED:62:74:FE:E4:F5:89:43:B3:49:55:FE:18:19:0D:29:24:96:75:BC","sha256":"77:4D:DC:7B:D6:9B:F1:CC:1E:CA:7D:A5:FB:1A:3E:6F:0F:09:84:E2:95:68:07:8B:A3:4D:FF:D5:55:C1:8C:DE"}}},"request":{"raw":"GET /thumbs/1701740700/84739822_webp HTTP/1.1\r\nHost: img.strpst.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.mnaspm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4944\r\netag: \"9d6d81c459db7ab73e69cbbe86fdb8b0\"\r\nlast-modified: Tue, 05 Dec 2023 01:43:54 GMT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 50\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83089cc3dea8b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4944,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"9d6d81c459db7ab73e69cbbe86fdb8b0","sha1":"97bdd259849b82ee8f0847f3e41ca362a32888dd","sha256":"e95baf38f105105cd64dd381de92c5effc7b7eb02efa27d5fed5ee8b0267c1ca","sha512":"68d9b59a0d0c75d08ceb551e6a7082e3ebce84aa7ef5cf23a26314a6ce8143df5cba6a87efa53735d69deaf68587dfd8200caec49822774f69d33fcb51b9f7b9","ssdeep":"","tlshash":"","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":126,"dns":78,"connect":1,"send":0,"wait":7,"receive":3,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stripchat.com/api/front/v2/models/username/Cutiepietease02/chat","fqdn":"stripchat.com","domain":"stripchat.com","tld":"com"},"ip":{"addr":"104.18.63.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:46:00.149Z","timestamp":1701740760149,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stripchat.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Tue, 31 Jan 2023 00:00:00 GMT","end":"Wed, 31 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"C0:02:7B:8A:1C:D4:CF:03:00:4A:76:E5:EE:AD:2C:13:CC:2D:4E:6A","sha256":"F9:62:3F:67:26:1B:4C:34:A1:98:22:E1:91:18:90:6A:0F:DB:EE:33:3F:A9:18:10:63:63:18:01:22:61:0C:3C"}}},"request":{"raw":"GET /api/front/v2/models/username/Cutiepietease02/chat HTTP/1.1\r\nHost: stripchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.mnaspm.com/\r\nOrigin: https://creative.mnaspm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-api-version: 10.73.3\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\nx-backend: golf-backend-pink-9458fdc6-2b9xm\r\nx-cache-status: HIT\r\naccess-control-allow-origin: https://creative.mnaspm.com\r\nlast-modified: Tue, 05 Dec 2023 01:45:47 GMT\r\ncf-cache-status: HIT\r\nage: 3\r\nserver: cloudflare\r\ncf-ray: 83089cc3af03b4ed-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22138,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with very long lines (22138), with no line terminators","md5":"32c46e42aa526208ef194891fb2e1fda","sha1":"33cb9aaefc70a708ef8c07e10221f414eb7c8875","sha256":"63d5ff489bb8a1f22ae3474405d7110afce70244dca9161b86f811f341c136c7","sha512":"0ca8b3c61fb145769e9065f3ae38b027d4742a2546e40cb39c32b77aafa9e69f87be44eb7f1e3c6010b5bf228b8ee4d9740f48d7055018d3606db9e50e945db9","ssdeep":"192:VG/1jW9ZTEaM+99m9/WdXX7jYG3J0Z9wt/bupM0OpoGHwFfK:tFkS1z","tlshash":"c3a2691c8d6d2e9e690b26c4eb49be4a437868337245bc64e97d872135df9e53c3e803","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":98,"dns":36,"connect":2,"send":0,"wait":10,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b-hls-20.doppiocdn.com/hls/84739822/84739822_240p_59_LAThFcsOqaqHsahE_1701740747.mp4","fqdn":"b-hls-20.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.18.63.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:46:00.997Z","timestamp":1701740760997,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Sat, 21 Jan 2023 00:00:00 GMT","end":"Sun, 21 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13","sha256":"D5:03:42:AF:0E:C5:33:C5:B8:32:C8:30:8D:1E:16:AE:21:A2:21:BE:3F:EB:AE:AD:A7:F3:4F:3A:9B:26:2E:4B"}}},"request":{"raw":"GET /hls/84739822/84739822_240p_59_LAThFcsOqaqHsahE_1701740747.mp4 HTTP/1.1\r\nHost: b-hls-20.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://creative.mnaspm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.mnaspm.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:55 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 223551\r\nlast-modified: Tue, 05 Dec 2023 01:45:49 GMT\r\netag: \"656e80cd-3693f\"\r\ncache-control: public, max-age=60, s-maxage=60\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 3\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83089cc85b22b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":223551,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"9be3c933a80a177c2b6e32326163535a","sha1":"5dcff4f8ae8b88900a1edbffac638055056ba7df","sha256":"1208f4c8a95c018e0004eaec4e87bdd9c21687960d0dd856e8455d444bb1afc2","sha512":"b56b8499f9faff97bf5a626bb4e98a0fb0beb586951d1348f41cb537d09d14f9cc1a5d6597e723a017c8a9383632150235fef7f36e083c8266d20f8c70c14a1b","ssdeep":"6144:hQsl6WufD+SM9ysxLQsWlgFUb9UfVmzCo:h2WufTMksWlgFqE4","tlshash":"1d2422ff7fec7b72ead79930c03d27890cf478269a8736575148326c5c22c528246ae2","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":10,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.mnaspm.com/LPOmega/hls.4cfa5b780bfed20a8b26.js","fqdn":"creative.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:46:00.421Z","timestamp":1701740760421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mnaspm.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 20 Oct 2023 15:37:06 GMT","end":"Thu, 18 Jan 2024 15:37:05 GMT"},"fingerprint":{"sha1":"D2:26:54:49:EC:5C:B3:8E:40:54:41:6D:0E:21:1C:E8:A8:48:BD:EE","sha256":"04:D5:0C:A3:E2:91:E9:33:B5:54:7C:7F:1F:6E:7C:3A:6B:C0:8B:CB:C4:09:60:05:F4:2D:A7:B9:86:DF:9D:35"}}},"request":{"raw":"GET /LPOmega/hls.4cfa5b780bfed20a8b26.js HTTP/1.1\r\nHost: creative.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 30 Nov 2023 11:58:38 GMT\r\netag: W/\"656878ee-3d\"\r\nexpires: Tue, 05 Dec 2023 01:45:54 GMT\r\ncache-control: max-age=10\r\npragma: public\r\ncf-cache-status: HIT\r\nage: 4\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83089cc4ce42b500-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"22f22b49cc901aa95826401f7ce0930c","sha1":"6471abdd35ab6d511b67d73ad1375f1ee0f255de","sha256":"0fae8b03858a764bad3e9af19bfc924ead5b9e25c760432c19e91cba3dff1cf3","sha512":"c37dafc2a1afd6bc747d4847383135d8fec8ed886c1985c4ecc9246e034695ae92c499168d401e35fa0e756fb539c7415845f4fe2f2171ce2d866928da3e67b4","ssdeep":"","tlshash":"1da002331111bc19e1bc00496352a7f03c5900092f0a0ce01f0104713032e1b8c905c7","first_seen":"2023-03-14T06:30:24Z","last_seen":"2026-04-05T03:11:43.755126Z","times_seen":2444,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.mnaspm.com/LPOmega/images/logo.svg","fqdn":"creative.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:46:00.116Z","timestamp":1701740760116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mnaspm.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 20 Oct 2023 15:37:06 GMT","end":"Thu, 18 Jan 2024 15:37:05 GMT"},"fingerprint":{"sha1":"D2:26:54:49:EC:5C:B3:8E:40:54:41:6D:0E:21:1C:E8:A8:48:BD:EE","sha256":"04:D5:0C:A3:E2:91:E9:33:B5:54:7C:7F:1F:6E:7C:3A:6B:C0:8B:CB:C4:09:60:05:F4:2D:A7:B9:86:DF:9D:35"}}},"request":{"raw":"GET /LPOmega/images/logo.svg HTTP/1.1\r\nHost: creative.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:54 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 30 Nov 2023 11:55:19 GMT\r\netag: W/\"65687827-122f\"\r\nexpires: Tue, 05 Dec 2023 01:45:57 GMT\r\ncache-control: max-age=10\r\npragma: public\r\ncf-cache-status: HIT\r\nage: 1\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83089cc2bd99b500-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4655,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with very long lines (4663), with no line terminators","md5":"b34379a919618d3b0f04357cab722886","sha1":"80531efba93c2974b2d760796ae74af6f5b6a67a","sha256":"8a86ed4c381a4c376ac04d698138b78a256fdb4547ef36fd327dbef535e70069","sha512":"f82557c7542dd58fdd57da6e494141cc46f13e298906c3db10af3e3f38cb616a453878737142426498426a2e6d7258c8b101da7844e113cc2ba0c93acd2f55ff","ssdeep":"96:ZioEo1FkPeTp3PVlZU5Pe3LkaJRRiBwvnm7vXxEBcEeCYw92ZUslV8:ono1FkPe1zZC0LkoGwGXxucEeUViV8","tlshash":"4da194d95b60a2cc24ccc84fef769aac690aecbb7ab285c0819e8f59549bdc4f504c00","first_seen":"2023-05-06T12:40:20Z","last_seen":"2025-04-04T10:20:23.947031Z","times_seen":638,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/adshow.php?adzone=1029722","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"185.94.236.253","port":443,"asn":42567,"as":"Mojohost B.v.","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:58.692Z","timestamp":1701740758692,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 26 Dec 2022 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB","sha256":"0F:63:44:A5:4C:F5:99:71:ED:3B:7C:66:EE:A7:8B:A9:8B:6D:DE:B9:33:65:7C:13:92:3A:35:43:7E:A7:64:D5"}}},"request":{"raw":"GET /adshow.php?adzone=1029722 HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 05 Dec 2023 01:45:53 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nX-Powered-By: PHP/5.6.40\r\nP3P: policyref=\"/w3c/p3p.xml\", CP=\"NOI DSP COR NID CUR OUR IND STA\"\r\nSet-Cookie: surferid=d36a1246e74bc8365e7a3aecb3abbea0; expires=Wed, 04-Dec-2024 01:45:53 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co\nimps32597=1; expires=Wed, 06-Dec-2023 01:45:53 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co\njuicy_data_1=YToxOntpOjc2Njk0NztpOjE3MDE5OTk5NTM7fQ%3D%3D; expires=Fri, 08-Dec-2023 01:45:53 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co\njuicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Fri, 08-Dec-2023 01:45:53 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4917,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (5090), with no line terminators","md5":"fc04723e261b77b0c2974bc7d2a8f524","sha1":"1c11386e9e395d56604b792e0a7da3a2e5b51d6c","sha256":"0902e13b695b07098fa9f2482bba8c1a5f46d4d292056c90ff62cc1386ae37a0","sha512":"34763be6c962b38be85a5e759b03ae75e0237bb2d7d826f5830e7919a1a81968ac1498f5b3abbd78e4dd768db368ac01e14b4b381ff034913e98aecadbe00e41","ssdeep":"96:v+k2Gbtxttj2G91HxzxXp8IcuBwfC8CNNlddqYTTYepuDJOE:v+k2GZx/j2G9BXpzcuo","tlshash":"7fb124f7533e103887426aa8a6eb2915507332da07e1c924bc7c6c4f87449790e75ff9","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":63,"dns":1,"connect":22,"send":0,"wait":222,"receive":13,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5f25d.dappaa.site/api/users/406710?host=javgg.net\u0026ev=211\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fjavgg.net%2Fdownload%2FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%3D%3D\u0026i=1\u0026s1=%25IntertitialDesktop%25","fqdn":"5f25d.dappaa.site","domain":"dappaa.site","tld":"site"},"ip":{"addr":"135.181.208.216","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:59.338Z","timestamp":1701740759338,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"5f25a.dappaa.site","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Nov 2023 09:27:10 GMT","end":"Sun, 11 Feb 2024 09:27:09 GMT"},"fingerprint":{"sha1":"ED:39:E9:89:76:BC:5A:5D:20:61:0F:0E:66:27:F5:A1:61:75:DC:78","sha256":"28:DD:C5:D6:46:2C:6D:3B:0C:5A:37:92:47:55:B2:B0:08:1C:DB:67:4D:D2:D3:46:4F:98:F5:1A:04:0D:AE:42"}}},"request":{"raw":"GET /api/users/406710?host=javgg.net\u0026ev=211\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fjavgg.net%2Fdownload%2FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%3D%3D\u0026i=1\u0026s1=%25IntertitialDesktop%25 HTTP/1.1\r\nHost: 5f25d.dappaa.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 05 Dec 2023 01:45:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: nauid=59DtVmYzFbd5uBmz2Iae; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":906,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1013), with no line terminators","md5":"664e629f6ffb679ddaee26fafe23028a","sha1":"d4bd5f17d2093d4e270e0c1d00bcc9037c91a422","sha256":"45bbe005bd429ef970cc23b07ae3495344aa23d5423a0ad98135892144a43126","sha512":"2964b39a6ce159cb09693ed7c9f751b118043f04c03c925efc1f1d1e4250f9144de618a0d6ae573122c14cd9076d8a20c521f5b096993b1f92a9d32756fcbdd8","ssdeep":"","tlshash":"dc11a8aa00b3df5ae240d769a1332db4234b2d88bee1546270ca305a00df734fac5f0b","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","fqdn":"javgg.net","domain":"javgg.net","tld":"net"},"ip":{"addr":"104.26.2.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-05T01:45:57.141Z","timestamp":1701740757141,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javgg.net","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Nov 2023 16:24:54 GMT","end":"Tue, 20 Feb 2024 16:24:53 GMT"},"fingerprint":{"sha1":"45:D3:AB:61:30:E6:69:38:10:E0:E3:2B:42:36:A1:D8:1C:AB:4C:79","sha256":"05:F1:69:E7:5B:39:72:97:71:4E:32:7C:21:28:B9:06:22:92:77:04:40:E9:36:B6:C5:8A:BD:17:45:C9:75:11"}}},"request":{"raw":"GET /download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg== HTTP/1.1\r\nHost: javgg.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: 83089cb06f79b50b-OSL\r\ncf-cache-status: BYPASS\r\nstrict-transport-security: max-age=31536000, max-age=31536000\r\nvary: Accept-Encoding\r\ncf-apo-via: origin,page-rules\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=gOaJghgj%2BEcXEeol7RIFkB1SQdqwO3WtIETz1zDOPiOZuo8shWcoHaDv7OsBbOxzW9IopJ95b6cy1Zl87QTBmIeps1mbm1xIIaQMHh2cVoHTScrEVGVsEIJ4pQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14896,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":19,"dns":0,"connect":1,"send":0,"wait":184,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.jads.co/network/user500/32597-1558023037-0561037001558023037.gif","fqdn":"i.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"205.185.216.42","port":443,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poweredby.jads.co/adshow.php?adzone=1029724","date":"2023-12-05T01:45:58.984Z","timestamp":1701740758984,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 26 Dec 2022 00:00:00 GMT","end":"Fri, 26 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB","sha256":"0F:63:44:A5:4C:F5:99:71:ED:3B:7C:66:EE:A7:8B:A9:8B:6D:DE:B9:33:65:7C:13:92:3A:35:43:7E:A7:64:D5"}}},"request":{"raw":"GET /network/user500/32597-1558023037-0561037001558023037.gif HTTP/1.1\r\nHost: i.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poweredby.jads.co/\r\nCookie: surferid=d36a1246e74bc8365e7a3aecb3abbea0; imps12957=1; juicy_data_1=YToxOntpOjc2Njk0NTtpOjE3MDE5OTk5NTM7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 05 Dec 2023 01:45:53 GMT\r\nConnection: Keep-Alive\r\nETag: \"1558023037\"\r\nCache-Control: max-age=18541902\r\nContent-Length: 183445\r\nContent-Type: image/gif\r\nLast-Modified: Thu, 16 May 2019 16:10:37 GMT\r\nAccept-Ranges: bytes\r\nX-HW: 1701740753.dop216.sk1.t,1701740753.cds253.sk1.shn,1701740753.dop216.sk1.t,1701740753.cds215.sk1.c\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":183445,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 100\\012- data","md5":"07bc4dad431e5dd38cec4c55c1c1f4af","sha1":"2bd24b0125e57737f2183586e0816ea0019fd0bc","sha256":"3fb92178355f511d60b8533c8d25f5ada30ee81d64f6ecf6b79365affd27503f","sha512":"78bf09bcc3a7c76fa9091fb96f0c96f88ca7ecc5bd90c8b3694cdbc97d6c2c60427ae550121fb7198628a5dec4c13fe964af280dce9987b1806536b3d8b2a069","ssdeep":"","tlshash":"","first_seen":"2023-12-05T02:46:20Z","last_seen":"2023-12-05T02:46:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":54,"dns":14,"connect":9,"send":0,"wait":11,"receive":37,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6a1d032c40.b65415fde6.com/e9888d79e7fb4bee037592776d9d7dd4.js","fqdn":"6a1d032c40.b65415fde6.com","domain":"b65415fde6.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==","date":"2023-12-05T01:45:59.726Z","timestamp":1701740759726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6a1d032c40.b65415fde6.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Dec 2023 02:20:27 GMT","end":"Fri, 01 Mar 2024 02:20:26 GMT"},"fingerprint":{"sha1":"82:52:5D:FA:0B:FC:52:0F:E3:C3:D0:90:4F:5C:16:FD:D6:C4:8B:37","sha256":"BB:E2:DF:83:06:AC:BF:1C:09:E1:AE:C4:36:DD:B1:9C:5C:7E:4F:42:33:B2:9B:C2:A0:00:B3:E6:C4:A4:8A:5D"}}},"request":{"raw":"GET /e9888d79e7fb4bee037592776d9d7dd4.js HTTP/1.1\r\nHost: 6a1d032c40.b65415fde6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://javgg.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 30 Nov 2023 09:44:58 GMT\r\netag: W/\"6568599a-8746e\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 05 Dec 2023 01:50:53 GMT\r\ncache-control: max-age=300\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":554094,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"b65415fde6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative.mnaspm.com/LPOmega/main.d5bb40f50c46b20ec9c1.js","fqdn":"creative.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"104.18.59.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240","date":"2023-12-05T01:45:59.581Z","timestamp":1701740759581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mnaspm.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Fri, 20 Oct 2023 15:37:06 GMT","end":"Thu, 18 Jan 2024 15:37:05 GMT"},"fingerprint":{"sha1":"D2:26:54:49:EC:5C:B3:8E:40:54:41:6D:0E:21:1C:E8:A8:48:BD:EE","sha256":"04:D5:0C:A3:E2:91:E9:33:B5:54:7C:7F:1F:6E:7C:3A:6B:C0:8B:CB:C4:09:60:05:F4:2D:A7:B9:86:DF:9D:35"}}},"request":{"raw":"GET /LPOmega/main.d5bb40f50c46b20ec9c1.js HTTP/1.1\r\nHost: creative.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69\u0026iterationId=764445\u0026masterSmartpopId=1738\u0026memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi\u0026p1=4184345\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=308287\u0026usePreroll=0\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=32240\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 01:45:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 30 Nov 2023 11:58:38 GMT\r\netag: W/\"656878ee-50671\"\r\nexpires: Tue, 05 Dec 2023 01:45:44 GMT\r\ncache-control: max-age=10\r\npragma: public\r\ncf-cache-status: HIT\r\nage: 10\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83089cbf8cafb500-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":329329,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}