javhay.baby/video/caiu-na-net-tahcardoso-do-insta-e-dotike-toke-5G54YVJA7/
104.21.33.69301 Moved Permanently 0 B URL HTTP/1.1 javhay.baby/video/caiu-na-net-tahcardoso-do-insta-e-dotike-toke-5G54YVJA7/
IP 104.21.33.69:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /video/caiu-na-net-tahcardoso-do-insta-e-dotike-toke-5G54YVJA7/ HTTP/1.1
Host: javhay.baby
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 27 Dec 2022 05:25:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 27 Dec 2022 06:25:04 GMT
Location: https://javhay.media/video/caiu-na-net-tahcardoso-do-insta-e-dotike-toke-5G54YVJA7/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HKtTfdNpfCFFtnh1o9znc6N34EVl6fX3i5a7Poj5sP6Ks5SxWT%2FFJBiUr5Cb383jlThSiBa3qaB0J1f%2B3E%2Bdtoe9r9GMWq6pTe3f7UWugy4hJVgmmwT4wtNFxys%2FSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77ffa22fede8b523-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash fb20c18681040b740ab1730562beb45c
abedefb801b0e13987d6619a77e0368771f9dfcb
288c1832db391da57e3d74ffa893ec2c47ef9c1945f85b88473c563b55a3dfb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "288C1832DB391DA57E3D74FFA893EC2C47EF9C1945F85B88473C563B55A3DFB3"
Last-Modified: Sun, 25 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10392
Expires: Tue, 27 Dec 2022 08:18:16 GMT
Date: Tue, 27 Dec 2022 05:25:04 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 67f508aae634a023b587a7129a5b8039
2ff7e1d29b497147941d0abf581411cbd2722d7b
eee5fda5214bd4f75b0934bb1f14429fe01251628026fd0f18f117b38848601c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EEE5FDA5214BD4F75B0934BB1F14429FE01251628026FD0F18F117B38848601C"
Last-Modified: Sun, 25 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2468
Expires: Tue, 27 Dec 2022 06:06:12 GMT
Date: Tue, 27 Dec 2022 05:25:04 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b2d59bdbb1ca6324590988ec031cf1fc
bfd4e25af37dcde4bac38d9b178c5ac8e50f8834
cef2180120ef42ff09d54577229c058d41d2c569d485f5a6dcfadc74bf8aa647
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEF2180120EF42FF09D54577229C058D41D2C569D485F5A6DCFADC74BF8AA647"
Last-Modified: Mon, 26 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4284
Expires: Tue, 27 Dec 2022 06:36:28 GMT
Date: Tue, 27 Dec 2022 05:25:04 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 27 Dec 2022 04:46:38 GMT
content-type: application/json
age: 2306
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: yoN8k5TTZOFJRt9bcVBK5GWZYTvIknLVpmyoTBEuyZztlUa09G5Esp+JUkwsFMzm2mlfIq2FBKs=
x-amz-request-id: 8WPX0GB2R049NSFP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 27 Dec 2022 04:55:36 GMT
age: 1768
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Dec 2022 05:25:04 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Last-Modified, Retry-After, Content-Type, Alert, Pragma, ETag, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 27 Dec 2022 05:08:07 GMT
age: 1018
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.76.226200 OK 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash bd3ff75323774a5df3b3d5682bc2bafb
65936742bd36368f9fa4d404b7fbcb8fd7cecac6
e7cc2d7e6e2f9b35ec2e73819eb70f987bfedd68360e3805783a99386dfc4a35
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "E7CC2D7E6E2F9B35EC2E73819EB70F987BFEDD68360E3805783A99386DFC4A35"
Last-Modified: Mon, 26 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 27 Dec 2022 11:25:05 GMT
Date: Tue, 27 Dec 2022 05:25:05 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 68ee4e2891b5a52719997e4ef8cb7aab
ae2e49eff010551d7f3dcf005a51530ee2910480
2bae50a834a34f248f6a79cf6f191dcf709c24b884f2d3da7fa43985c6b2d48b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 108
Cache-Control: max-age=99811
Content-Type: application/ocsp-response
Date: Tue, 27 Dec 2022 05:25:05 GMT
Etag: "63a96428-1d7"
Expires: Wed, 28 Dec 2022 09:08:36 GMT
Last-Modified: Mon, 26 Dec 2022 09:06:48 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
e1.o.lencr.org/
23.36.76.226200 OK 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash bd3ff75323774a5df3b3d5682bc2bafb
65936742bd36368f9fa4d404b7fbcb8fd7cecac6
e7cc2d7e6e2f9b35ec2e73819eb70f987bfedd68360e3805783a99386dfc4a35
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "E7CC2D7E6E2F9B35EC2E73819EB70F987BFEDD68360E3805783A99386DFC4A35"
Last-Modified: Mon, 26 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 27 Dec 2022 11:25:05 GMT
Date: Tue, 27 Dec 2022 05:25:05 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash ae893eec23998fe856d6ee3df2163a80
d98cb1a1c82c429c2f6fdbbfb7461713c790da7a
24167e8036371493799d6fe42f5e00a0ea2e4a5b7eb70636a269a9aa78d1f712
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Dec 2022 05:25:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css2?family=Roboto:ital,wght@0,300;0,400;0,500;0,700;0,900;1,300;1,400;1,500;1,700;1,900&display=swap
142.250.74.106200 OK 1.5 kB URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:ital,wght@0,300;0,400;0,500;0,700;0,900;1,300;1,400;1,500;1,700;1,900&display=swap
IP 142.250.74.106:0
Hash 4bcb24d912d2f208f1c76c1f778ebef5
f7c3bff505516eea429c57a754c229dc54741642
cf8bef0fa06d2d2d93390c42483719ed7521d55c84a8678f817aa27198ab2232
GET /css2?family=Roboto:ital,wght@0,300;0,400;0,500;0,700;0,900;1,300;1,400;1,500;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 27 Dec 2022 05:25:05 GMT
date: Tue, 27 Dec 2022 05:25:05 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
44.229.20.251101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.229.20.251:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: dREQiQKsVh09WNJmBxk5Dg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: PuEnm/nA4w9pzOWqSEyOHDZzSkw=
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 1.7 kB IP 142.250.74.131:0
Hash dcc49f8b763c3413c84532e57b7bcc31
4b2888d87b77e532037705384f2ab5602d52a794
3f03bb61cb66c3d99282ed2c9cc4bb9a4be9ce43b1720f0d4cbefc434bf7fdad
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Dec 2022 05:25:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 659 B IP 142.250.74.131:0
Hash 27e55fb0a0326e7cf3968db0a4a80459
c3211bd0cb47a346f5affaa36fca850986614d61
f8f110f6acb1e2083d39777e6a017034ca29c514454f901557026db61ba262d2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Dec 2022 05:25:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
142.250.74.35200 OK 12 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 11872, version 1.0\012- data
Hash 87ace20058325aa069320aa4af875dff
b743548770c46d905ae1ba06310bc001c587fe8e
3c23eb02de6b34e30f18cfb7167abd81a2cedfd1da60dfcb71989517ab3fb431
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://javhay.media
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Dec 2022 19:42:24 GMT
expires: Thu, 21 Dec 2023 19:42:24 GMT
cache-control: public, max-age=31536000
age: 466961
last-modified: Wed, 11 May 2022 19:25:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 7f2ed0d8a18af500682ec994cd3a5e15
48032c29ccc60c09f0c003042d059e83ea493ecb
8c49d81420b293298bd75222f60fbc608c322b36944963d93b6a15b12bcb0e8b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Dec 2022 05:25:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2
142.250.74.35200 OK 12 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 11824, version 1.0\012- data
Hash deb26e9b1a25438118e5d39d741ae6b6
a2801defb4c8bed8e4083dfde0b2a5a9c0537020
fc66f942651a9fe1a598770d3d896529dcd7a03d02f40655451513093103e61b
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://javhay.media
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 24 Dec 2022 22:25:27 GMT
expires: Sun, 24 Dec 2023 22:25:27 GMT
cache-control: public, max-age=31536000
age: 197978
last-modified: Wed, 11 May 2022 19:24:43 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2
142.250.74.35200 OK 5.8 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2
IP 142.250.74.35:0
Hash 09e606b256ad0701029dc90dc40ad24c
281a6064993172095cfde40f0af0fd65398b1d00
73c8f114f6900853fe3a0cbc9237e3ed7822353fbbf0c81632fc4869295f6896
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://javhay.media
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5560
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Dec 2022 19:55:02 GMT
expires: Thu, 21 Dec 2023 19:55:02 GMT
cache-control: public, max-age=31536000
age: 466203
last-modified: Wed, 11 May 2022 19:24:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.buypass.com/
23.36.76.200200 OK 1.7 kB IP 23.36.76.200:0
ASN #20940 Akamai International B.V.
Hash 06e5769ccdc08bbc557d207948045d58
f90901ddd198fd4e9a8a3f9a99bac2d813d33fba
d498695bf4b467b604b15199c4d31aef4fdccfcb9e41f1a5f03f6c3eef06d0a0
POST / HTTP/1.1
Host: ocsp.buypass.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 78
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Access-Control-Allow-Origin: https://www.buypass.no
Access-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With,Content-Length,Accept,Origin,X-Buypass-Session-Id,X-Buypass-Locale
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
MDC-correlationId: 42c20abc-625f-4089-a4b6-f5172d445c24
Content-Length: 1701
Date: Tue, 27 Dec 2022 05:25:05 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 7f2ed0d8a18af500682ec994cd3a5e15
48032c29ccc60c09f0c003042d059e83ea493ecb
8c49d81420b293298bd75222f60fbc608c322b36944963d93b6a15b12bcb0e8b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Dec 2022 05:25:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.35200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.35:0
Hash e33feaabde21ffe93bfbbcaeb9caf166
512c25f5c24712792b401a46e2c120fa896e035a
488f078733f0156ad7001190f2ebadf20f6580578eef031c6e6889218544a1fe
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://javhay.media
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Dec 2022 19:33:54 GMT
expires: Thu, 21 Dec 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 467471
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
142.250.74.35200 OK 48 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
IP 142.250.74.35:0
Hash e6d2453fe27f940b2f6058cb9669374e
3a305467755048f1986953bcbb8ce1a2ba1f1070
5771f13844fcb0ceb0771485abee89f1494f4ecc8ed2d11d48084587866b8f3f
GET /s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://javhay.media
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Dec 2022 19:42:34 GMT
expires: Thu, 21 Dec 2023 19:42:34 GMT
cache-control: public, max-age=31536000
age: 466952
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://javhay.media
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Dec 2022 13:33:13 GMT
expires: Sat, 23 Dec 2023 13:33:13 GMT
cache-control: public, max-age=31536000
age: 316313
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 7f2ed0d8a18af500682ec994cd3a5e15
48032c29ccc60c09f0c003042d059e83ea493ecb
8c49d81420b293298bd75222f60fbc608c322b36944963d93b6a15b12bcb0e8b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Dec 2022 05:25:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-hw.xvideos-cdn.com/videos/thumbs169/8b/9b/11/8b9b11ac0e1c60da34013aa803801070/8b9b11ac0e1c60da34013aa803801070.21.jpg
209.197.3.84200 OK 5.0 kB URL HTTP/1.1 img-hw.xvideos-cdn.com/videos/thumbs169/8b/9b/11/8b9b11ac0e1c60da34013aa803801070/8b9b11ac0e1c60da34013aa803801070.21.jpg
IP 209.197.3.84:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash 3faf921e47610830deebd59a97a3a734
381844cc6d68202d4f475d21c440334de60dadc5
33ec3875eb4f41de65e57b793589ed56253d88401d99f6808db6b8c519123318
GET /videos/thumbs169/8b/9b/11/8b9b11ac0e1c60da34013aa803801070/8b9b11ac0e1c60da34013aa803801070.21.jpg HTTP/1.1
Host: img-hw.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 27 Dec 2022 05:25:06 GMT
Connection: Keep-Alive
ETag: "1623380754"
Cache-Control: public, max-age=5096825
Content-Length: 5008
Content-Type: image/jpeg
Last-Modified: Fri, 11 Jun 2021 03:05:54 GMT
Accept-Ranges: bytes
X-HW: 1672118706.dop066.sk1.t,1672118706.cds017.sk1.shn,1672118706.dop066.sk1.t,1672118706.cds224.sk1.c
Access-Control-Allow-Origin: *
cdn77-pic.xvideos-cdn.com/videos/thumbs169/9b/5c/a1/9b5ca1429f597a445d34819017476119/9b5ca1429f597a445d34819017476119.5.jpg
195.181.166.12200 OK 3.7 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169/9b/5c/a1/9b5ca1429f597a445d34819017476119/9b5ca1429f597a445d34819017476119.5.jpg
IP 195.181.166.12:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash 659d01b55a83ad43fbf492ab121b4060
27c0988f11113cce7b76047e99c7ed568f32158d
0a623d29cf6bb9e7b80d0e2c87d4cf13019137edd7c24652e3668845acccf524
GET /videos/thumbs169/9b/5c/a1/9b5ca1429f597a445d34819017476119/9b5ca1429f597a445d34819017476119.5.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: image/jpeg
content-length: 3681
x-frame-options: sameorigin
last-modified: Tue, 29 Mar 2022 00:52:21 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1676237601
x-77-nzt: A8O1pgqLV+r/JJwLAJySIS4m3KL/obxTAI/0Osh9SRr/zAEAAA
x-77-nzt-ray: ffffffff699d8f4eb281aa63a4fb1206
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 5487777, 760868
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169/8a/ab/fa/8aabfa4ec3fc9a603ec47672d178b32f/8aabfa4ec3fc9a603ec47672d178b32f.1.jpg
195.181.166.12200 OK 6.1 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169/8a/ab/fa/8aabfa4ec3fc9a603ec47672d178b32f/8aabfa4ec3fc9a603ec47672d178b32f.1.jpg
IP 195.181.166.12:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 208x117, components 3\012- data
Hash 9fc8c2e3e271ad3800cf7ab8945e994f
3e1b8f6d83d1973c71aca5892e82eb4e37b5f508
e4ebdccc1a00b1440dc003c14fc8abb0b5e405067202e1b30d7253501c067098
GET /videos/thumbs169/8a/ab/fa/8aabfa4ec3fc9a603ec47672d178b32f/8aabfa4ec3fc9a603ec47672d178b32f.1.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: image/jpeg
content-length: 6083
last-modified: Fri, 19 Jun 2020 20:08:46 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1672553326
x-77-nzt: A8O1pgrdL3WhisclxO3mFf9EkpcAj/Q62PtuEf9wqREA
x-77-nzt-ray: ffffffff699d8f4eb281aa6343b9ea05
x-77-cache: HIT
x-age-lb: 9933380
server: CDN77-Turbo
x-cache-lb: HIT, MISS
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169/09/f5/87/09f58784dcc11489c7d531f544bdbf66-2/09f58784dcc11489c7d531f544bdbf66.30.jpg
195.181.166.12200 OK 3.7 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169/09/f5/87/09f58784dcc11489c7d531f544bdbf66-2/09f58784dcc11489c7d531f544bdbf66.30.jpg
IP 195.181.166.12:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash 9f1310f2508be47e6d8ff7fb10c25e75
2b88474f1cc7f5738e20db47a4e5d771d3efd2c6
43e9ec546cd5d148be1663c9614b5a9dd2fce75034ff3914738e99bf22b9b054
GET /videos/thumbs169/09/f5/87/09f58784dcc11489c7d531f544bdbf66-2/09f58784dcc11489c7d531f544bdbf66.30.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: image/jpeg
content-length: 3690
x-frame-options: sameorigin
last-modified: Sat, 19 Nov 2022 17:18:16 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1679246931
x-77-nzt: A8O1pgp21+fB1GY4Fdnyb/+LazEAj/Q6yNy57f/UAwAA
x-77-nzt-ray: ffffffff699d8f4eb281aa63123bb506
x-77-cache: HIT
x-age-lb: 3238795
server: CDN77-Turbo
x-cache-lb: HIT, MISS
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2
142.250.74.35200 OK 5.5 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 5548, version 1.0\012- data
Hash cdaab83619fcacd4027a77c99dd51e69
9e6eae8554f8cc2309b2dae2d9fa217e34eed6a4
4ec57f2a80b91090971b83970230ca09ab3568c5f5b224896ca9aa6180a76aa9
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://javhay.media
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5548
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Dec 2022 20:56:07 GMT
expires: Thu, 21 Dec 2023 20:56:07 GMT
cache-control: public, max-age=31536000
age: 462539
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sobakenchmaphk.com/solid.gif?z=1885455&abvar=0
62.122.171.6200 OK 43 B URL HTTP/2 sobakenchmaphk.com/solid.gif?z=1885455&abvar=0
IP 62.122.171.6:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1885455&abvar=0 HTTP/1.1
Host: sobakenchmaphk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javhay.media
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
img-hw.xvideos-cdn.com/videos/thumbs169/02/fb/6f/02fb6f57e9b68d76d0a0af02fc4537db/02fb6f57e9b68d76d0a0af02fc4537db.27.jpg
209.197.3.84200 OK 3.7 kB URL HTTP/1.1 img-hw.xvideos-cdn.com/videos/thumbs169/02/fb/6f/02fb6f57e9b68d76d0a0af02fc4537db/02fb6f57e9b68d76d0a0af02fc4537db.27.jpg
IP 209.197.3.84:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash e4d0ac2843bee001145eba3c90572ee8
cef53ea02067b960b56c97c54b35ebcd91a401bc
12da82590b36f8bb01df483850926c5add158820cd416630650c55ec57dfb1fb
GET /videos/thumbs169/02/fb/6f/02fb6f57e9b68d76d0a0af02fc4537db/02fb6f57e9b68d76d0a0af02fc4537db.27.jpg HTTP/1.1
Host: img-hw.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 27 Dec 2022 05:25:06 GMT
Connection: Keep-Alive
ETag: "1649982078"
Cache-Control: public, max-age=4305334
Content-Length: 3744
Content-Type: image/jpeg
Last-Modified: Fri, 15 Apr 2022 00:21:18 GMT
Accept-Ranges: bytes
X-HW: 1672118706.dop066.sk1.t,1672118706.cds017.sk1.shn,1672118706.dop066.sk1.t,1672118706.cds231.sk1.c
Access-Control-Allow-Origin: *
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash ccc4948729b0d10b8d4d7fe5745180e4
95ecf5297ee888c1946da7b44c4ac097a31f16d4
f66ec5babd635ac73aa3e5634b3e7cccb3a50a89ae1235bc155e7c493fd3e983
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 27 Dec 2022 05:25:06 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 24 Dec 2022 05:29:12 GMT
Expires: Sat, 31 Dec 2022 05:29:11 GMT
Etag: "95ecf5297ee888c1946da7b44c4ac097a31f16d4"
Cache-Control: max-age=345244,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77ffa2399ee7b500-OSL
cdn77-pic.xvideos-cdn.com/videos/thumbs169/9f/af/4e/9faf4e079e73169ec0873eb19494cd3c/9faf4e079e73169ec0873eb19494cd3c.22.jpg
195.181.166.12200 OK 4.7 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169/9f/af/4e/9faf4e079e73169ec0873eb19494cd3c/9faf4e079e73169ec0873eb19494cd3c.22.jpg
IP 195.181.166.12:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash 070f750ddae56621f06774fdf1b92bdb
3f59fd3480ef2ddd8e67e6d438673b160120d6e5
0d2b03060d12585339f43b5e981a2333273e1bda9da927ef1966d9cb9c3625cc
GET /videos/thumbs169/9f/af/4e/9faf4e079e73169ec0873eb19494cd3c/9faf4e079e73169ec0873eb19494cd3c.22.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: image/jpeg
content-length: 4680
x-frame-options: sameorigin
last-modified: Fri, 04 Mar 2022 10:46:26 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1678244321
x-77-nzt: A8O1pgoGgXfvsNcAANRmOJwSXS7/w4AhAI/0Ot3zzIX/XmMeAA
x-77-nzt-ray: ffffffff699d8f4eb281aa63aa44d71a
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 2195651, 55216
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
img-hw.xvideos-cdn.com/videos/thumbs169/0e/ab/32/0eab324f69ed0c73c55d004e077f2aec/0eab324f69ed0c73c55d004e077f2aec.20.jpg
209.197.3.84200 OK 5.5 kB URL HTTP/1.1 img-hw.xvideos-cdn.com/videos/thumbs169/0e/ab/32/0eab324f69ed0c73c55d004e077f2aec/0eab324f69ed0c73c55d004e077f2aec.20.jpg
IP 209.197.3.84:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash ac59246f7df410d5eedd986eec0d1fbd
fc0c919064d49e3a42d50d8dac0bccb6c7c85851
431673c04e6198b8c4b05539acc6ef7ea754ae89a82fd8588330f0315f7498a8
GET /videos/thumbs169/0e/ab/32/0eab324f69ed0c73c55d004e077f2aec/0eab324f69ed0c73c55d004e077f2aec.20.jpg HTTP/1.1
Host: img-hw.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 27 Dec 2022 05:25:06 GMT
Connection: Keep-Alive
ETag: "1653446343"
Cache-Control: public, max-age=5077493
Content-Length: 5465
Content-Type: image/jpeg
Last-Modified: Wed, 25 May 2022 02:39:03 GMT
Accept-Ranges: bytes
X-HW: 1672118706.dop066.sk1.t,1672118706.cds017.sk1.shn,1672118706.dop066.sk1.t,1672118706.cds253.sk1.c
Access-Control-Allow-Origin: *
cdn77-pic.xvideos-cdn.com/videos/thumbs169/d7/59/bb/d759bbff1cb6075cfefa71b78ec7ed9f-2/d759bbff1cb6075cfefa71b78ec7ed9f.27.jpg
195.181.166.12200 OK 4.9 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169/d7/59/bb/d759bbff1cb6075cfefa71b78ec7ed9f-2/d759bbff1cb6075cfefa71b78ec7ed9f.27.jpg
IP 195.181.166.12:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash 101cf73b8b07aa3bc03b522884c6cef8
f7578191eda8cc5b38f32d3a93ab0d14f13b2221
d22b0b44cf69019781cb71c851e0ef14067a7030f3204065455d09e058f6b34e
GET /videos/thumbs169/d7/59/bb/d759bbff1cb6075cfefa71b78ec7ed9f-2/d759bbff1cb6075cfefa71b78ec7ed9f.27.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: image/jpeg
content-length: 4931
x-frame-options: sameorigin
last-modified: Sat, 19 Nov 2022 19:06:01 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1679257231
x-77-nzt: A8O1pgppRDqhnJIhJ/Z6sO82NjEAj/Q6yHgaMv/tEAAA
x-77-nzt-ray: ffffffff699d8f4eb281aa637acbc71a
x-77-cache: HIT
x-age-lb: 3225142
server: CDN77-Turbo
x-cache-lb: HIT, MISS
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169/f7/7c/a0/f77ca0adc5ccc68ea9200e1d813dfbb9/f77ca0adc5ccc68ea9200e1d813dfbb9.12.jpg
195.181.166.12200 OK 4.9 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169/f7/7c/a0/f77ca0adc5ccc68ea9200e1d813dfbb9/f77ca0adc5ccc68ea9200e1d813dfbb9.12.jpg
IP 195.181.166.12:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash c00659d2ea192cb0cee6a786aef63625
d890f32ff64863ee5132788220092805b9c1e00e
eb348256dc3484e6bf1638f07cfeceda5290839b396388cfd07c40b2f75575c8
GET /videos/thumbs169/f7/7c/a0/f77ca0adc5ccc68ea9200e1d813dfbb9/f77ca0adc5ccc68ea9200e1d813dfbb9.12.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: image/jpeg
content-length: 4940
x-frame-options: sameorigin
last-modified: Sun, 27 Dec 2020 06:18:53 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1679452452
x-77-nzt: A8O1pgpCdtjBnJIhLve8Vv+OTC4Aj/Q63bXtyP/pwAAA
x-77-nzt-ray: ffffffff699d8f4eb281aa63c5b5ee1a
x-77-cache: HIT
x-age-lb: 3034254
server: CDN77-Turbo
x-cache-lb: HIT, MISS
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169/41/2b/29/412b29966acf31610091b06f515e596c/412b29966acf31610091b06f515e596c.22.jpg
195.181.166.12200 OK 4.7 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169/41/2b/29/412b29966acf31610091b06f515e596c/412b29966acf31610091b06f515e596c.22.jpg
IP 195.181.166.12:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 208x117, components 3\012- data
Hash 57ea0259c962fa3cd50d7344cd7db1f8
ca0c23a06a996d21eee6e87417d8e6089c3de330
1f50c9e1557bb2452855f8e19c98282fad7de7975c4fbdde0ab19bd76ded1e3e
GET /videos/thumbs169/41/2b/29/412b29966acf31610091b06f515e596c/412b29966acf31610091b06f515e596c.22.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: image/jpeg
content-length: 4661
last-modified: Sat, 20 Jun 2020 05:23:33 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1678602561
x-77-nzt: A8O1pgqwV/Gh1GY4DQkWwP9xRDsAj/Q62M25wf8fS4kA
x-77-nzt-ray: ffffffff699d8f4eb281aa6345c2371b
x-77-cache: HIT
x-age-lb: 3884145
server: CDN77-Turbo
x-cache-lb: HIT, MISS
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
img-hw.xvideos-cdn.com/videos/thumbs169/da/79/cc/da79cc06dc4ecef297ed712ee6dab1a1/da79cc06dc4ecef297ed712ee6dab1a1.26.jpg
209.197.3.84200 OK 3.5 kB URL HTTP/1.1 img-hw.xvideos-cdn.com/videos/thumbs169/da/79/cc/da79cc06dc4ecef297ed712ee6dab1a1/da79cc06dc4ecef297ed712ee6dab1a1.26.jpg
IP 209.197.3.84:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash 04a171201420f33cfb5f7e119403500e
cb365a5ffaeaf420b759d7e7c2b8972a0a42b144
da7d9d443197a7da4a9c1213a2324baeaa959d2b5eb8b11dffbd0e0c019322ef
GET /videos/thumbs169/da/79/cc/da79cc06dc4ecef297ed712ee6dab1a1/da79cc06dc4ecef297ed712ee6dab1a1.26.jpg HTTP/1.1
Host: img-hw.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 27 Dec 2022 05:25:06 GMT
Connection: Keep-Alive
ETag: "1616520673"
Cache-Control: public, max-age=1749148
Content-Length: 3492
Content-Type: image/jpeg
Last-Modified: Tue, 23 Mar 2021 17:31:13 GMT
Accept-Ranges: bytes
X-HW: 1672118706.dop214.sk1.shc,1672118706.dop214.sk1.t,1672118706.cds221.sk1.c
Access-Control-Allow-Origin: *
sobakenchmaphk.com/get/1885455?zoneid=1885455&jp=_cl89i00ki455kq2gqhvb0b&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&sp=0&cid=1516958854842980
62.122.171.6200 OK 1.6 kB URL HTTP/2 sobakenchmaphk.com/get/1885455?zoneid=1885455&jp=_cl89i00ki455kq2gqhvb0b&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&sp=0&cid=1516958854842980
IP 62.122.171.6:0
Hash 88b1554f3062d36aae8649b3f0343c66
2bc10d403285f383e97220751ec7c5facc93e7fa
ab144c94ee62071f5c17e8a8dec5c2c046bb6dda7c85da0cc15a8ed7b5ec159c
GET /get/1885455?zoneid=1885455&jp=_cl89i00ki455kq2gqhvb0b&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&sp=0&cid=1516958854842980 HTTP/1.1
Host: sobakenchmaphk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2212270025cec4d70da278496e9f921c3005; Path=/; Expires=Wed, 27 Dec 2023 05:25:06 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169/6d/08/e4/6d08e431f3fad78bf2515b9d70161df0/6d08e431f3fad78bf2515b9d70161df0.13.jpg
104.19.131.92200 OK 4.1 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169/6d/08/e4/6d08e431f3fad78bf2515b9d70161df0/6d08e431f3fad78bf2515b9d70161df0.13.jpg
IP 104.19.131.92:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash 7b8c88f2a0682e991f979a4e4486a340
2caf75172c6bac2f8317e00db7af8abf6e5b56aa
210d5eb40f51fb79a795dd2e93d63b6f4f464d852831a1e9f6e714f11a1a826d
GET /videos/thumbs169/6d/08/e4/6d08e431f3fad78bf2515b9d70161df0/6d08e431f3fad78bf2515b9d70161df0.13.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: image/jpeg
content-length: 4112
cf-ray: 77ffa23bcd5bb4fd-OSL
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=10368000
expires: Wed, 26 Apr 2023 05:25:06 GMT
last-modified: Fri, 04 Mar 2022 09:57:11 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169/4c/ed/43/4ced43bc85f7800e677fca6b24dd1846/4ced43bc85f7800e677fca6b24dd1846.21.jpg
104.19.131.92200 OK 5.2 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169/4c/ed/43/4ced43bc85f7800e677fca6b24dd1846/4ced43bc85f7800e677fca6b24dd1846.21.jpg
IP 104.19.131.92:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash 48add3a6ab238adc5f1e0ec6c13f451e
dd695e07cacddb06e8502f0a5651f8281aebb905
a18179f208890bcf19c93bed7092d03ae7d0af618261819ebdc194a0b323ac57
GET /videos/thumbs169/4c/ed/43/4ced43bc85f7800e677fca6b24dd1846/4ced43bc85f7800e677fca6b24dd1846.21.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: image/jpeg
content-length: 5226
cf-ray: 77ffa23bcd5eb4fd-OSL
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=10368000
expires: Wed, 26 Apr 2023 05:25:06 GMT
last-modified: Thu, 29 Apr 2021 18:24:50 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169/bd/7d/bb/bd7dbbfbfdcbbfb31f18beee519cfeb8/bd7dbbfbfdcbbfb31f18beee519cfeb8.15.jpg
104.19.131.92200 OK 3.5 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169/bd/7d/bb/bd7dbbfbfdcbbfb31f18beee519cfeb8/bd7dbbfbfdcbbfb31f18beee519cfeb8.15.jpg
IP 104.19.131.92:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash 8a94f6fa256dcc696dc8ef3b8ef0cad3
7d4ebc6fe74d29cb0dc4e99c5a4b3db923c984f2
9573c3d16daee2115611682945d02be16bd934d7f08ad87c9acedf8aa328178d
GET /videos/thumbs169/bd/7d/bb/bd7dbbfbfdcbbfb31f18beee519cfeb8/bd7dbbfbfdcbbfb31f18beee519cfeb8.15.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: image/jpeg
content-length: 3486
cf-ray: 77ffa23bdd60b4fd-OSL
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=10368000
expires: Wed, 26 Apr 2023 05:25:06 GMT
last-modified: Tue, 08 Mar 2022 03:01:48 GMT
vary: Accept-Encoding
cf-cache-status: MISS
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
video.xembed.club/?hash=c3EwRWt1c0RDZlJIMytUc1hsRHVKM2xSYTNESVEyWVBkRGpXaHIrTUFPZ2RheHBnd0VLaVBIS0h6RS9vdnpFbWxPZkpja0tYVVJtK3FoeWtoOWI5ZU1pcXg2SnY1U1RRM3Ayc0VtdjhoYjhLdVFUMW9WRzFpL1dyeEROVzhSaHppaDUxQ2dwMEVMdEFicVhWK2lNejBBPT0=&
188.114.97.1200 OK 45 kB URL HTTP/2 video.xembed.club/?hash=c3EwRWt1c0RDZlJIMytUc1hsRHVKM2xSYTNESVEyWVBkRGpXaHIrTUFPZ2RheHBnd0VLaVBIS0h6RS9vdnpFbWxPZkpja0tYVVJtK3FoeWtoOWI5ZU1pcXg2SnY1U1RRM3Ayc0VtdjhoYjhLdVFUMW9WRzFpL1dyeEROVzhSaHppaDUxQ2dwMEVMdEFicVhWK2lNejBBPT0=&
IP 188.114.97.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1737), with CRLF, LF line terminators
Hash 4b1aa8d1fe1311b2f0da07e9cf4950ac
3af3702556bd0dd54ac52bddf280ef2752e04f41
4121414bcaf6725520c02c55ce5011cd29c7f1b212ba7864cdf6d5ffb29886e2
GET /?hash=c3EwRWt1c0RDZlJIMytUc1hsRHVKM2xSYTNESVEyWVBkRGpXaHIrTUFPZ2RheHBnd0VLaVBIS0h6RS9vdnpFbWxPZkpja0tYVVJtK3FoeWtoOWI5ZU1pcXg2SnY1U1RRM3Ayc0VtdjhoYjhLdVFUMW9WRzFpL1dyeEROVzhSaHppaDUxQ2dwMEVMdEFicVhWK2lNejBBPT0=& HTTP/1.1
Host: video.xembed.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.1.33
set-cookie: PHPSESSID=7chmorodh5tgq5agfr59kf4124; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eZIJ7GFnhT%2BmUi%2FxMo8MiSRNa5yMFY%2B9dj69TJh5eN7ROnb1zmAscZrT2cRIlAuicYKunBh0yRlzgYFU9qtTRwy7sTH4jm8sBtUdzeAfsZjncIpkFcP%2Bp5vUYX5tJhsZlukMGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77ffa23a8b1bb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169/58/28/be/5828bea7e163fc9949dab602985182a1-2/5828bea7e163fc9949dab602985182a1.15.jpg
104.19.131.92200 OK 5.3 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169/58/28/be/5828bea7e163fc9949dab602985182a1-2/5828bea7e163fc9949dab602985182a1.15.jpg
IP 104.19.131.92:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash b5cb5fdb28bfa91367a6231f7be49b67
03f862b8e132cdfdbc359a640e0b1266c3edab7f
88116faa1c91f5681dcc698c13fd82ee1f23357bbc442bcf5225ab656c975c12
GET /videos/thumbs169/58/28/be/5828bea7e163fc9949dab602985182a1-2/5828bea7e163fc9949dab602985182a1.15.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: image/jpeg
content-length: 5298
cf-ray: 77ffa23bdd5fb4fd-OSL
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=10368000
expires: Wed, 26 Apr 2023 05:25:06 GMT
last-modified: Sat, 19 Nov 2022 12:42:01 GMT
vary: Accept-Encoding
cf-cache-status: MISS
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169/33/bb/f3/33bbf3c67c9e7e420b8aee1d6cffd141-2/33bbf3c67c9e7e420b8aee1d6cffd141.27.jpg
104.19.131.92200 OK 5.3 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169/33/bb/f3/33bbf3c67c9e7e420b8aee1d6cffd141-2/33bbf3c67c9e7e420b8aee1d6cffd141.27.jpg
IP 104.19.131.92:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash f6e5f52aaec2c2178bef64ec220023ab
405af5ff8b67684c50fd0d1ae9cc3f962c91070e
6af0fedc18c3a74046a5b67c9b10d320a43c78f52ddee3b2c4fa13386a153cd7
GET /videos/thumbs169/33/bb/f3/33bbf3c67c9e7e420b8aee1d6cffd141-2/33bbf3c67c9e7e420b8aee1d6cffd141.27.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: image/jpeg
content-length: 5292
cf-ray: 77ffa23c9dc5b4fd-OSL
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=10368000
expires: Wed, 26 Apr 2023 05:25:06 GMT
last-modified: Sun, 27 Nov 2022 21:46:00 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169/d5/cc/05/d5cc053c4e51c805ae04e64e4afc02b5-1/d5cc053c4e51c805ae04e64e4afc02b5.2.jpg
104.19.131.92200 OK 7.6 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169/d5/cc/05/d5cc053c4e51c805ae04e64e4afc02b5-1/d5cc053c4e51c805ae04e64e4afc02b5.2.jpg
IP 104.19.131.92:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash 2b7a01298de0322b3a6648e7f03f3918
55ed3e0759500aac4c8c2293b5fa886cca8f95b2
c394ac843875e08edef9421c584d8d98c05d7deb6e36a27c31f0a207f9a7b8ab
GET /videos/thumbs169/d5/cc/05/d5cc053c4e51c805ae04e64e4afc02b5-1/d5cc053c4e51c805ae04e64e4afc02b5.2.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: image/jpeg
content-length: 7618
cf-ray: 77ffa23c9dc6b4fd-OSL
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=10368000
expires: Wed, 26 Apr 2023 05:25:06 GMT
last-modified: Mon, 09 May 2022 15:11:52 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
limurol.com/ssp/req/1885455/?pb=2eec60b439558b9b435c7f2ec7210a781672125906&psp=R4zt2kXHhpYPagMY6w0jnGWwRQy8HDLvQ_FxINEqbyONdzx3HFTwPR-9eNVUYBQt6hnTyRlUfpXDP9O36VQvuLlJux0s7DgXAwffuv7EOsfTJlRn0sQGH9qLpx0ZMCyS0Ahc_N6p5oKYlEx5hjDn3ZK9mQCWKOq9NHG4lNjRGZcKBiFPhuz2TBV6QSC6hvMmRQeQGLmrE3yjFTAL7DwlHMEYPag8GchfaTh_8OAxNhf0Ys9YL-tqfMuwbJNEytD0A9FmESlfM2Puq5tHXcq1k7C9cM0fEVWFgkWmSuu_eoeeoqZSjKxt-LfF5-yoqgyq8TWANDXFlYf75Mm9bPuZeN66oBnYYnXU7oVACjFrH64dnPY1U7MjK_kvIVDsg0rqUv9ssipoC8CD2rjryJAjjemxKC7ROrwGsHhtOwF1ZWP6UsPJ7jhPVuGqxoGpuIMzelEAV9X23l3tqYiUO8gfdsXvahrgrfIJlLp8lLEHcPfZQpfs_8lVZWopauhkzsGTWy5fvo-3zsuCQ66Ea-8Lf0NuTQ1u62zz_7kcvn1oJhNYXpyjMDKY3HOmKlJebND5Wkz4pTSQAT_Q-5C0ycwiwjXXIwBG_xOIOkyhgFO8ogTPZGJLlksfPrKzBQkdlwZnjRG8lW89Kz7hRp1KRAK8uP-RqzX02W7TxOaCVf5wvyoR5hHsY-IGlQp-zi75jRmMkpz9muY3C7eRIQZSOv9XnA5mbbJUSudA-B0Mb75AE2e1AncpaizQnFS3yhDBJRIocSMKSOxUX8hRY-8KbGZBGdArYog9oGjB4_gyl7jSLVP85dP-wr95BqI8KilkFHsw40AhvYTz3WRmlTf40YawHDMlUh8=&cb=_clnxh9rncobscjo1fnqpwz&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
62.122.171.6200 OK 32 kB URL HTTP/2 limurol.com/ssp/req/1885455/?pb=2eec60b439558b9b435c7f2ec7210a781672125906&psp=R4zt2kXHhpYPagMY6w0jnGWwRQy8HDLvQ_FxINEqbyONdzx3HFTwPR-9eNVUYBQt6hnTyRlUfpXDP9O36VQvuLlJux0s7DgXAwffuv7EOsfTJlRn0sQGH9qLpx0ZMCyS0Ahc_N6p5oKYlEx5hjDn3ZK9mQCWKOq9NHG4lNjRGZcKBiFPhuz2TBV6QSC6hvMmRQeQGLmrE3yjFTAL7DwlHMEYPag8GchfaTh_8OAxNhf0Ys9YL-tqfMuwbJNEytD0A9FmESlfM2Puq5tHXcq1k7C9cM0fEVWFgkWmSuu_eoeeoqZSjKxt-LfF5-yoqgyq8TWANDXFlYf75Mm9bPuZeN66oBnYYnXU7oVACjFrH64dnPY1U7MjK_kvIVDsg0rqUv9ssipoC8CD2rjryJAjjemxKC7ROrwGsHhtOwF1ZWP6UsPJ7jhPVuGqxoGpuIMzelEAV9X23l3tqYiUO8gfdsXvahrgrfIJlLp8lLEHcPfZQpfs_8lVZWopauhkzsGTWy5fvo-3zsuCQ66Ea-8Lf0NuTQ1u62zz_7kcvn1oJhNYXpyjMDKY3HOmKlJebND5Wkz4pTSQAT_Q-5C0ycwiwjXXIwBG_xOIOkyhgFO8ogTPZGJLlksfPrKzBQkdlwZnjRG8lW89Kz7hRp1KRAK8uP-RqzX02W7TxOaCVf5wvyoR5hHsY-IGlQp-zi75jRmMkpz9muY3C7eRIQZSOv9XnA5mbbJUSudA-B0Mb75AE2e1AncpaizQnFS3yhDBJRIocSMKSOxUX8hRY-8KbGZBGdArYog9oGjB4_gyl7jSLVP85dP-wr95BqI8KilkFHsw40AhvYTz3WRmlTf40YawHDMlUh8=&cb=_clnxh9rncobscjo1fnqpwz&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
IP 62.122.171.6:0
Hash 4ae34c72051495ba733915d6898582d3
1d75a535003eff7d0b249687c376f12aabcc26b2
7cfd28fa6f1b06f01653ab05e771892c03a1df0ae37833893dd0dc32db7c82ba
Analyzer Verdict Alert quad9 Sinkholed
GET /ssp/req/1885455/?pb=2eec60b439558b9b435c7f2ec7210a781672125906&psp=R4zt2kXHhpYPagMY6w0jnGWwRQy8HDLvQ_FxINEqbyONdzx3HFTwPR-9eNVUYBQt6hnTyRlUfpXDP9O36VQvuLlJux0s7DgXAwffuv7EOsfTJlRn0sQGH9qLpx0ZMCyS0Ahc_N6p5oKYlEx5hjDn3ZK9mQCWKOq9NHG4lNjRGZcKBiFPhuz2TBV6QSC6hvMmRQeQGLmrE3yjFTAL7DwlHMEYPag8GchfaTh_8OAxNhf0Ys9YL-tqfMuwbJNEytD0A9FmESlfM2Puq5tHXcq1k7C9cM0fEVWFgkWmSuu_eoeeoqZSjKxt-LfF5-yoqgyq8TWANDXFlYf75Mm9bPuZeN66oBnYYnXU7oVACjFrH64dnPY1U7MjK_kvIVDsg0rqUv9ssipoC8CD2rjryJAjjemxKC7ROrwGsHhtOwF1ZWP6UsPJ7jhPVuGqxoGpuIMzelEAV9X23l3tqYiUO8gfdsXvahrgrfIJlLp8lLEHcPfZQpfs_8lVZWopauhkzsGTWy5fvo-3zsuCQ66Ea-8Lf0NuTQ1u62zz_7kcvn1oJhNYXpyjMDKY3HOmKlJebND5Wkz4pTSQAT_Q-5C0ycwiwjXXIwBG_xOIOkyhgFO8ogTPZGJLlksfPrKzBQkdlwZnjRG8lW89Kz7hRp1KRAK8uP-RqzX02W7TxOaCVf5wvyoR5hHsY-IGlQp-zi75jRmMkpz9muY3C7eRIQZSOv9XnA5mbbJUSudA-B0Mb75AE2e1AncpaizQnFS3yhDBJRIocSMKSOxUX8hRY-8KbGZBGdArYog9oGjB4_gyl7jSLVP85dP-wr95BqI8KilkFHsw40AhvYTz3WRmlTf40YawHDMlUh8=&cb=_clnxh9rncobscjo1fnqpwz&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24 HTTP/1.1
Host: limurol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: text/javascript
content-length: 7
x-route-id: ssp.bet
set-cookie: UID=2212270025231f0a6668ee46058fdd4017f4; Path=/; Expires=Wed, 27 Dec 2023 05:25:06 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
limurol.com/ssp/req/1885455/?pb=2eec60b439558b9b435c7f2ec7210a781672125906&psp=R4zt2kXHhpYPagMY6w0jnGWwRQy8HDLvQ_FxINEqbyONdzx3HFTwPR-9eNVUYBQt6hnTyRlUfpXDP9O36VQvuLlJux0s7DgXAwffuv7EOsfTJlRn0sQGH9qLpx0ZMCyS0Ahc_N6p5oKYlEx5hjDn3ZK9mQCWKOq9NHG4lNjRGZcKBiFPhuz2TBV6QSC6hvMmRQeQGLmrE3yjFTAL7DwlHMEYPag8GchfaTh_8OAxNhf0Ys9YL-tqfMuwbJNEytD0A9FmESlfM2Puq5tHXcq1k7C9cM0fEVWFgkWmSuu_eoeeoqZSjKxt-LfF5-yoqgyq8TWANDXFlYf75Mm9bPuZeN66oBnYYnXU7oVACjFrH64dnPY1U7MjK_kvIVDsg0rqUv9ssipoC8CD2rjryJAjjemxKC7ROrwGsHhtOwF1ZWP6UsPJ7jhPVuGqxoGpuIMzelEAV9X23l3tqYiUO8gfdsXvahrgrfIJlLp8lLEHcPfZQpfs_8lVZWopauhkzsGTWy5fvo-3zsuCQ66Ea-8Lf0NuTQ1u62zz_7kcvn1oJhNYXpyjMDKY3HOmKlJebND5Wkz4pTSQAT_Q-5C0ycwiwjXXIwBG_xOIOkyhgFO8ogTPZGJLlksfPrKzBQkdlwZnjRG8lW89Kz7hRp1KRAK8uP-RqzX02W7TxOaCVf5wvyoR5hHsY-IGlQp-zi75jRmMkpz9muY3C7eRIQZSOv9XnA5mbbJUSudA-B0Mb75AE2e1AncpaizQnFS3yhDBJRIocSMKSOxUX8hRY-8KbGZBGdArYog9oGjB4_gyl7jSLVP85dP-wr95BqI8KilkFHsw40AhvYTz3WRmlTf40YawHDMlUh8=&cb=_clnxh9rncobscjo1fnqpwz&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
62.122.171.6200 OK 7 B URL HTTP/2 limurol.com/ssp/req/1885455/?pb=2eec60b439558b9b435c7f2ec7210a781672125906&psp=R4zt2kXHhpYPagMY6w0jnGWwRQy8HDLvQ_FxINEqbyONdzx3HFTwPR-9eNVUYBQt6hnTyRlUfpXDP9O36VQvuLlJux0s7DgXAwffuv7EOsfTJlRn0sQGH9qLpx0ZMCyS0Ahc_N6p5oKYlEx5hjDn3ZK9mQCWKOq9NHG4lNjRGZcKBiFPhuz2TBV6QSC6hvMmRQeQGLmrE3yjFTAL7DwlHMEYPag8GchfaTh_8OAxNhf0Ys9YL-tqfMuwbJNEytD0A9FmESlfM2Puq5tHXcq1k7C9cM0fEVWFgkWmSuu_eoeeoqZSjKxt-LfF5-yoqgyq8TWANDXFlYf75Mm9bPuZeN66oBnYYnXU7oVACjFrH64dnPY1U7MjK_kvIVDsg0rqUv9ssipoC8CD2rjryJAjjemxKC7ROrwGsHhtOwF1ZWP6UsPJ7jhPVuGqxoGpuIMzelEAV9X23l3tqYiUO8gfdsXvahrgrfIJlLp8lLEHcPfZQpfs_8lVZWopauhkzsGTWy5fvo-3zsuCQ66Ea-8Lf0NuTQ1u62zz_7kcvn1oJhNYXpyjMDKY3HOmKlJebND5Wkz4pTSQAT_Q-5C0ycwiwjXXIwBG_xOIOkyhgFO8ogTPZGJLlksfPrKzBQkdlwZnjRG8lW89Kz7hRp1KRAK8uP-RqzX02W7TxOaCVf5wvyoR5hHsY-IGlQp-zi75jRmMkpz9muY3C7eRIQZSOv9XnA5mbbJUSudA-B0Mb75AE2e1AncpaizQnFS3yhDBJRIocSMKSOxUX8hRY-8KbGZBGdArYog9oGjB4_gyl7jSLVP85dP-wr95BqI8KilkFHsw40AhvYTz3WRmlTf40YawHDMlUh8=&cb=_clnxh9rncobscjo1fnqpwz&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
IP 62.122.171.6:0
File type ASCII text, with no line terminators
Hash a97eb6fbe6f13b601d5d48c0eba8baae
736efb938caf3d0edec406932ada889f1a4f2268
a04bf061f53e0011fd2f43bdf081526344f003c50146c88c42c2d95ef22c1821
Analyzer Verdict Alert quad9 Sinkholed
GET /ssp/req/1885455/?pb=2eec60b439558b9b435c7f2ec7210a781672125906&psp=R4zt2kXHhpYPagMY6w0jnGWwRQy8HDLvQ_FxINEqbyONdzx3HFTwPR-9eNVUYBQt6hnTyRlUfpXDP9O36VQvuLlJux0s7DgXAwffuv7EOsfTJlRn0sQGH9qLpx0ZMCyS0Ahc_N6p5oKYlEx5hjDn3ZK9mQCWKOq9NHG4lNjRGZcKBiFPhuz2TBV6QSC6hvMmRQeQGLmrE3yjFTAL7DwlHMEYPag8GchfaTh_8OAxNhf0Ys9YL-tqfMuwbJNEytD0A9FmESlfM2Puq5tHXcq1k7C9cM0fEVWFgkWmSuu_eoeeoqZSjKxt-LfF5-yoqgyq8TWANDXFlYf75Mm9bPuZeN66oBnYYnXU7oVACjFrH64dnPY1U7MjK_kvIVDsg0rqUv9ssipoC8CD2rjryJAjjemxKC7ROrwGsHhtOwF1ZWP6UsPJ7jhPVuGqxoGpuIMzelEAV9X23l3tqYiUO8gfdsXvahrgrfIJlLp8lLEHcPfZQpfs_8lVZWopauhkzsGTWy5fvo-3zsuCQ66Ea-8Lf0NuTQ1u62zz_7kcvn1oJhNYXpyjMDKY3HOmKlJebND5Wkz4pTSQAT_Q-5C0ycwiwjXXIwBG_xOIOkyhgFO8ogTPZGJLlksfPrKzBQkdlwZnjRG8lW89Kz7hRp1KRAK8uP-RqzX02W7TxOaCVf5wvyoR5hHsY-IGlQp-zi75jRmMkpz9muY3C7eRIQZSOv9XnA5mbbJUSudA-B0Mb75AE2e1AncpaizQnFS3yhDBJRIocSMKSOxUX8hRY-8KbGZBGdArYog9oGjB4_gyl7jSLVP85dP-wr95BqI8KilkFHsw40AhvYTz3WRmlTf40YawHDMlUh8=&cb=_clnxh9rncobscjo1fnqpwz&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24 HTTP/1.1
Host: limurol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: text/javascript
content-length: 7
x-route-id: ssp.bet
set-cookie: UID=2212270025d46bfeec17674d32939ef5c5c4; Path=/; Expires=Wed, 27 Dec 2023 05:25:06 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
widgets.amung.us/classic/03/327.png
104.22.75.171200 OK 1.6 kB URL HTTP/2 widgets.amung.us/classic/03/327.png
IP 104.22.75.171:0
File type PNG image data, 81 x 29, 8-bit colormap, non-interlaced\012- data
Hash 0df20c75c078a80b81281f6be7d68342
2610286eae75f4726727b894e2ad3aa5b86edc49
0b8fa3107371c54f9e81e465847158504acf2dbc302f974ef37e409607d3f8ef
GET /classic/03/327.png HTTP/1.1
Host: widgets.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javhay.media/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: image/png
content-length: 1567
last-modified: Sun, 13 Jun 2010 09:03:09 GMT
etag: "4c149ecd-61f"
expires: Sat, 17 Dec 2022 19:50:24 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
cf-cache-status: HIT
age: 898482
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77ffa23d68050a3b-ARN
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 2.2 kB IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash edf46dd9db1b7b04ae1f4f2c211957da
229f596a77a50b788ebdda4c47331f8eb20c9c43
3c1e4314d27c1efc0917555b21964918bf660072593873d4d5ef779031929b39
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1CE1CA2A9D6783FA668B57C8764E8C3A17FDE26812161AF8CE8096B3691B9279"
Last-Modified: Sun, 25 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2422
Expires: Tue, 27 Dec 2022 06:05:29 GMT
Date: Tue, 27 Dec 2022 05:25:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5b2790419bb1f19fd29300d548278b98
64671f1c88a1271e9bcda28ac13a01e330a2a07e
1ce1ca2a9d6783fa668b57c8764e8c3a17fde26812161af8ce8096b3691b9279
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1CE1CA2A9D6783FA668B57C8764E8C3A17FDE26812161AF8CE8096B3691B9279"
Last-Modified: Sun, 25 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2422
Expires: Tue, 27 Dec 2022 06:05:29 GMT
Date: Tue, 27 Dec 2022 05:25:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5b2790419bb1f19fd29300d548278b98
64671f1c88a1271e9bcda28ac13a01e330a2a07e
1ce1ca2a9d6783fa668b57c8764e8c3a17fde26812161af8ce8096b3691b9279
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1CE1CA2A9D6783FA668B57C8764E8C3A17FDE26812161AF8CE8096B3691B9279"
Last-Modified: Sun, 25 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2422
Expires: Tue, 27 Dec 2022 06:05:29 GMT
Date: Tue, 27 Dec 2022 05:25:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5b2790419bb1f19fd29300d548278b98
64671f1c88a1271e9bcda28ac13a01e330a2a07e
1ce1ca2a9d6783fa668b57c8764e8c3a17fde26812161af8ce8096b3691b9279
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1CE1CA2A9D6783FA668B57C8764E8C3A17FDE26812161AF8CE8096B3691B9279"
Last-Modified: Sun, 25 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2422
Expires: Tue, 27 Dec 2022 06:05:29 GMT
Date: Tue, 27 Dec 2022 05:25:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5b2790419bb1f19fd29300d548278b98
64671f1c88a1271e9bcda28ac13a01e330a2a07e
1ce1ca2a9d6783fa668b57c8764e8c3a17fde26812161af8ce8096b3691b9279
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1CE1CA2A9D6783FA668B57C8764E8C3A17FDE26812161AF8CE8096B3691B9279"
Last-Modified: Sun, 25 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2422
Expires: Tue, 27 Dec 2022 06:05:29 GMT
Date: Tue, 27 Dec 2022 05:25:07 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F973fc216-fba1-40f7-8d35-778b3fc0ee1c.jpeg
34.120.237.76200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F973fc216-fba1-40f7-8d35-778b3fc0ee1c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e712da258f280eeb9ce0a7fa97aff63b
fa3147a3111bc132ce389a780504e3626b4be0f0
cd7ff9d40428664eaded34390a3f17d13230f683c6cec5b0604d62b3461aa47c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F973fc216-fba1-40f7-8d35-778b3fc0ee1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6318
x-amzn-requestid: 7e5aae2f-c5fd-4a8f-b9a6-557a68e36b68
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: drEBqFL9oAMFhhQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a78070-1aac4a0d0b4042c22d24baa4;Sampled=0
x-amzn-remapped-date: Sat, 24 Dec 2022 22:42:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xpcD8K0u1A6kpsPguyFZuEZh7Bu8rgyO4PQUAXtlW7VFZDxZrPhiJg==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Dec 2022 08:02:15 GMT
age: 76972
etag: "fa3147a3111bc132ce389a780504e3626b4be0f0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1983375a-46e7-4d3c-b100-9baafabc9959.jpeg
34.120.237.76200 OK 24 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1983375a-46e7-4d3c-b100-9baafabc9959.jpeg
IP 34.120.237.76:0
Hash 92856df14c096712693b701df212c0a1
43cef887416d9ac01422b6374f00466c4a4ac36f
ecb515b2cd5d21f4b0feb8f7010cc2e879f569b14f191b5b5f19797424fd6024
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1983375a-46e7-4d3c-b100-9baafabc9959.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5961
x-amzn-requestid: be6c3f09-60b7-42e3-bea3-2addcac0faca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: drrFcHhQIAMFzBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a7beef-457bd6e7433432ff095b93a4;Sampled=0
x-amzn-remapped-date: Sun, 25 Dec 2022 03:09:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OV32GcfhBguZJ44b3ZgAGvdRNoPxw2keMAWiIRVI6D9BzJKyXLW8ag==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Dec 2022 05:06:03 GMT
age: 1144
etag: "48251361ab12813116d9aba69bb646bf11e54b76"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9658bc08-5e7a-4e2a-84f5-0d9e42e3b77c.jpeg
34.120.237.76200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9658bc08-5e7a-4e2a-84f5-0d9e42e3b77c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6fae1d3c96b2fb2de464bfa2ecac255e
24fd29d292ea53fb909dfa1829a0010b75de2f01
b4a82374d8ab68ae01bc170f8cd3159d0c23ee62c516c317a889ed0c0e575638
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9658bc08-5e7a-4e2a-84f5-0d9e42e3b77c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7289
x-amzn-requestid: c374bc19-82dd-4692-aaf8-613fb4ba62e7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: do608EYMoAMF1qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a6a4ec-23632b8f1341ef9f2d82f5e4;Sampled=0
x-amzn-remapped-date: Sat, 24 Dec 2022 07:06:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aRy2kjmhNnqJuyHnuzvt7mdzN1Nj9xDIVPUB5FsqJ4QxTfN-egk7pQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Dec 2022 07:30:24 GMT
age: 78883
etag: "24fd29d292ea53fb909dfa1829a0010b75de2f01"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F305f952f-68d1-4090-b1d7-04817f0a2ab7.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F305f952f-68d1-4090-b1d7-04817f0a2ab7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash be693dc109dd4beeee6f7f3ae2061dae
349168c24483cf12e3c10e176643b5f02316cbf4
2e4cf6b6d7f4e75d4dfd631a76a921734f3824563f039a6da20826d0bb3afc0d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F305f952f-68d1-4090-b1d7-04817f0a2ab7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10281
x-amzn-requestid: 6f952ba1-d992-4521-83f7-ce18a4b75798
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dxfYMFdtIAMFwyA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63aa129a-5b1ad9041a52fc8f049d37eb;Sampled=0
x-amzn-remapped-date: Mon, 26 Dec 2022 21:31:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: H3u62So8Z-Pe1gQiIpOjTUEvozSDuV3d2wZMKlZMDioFrtIwYjrV5Q==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Dec 2022 21:44:56 GMT
age: 27611
etag: "349168c24483cf12e3c10e176643b5f02316cbf4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F303678dc-bd95-4d91-9245-9a823889b144.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F303678dc-bd95-4d91-9245-9a823889b144.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ef4da8e896dc66221b42b1ad2d27362d
ee833149ae2e7e3f263d501f88e8d2ee440ccc14
603915645628c23fc3b29eb1eed16b3cc2c8fc1b9954176f2527ccf7e2f3a07e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F303678dc-bd95-4d91-9245-9a823889b144.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13049
x-amzn-requestid: 45432186-7ea5-4826-8945-29aa4da0770c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dx7BvH1IIAMFZdA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63aa3ed7-2c49291a56867ec902ad573d;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 00:39:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VZFnby5iQgyAmqiWMC06NhPmgdZU78jzJPeoC8X_Wbp2zHZJNsdSfg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Dec 2022 00:42:02 GMT
age: 16985
etag: "ee833149ae2e7e3f263d501f88e8d2ee440ccc14"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f2714bb-b993-4a59-8060-2731a83cad48.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f2714bb-b993-4a59-8060-2731a83cad48.jpeg
IP 34.120.237.76:0
Hash d92d9c9d41b184d29a3c9645f765499e
0bd06f085ad1a33398b2d2a92f0daa29c6ef97df
446ed78a415a7a18c9a9cadafc1d3f1fe247c04d8cdfdedb6043693b294781ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f2714bb-b993-4a59-8060-2731a83cad48.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9772
x-amzn-requestid: 92ffab03-243e-432f-bbeb-be90fa5e0ee6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dxfYDFvfIAMFajA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63aa1299-7cb9a9b729db72b7550fcf7c;Sampled=0
x-amzn-remapped-date: Mon, 26 Dec 2022 21:31:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MogTHBdmwt6knnv1C_t_LNy98cz8k61YRJqfbHrT8jNGXcj8VQCdYg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Dec 2022 21:44:56 GMT
age: 27611
etag: "ad4906adb14904182746eac5935433fba1c7783c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169/4e/36/04/4e360430c9fdc36d9e6123b052e082e6/4e360430c9fdc36d9e6123b052e082e6.9.jpg
195.181.166.12200 OK 2.8 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169/4e/36/04/4e360430c9fdc36d9e6123b052e082e6/4e360430c9fdc36d9e6123b052e082e6.9.jpg
IP 195.181.166.12:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash 1bd6c7e8b3e6e9ac1e85302d0355d94a
f962cfa800fa85ab23b19b47ff649f9397a29e5b
6c892118ecffa81f77396751adcccfec475793c7d39ec7c881c743543f3d113b
GET /videos/thumbs169/4e/36/04/4e360430c9fdc36d9e6123b052e082e6/4e360430c9fdc36d9e6123b052e082e6.9.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:07 GMT
content-type: image/jpeg
content-length: 2805
last-modified: Fri, 12 Mar 2021 12:57:58 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1677845388
x-77-nzt: A8O1pgrS7vnvZAMCANRmOBHTo17vw85EAI/0Ot0jDlP/aWgAAA
x-77-nzt-ray: ffffffff699d8f4eb381aa6321373733
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 4509379, 131940
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169/51/ba/04/51ba046e5cffad481b40d27fdb08999f-2/51ba046e5cffad481b40d27fdb08999f.15.jpg
195.181.166.12200 OK 4.9 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169/51/ba/04/51ba046e5cffad481b40d27fdb08999f-2/51ba046e5cffad481b40d27fdb08999f.15.jpg
IP 195.181.166.12:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash 875721addf9ab56b7c1bb72dac2fcebc
9999ed02de81d01266e5466d264f8a82d0c29d35
500906436bb5eafd77b00511597582d68b4c597ce344cea9f0a27e8249174271
GET /videos/thumbs169/51/ba/04/51ba046e5cffad481b40d27fdb08999f-2/51ba046e5cffad481b40d27fdb08999f.15.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:07 GMT
content-type: image/jpeg
content-length: 4924
x-frame-options: sameorigin
last-modified: Sun, 20 Nov 2022 13:32:21 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1680333628
x-77-nzt: A8O1pgqKvGX/rewAAJySISN3JFD/K20fAI/0Osiv9e//n4AAAA
x-77-nzt-ray: ffffffff699d8f4eb381aa633f957a33
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 2059563, 60589
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
img-hw.xvideos-cdn.com/videos/thumbs169/64/2f/ef/642fef9b6be570d0a6ba5d956cab7e8a/642fef9b6be570d0a6ba5d956cab7e8a.27.jpg
209.197.3.84200 OK 4.4 kB URL HTTP/1.1 img-hw.xvideos-cdn.com/videos/thumbs169/64/2f/ef/642fef9b6be570d0a6ba5d956cab7e8a/642fef9b6be570d0a6ba5d956cab7e8a.27.jpg
IP 209.197.3.84:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash f61da3cf108732c02098058eccf78696
ef42ffbcd15d8dbacb353e1bb8ecc0be0f16dee4
69d222fe2d89ee4d8a2adaf2f94e059995556d9295ac9c9bc2d500919bf28806
GET /videos/thumbs169/64/2f/ef/642fef9b6be570d0a6ba5d956cab7e8a/642fef9b6be570d0a6ba5d956cab7e8a.27.jpg HTTP/1.1
Host: img-hw.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 27 Dec 2022 05:25:07 GMT
Connection: Keep-Alive
ETag: "1617526848"
Cache-Control: public, max-age=578915
Content-Length: 4377
Content-Type: image/jpeg
Last-Modified: Sun, 04 Apr 2021 09:00:48 GMT
Accept-Ranges: bytes
X-HW: 1672118706.dop066.sk1.t,1672118706.cds017.sk1.shn,1672118707.dop066.sk1.t,1672118707.cds020.sk1.c
Access-Control-Allow-Origin: *
img-cf.xvideos-cdn.com/videos/thumbs169/6b/60/28/6b6028847a2b595145ebaa647b5cc94a-2/6b6028847a2b595145ebaa647b5cc94a.12.jpg
104.19.131.92200 OK 5.2 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169/6b/60/28/6b6028847a2b595145ebaa647b5cc94a-2/6b6028847a2b595145ebaa647b5cc94a.12.jpg
IP 104.19.131.92:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash ea4b49d0dcf316cf7a7f3ca36e82b801
f5fced6458710242f5e27a74289b9dca05b31331
4dcbd3931f05d5e19b88c98e5d89313e7658fdf1dfa735d9102c3adfa780ae29
GET /videos/thumbs169/6b/60/28/6b6028847a2b595145ebaa647b5cc94a-2/6b6028847a2b595145ebaa647b5cc94a.12.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:07 GMT
content-type: image/jpeg
content-length: 5178
cf-ray: 77ffa2442a40b4fd-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 19205
cache-control: public, max-age=10368000
expires: Wed, 26 Apr 2023 05:25:07 GMT
last-modified: Sat, 12 Nov 2022 02:43:52 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169/81/fb/82/81fb827f915baeed94919e52f9ce9fed/81fb827f915baeed94919e52f9ce9fed.28.jpg
195.181.166.12200 OK 4.0 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169/81/fb/82/81fb827f915baeed94919e52f9ce9fed/81fb827f915baeed94919e52f9ce9fed.28.jpg
IP 195.181.166.12:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash 462aaf13b99e7335f3f6ee2cfcc00421
f6bc291569ea158be25621b44a1237a6ae5399ee
b3bcebd80b08b874e452b1adf0161895879a70d9972cd0554ed2cd6b2559bf57
GET /videos/thumbs169/81/fb/82/81fb827f915baeed94919e52f9ce9fed/81fb827f915baeed94919e52f9ce9fed.28.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:07 GMT
content-type: image/jpeg
content-length: 4020
x-frame-options: sameorigin
last-modified: Thu, 18 Feb 2021 17:12:33 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1680252419
x-77-nzt: A8O1pgpZQbrB1GY4AUhsPP+wFyIAj/Q63XkPq/97RQAA
x-77-nzt-ray: ffffffff699d8f4eb381aa6368925833
x-77-cache: HIT
x-age-lb: 2234288
server: CDN77-Turbo
x-cache-lb: HIT, MISS
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169/34/e7/18/34e718ed455a84bd402083af11490033/34e718ed455a84bd402083af11490033.16.jpg
195.181.166.12200 OK 4.5 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169/34/e7/18/34e718ed455a84bd402083af11490033/34e718ed455a84bd402083af11490033.16.jpg
IP 195.181.166.12:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash d84a523659de8c091559369f8274d258
2c0aaf9b9c6d8289f6d6875d111471d56520a436
5b3c6194a46b11946403c53edab3282e3124f533baf67e8d5c9138edcc2fc62b
GET /videos/thumbs169/34/e7/18/34e718ed455a84bd402083af11490033/34e718ed455a84bd402083af11490033.16.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:07 GMT
content-type: image/jpeg
content-length: 4506
x-frame-options: sameorigin
last-modified: Thu, 25 Nov 2021 02:01:26 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1674512478
x-77-nzt: A8O1pgqBwcvB1GY4DUUiK/8+hnkAj/Q6yNvGRP8XJwAA
x-77-nzt-ray: ffffffff699d8f4eb381aa63dbdf7033
x-77-cache: HIT
x-age-lb: 7964222
server: CDN77-Turbo
x-cache-lb: HIT, MISS
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169/b9/4d/9c/b94d9c037ff796830a2c3006af807a0d-2/b94d9c037ff796830a2c3006af807a0d.10.jpg
104.19.131.92200 OK 3.7 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169/b9/4d/9c/b94d9c037ff796830a2c3006af807a0d-2/b94d9c037ff796830a2c3006af807a0d.10.jpg
IP 104.19.131.92:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash e9275b3653d68a4c7f0dc173db559193
213d183efbfe904284b5a50c2c2d4a63ea75b52e
e1649c3aa7fb855aa69c6292a65fd25f56863e02cce777275a5bd8287bed8ccf
GET /videos/thumbs169/b9/4d/9c/b94d9c037ff796830a2c3006af807a0d-2/b94d9c037ff796830a2c3006af807a0d.10.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:07 GMT
content-type: image/jpeg
content-length: 3672
cf-ray: 77ffa2442a3eb4fd-OSL
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=10368000
expires: Wed, 26 Apr 2023 05:25:07 GMT
last-modified: Wed, 07 Dec 2022 11:34:39 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169/e4/69/46/e469461a64d95a07dd46e9ca14f92bb1/e469461a64d95a07dd46e9ca14f92bb1.27.jpg
195.181.166.12200 OK 4.9 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169/e4/69/46/e469461a64d95a07dd46e9ca14f92bb1/e469461a64d95a07dd46e9ca14f92bb1.27.jpg
IP 195.181.166.12:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 208x117, components 3\012- data
Hash e2705746deba815ebfe0e8c5c4de5a7b
fbafb902ab890e14485c8cca47a54a39f1e51a59
95cb73087aa2c6d5c4d21d4a478540a98c5db7f689d141b891020a719baecca6
GET /videos/thumbs169/e4/69/46/e469461a64d95a07dd46e9ca14f92bb1/e469461a64d95a07dd46e9ca14f92bb1.27.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:07 GMT
content-type: image/jpeg
content-length: 4933
x-frame-options: sameorigin
last-modified: Thu, 24 Mar 2022 16:57:13 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1676205527
x-77-nzt: A8O1pgoT6nSh1GY4CZQ1A//A118Aj/Q63Qabvf8cAAAA
x-77-nzt-ray: ffffffff699d8f4eb381aa637ff0cb39
x-77-cache: HIT
x-age-lb: 6281152
server: CDN77-Turbo
x-cache-lb: HIT, MISS
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
sobakenchmaphk.com/aas/r45d/vki/1885455/893a3048.js
62.122.171.6200 OK 0 B URL HTTP/2 sobakenchmaphk.com/aas/r45d/vki/1885455/893a3048.js
IP 62.122.171.6:0
GET /aas/r45d/vki/1885455/893a3048.js HTTP/1.1
Host: sobakenchmaphk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: application/javascript
last-modified: Thu, 22 Dec 2022 12:39:24 GMT
vary: Accept-Encoding
etag: W/"63a44ffc-10dce"
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
whos.amung.us/widget/javhaymedia.png
104.22.75.171307 Temporary Redirect 0 B URL HTTP/2 whos.amung.us/widget/javhaymedia.png
IP 104.22.75.171:0
GET /widget/javhaymedia.png HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhay.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
date: Tue, 27 Dec 2022 05:25:06 GMT
content-type: text/html; charset=UTF-8
location: https://widgets.amung.us/classic/03/327.png
cache-control: no-cache, no-store, must-revalidate
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77ffa23aee950a3b-ARN
X-Firefox-Spdy: h2
javhay.media/video/caiu-na-net-tahcardoso-do-insta-e-dotike-toke-5G54YVJA7/
172.67.216.71200 OK 0 B URL HTTP/2 javhay.media/video/caiu-na-net-tahcardoso-do-insta-e-dotike-toke-5G54YVJA7/
IP 172.67.216.71:0
GET /video/caiu-na-net-tahcardoso-do-insta-e-dotike-toke-5G54YVJA7/ HTTP/1.1
Host: javhay.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 27 Dec 2022 05:25:05 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=i292scejk1fuq1a65fs346cb29; path=/
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tDhlFDDIcpbh8cJVzkBL1pxHmgXbrZseXfvRPAMQjc6lOXn6dg8mlzM40RaAgvRd5lwJ4QB%2BfGDXJQYXhQOgPjoK%2FngGd7HYrGXCtQzDuHG%2Fxz28hlpxwxmX%2FjUI59Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77ffa23478591bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2