| www4.bestjavporn.com/video/lulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at/ |  104.26.3.123 | 301 Moved Permanently | 0 B |
URL HTTP/1.1www4.bestjavporn.com/video/lulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at/ IP104.26.3.123:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /video/lulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at/ HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 04 Dec 2022 16:21:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 04 Dec 2022 17:21:17 GMT
Location: https://www4.bestjavporn.com/video/lulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z8DiIBjqudQ9B1r8A24YWKY%2FlZQnhIMIEYkmNYhwnMpqHaFoDbjB4dRuDQLscxWxHOLvcSqHEeTQEF9t%2BD7SIaT0s2zrJuSE%2BiB0IMJXm7os490jdR8IrG9qA5mNY3QCxBeYm6Kb"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7745dfd1ab8db51b-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashcfec3d7283a9b66d2be426ce54d210f3 808c1feb1ba918951d1928c1f6bfc0c253262774 1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11703
Expires: Sun, 04 Dec 2022 19:36:20 GMT
Date: Sun, 04 Dec 2022 16:21:17 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashfb2c0697c6d9a96a5411dd2952947458 79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4 3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5959
Cache-Control: max-age=157759
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 16:21:17 GMT
Etag: "638c76f5-1d7"
Expires: Tue, 06 Dec 2022 12:10:36 GMT
Last-Modified: Sun, 04 Dec 2022 10:31:17 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hash5f62dc18de1163b09ab8247ec4d43ab2 2367e4a65aea67b71afcbbe65799a1c9f8d613fc 61439bb0423dbeb6fcb8f083b8baaa2c1eeede2c21f8c0a946ab225c35e021e8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 829
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 16:21:17 GMT
Last-Modified: Sun, 04 Dec 2022 16:07:28 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 280
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1ea206ac3c440825741687351f8c6e4e 2f38dafd8c43dcce2411a0590bc5c02cd6286735 7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10676
Expires: Sun, 04 Dec 2022 19:19:13 GMT
Date: Sun, 04 Dec 2022 16:21:17 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash14cd9a0afb6ba9a763651d5112760d1e 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 04 Dec 2022 16:20:08 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 70
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: R7FQ+ehauBJu0y7XJOakNjJfeO8ekp+CmI0DN3xwWZPrwEt5mA7uHxB0CiihYYaciuDTbyFkQ3ySKA8aznssww==
x-amz-request-id: FQRX2XPRW9DA6HH9
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 04 Dec 2022 15:47:02 GMT
age: 2056
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 16:21:17 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 04 Dec 2022 16:11:19 GMT
cache-control: public,max-age=3600
age: 599
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash31b129c94a90b1e695b21395cb54e378 a3cae46b48d469cc61ab0581303bcd5f5b654db9 fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5947
Cache-Control: max-age=152680
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 16:21:18 GMT
Etag: "638c632b-1d7"
Expires: Tue, 06 Dec 2022 10:45:58 GMT
Last-Modified: Sun, 04 Dec 2022 09:06:51 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 |  104.17.25.14 | 200 OK | 77 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 IP104.17.25.14:0
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:18 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1548364
expires: Fri, 24 Nov 2023 16:21:18 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hk6fG%2FukjC9EFIvgLBmj12TouDs7CjMOQ1tTP%2B8ODHIORKjSZVW%2Fto2cARL24yL40IUKmqvF3%2Fr4eXauWT906uxADFAa1iKyO672tLIKR2tHJBkw4SAsMtCGLJU9DEcr%2BwCtZhKo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7745dfd8c8ebb4fa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js | 104.17.25.14 | 200 OK | 5.1 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js IP104.17.25.14:0
File typeASCII text, with very long lines (17660) Hashabe1df98b6ab4644bd567e6669d0da03 27e3bf22ef08b7ca0090721ed31b4f921d278e7c cd40ba7dbf63d67511c0fd56b7e5327dbedb43d15c439d79a8aacb6377059540
GET /ajax/libs/postscribe/2.0.8/postscribe.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 5117
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03faa-45f4"
last-modified: Mon, 04 May 2020 16:15:38 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 15452540
expires: Fri, 24 Nov 2023 16:21:18 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=df2v8%2FrvlTCT7BWyN4lXzK%2FG4msrhWR41dwRp4XppVet3h2z8EAvuzwQpTS6pzxWiMSRYRjjPu540OIqzLWfkOCHmEvoqy6n038aV7GpFS%2B7NCDZXyiI3JOU8mQ2HLOjJi6Wjjf6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7745dfd8ce9cb4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash122124f83967c12700f5a6f5546b0f1f d7acd2db61ad811c388a44b7bd407fa5f4aea8ee b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 16:21:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/main.js?ver=1.4.3 | 172.67.68.13 | 200 OK | 10 kB |
URL HTTP/2www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/main.js?ver=1.4.3 IP172.67.68.13:0
File typeASCII text, with very long lines (3433) Hashc62b3be77cbe1da4e4d854a8fe919baa b965f29eae2e80dab1920eb0dac6e2d749913447 3426c39df1f122d921f55ee429cdf3adfb561eba7301cf5bfa66ab37211bba77
GET /wp-content/themes/retrotube/assets/js/main.js?ver=1.4.3 HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/lulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:18 GMT
content-type: application/javascript
cf-connecting-ip: 92.220.0.147
cf-bgj: minify
cf-polished: origSize=51865
etag: W/"6388cd36-ca99"
last-modified: Thu, 01 Dec 2022 15:50:14 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-rocket-args: ver=1.4.3
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/assets/js/main.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 20721
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tM8EcXbpN9U71iEekpy2o0zVsGGCCznyE3R9tpd9lYRq%2FHKiBOzktYKALEc8ut8GdfrO0EpaS8gvhtmDOPZVJiY2Yawwa0E1g3xvqo8YU5S7762Z3UZzIxFt7qoidWIao%2B8PdKUO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7745dfd89ea4b527-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18 | 172.67.68.13 | 200 OK | 5.8 kB |
URL HTTP/2www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18 IP172.67.68.13:0
File typeASCII text, with very long lines (20018), with CRLF line terminators Hash1504f6e95d38a319c2498d4bfd86e739 5287d021ddfe6f2f32066351ac16d751d8e3c1ff 982f182a7b39a5af489a7f2fb7a273b056964c0dce207b476bc417f06361fdc6
GET /wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18 HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/lulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:18 GMT
content-type: application/javascript
last-modified: Fri, 15 Jan 2021 20:53:56 GMT
vary: Accept-Encoding
etag: W/"600200e4-4fdb"
cf-connecting-ip: 88.195.172.127
x-frame-options: SAMEORIGIN
x-rocket-nginx-serving-static: No
x-rocket-args: ver=1.6.18
x-rocket-uri: /wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 20721
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MPHYemo7WSb0BH1VNkG3inGNM82ASEUNGmY6XXTWtPSHPcOKRwhmSHOZ4MOGmxJA4kWvv41FTQMi0iVKKY61SGDEErtmX5Ljvf5YkMMgvNWpYZ5812VYGbubUop3%2BIS7ucg1nsxh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7745dfd89ea3b527-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js?ver=1.12.4 | 172.217.21.170 | 200 OK | 34 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js?ver=1.12.4 IP172.217.21.170:0
File typeASCII text, with very long lines (32077) Hashfd2b58574f9637ba7ef639267349d848 6eda5ea93f549ceb5693f6f1c038893fa56a510d 75627d4b97e5e6294a8f88f5eeaf9b616696dc8600db9701c47ef05f067880ec
GET /ajax/libs/jquery/1.12.4/jquery.min.js?ver=1.12.4 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 16:36:02 GMT
expires: Thu, 30 Nov 2023 16:36:02 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 344716
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-124653024-3 | 142.250.74.168 | 200 OK | 44 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=UA-124653024-3 IP142.250.74.168:0
File typeASCII text, with very long lines (1921) Hash33dc7e05231037a90001eba954990a25 85934c2d3c302816e8df39d504fafb2db43537d1 deddb8163f375d86002a36606f935699af243d386e598bf16faeb4485d41b99c
GET /gtag/js?id=UA-124653024-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 04 Dec 2022 16:21:18 GMT
expires: Sun, 04 Dec 2022 16:21:18 GMT
cache-control: private, max-age=900
last-modified: Sun, 04 Dec 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43635
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash122124f83967c12700f5a6f5546b0f1f d7acd2db61ad811c388a44b7bd407fa5f4aea8ee b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 16:21:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www4.bestjavporn.com/wp-content/plugins/wp-rocket/assets/js/lazyload/12.0/lazyload.min.js | 172.67.68.13 | 200 OK | 2.4 kB |
URL HTTP/2www4.bestjavporn.com/wp-content/plugins/wp-rocket/assets/js/lazyload/12.0/lazyload.min.js IP172.67.68.13:0
File typeASCII text, with very long lines (5543) Hashfb0de15eae9988549b8a9fd2507414e2 c640df715d62742f27463c45852d5ee41ca6e300 4608b5744cca0d4580fd39cec1010e3798093d9eb1770e6c0e5ed1d72d677957
GET /wp-content/plugins/wp-rocket/assets/js/lazyload/12.0/lazyload.min.js HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/lulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:18 GMT
content-type: application/javascript
last-modified: Tue, 31 Mar 2020 10:02:46 GMT
vary: Accept-Encoding
etag: W/"5e831546-15d1"
cf-connecting-ip: 88.195.172.127
x-frame-options: SAMEORIGIN
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/plugins/wp-rocket/assets/js/lazyload/12.0/lazyload.min.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 20721
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4oVev1wX%2F9F%2BwHUnlrdBTfBoyLUIHu8POFYnzGRrq4I4HJxCcwZNLCPZ1U9R3k5wHMiNgyHYCF3F39BjATWWbXKd3yD3J1yfva4LGjOxMd7MxhmaM1g65PD4eWUxkoWNg80wjgtn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7745dfd89eb0b527-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/fun.js?ver=1.3.3 | 172.67.68.13 | 200 OK | 1.5 kB |
URL HTTP/2www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/fun.js?ver=1.3.3 IP172.67.68.13:0
File typeHTML document, ASCII text, with very long lines (791) Hash5033705bb21604e4f849c8c513dbf749 8d836a3b08c458bb4ff287d9254ef90189163047 422d8f6d7a1084cd25c55ba388d1bda568ba747c516b377a6fcfec31740840c8
GET /wp-content/themes/retrotube/assets/js/fun.js?ver=1.3.3 HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/lulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:18 GMT
content-type: application/javascript
cf-connecting-ip: 217.140.208.120
cf-bgj: minify
cf-polished: origSize=23878
etag: W/"6388cd5c-5d46"
last-modified: Thu, 01 Dec 2022 15:50:52 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-rocket-args: ver=1.3.3
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/assets/js/fun.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 85219
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1gFdpehigss3oIeObWEcPtHeH2yIuj3hUx1MpVeyXgX9qdJWhV71TXwGDPsBwD7D5qDS3fefVylnakdivs0eNi9SFwE0gFv2%2BoTnOTBGTMy3BHdnGapF%2FeRlHpUahlmB4ZPGurtU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7745dfd89eb2b527-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash122124f83967c12700f5a6f5546b0f1f d7acd2db61ad811c388a44b7bd407fa5f4aea8ee b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 16:21:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.googleapis.com/css?family=Open+Sans&display=swap | 142.250.74.106 | 200 OK | 1.2 kB |
URL HTTP/2fonts.googleapis.com/css?family=Open+Sans&display=swap IP142.250.74.106:0
Hash5420bcb620bc93ce54e90f43cea132a4 60bb68f5eb46ef003bc5181fde50ce484e2f39e4 9e0f1c2bf21dc3ed2e4496b7fdfc1e0a9309559bb575c887b8a2a4f8aeb75008
GET /css?family=Open+Sans&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 04 Dec 2022 16:21:18 GMT
date: Sun, 04 Dec 2022 16:21:18 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 35.164.183.116 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.164.183.116:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: cnS5fdhfl8O8xI7yqll3Fw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: OxL5rLyguryxgQoGbgon3DliPG4=
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hashc38a2679dc4026b1f67457e7bc51bb67 bfe4ea1655aa4a88cffe26517f52257c9ab6c716 a58a79151257079fad2d034e0d068fad4e74fa7ed49a5e7c0fa0b73a5a6ae905
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3945
Cache-Control: max-age=102815
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 16:21:19 GMT
Etag: "638ba836-116"
Expires: Mon, 05 Dec 2022 20:54:54 GMT
Last-Modified: Sat, 03 Dec 2022 19:49:10 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
|
|
| theporndude.com/favicon-32x32.png | 104.19.128.100 | 200 OK | 1.6 kB |
URL HTTP/2theporndude.com/favicon-32x32.png IP104.19.128.100:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashe05d03cbbf9dc784d2f4a3ecb4ad6987 113aaa3555a1e3646fbfd19b4eb8156084e14db3 fadc546b6a83cd7a968038d42d7dc6b98b25f4c535d95e0607877faaceaa4bad
GET /favicon-32x32.png HTTP/1.1
Host: theporndude.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:19 GMT
content-type: image/webp
content-length: 1576
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1823
content-disposition: inline; filename="favicon-32x32.webp"
vary: Accept
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cache-control: public, max-age=31536000
etag: "71f-5dbddefb-94cda11995fd4df4;;;"
expires: Mon, 04 Dec 2023 16:21:19 GMT
last-modified: Sat, 02 Nov 2019 19:54:35 GMT
strict-transport-security: max-age=31536000
x-frame-options: allow-from https://webvisor.com/
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 411210
accept-ranges: bytes
server: cloudflare
cf-ray: 7745dfda0aaab509-OSL
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashda9700d928847bca71f73dc9ca89bd1c 2f156a1557a7504da776ed9a82dc52563662be6f 428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 16:21:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hashc38a2679dc4026b1f67457e7bc51bb67 bfe4ea1655aa4a88cffe26517f52257c9ab6c716 a58a79151257079fad2d034e0d068fad4e74fa7ed49a5e7c0fa0b73a5a6ae905
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3945
Cache-Control: max-age=102815
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 16:21:19 GMT
Etag: "638ba836-116"
Expires: Mon, 05 Dec 2022 20:54:54 GMT
Last-Modified: Sat, 03 Dec 2022 19:49:10 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
|
|
| fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 | 216.58.207.227 | 200 OK | 17 kB |
URL HTTP/2fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data Hashe43b535855a4ae53bd5b07a6eeb3bf67 6507312d9491156036316484bf8dc41e8b52ddd9 b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:52:55 GMT
expires: Tue, 28 Nov 2023 18:52:55 GMT
cache-control: public, max-age=31536000
age: 509304
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashda9700d928847bca71f73dc9ca89bd1c 2f156a1557a7504da776ed9a82dc52563662be6f 428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 16:21:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| asg.phukienthoitranggiare.com/Cqp6VQ5.js |  135.181.208.216 | 200 OK | 55 kB |
URL HTTP/2asg.phukienthoitranggiare.com/Cqp6VQ5.js IP135.181.208.216:0 ASN#24940 Hetzner Online GmbH
File typeUnicode text, UTF-8 text, with very long lines (37787), with NEL line terminators Hash597f80fdbd8250e92727e2618eca8350 439da5e247d4958a41ef75f79cb640657878d255 3e3936df3f2ea86163fe90d060fe22ea61a37f9ec5246d31ae8db07204d89faf
GET /Cqp6VQ5.js HTTP/1.1
Host: asg.phukienthoitranggiare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 16:21:19 GMT
content-type: application/javascript
last-modified: Sat, 22 Oct 2022 11:28:35 GMT
etag: W/"6353d3e3-1cfaf"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
vary: Accept-Encoding, Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f6020f10d519a41b0c116dad7dcb2798.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: z7ry4GV7bRvvnbxxy8DV0t5kPxOx3OpvU1yk3ZFQ5PLjgA6C1qb62Q==
age: 3381633
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hashde08f331c6a09aed14146f8cb6268a40 e71b0bbdd7ea7b0b1f1997ccf531f6d6b830d484 8a6533fab684a23583fa39c3cf94d2fd051ee002ac09d12dbc09706b6d3d1e25
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5954
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 16:21:19 GMT
Etag: "638c102f-116"
Last-Modified: Sun, 04 Dec 2022 14:42:05 GMT
Server: ECS (amb/6BB0)
X-Cache: HIT
Content-Length: 278
|
|
| ocsp.sectigo.com/ | 104.18.32.68 | 200 OK | 472 B |
IP104.18.32.68:0
Hashafb32c281d3a6ba61578626128994b5f ac59ba05c0170ea9eb9734684907d8fc2724eb44 2eb2a74ce312a8eaa5770470fa200fb54a13461dbd7f63100691a2e150ad2217
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 16:21:19 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 20:27:07 GMT
Expires: Fri, 09 Dec 2022 20:27:06 GMT
Etag: "ac59ba05c0170ea9eb9734684907d8fc2724eb44"
Cache-Control: max-age=446146,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7745dfdc6e85b4fa-OSL
|
|
| poweredby.jads.co/js/jads.js |  185.94.236.247 | 301 Moved Permanently | 178 B |
URL HTTP/1.1poweredby.jads.co/js/jads.js IP185.94.236.247:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hashcd2e0e43980a00fb6a2742d3afd803b8 81ffbd1712afe8cdf138b570c0fc9934742c33c1 bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 04 Dec 2022 16:21:19 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
|
|
| poweredby.jads.co/js/jads2.js | 185.94.236.247 | 200 OK | 1.7 kB |
URL HTTP/1.1poweredby.jads.co/js/jads2.js IP185.94.236.247:0
File typeASCII text, with very long lines (3758), with no line terminators Hash558e1b61fc513016183a3812938e79fb 5f72ea61a2aad8f7a0956321d3fd8524db70eddf a79f8c0aabfc2d1d45e4df2a86ca9172d292b08987f7a9d5c10bd10abf3aef54
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www4.bestjavporn.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 16:21:19 GMT
Content-Type: application/x-javascript
Last-Modified: Mon, 11 Jul 2022 00:36:11 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"62cb707b-eae"
Content-Encoding: gzip
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hashde08f331c6a09aed14146f8cb6268a40 e71b0bbdd7ea7b0b1f1997ccf531f6d6b830d484 8a6533fab684a23583fa39c3cf94d2fd051ee002ac09d12dbc09706b6d3d1e25
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 16:21:19 GMT
Etag: "638c102f-116"
Server: ECS (amb/6BAC)
Content-Length: 278
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashbe970c0d98a56f1d7f819e916984a282 9e7fc42718ca84b2be18604ff375ba9c90d3a65a cb71068b310fad20817a9c6169a116a4a782be8625f3e91158b335c4f2228992
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CB71068B310FAD20817A9C6169A116A4A782BE8625F3E91158B335C4F2228992"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9424
Expires: Sun, 04 Dec 2022 18:58:23 GMT
Date: Sun, 04 Dec 2022 16:21:19 GMT
Connection: keep-alive
|
|
| static.adxadserv.com/js/adb.js |  185.76.9.25 | 200 OK | 2.3 kB |
URL HTTP/2static.adxadserv.com/js/adb.js IP185.76.9.25:0 ASN#60068 Datacamp Limited
File typeASCII text, with very long lines (511), with CRLF line terminators Hashf40377ab0861726822bed41ae4816181 6f54485c73578a0b7abf6a60a620ab4d6490bb39 d901f79fb02694df26e350d39cd276dd2131f460190f285458fcad3d4ca7d1aa
GET /js/adb.js HTTP/1.1
Host: static.adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:19 GMT
content-type: application/javascript
last-modified: Tue, 24 Mar 2020 11:15:59 GMT
etag: W/"5e79ebef-532"
x-accel-expires: @1670929637
server: CDN77-Turbo
x-77-nzt: AblMCRRiMI3/Gj4EAA
x-77-nzt-ray: af585630a9996191ffc88c639a863228
x-cache: HIT
x-age: 278042
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash83e0936435ad95a15c9ec5ff9520f4fe a8225ee0d8ae117f977f7ff817c342c62e91b5a9 ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13331
Expires: Sun, 04 Dec 2022 20:03:31 GMT
Date: Sun, 04 Dec 2022 16:21:20 GMT
Connection: keep-alive
|
|
| www4.bestjavporn.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0 | 172.67.68.13 | 200 OK | 7.5 kB |
URL HTTP/2www4.bestjavporn.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0 IP172.67.68.13:0
File typeASCII text, with very long lines (31186) Hash17a4e775130449162f7a8f810f5bc858 2b1630db415bd0ec620de7f5b10cf1960bc2df1c 16653f6f16ca3433c666673e376891b9dfc135c484c912ec1dceabd65aff7279
GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/lulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:18 GMT
content-type: text/css
last-modified: Mon, 31 Oct 2022 14:31:11 GMT
vary: Accept-Encoding
etag: W/"635fdc2f-7a75"
cf-connecting-ip: 88.195.172.127
x-frame-options: SAMEORIGIN
x-rocket-nginx-serving-static: No
x-rocket-args: ver=4.7.0
x-rocket-uri: /wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css
cache-control: max-age=3600
cf-cache-status: HIT
age: 20722
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lc8R5juGGaLq46Rb0u3Rp50ro3zhuvjDPxABgKgjR3ZWoj5aP6hLF3y3OimiGOEJhw4%2FN%2F0t61e1W%2BCwO4ff%2FGARVeDsKj1pXOFTaTx3vEfeYeBOIOVGX5UqKlT03ewhlmjB9HWQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7745dfd87e8bb527-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg | 34.120.237.76 | 200 OK | 4.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc01fe1cccdb3b672bbade6d98217ffe9 a9a529dc9894827f6243a1bf57f81caa4fe88fc2 c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4666
x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clr_-GiboAMFwww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z5uqgjB-Bsl0U55a8aFi37cpJ65Vnbjm6bJ2GnMpaO7RXsMZsOCbPQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:44:01 GMT
age: 67039
etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg | 34.120.237.76 | 200 OK | 8.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashdb1701b7b9d161a0c935bb6e10b17893 22a8c4bd58c729c1abcf794466e8f3231dfb034b b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8315
x-amzn-requestid: f1bcc33b-aad9-4d3b-b1f9-49282f2d4fb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMGVboAMFfxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-13472a097177d4751c8f7a8c;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JuY0xcLDiERwrVhq33d4PP64liDqFfk9bc9xX1H62o0tOwrt1ek7Pg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:42:39 GMT
age: 67121
etag: "22a8c4bd58c729c1abcf794466e8f3231dfb034b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png | 34.120.237.76 | 200 OK | 16 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash14dcca2a9c4792d835ee709bcd947402 1d702df3a64258628f4124eafd580695f2d350af da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16143
x-amzn-requestid: dc86fad4-4e53-42c9-9b0a-5e4d2cfcd087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGyLGqmoAMFnaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a7-0ea324b31e8c6578098b8ab9;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KHd4ajJWl-8TDH5HGbkuJXI4NL6I83IwSUBKzfq85cxpyRH_LGl6OA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 05:55:20 GMT
age: 37560
etag: "1d702df3a64258628f4124eafd580695f2d350af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash1521243a6fc065bb631bfbde22886fa2 527220e4e8cd1065ce05fcd0694d0d703d817e2e b83ebf768bbfb34f49d5467f3dfb43ceb3ca3d30d3454e6f37db9aef72d7689a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11482
x-amzn-requestid: d1db05ab-bd5d-4ad4-96b4-8f439152e435
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clssNEeAoAMFh_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc181-0221c53842a2f5ef071e8071;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UZ5kblxfN8fkp55YeSpUA55GzDxZgsLpFZrYTsdJBihf53HLCN0hTA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 22:17:35 GMT
age: 65025
etag: "527220e4e8cd1065ce05fcd0694d0d703d817e2e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2636f91bb8fa4d9bb7bef114c248a9ae 8637105f41058bc0d2b259d462b560881928adb6 3d93fd8fcf1af31d00ccbd453142dbea5f2b91d7f58373095943ed40a31ed1f7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10431
x-amzn-requestid: f79ab5e7-8c1b-4827-a531-aaa19c1d80aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsCGEwxIAMF34g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc073-6358d2950955884c470c0a89;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PQ7xh995cd1UVi3z42EVZGjQjHLLvtAP5BBC-xLEEGr4mEiXS6fC-w==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:47:06 GMT
age: 66854
etag: "8637105f41058bc0d2b259d462b560881928adb6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp | 34.120.237.76 | 200 OK | 5.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash43309032a892c486f9985ef520df696e 36f4682ca6a33ff80ee02129c77e6f27e996ede0 24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5681
x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltXnEotIAMFqkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vNP2rQwmWTntetjJyjonO8N_YOBqvQuZUm42BWX7c1GoX7jASOIpCg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:49:42 GMT
age: 66698
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash266d1a4d05055b6d1303e61cfc30f809 2a94014cb8a476db03a9a5e37ce0dd16fa3d3289 2cd2f6896cfbf4ac7787157418188b129c998cb15271f8297404d5c6d3717dc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2CD2F6896CFBF4AC7787157418188B129C998CB15271F8297404D5C6D3717DC1"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4035
Expires: Sun, 04 Dec 2022 17:28:35 GMT
Date: Sun, 04 Dec 2022 16:21:20 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashef7b7fde878044022aab427416afcc64 cae7e2fd15a2d1bd5ab5439a0c25a3eae309fd4d 31a2fe0e56be0edd26acea93e7b9a23c7b190f43fba70c1935b9dbfaae427424
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "31A2FE0E56BE0EDD26ACEA93E7B9A23C7B190F43FBA70C1935B9DBFAAE427424"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12587
Expires: Sun, 04 Dec 2022 19:51:07 GMT
Date: Sun, 04 Dec 2022 16:21:20 GMT
Connection: keep-alive
|
|
| r.trackwilltrk.com/s1/e1ce8edc-bc88-4852-876e-2bf610b566ce?externalId=afa84b36-73ef-11ed-add6-e25a5bb9767f&cv1=afa84b36-73ef-11ed-add6-e25a5bb9767f&cv2=0c1c5c30286e1db21a741e4b62c8b6e4&cv3=desktop&cv4=62fe933961d6e278cd572307&cv5=62fe933061d6e278cd572305&cv6=en&cv7=NTVA-Bestjavporn&cv8=Firefox&cv9=62fe56a361d6e272ea2a6a61&cv10=62fe56a361d6e272ea2a6a61 | 185.98.53.17 | 200 OK | 931 B |
URL HTTP/1.1r.trackwilltrk.com/s1/e1ce8edc-bc88-4852-876e-2bf610b566ce?externalId=afa84b36-73ef-11ed-add6-e25a5bb9767f&cv1=afa84b36-73ef-11ed-add6-e25a5bb9767f&cv2=0c1c5c30286e1db21a741e4b62c8b6e4&cv3=desktop&cv4=62fe933961d6e278cd572307&cv5=62fe933061d6e278cd572305&cv6=en&cv7=NTVA-Bestjavporn&cv8=Firefox&cv9=62fe56a361d6e272ea2a6a61&cv10=62fe56a361d6e272ea2a6a61 IP185.98.53.17:0 ASN#39572 DataWeb Global Group B.V.
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (735) Hash77e0e4c44ca0692ec42dac775696f75e 9667c7406325b588d4a9d70deb6156745011d226 e052749ea28f732b1bdf208c5a3670b18dea2bcbdd5aea3aaf70da1f0c28d5ed
GET /s1/e1ce8edc-bc88-4852-876e-2bf610b566ce?externalId=afa84b36-73ef-11ed-add6-e25a5bb9767f&cv1=afa84b36-73ef-11ed-add6-e25a5bb9767f&cv2=0c1c5c30286e1db21a741e4b62c8b6e4&cv3=desktop&cv4=62fe933961d6e278cd572307&cv5=62fe933061d6e278cd572305&cv6=en&cv7=NTVA-Bestjavporn&cv8=Firefox&cv9=62fe56a361d6e272ea2a6a61&cv10=62fe56a361d6e272ea2a6a61 HTTP/1.1
Host: r.trackwilltrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 04 Dec 2022 16:21:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 931
Connection: close
Set-Cookie: uid=Ig7SA2gtpp; Path=/; Domain=trackwilltrk.com; Expires=Mon, 05 Dec 2022 16:21:20 GMT; HttpOnly
X-Request-Id: 429d4c02-8a1c-40bd-94d9-cf1b49f580ed
|
|
| adxadserv.com/ascripts/pxl.js | 185.98.53.29 | 200 OK | 23 kB |
URL HTTP/1.1adxadserv.com/ascripts/pxl.js IP185.98.53.29:0 ASN#39572 DataWeb Global Group B.V.
File typeUnicode text, UTF-8 text, with very long lines (36114) Hash72d1139e9f2e6ebe3f51c9193edb4439 cd356eb9eaab433ac792406ba36d4304b6450571 74553d0effe74cd6a4f1424940f7fd133c5457ff1d5c53030e651ec6612bec88
GET /ascripts/pxl.js HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 04 Dec 2022 16:21:20 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 25 Sep 2020 09:55:25 GMT
ETag: W/"5f6dbe8d-12fee"
Expires: Mon, 05 Dec 2022 08:33:15 GMT
Cache-Control: max-age=86400, public
X-77-NZT: Abk73hFbRsj/tW0AAA
X-77-NZT-Ray: f4787b27b0128f9500c98c63298df915
X-Cache: HIT
X-Age: 28085
X-77-POP: amsterdamNL
X-77-Cache: HIT
Content-Encoding: br
|
|
| liaisondegreedaughters.com/2b/d8/d3/2bd8d300136a6fd50bcb5a7f3f4a12fa.js | 173.233.137.44 | 200 OK | 13 kB |
URL HTTP/1.1liaisondegreedaughters.com/2b/d8/d3/2bd8d300136a6fd50bcb5a7f3f4a12fa.js IP173.233.137.44:0
File typeASCII text, with very long lines (37158), with no line terminators Hash7caf02ddf33e073cf9f7f6bd4ad6d36b d1d41ac252ec32a4c8685c80f90b56cbd6a41092 f82933271ca86a8a515413b751e6959b4b8fb7a7acb7b9b14a844adf60f4241f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | | | quad9 | Sinkholed | |
GET /2b/d8/d3/2bd8d300136a6fd50bcb5a7f3f4a12fa.js HTTP/1.1
Host: liaisondegreedaughters.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 16:21:20 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7558ea137210b363ab27dc8f8b8e9885
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| adxadserv.com/px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D62fe56a361d6e272ea2a6a61%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fwww4.bestjavporn.com%252Fvideo%252Flulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at%252F%2526dt%253D1670170877299%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fwww4.bestjavporn.com%252F&d_r=1&d_s=1280x1024&d_w=293x250&t_s=1670170877616&t_i=1670170877625&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=26e0e9d8-911d-4b1b-94c5-04baf720d9ba&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=afa84b36-73ef-11ed-add6-e25a5bb9767f&spid=62fe56a361d6e272ea2a6a61&fpid_sa=1670170877625&fpid=&feid_sa=1670170877625&sid_sa=1670170877625&feid=abb82f4b444ba27bbf366b4cdd1c96f7&sid=d5569dd6bf42a3032b937bd876d5b817&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www4.bestjavporn.com&s_rst=1&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.496 | 185.98.53.29 | 200 OK | 0 B |
URL HTTP/1.1adxadserv.com/px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D62fe56a361d6e272ea2a6a61%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fwww4.bestjavporn.com%252Fvideo%252Flulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at%252F%2526dt%253D1670170877299%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fwww4.bestjavporn.com%252F&d_r=1&d_s=1280x1024&d_w=293x250&t_s=1670170877616&t_i=1670170877625&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=26e0e9d8-911d-4b1b-94c5-04baf720d9ba&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=afa84b36-73ef-11ed-add6-e25a5bb9767f&spid=62fe56a361d6e272ea2a6a61&fpid_sa=1670170877625&fpid=&feid_sa=1670170877625&sid_sa=1670170877625&feid=abb82f4b444ba27bbf366b4cdd1c96f7&sid=d5569dd6bf42a3032b937bd876d5b817&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www4.bestjavporn.com&s_rst=1&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.496 IP185.98.53.29:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D62fe56a361d6e272ea2a6a61%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fwww4.bestjavporn.com%252Fvideo%252Flulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at%252F%2526dt%253D1670170877299%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fwww4.bestjavporn.com%252F&d_r=1&d_s=1280x1024&d_w=293x250&t_s=1670170877616&t_i=1670170877625&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=26e0e9d8-911d-4b1b-94c5-04baf720d9ba&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=afa84b36-73ef-11ed-add6-e25a5bb9767f&spid=62fe56a361d6e272ea2a6a61&fpid_sa=1670170877625&fpid=&feid_sa=1670170877625&sid_sa=1670170877625&feid=abb82f4b444ba27bbf366b4cdd1c96f7&sid=d5569dd6bf42a3032b937bd876d5b817&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www4.bestjavporn.com&s_rst=1&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.496 HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 04 Dec 2022 16:21:20 GMT
Content-Length: 0
Connection: keep-alive
|
|
| static.javhd.com/h5/files/overlay/1602-overlay-preview.png | 185.76.9.25 | 200 OK | 1.5 kB |
URL HTTP/2static.javhd.com/h5/files/overlay/1602-overlay-preview.png IP185.76.9.25:0 ASN#60068 Datacamp Limited
File typePNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data Hash7083a71bc40e5d85670940c518cacca2 a2caeb7c6ca3960af2881434fb0df0c2241d7288 7c4049c76ecd35b05855df0c6ce7e1157213d9fb92c3b2b05ebf9b5d9bdff03a
GET /h5/files/overlay/1602-overlay-preview.png HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhdhello.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:20 GMT
content-type: image/png
content-length: 1546
last-modified: Wed, 20 Apr 2022 13:56:48 GMT
etag: "62601120-60a"
expires: Tue, 23 May 2023 11:04:49 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684839889
server: CDN77-Turbo
x-77-nzt: AblMCRRZcE//r14BAQ
x-77-nzt-ray: af585630be9f069c00c98c632c785f26
x-cache: HIT
x-age: 16866991
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| static.javhd.com/h5/files/overlay/1602-overlay.png | 185.76.9.25 | 200 OK | 1.8 kB |
URL HTTP/2static.javhd.com/h5/files/overlay/1602-overlay.png IP185.76.9.25:0 ASN#60068 Datacamp Limited
File typePNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data Hashf4403fc07b7c414db6ec613317885035 457d3e8f9e9fb0456292efdbd5f18b318e804ea7 00ffbfa9483f4a6e8b85b6ab368a9547cf29e54c1aeb2bfcf81f34ec2bf50ee7
GET /h5/files/overlay/1602-overlay.png HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhdhello.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:20 GMT
content-type: image/png
content-length: 1839
last-modified: Wed, 20 Apr 2022 13:56:47 GMT
etag: "6260111f-72f"
expires: Tue, 23 May 2023 11:04:49 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684839889
server: CDN77-Turbo
x-77-nzt: AblMCRSkXOr/r14BAQ
x-77-nzt-ray: af585630be9f069c00c98c6316b56426
x-cache: HIT
x-age: 16866991
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| static.javhd.com/h5/files/button/29-button.png | 185.76.9.25 | 200 OK | 733 B |
URL HTTP/2static.javhd.com/h5/files/button/29-button.png IP185.76.9.25:0 ASN#60068 Datacamp Limited
File typePNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data Hash82a66a2d222379716ca9a03ff50d8f42 ae43d917ff791f9172edc527baa6266416182aaa cc5da7b40e498d30bf5eaae43e59cae32202737076422676489dd8d3030803de
GET /h5/files/button/29-button.png HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhdhello.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:20 GMT
content-type: image/png
content-length: 733
last-modified: Tue, 22 Dec 2015 18:41:22 GMT
etag: "56799952-2dd"
expires: Tue, 23 May 2023 11:04:49 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684839889
server: CDN77-Turbo
x-77-nzt: AblMCRQHRwf/r14BAQ
x-77-nzt-ray: af585630be9f069c00c98c6314fb6826
x-cache: HIT
x-age: 16866991
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 344 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash4190c26f01184c51aed2d771ad1429ec 35e2db991eaca4dbe44e4158feb9eddbccba0a4c 4dfbbd61f47a45a39622f70938f29114fe41648e5f74c0aad269d4a0252de5e6
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "4DFBBD61F47A45A39622F70938F29114FE41648E5F74C0AAD269D4A0252DE5E6"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11866
Expires: Sun, 04 Dec 2022 19:39:06 GMT
Date: Sun, 04 Dec 2022 16:21:20 GMT
Connection: keep-alive
|
|
| static.javhd.com/h5/files/css/style.css | 185.76.9.25 | 200 OK | 432 kB |
URL HTTP/2static.javhd.com/h5/files/css/style.css IP185.76.9.25:0 ASN#60068 Datacamp Limited
Size432 kB (432347 bytes) Hash79f1562ca9e01872637272a2a6a10275 cabc6f2d3956c146d7fe7869f34743bdf4baa697 49c359914212e229aee16ff1b859caf5d7d88957250fc5399ca703e9a9bee57f
GET /h5/files/css/style.css HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhdhello.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:20 GMT
content-type: text/css
last-modified: Wed, 25 May 2016 08:29:12 GMT
etag: W/"57456258-7bd"
expires: Tue, 23 May 2023 11:04:49 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684839889
server: CDN77-Turbo
x-77-nzt: AblMCRQhN4z/r14BAQ
x-77-nzt-ray: af585630be9f069c00c98c6367f75326
x-cache: HIT
x-age: 16866991
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.110 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.110:0
Hashf0f8b0d8806166791f6d6d9a9aa908ca e30099fed67b541c022984b41b6de1e9ca8e01bb c8d3589546edd372653dbcc6fe1bc48340d7bf5dc3b0f37324a9ff8014aa912b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=167970
Date: Sun, 04 Dec 2022 16:21:20 GMT
Etag: "638ca11c-1d7"
Expires: Tue, 06 Dec 2022 15:00:50 GMT
Last-Modified: Sun, 04 Dec 2022 13:31:08 GMT
Server: ECS (nyb/1D0A)
X-Cache: Miss from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nq-sy803dIZ32YFvK4dE0ZuKrzaRDTnqEOLDUUTWmLUlue2KUBG3gw==
Age: 5382
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash60e6b689386dde1383363dab379d7454 d1388ab0855a522df3cfc592c3d9d0f9cb6d72a2 085d3253ef07fa015f5726456be2e6a639e9ac9e176361634cbdb01b05cfc11e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "085D3253EF07FA015F5726456BE2E6A639E9AC9E176361634CBDB01B05CFC11E"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12313
Expires: Sun, 04 Dec 2022 19:46:33 GMT
Date: Sun, 04 Dec 2022 16:21:20 GMT
Connection: keep-alive
|
|
| simplewebanalysis.com/stats |  18.185.190.54 | 200 OK | 40 B |
URL HTTP/2simplewebanalysis.com/stats IP18.185.190.54:0
File typeASCII text, with no line terminators Hash03f6c1d57a6c4776b055cb0069de305e 5b383c57a0b5bae51b1dc488572684c0849c7de5 053e0d43ba9ba7cd8d316cf7e6d8131397304503a8cf7005c617e716eba3773e
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:20 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www4.bestjavporn.com
access-control-allow-credentials: true
set-cookie: uid_id2=738d0b11-fe3e-4947-b596-735e970ad084:1:1; expires=Wed, 01 Dec 2032 16:21:20 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 344 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash4190c26f01184c51aed2d771ad1429ec 35e2db991eaca4dbe44e4158feb9eddbccba0a4c 4dfbbd61f47a45a39622f70938f29114fe41648e5f74c0aad269d4a0252de5e6
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "4DFBBD61F47A45A39622F70938F29114FE41648E5F74C0AAD269D4A0252DE5E6"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11866
Expires: Sun, 04 Dec 2022 19:39:06 GMT
Date: Sun, 04 Dec 2022 16:21:20 GMT
Connection: keep-alive
|
|
| js.wpadmngr.com/npc/sdk/wp-banners.js | 45.133.44.25 | 200 OK | 0 B |
URL HTTP/2js.wpadmngr.com/npc/sdk/wp-banners.js IP45.133.44.25:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/wp-banners.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:21 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 20 Aug 2021 15:14:31 GMT
etag: "611fc6d7-0"
expires: Sun, 04 Dec 2022 16:26:21 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash6a7a5b800a5dfec2f1cb8eeabb9a02fb 630674ccb16ab18772e31872073146eb78931a84 73f0be9aa796632bdba18671eaeef889703e9c603903ecb137a593cbbd4a02e3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "73F0BE9AA796632BDBA18671EAEEF889703E9C603903ECB137A593CBBD4A02E3"
Last-Modified: Sun, 04 Dec 2022 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12800
Expires: Sun, 04 Dec 2022 19:54:41 GMT
Date: Sun, 04 Dec 2022 16:21:21 GMT
Connection: keep-alive
|
|
| na.nawpush.com/tags/59555?version_name=c | 45.133.44.24 | 200 OK | 1.1 kB |
URL HTTP/2na.nawpush.com/tags/59555?version_name=c IP45.133.44.24:0 ASN#39572 DataWeb Global Group B.V.
File typeJSON data\012- , ASCII text, with very long lines (1089), with no line terminators Hashf6c0a64ee48aa1d5d1571e0c5fd2dc61 ba486a68574295bbf58cdab39803f91dccb71396 6e7defee93dc0fb707de9c3351c468f03ee1dceb12da10212c253ed55520323e
GET /tags/59555?version_name=c HTTP/1.1
Host: na.nawpush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:21 GMT
content-type: application/json
content-length: 1089
server: nginx/1.18.0
cache-control: max-age=300, public
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashaf2dfff553213513fcfb396787d5cd56 12a754c837304786523288e59c78392cd2ba759b 78ab24142174c029537b09369914ff7cae9a4a9d7b806fdaa779df3703d4f029
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "78AB24142174C029537B09369914FF7CAE9A4A9D7B806FDAA779DF3703D4F029"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5521
Expires: Sun, 04 Dec 2022 17:53:23 GMT
Date: Sun, 04 Dec 2022 16:21:22 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashe90e7dbe2ae8e6c5e97c0f97beba9c47 2ba69fa23228bf2216c3cd0b9bbad9d460d0c7fe 5103a9463e536236dffed7d60edc4b6014cde13f063e090bc426a0dfc61be1ca
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5103A9463E536236DFFED7D60EDC4B6014CDE13F063E090BC426A0DFC61BE1CA"
Last-Modified: Sat, 03 Dec 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16915
Expires: Sun, 04 Dec 2022 21:03:17 GMT
Date: Sun, 04 Dec 2022 16:21:22 GMT
Connection: keep-alive
|
|
| 35521d3f25.98a54df250.com/in/track?data=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 | 45.133.44.25 | 200 OK | 0 B |
URL HTTP/235521d3f25.98a54df250.com/in/track?data=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 IP45.133.44.25:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxODY2Mzc5NDQ0MTU0MTQ0ODAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTcuMyIsInRhZ19pZCI6NTk1NTUsInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MS43NSwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowLCJ1c2VyX2tleXdvcmRzIjoiTFVMVS0xNzUlMkNXaGVuJTJDSSUyQ0dvdCUyQ0hhcmQlMkNPbiUyQ1RoZSUyQ0JpZyUyQ0JyZWFzdHMlMkNPZiUyQ1RoZSUyQ0xhbmRsb3JkJ3MlMkNXaWZlJTJDV2hvJTJDV2FzJTJDQSUyQ0xvdCUyQ09mJTJDQ2FyZWdpdmluZyUyQ0F0JTJDQmVzdEphdlBvcm4lMjAifQ== HTTP/1.1
Host: 35521d3f25.98a54df250.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:22 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| asg.phukienthoitranggiare.com/api/spots/184920?host=www4.bestjavporn.com&ev=197&wh=939&ww=1280&uuid= | 135.181.208.216 | 200 OK | 909 B |
URL HTTP/2asg.phukienthoitranggiare.com/api/spots/184920?host=www4.bestjavporn.com&ev=197&wh=939&ww=1280&uuid= IP135.181.208.216:0 ASN#24940 Hetzner Online GmbH
Hash10f9f04b24a07a254604d7cf4cd5c41f 74fa28142d6787ca0d06ce080be76cd88fd1a637 5b55029d4959da6cd6879b0f34b73e143f956bbf5e19d0144a2d08fcac50ac8d
GET /api/spots/184920?host=www4.bestjavporn.com&ev=197&wh=939&ww=1280&uuid= HTTP/1.1
Host: asg.phukienthoitranggiare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 16:21:22 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
set-cookie: nauid=ozyrWKbX7bfqm64cDvUa; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fp.metricswpsh.com/fp?tag_id=59555 | 157.90.84.242 | 204 No Content | 0 B |
URL HTTP/1.1fp.metricswpsh.com/fp?tag_id=59555 IP157.90.84.242:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=59555 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www4.bestjavporn.com/
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Sun, 04 Dec 2022 16:21:23 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://www4.bestjavporn.com
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
|
|
| soldierreproduceadmiration.com/sbar.json?key=2bd8d300136a6fd50bcb5a7f3f4a12fa | 173.233.137.36 | 200 OK | 4.1 kB |
URL HTTP/1.1soldierreproduceadmiration.com/sbar.json?key=2bd8d300136a6fd50bcb5a7f3f4a12fa IP173.233.137.36:0
File typeJSON data\012- , ASCII text, with very long lines (5783), with no line terminators Hash0df66726b828d97e0825d689e7125829 cb9e261c415195be2886b7034dbd511bb4153c48 2e660eba3579d12280f76d204718da8de312cf7e1d872f4abb706b5285162107
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /sbar.json?key=2bd8d300136a6fd50bcb5a7f3f4a12fa HTTP/1.1
Host: soldierreproduceadmiration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 16:21:23 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www4.bestjavporn.com
Access-Control-Allow-Origin: https://www4.bestjavporn.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17179025; expires=Mon, 05 Dec 2022 16:21:23 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 05 Dec 2022 16:21:23 GMT; secure; SameSite=None
uncs=1; expires=Mon, 05 Dec 2022 16:21:23 GMT; secure; SameSite=None
pdhtkv29=true; expires=Mon, 05 Dec 2022 16:21:23 GMT; secure; SameSite=None
uncs29=1; expires=Mon, 05 Dec 2022 16:21:23 GMT; secure; SameSite=None
slec2bd8d300136a6fd50bcb5a7f3f4a12fa=[3830292]; expires=Sun, 04 Dec 2022 16:21:28 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f004faa3259e7b8057cec8c19fe46716
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd616b0b14e0c5cda5c98d0b99cccbaf3 657299c8f642a892045dbfe2a6958133e6b57f99 3590d6a37989c47a5d082655909defed76f2f4a467d3f6700134bba4ffb130f7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3590D6A37989C47A5D082655909DEFED76F2F4A467D3F6700134BBA4FFB130F7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7685
Expires: Sun, 04 Dec 2022 18:29:28 GMT
Date: Sun, 04 Dec 2022 16:21:23 GMT
Connection: keep-alive
|
|
| soldierreproduceadmiration.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSPWwcRRSezV8BDaA0FIijQAoCnXfvx%2FYlhSEkQRHGNnGQK4qZndnzxLMzq5nd27MLZGEJpaA4IyFFoll%2FZ8cCIiAFJZK1ThMMSD4K5AJTUFAjpAiJBt35hMWTZt57873i%2B743H21lx8RHRo8W3jFrUik60az6lUtLUnOTu8rc7UrgV%2F0rlSWpJxtXKt3hZTuXA79Z9V%2BpvCXCFTNR8wPfD%2FygckNaEZnuxAiFTB60gmrLrzZq1aDZQNf%2Bv3eZB0c98M4xeQ6SD84vP34IGZbQ8TfXhFtJTfLa9ThTNDUWHb77nl7RJteIT8vIeoj07ngaxg0IuXcGRu%2BOFcB0tocKwOSAeL8EYHp3TBOss3PClCkIDcafRt4pIVQJSUuEZgOSHxIg5Jibh47vzxmb09UTlA7RATn35C%2FIfEDO%2FXoROv7qqpLdyqJRWSqNduhGBWS3hGyXSLJ9pGseZL6PMP0Qkv9EJp7MQsfb804ZSF6M1EtZQkYllOiBOg%2FZ8EgPWeQhSzzE%2FKhCm63I96ciFtXr040wDOv1MGxOT%2FImrzemIx9ZOKTXQ5r0EKoeQruOxK5jRX5y2Hz58P1XYbM9uOUCjntw6YB4766jwwvkgiB3BDklyCVBnhLknWKHK1dzxX2uXMaCca6Nc73om7S9RXdM2haabCXH5NmhO96FlzaxIo4qNcaned33g%2FoknYx402cha9KpqB41aFCLKJwsIN2ZkeA1OSBnL2wgkQNy5sqfYLSEUyVC%2BQxo9gJo3p%2Bq%2BaDL%2Fca0jzX9NRMuvUM7ibG6GpoY3BRI0nNIV70tdUyeHy3qsr0IER7M%2FKC%2F3Xv9xwWEtkBiC9yRjwja6m7%2FlsnJ9i2TO%2FJwPkllLNfocImLKU3F%2BS%2FeFqu5sfzmNdf7%2FI1wCAzLB7eFS2ep5lK3HfnyquRc2BvGhoJ8d9MtCbaQueWrmdVZMrvw5o2bcWKFc9LoElQOCNn8DaEckKc%2BrY4%2B6IvX70HaEjYrEGcHZByQZh9hsg6XHMx8f2z%2F%2BODSP3CGwKrTGZZ4yLOib2vs9FFJAiVOe8oKOHEws%2Ffos53fF%2F8GE%2F8ZsuXuom090HQDOi7QsQU6qgBVPbjsbD9N7MHMz%2FVRgCmvz5T1tpmyavPEXCePKqIZ%2BZHwa4JFLRZNUZ%2B3okaL0VYgpliTBkjdIPz48dl%2FAQAA%2F%2F8BAAD%2F%2Fw4TOoF4BAAA | 173.233.137.36 | 200 OK | 7 B |
URL HTTP/1.1soldierreproduceadmiration.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSPWwcRRSezV8BDaA0FIijQAoCnXfvx%2FYlhSEkQRHGNnGQK4qZndnzxLMzq5nd27MLZGEJpaA4IyFFoll%2FZ8cCIiAFJZK1ThMMSD4K5AJTUFAjpAiJBt35hMWTZt57873i%2B743H21lx8RHRo8W3jFrUik60az6lUtLUnOTu8rc7UrgV%2F0rlSWpJxtXKt3hZTuXA79Z9V%2BpvCXCFTNR8wPfD%2FygckNaEZnuxAiFTB60gmrLrzZq1aDZQNf%2Bv3eZB0c98M4xeQ6SD84vP34IGZbQ8TfXhFtJTfLa9ThTNDUWHb77nl7RJteIT8vIeoj07ngaxg0IuXcGRu%2BOFcB0tocKwOSAeL8EYHp3TBOss3PClCkIDcafRt4pIVQJSUuEZgOSHxIg5Jibh47vzxmb09UTlA7RATn35C%2FIfEDO%2FXoROv7qqpLdyqJRWSqNduhGBWS3hGyXSLJ9pGseZL6PMP0Qkv9EJp7MQsfb804ZSF6M1EtZQkYllOiBOg%2FZ8EgPWeQhSzzE%2FKhCm63I96ciFtXr040wDOv1MGxOT%2FImrzemIx9ZOKTXQ5r0EKoeQruOxK5jRX5y2Hz58P1XYbM9uOUCjntw6YB4766jwwvkgiB3BDklyCVBnhLknWKHK1dzxX2uXMaCca6Nc73om7S9RXdM2haabCXH5NmhO96FlzaxIo4qNcaned33g%2FoknYx402cha9KpqB41aFCLKJwsIN2ZkeA1OSBnL2wgkQNy5sqfYLSEUyVC%2BQxo9gJo3p%2Bq%2BaDL%2Fca0jzX9NRMuvUM7ibG6GpoY3BRI0nNIV70tdUyeHy3qsr0IER7M%2FKC%2F3Xv9xwWEtkBiC9yRjwja6m7%2FlsnJ9i2TO%2FJwPkllLNfocImLKU3F%2BS%2FeFqu5sfzmNdf7%2FI1wCAzLB7eFS2ep5lK3HfnyquRc2BvGhoJ8d9MtCbaQueWrmdVZMrvw5o2bcWKFc9LoElQOCNn8DaEckKc%2BrY4%2B6IvX70HaEjYrEGcHZByQZh9hsg6XHMx8f2z%2F%2BODSP3CGwKrTGZZ4yLOib2vs9FFJAiVOe8oKOHEws%2Ffos53fF%2F8GE%2F8ZsuXuom090HQDOi7QsQU6qgBVPbjsbD9N7MHMz%2FVRgCmvz5T1tpmyavPEXCePKqIZ%2BZHwa4JFLRZNUZ%2B3okaL0VYgpliTBkjdIPz48dl%2FAQAA%2F%2F8BAAD%2F%2Fw4TOoF4BAAA IP173.233.137.36:0
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSPWwcRRSezV8BDaA0FIijQAoCnXfvx%2FYlhSEkQRHGNnGQK4qZndnzxLMzq5nd27MLZGEJpaA4IyFFoll%2FZ8cCIiAFJZK1ThMMSD4K5AJTUFAjpAiJBt35hMWTZt57873i%2B743H21lx8RHRo8W3jFrUik60az6lUtLUnOTu8rc7UrgV%2F0rlSWpJxtXKt3hZTuXA79Z9V%2BpvCXCFTNR8wPfD%2FygckNaEZnuxAiFTB60gmrLrzZq1aDZQNf%2Bv3eZB0c98M4xeQ6SD84vP34IGZbQ8TfXhFtJTfLa9ThTNDUWHb77nl7RJteIT8vIeoj07ngaxg0IuXcGRu%2BOFcB0tocKwOSAeL8EYHp3TBOss3PClCkIDcafRt4pIVQJSUuEZgOSHxIg5Jibh47vzxmb09UTlA7RATn35C%2FIfEDO%2FXoROv7qqpLdyqJRWSqNduhGBWS3hGyXSLJ9pGseZL6PMP0Qkv9EJp7MQsfb804ZSF6M1EtZQkYllOiBOg%2FZ8EgPWeQhSzzE%2FKhCm63I96ciFtXr040wDOv1MGxOT%2FImrzemIx9ZOKTXQ5r0EKoeQruOxK5jRX5y2Hz58P1XYbM9uOUCjntw6YB4766jwwvkgiB3BDklyCVBnhLknWKHK1dzxX2uXMaCca6Nc73om7S9RXdM2haabCXH5NmhO96FlzaxIo4qNcaned33g%2FoknYx402cha9KpqB41aFCLKJwsIN2ZkeA1OSBnL2wgkQNy5sqfYLSEUyVC%2BQxo9gJo3p%2Bq%2BaDL%2Fca0jzX9NRMuvUM7ibG6GpoY3BRI0nNIV70tdUyeHy3qsr0IER7M%2FKC%2F3Xv9xwWEtkBiC9yRjwja6m7%2FlsnJ9i2TO%2FJwPkllLNfocImLKU3F%2BS%2FeFqu5sfzmNdf7%2FI1wCAzLB7eFS2ep5lK3HfnyquRc2BvGhoJ8d9MtCbaQueWrmdVZMrvw5o2bcWKFc9LoElQOCNn8DaEckKc%2BrY4%2B6IvX70HaEjYrEGcHZByQZh9hsg6XHMx8f2z%2F%2BODSP3CGwKrTGZZ4yLOib2vs9FFJAiVOe8oKOHEws%2Ffos53fF%2F8GE%2F8ZsuXuom090HQDOi7QsQU6qgBVPbjsbD9N7MHMz%2FVRgCmvz5T1tpmyavPEXCePKqIZ%2BZHwa4JFLRZNUZ%2B3okaL0VYgpliTBkjdIPz48dl%2FAQAA%2F%2F8BAAD%2F%2Fw4TOoF4BAAA HTTP/1.1
Host: soldierreproduceadmiration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Cookie: u_pl=17179025; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2bd8d300136a6fd50bcb5a7f3f4a12fa=[3830292]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 16:21:23 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cab843353d9edc078eed1b732cdf96e1
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| fp.metricswpsh.com/fp?tag_id=59555 | 157.90.84.242 | 200 OK | 28 B |
URL HTTP/1.1fp.metricswpsh.com/fp?tag_id=59555 IP157.90.84.242:0 ASN#24940 Hetzner Online GmbH
File typeJSON data\012- , ASCII text Hashe3af49472d683a217237a6ebaf79bcb7 378db4d7e6171a2676ee15c80b4475d7f5ec9742 7714898d715fb8b1ce7a1de73e0e7c9f6394acc8a08cf1a3b342a7829d4de84a
POST /fp?tag_id=59555 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 22285
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 04 Dec 2022 16:21:23 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 28
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www4.bestjavporn.com
Set-Cookie: id=15858122296658521815; Expires=Mon, 04 Dec 2023 16:21:23 GMT; Secure; SameSite=None
Vary: Origin
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 346 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasha9ff5fa0b5c4765b050f2381f57f5520 0ce842b0fbaef98e256cc66eff4615df094b9d51 95e33b8d7c38a952cbc353b5e2587cd1154da32d9ba29f010bd4b70a4ff2c487
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "95E33B8D7C38A952CBC353B5E2587CD1154DA32D9BA29F010BD4B70A4FF2C487"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5061
Expires: Sun, 04 Dec 2022 17:45:44 GMT
Date: Sun, 04 Dec 2022 16:21:23 GMT
Connection: keep-alive
|
|
| soldierreproduceadmiration.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fe6%2Fd7%2F97%2Fe6d797a3a7be0e7ec1877d1b33146dfa%2F1657714258.html&l=1190&fd=121 | 173.233.137.36 | 200 OK | 0 B |
URL HTTP/1.1soldierreproduceadmiration.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fe6%2Fd7%2F97%2Fe6d797a3a7be0e7ec1877d1b33146dfa%2F1657714258.html&l=1190&fd=121 IP173.233.137.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fe6%2Fd7%2F97%2Fe6d797a3a7be0e7ec1877d1b33146dfa%2F1657714258.html&l=1190&fd=121 HTTP/1.1
Host: soldierreproduceadmiration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Cookie: u_pl=17179025; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2bd8d300136a6fd50bcb5a7f3f4a12fa=[3830292]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 16:21:23 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 346 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasha9ff5fa0b5c4765b050f2381f57f5520 0ce842b0fbaef98e256cc66eff4615df094b9d51 95e33b8d7c38a952cbc353b5e2587cd1154da32d9ba29f010bd4b70a4ff2c487
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "95E33B8D7C38A952CBC353B5E2587CD1154DA32D9BA29F010BD4B70A4FF2C487"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5061
Expires: Sun, 04 Dec 2022 17:45:44 GMT
Date: Sun, 04 Dec 2022 16:21:23 GMT
Connection: keep-alive
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/v2/new/3/img/close.png | 172.64.109.13 | 200 OK | 6.0 kB |
URL HTTP/2cdn.creative-bars1.com/sb/chat/mob/ssp/v2/new/3/img/close.png IP172.64.109.13:0
File typePNG image data, 522 x 391, 8-bit/color RGBA, non-interlaced\012- data Hashc489ce2c491a22ee37a55e26a92dfd73 2fa588ab09e94dd902e5bd24b48f98ad1949c9d6 1eed147c7d5de6291c25fbc5274830c12d5549262fb144271576d4e15966e5bd
GET /sb/chat/mob/ssp/v2/new/3/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:23 GMT
content-type: image/png
content-length: 5982
last-modified: Tue, 05 Jul 2022 10:43:39 GMT
etag: "62c415db-175e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1650600
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E7gtX7PUuWVFg3vs%2BRdSkg4j57vlokUMKoRS0k1wMjugp2r3r%2BEynNgFZ7LZ7OVLp45JPoFhzGRLQ6uDNjUIy2pUqJaZUxzVT8%2FK0N1OH7oNMuUTqkQlGxM1lIz2M0v%2FQF6jlGYaIK98"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7745dff71b1c888b-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashc69a25b07dd690540ccbd3dcd885b7d8 3e457a884cdd89322592e571f7c5411a99eba29f b28b957159b81b77f88525867c2261ddab32ed9a4f3b3fd71e727bd5522d93d7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B28B957159B81B77F88525867C2261DDAB32ED9A4F3B3FD71E727BD5522D93D7"
Last-Modified: Sat, 03 Dec 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13647
Expires: Sun, 04 Dec 2022 20:08:50 GMT
Date: Sun, 04 Dec 2022 16:21:23 GMT
Connection: keep-alive
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 346 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasha9ff5fa0b5c4765b050f2381f57f5520 0ce842b0fbaef98e256cc66eff4615df094b9d51 95e33b8d7c38a952cbc353b5e2587cd1154da32d9ba29f010bd4b70a4ff2c487
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "95E33B8D7C38A952CBC353B5E2587CD1154DA32D9BA29F010BD4B70A4FF2C487"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5061
Expires: Sun, 04 Dec 2022 17:45:44 GMT
Date: Sun, 04 Dec 2022 16:21:23 GMT
Connection: keep-alive
|
|
| soldierreproduceadmiration.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2Fv2%2Fnew%2F3%2Fcss%2Fanimate.css&l=79313&fd=145 | 173.233.137.36 | 200 OK | 0 B |
URL HTTP/1.1soldierreproduceadmiration.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2Fv2%2Fnew%2F3%2Fcss%2Fanimate.css&l=79313&fd=145 IP173.233.137.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2Fv2%2Fnew%2F3%2Fcss%2Fanimate.css&l=79313&fd=145 HTTP/1.1
Host: soldierreproduceadmiration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Cookie: u_pl=17179025; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2bd8d300136a6fd50bcb5a7f3f4a12fa=[3830292]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 16:21:23 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.cloudimagesb.com/si/28/d6/a4/28d6a403173def438ad97dc6687ec5eb/1669910284.png | 45.133.44.9 | 200 OK | 78 kB |
URL HTTP/2cdn.cloudimagesb.com/si/28/d6/a4/28d6a403173def438ad97dc6687ec5eb/1669910284.png IP45.133.44.9:0 ASN#39572 DataWeb Global Group B.V.
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data Hashf073aaf0ef05830f8ac9db84fc0dd661 ef3d1adef699a050c829ae76084cf1ce9ae54cd0 8afdd964d1a19e9177174a08456e129ceda215587326ead6bc10b0557859c541
GET /si/28/d6/a4/28d6a403173def438ad97dc6687ec5eb/1669910284.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:23 GMT
content-type: image/png
content-length: 77811
server: nginx/1.17.6
last-modified: Thu, 01 Dec 2022 15:58:13 GMT
etag: "6388cf15-12ff3"
expires: Tue, 06 Dec 2022 16:21:23 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.barscreative1.com/sb/au/e6/d7/97/e6d797a3a7be0e7ec1877d1b33146dfa/1657714258.html | 45.133.44.4 | 200 OK | 1.4 kB |
URL HTTP/2cdn.barscreative1.com/sb/au/e6/d7/97/e6d797a3a7be0e7ec1877d1b33146dfa/1657714258.html IP45.133.44.4:0 ASN#39572 DataWeb Global Group B.V.
Hashbc13ea62cfc39f7d2aefd3d892fba7e8 0fd5872808567c0ba3d50746a5eb50f12ccd9f74 b2215daa29d5811be2a68bd45124d9338dcb7ce2e578ecf0e4b545a5872160a0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /sb/au/e6/d7/97/e6d797a3a7be0e7ec1877d1b33146dfa/1657714258.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:23 GMT
content-type: text/html; charset=utf-8
server: nginx/1.17.6
last-modified: Wed, 13 Jul 2022 12:11:03 GMT
etag: W/"62ceb657-4a6"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Sun, 04 Dec 2022 17:21:23 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/v2/new/3/css/animate.css | 172.64.109.13 | 200 OK | 5.0 kB |
URL HTTP/2cdn.creative-bars1.com/sb/chat/mob/ssp/v2/new/3/css/animate.css IP172.64.109.13:0
Hashb0f2af7ce4af681cdd55d1d0a73f3a7d 639854228f07a915b3ec81c75d236079d80af348 73bae78d07b8d3024e43a86afd7970ea548506619a7aa654b01099cba6d18699
GET /sb/chat/mob/ssp/v2/new/3/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:23 GMT
content-type: text/css
last-modified: Wed, 13 Jul 2022 12:13:56 GMT
etag: W/"62ceb704-135d1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1144661
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dpxeT%2F86N2OaHVWuHkoVQzXap48xDeT7hA6Hvw8r9rshdzqvRnBEm32Gdn9GDndhKD%2B0Lq5hY%2F8%2FCqhTwo3jgLNbJQhpeolM9P2JGkSVbDd%2BPbERiG46%2FWydUvXNno6RmI0PqhaggXlx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7745dff70ae5888b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 334050
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 334029
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| soldierreproduceadmiration.com/pixel/sbs?c=1 | 173.233.137.36 | 200 OK | 0 B |
URL HTTP/1.1soldierreproduceadmiration.com/pixel/sbs?c=1 IP173.233.137.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /pixel/sbs?c=1 HTTP/1.1
Host: soldierreproduceadmiration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Cookie: u_pl=17179025; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2bd8d300136a6fd50bcb5a7f3f4a12fa=[3830292]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 16:21:24 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| soldierreproduceadmiration.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSPWwcRRSezV8BDaA0FIijQAoCnXdv73znpDCExMjC2CYOckUxOzN7nnh2ZzWze3t2gSwsoRQUZySkSDTr7%2BxYQASkoESy1mmCAclHgVxgCgpqhBQh0aA7n7B40sx7b75XfN%2F35qPt7IS4yOjx4jt6XSpFJxpVt3JlWcZc57Yyf7viuVX3WmVZxpP1a5Xu8DKdq57bqLqvVN4SbFVP1FzPdT3Xq8xII0LdnRihkMmDKa865VbrtarXqKNr%2Ft%2FbzIGlDnjnhDwHyQcXVx4%2FhGQl4uibG8Kupjp57WaUKZpqgw7fey9ejXUeIzorQ%2BMgjPfG09B2QMi9c9Dx3lgBdGdnqACBHBDnFw9BvDemiaCze8o0UBAxAv408k4JoUpIWoLpTUh%2BRADGMb%2BAOLo%2Fr01O105ROkQH5MKTvyDzAbnw62XE0VfXlexWlrTKUqlji25YQHZLyHaJJDtAuu5A5gdg6YeQ%2FCcy8WQOcbSzYJWG5MVIvZQlZFhCiR6odZANj3SQhQ6yxEHEjyu0MRW6bjMMQt9v1Rljvs9YozXJG9yvt0IXGRvS6yFNemCqB2Y2kJgNrMpPjhovH73%2FKky2D7tSwHIHNh0Q590NdHiBXBDkliCnBLkkyFOCvFPscmVrtrjPlc0Cb5xr4%2BwXfZ22t%2BmuTtsiJtvJCXl26I5z6aUtrIrjSi3gLe67rudP0smQN9yABQ3aDP2wTr1aSGFlAWnPjQSvywE5f2kTiRyQc9f%2BREBLWFWCyWdAsxdA836z5oKu9OstF%2Bvx14Gw6R3aSbSJq0xH4LpAkl5AuuZsqxPy%2FGhRV81lCHY4%2FUP87f7rPy6CmQKJKXBHPiJoq7v9WzonO7d0bsnDhSSVkVynwyUupTQVF794W6zl2vDZG7b3%2BRtsCAzLB7eFTedozGXctuTL65JzYWa0YYJ8N2uXRbCY2ZXrmYmzZG7xzZnZKDHCWqnjElQOCNn6DUwOyFOfVkcf9MWb9yBNCZMViLJDMg5IfQCWbMAmh9Pfn5g%2FPrjyD6wmMOpsJkgc5FnRN7Xg7FFJAiXOehoUsOJwev%2FRZ7u%2FL%2F2NQPxnyLa9i7ZxQNNNxFGBjinQUQWo6sFm5%2FtpYg6nf%2FZHgUA5%2FUAZZydQRm2dmmvlcaXh1UUraDUZ54Fg3GvW%2FJbvujXO680p4U0htQP28ePz%2FwIAAP%2F%2FAQAA%2F%2F8aG7RneAQAAA%3D%3D | 173.233.137.36 | 200 OK | 7 B |
URL HTTP/1.1soldierreproduceadmiration.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSPWwcRRSezV8BDaA0FIijQAoCnXdv73znpDCExMjC2CYOckUxOzN7nnh2ZzWze3t2gSwsoRQUZySkSDTr7%2BxYQASkoESy1mmCAclHgVxgCgpqhBQh0aA7n7B40sx7b75XfN%2F35qPt7IS4yOjx4jt6XSpFJxpVt3JlWcZc57Yyf7viuVX3WmVZxpP1a5Xu8DKdq57bqLqvVN4SbFVP1FzPdT3Xq8xII0LdnRihkMmDKa865VbrtarXqKNr%2Ft%2FbzIGlDnjnhDwHyQcXVx4%2FhGQl4uibG8Kupjp57WaUKZpqgw7fey9ejXUeIzorQ%2BMgjPfG09B2QMi9c9Dx3lgBdGdnqACBHBDnFw9BvDemiaCze8o0UBAxAv408k4JoUpIWoLpTUh%2BRADGMb%2BAOLo%2Fr01O105ROkQH5MKTvyDzAbnw62XE0VfXlexWlrTKUqlji25YQHZLyHaJJDtAuu5A5gdg6YeQ%2FCcy8WQOcbSzYJWG5MVIvZQlZFhCiR6odZANj3SQhQ6yxEHEjyu0MRW6bjMMQt9v1Rljvs9YozXJG9yvt0IXGRvS6yFNemCqB2Y2kJgNrMpPjhovH73%2FKky2D7tSwHIHNh0Q590NdHiBXBDkliCnBLkkyFOCvFPscmVrtrjPlc0Cb5xr4%2BwXfZ22t%2BmuTtsiJtvJCXl26I5z6aUtrIrjSi3gLe67rudP0smQN9yABQ3aDP2wTr1aSGFlAWnPjQSvywE5f2kTiRyQc9f%2BREBLWFWCyWdAsxdA836z5oKu9OstF%2Bvx14Gw6R3aSbSJq0xH4LpAkl5AuuZsqxPy%2FGhRV81lCHY4%2FUP87f7rPy6CmQKJKXBHPiJoq7v9WzonO7d0bsnDhSSVkVynwyUupTQVF794W6zl2vDZG7b3%2BRtsCAzLB7eFTedozGXctuTL65JzYWa0YYJ8N2uXRbCY2ZXrmYmzZG7xzZnZKDHCWqnjElQOCNn6DUwOyFOfVkcf9MWb9yBNCZMViLJDMg5IfQCWbMAmh9Pfn5g%2FPrjyD6wmMOpsJkgc5FnRN7Xg7FFJAiXOehoUsOJwev%2FRZ7u%2FL%2F2NQPxnyLa9i7ZxQNNNxFGBjinQUQWo6sFm5%2FtpYg6nf%2FZHgUA5%2FUAZZydQRm2dmmvlcaXh1UUraDUZ54Fg3GvW%2FJbvujXO680p4U0htQP28ePz%2FwIAAP%2F%2FAQAA%2F%2F8aG7RneAQAAA%3D%3D IP173.233.137.36:0
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSPWwcRRSezV8BDaA0FIijQAoCnXdv73znpDCExMjC2CYOckUxOzN7nnh2ZzWze3t2gSwsoRQUZySkSDTr7%2BxYQASkoESy1mmCAclHgVxgCgpqhBQh0aA7n7B40sx7b75XfN%2F35qPt7IS4yOjx4jt6XSpFJxpVt3JlWcZc57Yyf7viuVX3WmVZxpP1a5Xu8DKdq57bqLqvVN4SbFVP1FzPdT3Xq8xII0LdnRihkMmDKa865VbrtarXqKNr%2Ft%2FbzIGlDnjnhDwHyQcXVx4%2FhGQl4uibG8Kupjp57WaUKZpqgw7fey9ejXUeIzorQ%2BMgjPfG09B2QMi9c9Dx3lgBdGdnqACBHBDnFw9BvDemiaCze8o0UBAxAv408k4JoUpIWoLpTUh%2BRADGMb%2BAOLo%2Fr01O105ROkQH5MKTvyDzAbnw62XE0VfXlexWlrTKUqlji25YQHZLyHaJJDtAuu5A5gdg6YeQ%2FCcy8WQOcbSzYJWG5MVIvZQlZFhCiR6odZANj3SQhQ6yxEHEjyu0MRW6bjMMQt9v1Rljvs9YozXJG9yvt0IXGRvS6yFNemCqB2Y2kJgNrMpPjhovH73%2FKky2D7tSwHIHNh0Q590NdHiBXBDkliCnBLkkyFOCvFPscmVrtrjPlc0Cb5xr4%2BwXfZ22t%2BmuTtsiJtvJCXl26I5z6aUtrIrjSi3gLe67rudP0smQN9yABQ3aDP2wTr1aSGFlAWnPjQSvywE5f2kTiRyQc9f%2BREBLWFWCyWdAsxdA836z5oKu9OstF%2Bvx14Gw6R3aSbSJq0xH4LpAkl5AuuZsqxPy%2FGhRV81lCHY4%2FUP87f7rPy6CmQKJKXBHPiJoq7v9WzonO7d0bsnDhSSVkVynwyUupTQVF794W6zl2vDZG7b3%2BRtsCAzLB7eFTedozGXctuTL65JzYWa0YYJ8N2uXRbCY2ZXrmYmzZG7xzZnZKDHCWqnjElQOCNn6DUwOyFOfVkcf9MWb9yBNCZMViLJDMg5IfQCWbMAmh9Pfn5g%2FPrjyD6wmMOpsJkgc5FnRN7Xg7FFJAiXOehoUsOJwev%2FRZ7u%2FL%2F2NQPxnyLa9i7ZxQNNNxFGBjinQUQWo6sFm5%2FtpYg6nf%2FZHgUA5%2FUAZZydQRm2dmmvlcaXh1UUraDUZ54Fg3GvW%2FJbvujXO680p4U0htQP28ePz%2FwIAAP%2F%2FAQAA%2F%2F8aG7RneAQAAA%3D%3D HTTP/1.1
Host: soldierreproduceadmiration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Cookie: u_pl=17179025; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2bd8d300136a6fd50bcb5a7f3f4a12fa=[3830292]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 16:21:24 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 96e3546dcbc8efa6474c7106593fc523
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| adxadserv.com/px/heartbeat/v1?pv_uid=26e0e9d8-911d-4b1b-94c5-04baf720d9ba&t_op=5.497&p_nn=adxad-rtb&fpid_sa=1670170877625&fpid=bc43f01a151639d4c69739dcaca30e3b&feid_sa=1670170877625&sid_sa=1670170877625&feid=abb82f4b444ba27bbf366b4cdd1c96f7&sid=d5569dd6bf42a3032b937bd876d5b817&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www4.bestjavporn.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=16&dm=-1&dt=2&ed=0&sr=5497558139882&fb=10384 | 185.98.53.29 | 200 OK | 0 B |
URL HTTP/1.1adxadserv.com/px/heartbeat/v1?pv_uid=26e0e9d8-911d-4b1b-94c5-04baf720d9ba&t_op=5.497&p_nn=adxad-rtb&fpid_sa=1670170877625&fpid=bc43f01a151639d4c69739dcaca30e3b&feid_sa=1670170877625&sid_sa=1670170877625&feid=abb82f4b444ba27bbf366b4cdd1c96f7&sid=d5569dd6bf42a3032b937bd876d5b817&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www4.bestjavporn.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=16&dm=-1&dt=2&ed=0&sr=5497558139882&fb=10384 IP185.98.53.29:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /px/heartbeat/v1?pv_uid=26e0e9d8-911d-4b1b-94c5-04baf720d9ba&t_op=5.497&p_nn=adxad-rtb&fpid_sa=1670170877625&fpid=bc43f01a151639d4c69739dcaca30e3b&feid_sa=1670170877625&sid_sa=1670170877625&feid=abb82f4b444ba27bbf366b4cdd1c96f7&sid=d5569dd6bf42a3032b937bd876d5b817&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www4.bestjavporn.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=16&dm=-1&dt=2&ed=0&sr=5497558139882&fb=10384 HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1
Origin: https://ads.adxadserv.com
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 04 Dec 2022 16:21:25 GMT
Content-Length: 0
Connection: keep-alive
|
|
| js.wpadmngr.com/static/adManager.m.js | 45.133.44.25 | 200 OK | 0 B |
URL HTTP/2js.wpadmngr.com/static/adManager.m.js IP45.133.44.25:0 ASN#39572 DataWeb Global Group B.V.
GET /static/adManager.m.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:20 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 30 Nov 2022 13:10:49 GMT
etag: W/"63875659-17718"
content-encoding: gzip
expires: Sun, 04 Dec 2022 16:26:20 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| pics.pornfhd.com/s/digital/video/cosvr00020/cosvr00020pl.jpg | 104.21.235.63 | 200 OK | 0 B |
URL HTTP/2pics.pornfhd.com/s/digital/video/cosvr00020/cosvr00020pl.jpg IP104.21.235.63:0
GET /s/digital/video/cosvr00020/cosvr00020pl.jpg HTTP/1.1
Host: pics.pornfhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:19 GMT
content-type: image/jpeg
last-modified: Tue, 25 Oct 2022 03:27:52 GMT
vary: Accept-Encoding
etag: W/"635757b8-c501"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 794280
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0h8NXOd4bwDEunl0JN5%2BSbFD%2BDf%2FKkAwO6c8WTp8JnvYIBZzWr08%2B%2BlRb5CHlaLU3zXaUb4yHaSnimFjInOw%2BvYJmerbMqZW0I8AtZcWKshQSW8yHjo%2Bbtl8HTpJ81SlwBtE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7745dfda8b1a7318-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pics.pornfhd.com/s/mono/movie/adult/oigs046/oigs046pl.jpg | 104.21.235.63 | 200 OK | 0 B |
URL HTTP/2pics.pornfhd.com/s/mono/movie/adult/oigs046/oigs046pl.jpg IP104.21.235.63:0
GET /s/mono/movie/adult/oigs046/oigs046pl.jpg HTTP/1.1
Host: pics.pornfhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:19 GMT
content-type: image/jpeg
last-modified: Fri, 07 Oct 2022 02:08:36 GMT
vary: Accept-Encoding
etag: W/"633f8a24-a7c6"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2445050
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KOeYWLDI6b1Ayfxzn8DxgNVe0hCiYh4otksxGGrM2TCzT7LB5ieuzjHOtHsu5aqnrZykmcwO%2FZVeyZPEuKvR8cgyT8U%2FRVQ%2FWuCUVK1%2B2zp%2BuctjRZ5M36KD9iVeKFfWa2ef"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7745dfda9b3b7318-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/v2/new/3/js/jquery.min.js | 172.64.109.13 | 200 OK | 0 B |
URL HTTP/2cdn.creative-bars1.com/sb/chat/mob/ssp/v2/new/3/js/jquery.min.js IP172.64.109.13:0
GET /sb/chat/mob/ssp/v2/new/3/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:23 GMT
content-type: application/javascript
last-modified: Wed, 13 Jul 2022 12:13:58 GMT
etag: W/"62ceb706-15d94"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1650600
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j06Qhh1IODL0Qyd6iEbQ5OXl2wPVyahgaZlq0K1Pmw3u8iOCYim6cjpSP%2FFs%2BAFV5xAQmoFigN2WYG9tUKOdodUquJzm%2F6Q5RiA17saG8Hdzob7WvJLLveo6vnlo%2BR9ulOtJ1B7t1YD2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7745dff72b26888b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www4.bestjavporn.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js | 172.67.68.13 | 200 OK | 0 B |
URL HTTP/2www4.bestjavporn.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP172.67.68.13:0
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/lulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:18 GMT
content-type: application/javascript
last-modified: Wed, 30 Nov 2022 18:31:41 GMT
etag: W/"6387a18d-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J1UZtH8hpdRR6mAMd9cm%2BvF0b%2BTO82amzbRllCVW1LHNUsVffTdErzl%2FL7GzwdY%2BnAOsGoHlNWMYj7DlUFod%2BOTydKzboAm9lRVSFPVFoLZ39NhedIrYm19kXl6jUik5ZTVCS%2Fvd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7745dfd89e9fb527-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Tue, 06 Dec 2022 16:21:18 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| js.wpadmngr.com/static/adManager.js | 45.133.44.25 | 200 OK | 0 B |
URL HTTP/2js.wpadmngr.com/static/adManager.js IP45.133.44.25:0 ASN#39572 DataWeb Global Group B.V.
GET /static/adManager.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:20 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 13 Jul 2022 06:52:04 GMT
etag: W/"62ce6b94-4e2"
content-encoding: gzip
expires: Sun, 04 Dec 2022 16:26:20 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| pics.pornfhd.com/mono/movie/adult/lulu175/lulu175pl.jpg | 104.21.235.63 | 200 OK | 0 B |
URL HTTP/2pics.pornfhd.com/mono/movie/adult/lulu175/lulu175pl.jpg IP104.21.235.63:0
GET /mono/movie/adult/lulu175/lulu175pl.jpg HTTP/1.1
Host: pics.pornfhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:18 GMT
content-type: image/jpeg
last-modified: Thu, 29 Sep 2022 09:02:01 GMT
vary: Accept-Encoding
etag: W/"63355f09-2bb0e"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 16274
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BonawTXdzcaeL9fKERuXHeuffG%2BrbLZdCpvSQR3NlXaCj%2BEiVywbyxlviNcH9jfDe6dAHSaMxbnB9WKag2EPN27PnLT%2FdTUybuWlLbzHeMzjbrP32znsaPd3eq%2BhC52TyNtt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7745dfd989347318-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.1.0 | 172.67.68.13 | 200 OK | 0 B |
URL HTTP/2www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.1.0 IP172.67.68.13:0
GET /wp-content/themes/retrotube/assets/js/navigation.js?ver=1.1.0 HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/lulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:18 GMT
content-type: application/javascript
cf-connecting-ip: 88.195.172.127
cf-bgj: minify
cf-polished: origSize=6149
etag: W/"635fdc2f-1805"
last-modified: Mon, 31 Oct 2022 14:31:11 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-rocket-args: ver=1.1.0
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/assets/js/navigation.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 20721
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YrbK4OZ1k4GapzM25AQFlS0omOjvG3LAOyzulfLdDelbKj1IyuK5NQW8K3oUhOvG0DLakcvg5vGWzdZBhACB1%2FKPapl0ORkkuTTpjxPH68GQ4eN%2BqY6b9hrToWCBuhn9sx8slXje"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7745dfd89ea0b527-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/cast.js?ver=7.2.2 | 172.67.68.13 | 200 OK | 0 B |
URL HTTP/2www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/cast.js?ver=7.2.2 IP172.67.68.13:0
GET /wp-content/themes/retrotube/assets/js/cast.js?ver=7.2.2 HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/lulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:18 GMT
content-type: application/javascript
cf-connecting-ip: 92.220.0.147
cf-bgj: minify
etag: W/"6388cd36-11395"
last-modified: Thu, 01 Dec 2022 15:50:14 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-rocket-args: ver=7.2.2
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/assets/js/cast.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 20319
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LWhqtF69yOEhHuyQjAgue6qYmRHRm89RucjXdDt0OP9P56ED3pf0Wa%2Fa5VRojFUiUKZaggg8wxBVSdqp5xmTiogObto32jKVClSDQnw7Bt2I7E3UkIs%2FFzWIJPGsjY%2BfLteKuKFj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7745dfd89eabb527-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| img.bestjavporn.net/favicon.ico | 104.21.233.137 | 200 OK | 0 B |
URL HTTP/2img.bestjavporn.net/favicon.ico IP104.21.233.137:0
GET /favicon.ico HTTP/1.1
Host: img.bestjavporn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:19 GMT
content-type: image/x-icon
last-modified: Thu, 16 Jul 2020 11:00:10 GMT
etag: W/"5f10333a-3c2e"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 118150
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NPgfHPfcV2%2FjvNct%2BqYT%2BnkeLh3yrZ2coTQWpmf5Y9ckHRMFC%2F%2BQC1AULrbW8mJVCUxJ8WvH6aOR5CREY3V%2BqH3%2Bx0vKUjLJmb4lTGgr1gs8UOOL8efTcg%2FunT9fLfdrPM2OhrUE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7745dfdc9ab071f2-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| js.capndr.com/popunder-admanager/build.m.js | 45.133.44.24 | 200 OK | 0 B |
URL HTTP/2js.capndr.com/popunder-admanager/build.m.js IP45.133.44.24:0 ASN#39572 DataWeb Global Group B.V.
GET /popunder-admanager/build.m.js HTTP/1.1
Host: js.capndr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:22 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 01 Dec 2022 09:44:36 GMT
etag: W/"63887784-add7"
content-encoding: gzip
expires: Sun, 04 Dec 2022 16:26:22 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| www4.bestjavporn.com/wp-content/themes/retrotube/style.css?ver=1.4.3 | 172.67.68.13 | 200 OK | 0 B |
URL HTTP/2www4.bestjavporn.com/wp-content/themes/retrotube/style.css?ver=1.4.3 IP172.67.68.13:0
GET /wp-content/themes/retrotube/style.css?ver=1.4.3 HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/lulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:18 GMT
content-type: text/css
cf-connecting-ip: 92.220.0.147
cf-bgj: minify
cf-polished: origSize=84878
etag: W/"6388cd36-14b8e"
last-modified: Thu, 01 Dec 2022 15:50:14 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-rocket-args: ver=1.4.3
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/style.css
cache-control: max-age=3600
cf-cache-status: HIT
age: 20722
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C9DIjBCou44le9yEqhoQkhT%2FCDX2JRIT48QLAyO8Fn6TymdLyc3PABTDhWDi4fkaacbk5fhM2da5nPuo4CnddkxXLoIJ2ZDRDrHu5opu%2BStqBjCQK%2Bh8d1mMuJ%2BHjlQPlkV%2FtHSx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7745dfd87e85b527-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 | 172.67.68.13 | 200 OK | 0 B |
URL HTTP/2www4.bestjavporn.com/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 IP172.67.68.13:0
GET /wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/lulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:18 GMT
content-type: application/javascript
cf-connecting-ip: 88.195.172.127
cf-bgj: minify
cf-polished: origSize=683
etag: W/"600200e4-2ab"
last-modified: Fri, 15 Jan 2021 20:53:56 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-rocket-args: ver=1.0.0
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 20721
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2fsXTpeSHYTiy%2FmdM7NjGlApBwOILoVGONXMGMU2c6cKfcaEBW9K9fouXzduaUAzOyIrinJPgKsvhp2cLE4R0ttdfF0EWgb1I65IZXgKG5ftZwEhx5ykALIZaP6PVG%2BhPDVaoQmW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7745dfd89ea9b527-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| pics.pornfhd.com/s/mono/movie/adult/mdbk270/mdbk270pl.jpg | 104.21.235.63 | 200 OK | 0 B |
URL HTTP/2pics.pornfhd.com/s/mono/movie/adult/mdbk270/mdbk270pl.jpg IP104.21.235.63:0
GET /s/mono/movie/adult/mdbk270/mdbk270pl.jpg HTTP/1.1
Host: pics.pornfhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:19 GMT
content-type: image/jpeg
last-modified: Thu, 20 Oct 2022 07:15:01 GMT
vary: Accept-Encoding
etag: W/"6350f575-bbeb"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1251215
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s4I9hjLz9x7FuyZAoO9kV3FM7rslJkD2XhhCHp5tb8haupVzjDRV9FJWZyObqOWXa8R9fzc4NrsMUGAHauO78Ts4lRwBw4b1MtgC%2FsmWrf9HJAAKkNQqgtoFRSsSkYenVQBn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7745dfda9b3e7318-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pics.pornfhd.com/s/mono/movie/adult/bbtu048/bbtu048pl.jpg | 104.21.235.63 | 200 OK | 0 B |
URL HTTP/2pics.pornfhd.com/s/mono/movie/adult/bbtu048/bbtu048pl.jpg IP104.21.235.63:0
GET /s/mono/movie/adult/bbtu048/bbtu048pl.jpg HTTP/1.1
Host: pics.pornfhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:19 GMT
content-type: image/jpeg
last-modified: Fri, 14 Oct 2022 05:59:01 GMT
vary: Accept-Encoding
etag: W/"6348faa5-9051"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1858786
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I0fWAn3MyhV3Dd41KhIzqBAewaqpmIoTC1JiqH6YlNBfSzGDMsQ%2BIJ%2FItBI73Cpfjv8o596mobYmQGyAXoNlRb3ygdjJsIQkdPJbyGsukUbZUTsOhyMzxkGGBAU8xtw0AI29"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7745dfda9b3f7318-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www4.bestjavporn.com/wp-content/themes/retrotube/ajax-view.php | 172.67.68.13 | 200 OK | 0 B |
URL HTTP/2www4.bestjavporn.com/wp-content/themes/retrotube/ajax-view.php IP172.67.68.13:0
POST /wp-content/themes/retrotube/ajax-view.php HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 49
Origin: https://www4.bestjavporn.com
Connection: keep-alive
Referer: https://www4.bestjavporn.com/video/lulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:19 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
cf-connecting-ip: 91.90.42.154
x-frame-options: SAMEORIGIN
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/ajax-view.php
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hb1edHm4bIRM8KgurUnal%2F8eafxdHZ4ufhleNgSdU0kku4tR4wqtfpCAowwOBXV7prHkPPiIEok9%2F%2F%2FZPS2f0dA3Hi2c08OC7W9MD1Nn0Nf%2FcKE1GsgFiUmbKUrCebITI1Pwkt9M"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7745dfdbbb0fb527-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| static.javhdhello.com/h5/files/15970/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Fef7ed9bf-02b1-42a7-b41c-1a88029074bd%3Fcv1%3Dafa84b36-73ef-11ed-add6-e25a5bb9767f%26cv10%3D62fe56a361d6e272ea2a6a61%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D62fe933961d6e278cd572307%26cv5%3D62fe933061d6e278cd572305%26cv6%3Den%26cv7%3DNTVA-Bestjavporn%26cv8%3DFirefox%26cv9%3D62fe56a361d6e272ea2a6a61%26externalId%3Dafa84b36-73ef-11ed-add6-e25a5bb9767f%26p%3DeyJiIjoyNzc0NTEsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3Nzc5fQ | 185.76.9.25 | 200 OK | 0 B |
URL HTTP/2static.javhdhello.com/h5/files/15970/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Fef7ed9bf-02b1-42a7-b41c-1a88029074bd%3Fcv1%3Dafa84b36-73ef-11ed-add6-e25a5bb9767f%26cv10%3D62fe56a361d6e272ea2a6a61%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D62fe933961d6e278cd572307%26cv5%3D62fe933061d6e278cd572305%26cv6%3Den%26cv7%3DNTVA-Bestjavporn%26cv8%3DFirefox%26cv9%3D62fe56a361d6e272ea2a6a61%26externalId%3Dafa84b36-73ef-11ed-add6-e25a5bb9767f%26p%3DeyJiIjoyNzc0NTEsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3Nzc5fQ IP185.76.9.25:0 ASN#60068 Datacamp Limited
GET /h5/files/15970/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Fef7ed9bf-02b1-42a7-b41c-1a88029074bd%3Fcv1%3Dafa84b36-73ef-11ed-add6-e25a5bb9767f%26cv10%3D62fe56a361d6e272ea2a6a61%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D62fe933961d6e278cd572307%26cv5%3D62fe933061d6e278cd572305%26cv6%3Den%26cv7%3DNTVA-Bestjavporn%26cv8%3DFirefox%26cv9%3D62fe56a361d6e272ea2a6a61%26externalId%3Dafa84b36-73ef-11ed-add6-e25a5bb9767f%26p%3DeyJiIjoyNzc0NTEsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3Nzc5fQ HTTP/1.1
Host: static.javhdhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r.trackwilltrk.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:20 GMT
content-type: text/html
last-modified: Wed, 20 Apr 2022 13:56:46 GMT
etag: W/"6260111e-c86"
expires: Tue, 03 Jan 2023 16:21:20 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-accel-expires: @1672762880
server: CDN77-Turbo
x-77-nzt: AblMCRQ+q1Gh
x-77-nzt-ray: af585630be9f069c00c98c639cb66221
x-cache: MISS
x-77-pop: stockholmSE
x-77-cache: MISS
content-encoding: br
X-Firefox-Spdy: h2
|
|
| friendshipmale.com/sfp.js | 172.64.163.31 | 200 OK | 0 B |
URL HTTP/2friendshipmale.com/sfp.js IP172.64.163.31:0
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www4.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:20 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: e3362a5a2c91b93b4884f21e9284debd
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sun, 04 Dec 2022 16:21:20 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j8oaC%2FeZre2DMIZFbPxMKMOMZd%2FKUM%2BHuNdv0JdT2wX86oZxoxznEAc%2Fgc%2FEtJ8EH1y8%2Fc9ttltH5r2MB9o2R7JuGAc0rKHXjiqKattb9TuTU3SWKSNx78b083rwMywI9x6gNLM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7745dfe4bb5d88aa-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www4.bestjavporn.com/video/lulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at/ | 172.67.68.13 | 200 OK | 0 B |
URL HTTP/2www4.bestjavporn.com/video/lulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at/ IP172.67.68.13:0
GET /video/lulu-175-when-i-got-hard-on-the-big-breasts-of-the-landlord-s-wife-who-was-a-lot-of-caregiving-at/ HTTP/1.1
Host: www4.bestjavporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 04 Dec 2022 16:21:18 GMT
content-type: text/html; charset=UTF-8
cf-ray: 7745dfd3ae9db527-OSL
cache-control: max-age=3600
last-modified: Sat, 03 Dec 2022 22:11:52 GMT
link: <https://www4.bestjavporn.com/wp-json/>; rel="https://api.w.org/", <https://www4.bestjavporn.com/?p=537659>; rel=shortlink
vary: Accept-Encoding
cf-cache-status: HIT
cf-apo-via: tcache
cf-connecting-ip: 193.176.86.41
cf-edge-cache: cache,platform=wordpress
x-frame-options: SAMEORIGIN
x-rocket-nginx-serving-static: No
x-rocket-uri: /index.php
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kUvYzYcD8xSZgRb4j2AS7wXjfdEBpidecHTtpx9eDaCE6imC61lL4aA3W5ATeavlFJz6Z9m5vA%2FisdxQ9HZT8fAZJtKGgEkTvT7EaxqY3cvhlGHbLGxt%2B4%2Fi6hz0VmfzuSn%2BYU19"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
|
|