www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/
301 Moved Permanently 0 B URL HTTP/1.1 www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/ HTTP/1.1
Host: www3.bestjavporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 03 Oct 2022 23:46:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 04 Oct 2022 00:46:06 GMT
Location: https://www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SvvmAhpivhPlOhdQRajTopDouP%2Fl8XKAh1IxuZ%2Bl%2F2lfRuvRVVJ4AQ1QXnyDwBYeD10k2C05fqEP9ecE1rIofUAyGuD4BEv%2BohJbeqlkPSJHaGPLP4pRYTjuQU9PtsKA7wsxF9vB"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75498e2528a70b3d-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 03 Oct 2022 22:46:59 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: BrrwKd1K6mm91a9RjekvSSeDUQTSQofCYaBLMUJQhKcj-BpIZSe5WQ==
Age: 3547
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9955bda9c9ef64bc5700a14af0bae25e
8de7b7469e905af0374bdfcc3006bbb844f13e94
1f611155394fac39439b8ec8217d8cd493d6b588d372d264e0d66c03129c50c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6562
Expires: Tue, 04 Oct 2022 01:35:28 GMT
Date: Mon, 03 Oct 2022 23:46:06 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 03 Oct 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: brbiqjyHjGZrIuJRiaoRHX56zBuRtuTGCNNtHVQDubyle_KPQJyjEQ==
age: 65859
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 03 Oct 2022 23:46:06 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www3.bestjavporn.com
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:07 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 496352
expires: Sat, 23 Sep 2023 23:46:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u33SLhxL%2FqR8krRNSCRJxlORBPj1Rkz5Bt1ZK9PO05FA%2FcQRfkomyo6oVsw8Tks8ug3h8uwKu9OCLeqyE2ft1M9xoYzSv4lkJL5VrHvDFcZPq76fdGO0Aza5kBX%2FFStcOPq22XYS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 75498e29f9d9b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js
200 OK 5.1 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js
IP
File type ASCII text, with very long lines (17660)
Hash abe1df98b6ab4644bd567e6669d0da03
27e3bf22ef08b7ca0090721ed31b4f921d278e7c
cd40ba7dbf63d67511c0fd56b7e5327dbedb43d15c439d79a8aacb6377059540
GET /ajax/libs/postscribe/2.0.8/postscribe.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:07 GMT
content-type: application/javascript; charset=utf-8
content-length: 5117
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03faa-45f4"
last-modified: Mon, 04 May 2020 16:15:38 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 10122429
expires: Sat, 23 Sep 2023 23:46:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=twajaFR9h6fyeMDdekWPWN0xtXROgbXqz1JIHCFuXU6k26JaEJfn3bhgciQF1J56PCiovEgvAEyZM7EZ1XcYQiCz79Vd025ebHMRK9U1l%2BcQS5Gv%2FwxiyRJqWpdzgdKPVYjZPRz9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 75498e2a1a660b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9e40b2c69615f45f2bc898334ab3e343
6a569648ed10564e126d3bbf3f91352e6b3f6d4f
4f1d0982c58b9bbeaa266b99292baa1a00c9e39280f73d5a525722c851e15981
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 03 Oct 2022 23:46:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www3.bestjavporn.com/wp-content/plugins/wp-rocket/assets/js/lazyload/12.0/lazyload.min.js
200 OK 2.6 kB URL HTTP/2 www3.bestjavporn.com/wp-content/plugins/wp-rocket/assets/js/lazyload/12.0/lazyload.min.js
IP
File type ASCII text, with very long lines (5543)
Hash 0da2b82891f6ee8734ef59044fcbed73
64c01b02104b1759fab7469e3f2d3267b092e99b
029621715a999eeabd0cb17c6d9aea7532050442eb1a5f9d047e09c5eb127533
GET /wp-content/plugins/wp-rocket/assets/js/lazyload/12.0/lazyload.min.js HTTP/1.1
Host: www3.bestjavporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:06 GMT
content-type: application/javascript
last-modified: Tue, 31 Mar 2020 10:02:46 GMT
vary: Accept-Encoding
etag: W/"5e831546-15d1"
cf-connecting-ip: 84.213.125.115
x-frame-options: SAMEORIGIN
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/plugins/wp-rocket/assets/js/lazyload/12.0/lazyload.min.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 13865
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eXTFz27HfFcuzqCfQ7xcVA3cmVdgWWSeSLMxxPcTJo1sjdyqmavQNuJWyVBy8M1GkqzXAKzwCBPqS5WsxXtthd%2BT49qhGcHRbTdei6zK63VWDo2lsMJxCX%2FhSxNpNldnngf1sooq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75498e29aa310b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
www3.bestjavporn.com/wp-content/themes/retrotube/assets/js/cast.js?ver=7.2.1
200 OK 19 kB URL HTTP/2 www3.bestjavporn.com/wp-content/themes/retrotube/assets/js/cast.js?ver=7.2.1
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 333404a28bbc4a815961f3e60271a5b7
cbd65f9d7537ff10f3823c0e51bbe003a067bbe6
63d40003a59c32e9c2d095cd4928ce0fb6af4e968fdfdec645a375fde1f67ca9
GET /wp-content/themes/retrotube/assets/js/cast.js?ver=7.2.1 HTTP/1.1
Host: www3.bestjavporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:06 GMT
content-type: application/javascript
cf-connecting-ip: 84.214.87.83
cf-bgj: minify
etag: W/"6336a64f-11395"
last-modified: Fri, 30 Sep 2022 08:18:23 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-rocket-args: ver=7.2.1
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/assets/js/cast.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 16325
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nlgnpgmxQKhR9l%2B4hStu74eKfujKxoU6g3XgpK23lfDcu8lfgXc7Q93zfjbZOwr%2Bh6T7%2BBRt0ylH91Y9ZPH3Sj7HdIRQvtg%2Fj3AKEtRWiQJx12egS7xhVT9vVVwXAlXybtMXwhUb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75498e29aa300b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js?ver=1.12.4
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js?ver=1.12.4
IP
File type ASCII text, with very long lines (32077)
Hash fd2b58574f9637ba7ef639267349d848
6eda5ea93f549ceb5693f6f1c038893fa56a510d
75627d4b97e5e6294a8f88f5eeaf9b616696dc8600db9701c47ef05f067880ec
GET /ajax/libs/jquery/1.12.4/jquery.min.js?ver=1.12.4 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 20:09:34 GMT
expires: Sun, 01 Oct 2023 20:09:34 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 185793
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-124653024-3
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-124653024-3
IP
File type ASCII text, with very long lines (2039)
Hash d37c7efa2d7a16617db27570129a84ef
30fbdbf2347243c2fc88c00dc8b8bea1b56f5e22
713994ccf9408e79bf99a2d726ca9347225aa14948fef8bd029e408a1a8de42b
GET /gtag/js?id=UA-124653024-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 03 Oct 2022 23:46:07 GMT
expires: Mon, 03 Oct 2022 23:46:07 GMT
cache-control: private, max-age=900
last-modified: Mon, 03 Oct 2022 22:46:30 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42379
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9e40b2c69615f45f2bc898334ab3e343
6a569648ed10564e126d3bbf3f91352e6b3f6d4f
4f1d0982c58b9bbeaa266b99292baa1a00c9e39280f73d5a525722c851e15981
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 03 Oct 2022 23:46:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www3.bestjavporn.com/wp-content/themes/retrotube/assets/js/fun.js?ver=1.2.6
200 OK 1.2 kB URL HTTP/2 www3.bestjavporn.com/wp-content/themes/retrotube/assets/js/fun.js?ver=1.2.6
IP
File type HTML document, ASCII text, with very long lines (329)
Hash aa3c4c5c79442242fc4fed55c8a35adf
39d05cb691ad7a01a6f9ac5cec37a74c787a08df
99211a6bb81c7d28d8ac088a51d4612530f527acfed7602aa9e9611bbc0bf910
GET /wp-content/themes/retrotube/assets/js/fun.js?ver=1.2.6 HTTP/1.1
Host: www3.bestjavporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:07 GMT
content-type: application/javascript
cf-connecting-ip: 148.252.76.96
cf-bgj: minify
cf-polished: origSize=23049
etag: W/"6336a64f-5a09"
last-modified: Fri, 30 Sep 2022 08:18:23 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-rocket-args: ver=1.2.6
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/assets/js/fun.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 26125
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T5CTMORLthLxZFvAVEAM6daACTyzev%2Ft%2F3P5sZONcIC0zZfgY1IIFXIS7VcFIEKv3DX39de8%2FfB7%2FgzLgj4Y%2BZokEGYJblt5HRXAY%2FKYdx%2FfFBqF8EkGXkK0KgBVzTuszMR64XTj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75498e29ba380b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5ba23234dfb31276cc3bf9a347508595
a225d0a9ecf5d7f0032816c6f3d4a5ae1f3b27a3
33558bed4856ac3f2a7267965521b316ccd3ccc669877994c6c590e2d2a1b559
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 03 Oct 2022 23:46:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Mon, 03 Oct 2022 23:29:33 GMT
Expires: Tue, 04 Oct 2022 00:19:02 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: GcZCpU8mhPiYKzuux-_qoNCByN8DsoHlqrjJ4HG7pCMhY1_kqybfAw==
Age: 994
www3.bestjavporn.com/wp-content/themes/retrotube/style.css?ver=1.4.2
200 OK 14 kB URL HTTP/2 www3.bestjavporn.com/wp-content/themes/retrotube/style.css?ver=1.4.2
IP
File type Unicode text, UTF-8 text, with very long lines (59837), with no line terminators
Hash 785d2b8482385452525dfd0c4418f7a2
2014f09257d35609d6c6973f8e9bd5e8d309c909
3189279eb75f57fc7b3698b946196787f816844731a58f985107441fd91b63f7
GET /wp-content/themes/retrotube/style.css?ver=1.4.2 HTTP/1.1
Host: www3.bestjavporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:06 GMT
content-type: text/css
cf-connecting-ip: 193.213.6.182
cf-bgj: minify
cf-polished: origSize=84878
etag: W/"633712c6-14b8e"
last-modified: Fri, 30 Sep 2022 16:01:10 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-rocket-args: ver=1.4.2
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/style.css
cache-control: max-age=3600
cf-cache-status: HIT
age: 26887
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dPX9NEq6qObL0hA5TjAHD8Tb%2BMdb9jICKQ%2FnmknvgUaHcxlDKpRQmIIQ5p0uHfSU1qjbzAkf1Dx22YtnAtzCVVgOK8XAYWqZowCxgd2pgBp4wExvF26FCNcTRhP9tr0HzpMM3QGn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75498e297a0e0b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0ac04f7c449093fff4f846a7ae56cd4f
50aeb5664545a0dec4173920a274e906bcbcdf6f
18eff2566317aba7b70ee558e8cba42231eb4eae31e903501dc122c751d6993b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 03 Oct 2022 23:46:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Hash e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www3.bestjavporn.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Oct 2022 18:53:39 GMT
expires: Tue, 03 Oct 2023 18:53:39 GMT
cache-control: public, max-age=31536000
age: 17548
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0ac04f7c449093fff4f846a7ae56cd4f
50aeb5664545a0dec4173920a274e906bcbcdf6f
18eff2566317aba7b70ee558e8cba42231eb4eae31e903501dc122c751d6993b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 03 Oct 2022 23:46:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
asg.phukienthoitranggiare.com/Cqp6VQ5.js
200 OK 34 kB URL HTTP/2 asg.phukienthoitranggiare.com/Cqp6VQ5.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (37787), with NEL line terminators
Hash 0bfc926c8717a33d199bd68e1b75af88
8cf397d588f3f00adc9606838b33df88646c38a8
e0a1a633931c7aa2cb79662bdd9c0a78ab87132ca6e549ec64366cf6095e146e
GET /Cqp6VQ5.js HTTP/1.1
Host: asg.phukienthoitranggiare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 03 Oct 2022 23:46:07 GMT
content-type: application/javascript
content-length: 34358
expires: Fri, 22 Sep 2023 14:13:59 GMT
content-encoding: gzip
last-modified: Thu, 22 Sep 2022 14:12:29 GMT
etag: "632c6d4d-8636"
cache-control: max-age=315360000, public
x-hw: 1663856039.dop129.am5.t,1663856039.cds267.am5.c
access-control-allow-origin: *
x-frame-options: DENY
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 321fa9a78e31dcb66601ac5890bfba73
c325580db79bde6fd00d2d0c7e3f675e4c0046bb
83029b324b4c36522ae47eef9614c124b0ad2994de412d7ea82f990ad8ae9d92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5199
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 03 Oct 2022 23:46:07 GMT
Last-Modified: Mon, 03 Oct 2022 22:19:29 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Mon, 03 Oct 2022 22:41:09 GMT
expires: Tue, 04 Oct 2022 00:41:09 GMT
cache-control: public, max-age=7200
age: 3898
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash b477fd4a2630df5c150f1e8186564276
66a44df59eb23973333a649b383b6bb9362ca71a
42b8b98df0a91b7c22321f40a7b126f8103a42694912c9bd6bdf28b562d695a2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 23:46:07 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 30 Sep 2022 20:27:05 GMT
Expires: Fri, 07 Oct 2022 20:27:04 GMT
Etag: "66a44df59eb23973333a649b383b6bb9362ca71a"
Cache-Control: max-age=333056,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75498e2e7fd20b06-OSL
poweredby.jads.co/js/jads.js
301 Moved Permanently 178 B URL HTTP/1.1 poweredby.jads.co/js/jads.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 03 Oct 2022 23:46:07 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: HPQG7GMT9eNd2h9oOdVCKw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: NJcFgwnEdgfIvtm02gk8yXOEjLg=
poweredby.jads.co/js/jads2.js
200 OK 1.7 kB URL HTTP/1.1 poweredby.jads.co/js/jads2.js
IP
File type ASCII text, with very long lines (3758), with no line terminators
Hash 558e1b61fc513016183a3812938e79fb
5f72ea61a2aad8f7a0956321d3fd8524db70eddf
a79f8c0aabfc2d1d45e4df2a86ca9172d292b08987f7a9d5c10bd10abf3aef54
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www3.bestjavporn.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 23:46:07 GMT
Content-Type: application/x-javascript
Last-Modified: Mon, 11 Jul 2022 00:36:11 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"62cb707b-eae"
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fcbe21f62d5e32f557a6ce5cc1226325
b93a4c2f1270fc3d8170c6dbe23f7365f56aadcd
0e8ad2bc555e484747c41c8216010b3764e92607149564850a86f73156401870
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E8AD2BC555E484747C41C8216010B3764E92607149564850A86F73156401870"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13803
Expires: Tue, 04 Oct 2022 03:36:11 GMT
Date: Mon, 03 Oct 2022 23:46:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f70302c070c4e64cda6991ba45732a12
8cc2aa5dc71f3eb625e7a1050d2bc4de2e55a2c9
ef86982f79feb1aa9b2845cd18e2be05f3dd2aa6f7761ed2ab7142314cd1698b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF86982F79FEB1AA9B2845CD18E2BE05F3DD2AA6F7761ED2AB7142314CD1698B"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7131
Expires: Tue, 04 Oct 2022 01:44:59 GMT
Date: Mon, 03 Oct 2022 23:46:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 11b1f32dd0b90387a9145dfb70751bc8
a7149fa8aead0b81a41cddd0075f48352a555d9d
eda0ef383c916f886273e9a03d3027640d06d034cc40b23572051f36b163f5c4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EDA0EF383C916F886273E9A03D3027640D06D034CC40B23572051F36B163F5C4"
Last-Modified: Mon, 03 Oct 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=680
Expires: Mon, 03 Oct 2022 23:57:28 GMT
Date: Mon, 03 Oct 2022 23:46:08 GMT
Connection: keep-alive
r.trwl1.com/s1/e1ce8edc-bc88-4852-876e-2bf610b566ce?externalId=8d836e31-4375-11ed-900a-e2e38133f3a0&cv1=8d836e31-4375-11ed-900a-e2e38133f3a0&cv2=4982d74cc5945eb5f443cbeab8c29c8c&cv3=desktop&cv4=62fe933961d6e278cd572307&cv5=62fe933061d6e278cd572305&cv6=en&cv7=NTVA-Bestjavporn&cv8=Firefox&cv9=62fe56a361d6e272ea2a6a61&cv10=62fe56a361d6e272ea2a6a61
200 OK 919 B URL HTTP/1.1 r.trwl1.com/s1/e1ce8edc-bc88-4852-876e-2bf610b566ce?externalId=8d836e31-4375-11ed-900a-e2e38133f3a0&cv1=8d836e31-4375-11ed-900a-e2e38133f3a0&cv2=4982d74cc5945eb5f443cbeab8c29c8c&cv3=desktop&cv4=62fe933961d6e278cd572307&cv5=62fe933061d6e278cd572305&cv6=en&cv7=NTVA-Bestjavporn&cv8=Firefox&cv9=62fe56a361d6e272ea2a6a61&cv10=62fe56a361d6e272ea2a6a61
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (723)
Hash 44826d1bbff782043f3039a5d74f67be
2ba13c5404373f35e76817dd3d12616241a7fd93
b90c069e9ffd93f1f05fed090173fb364212b752be5c8ba3a8dbe326dfafd278
GET /s1/e1ce8edc-bc88-4852-876e-2bf610b566ce?externalId=8d836e31-4375-11ed-900a-e2e38133f3a0&cv1=8d836e31-4375-11ed-900a-e2e38133f3a0&cv2=4982d74cc5945eb5f443cbeab8c29c8c&cv3=desktop&cv4=62fe933961d6e278cd572307&cv5=62fe933061d6e278cd572305&cv6=en&cv7=NTVA-Bestjavporn&cv8=Firefox&cv9=62fe56a361d6e272ea2a6a61&cv10=62fe56a361d6e272ea2a6a61 HTTP/1.1
Host: r.trwl1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 03 Oct 2022 23:46:08 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 919
Connection: close
Set-Cookie: uid=zpbY15ttM; Path=/; Domain=trwl1.com; Expires=Tue, 04 Oct 2022 23:46:08 GMT; HttpOnly
X-Request-Id: 4126d0be-794d-44e0-b5d4-15a0c56ec160
ads.adxadserv.com/ad?spotid=62fe56a361d6e272ea2a6a61&type=300x250&output=html&extra1=0&ref=https%3A//www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/&dt=1664840767752&screen=1280x1024&tags=
200 OK 26 kB URL HTTP/2 ads.adxadserv.com/ad?spotid=62fe56a361d6e272ea2a6a61&type=300x250&output=html&extra1=0&ref=https%3A//www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/&dt=1664840767752&screen=1280x1024&tags=
IP
ASN #39572 DataWeb Global Group B.V.
Hash 15d778ac79b2ad7d3afbcf1a8f3e4581
2bad138f5bedcf7d82eb7d5efef9427e2c4bd9d1
6d76422da621d332217b8b6a8e97b9340760e78478e984e8b7d346ce1eeca94f
GET /ad?spotid=62fe56a361d6e272ea2a6a61&type=300x250&output=html&extra1=0&ref=https%3A//www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/&dt=1664840767752&screen=1280x1024&tags= HTTP/1.1
Host: ads.adxadserv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 03 Oct 2022 23:46:08 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache
X-Firefox-Spdy: h2
adxadserv.com/ascripts/pxl.js
200 OK 23 kB URL HTTP/1.1 adxadserv.com/ascripts/pxl.js
IP
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (36114)
Hash 72d1139e9f2e6ebe3f51c9193edb4439
cd356eb9eaab433ac792406ba36d4304b6450571
74553d0effe74cd6a4f1424940f7fd133c5457ff1d5c53030e651ec6612bec88
GET /ascripts/pxl.js HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 03 Oct 2022 23:46:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 25 Sep 2020 09:55:41 GMT
ETag: W/"5f6dbe9d-12fee"
Expires: Mon, 03 Oct 2022 08:32:08 GMT
Cache-Control: max-age=86400, public
X-77-NZT: AblMCgHL67X/N9YAAA
X-77-NZT-Ray: miRtr2MI1w8
X-Cache: HIT
X-Age: 54839
X-77-POP: amsterdamNL
X-77-Cache: HIT
Content-Encoding: br
static.javhd.com/h5/files/overlay/1602-overlay-preview.png
200 OK 1.5 kB URL HTTP/2 static.javhd.com/h5/files/overlay/1602-overlay-preview.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 7083a71bc40e5d85670940c518cacca2
a2caeb7c6ca3960af2881434fb0df0c2241d7288
7c4049c76ecd35b05855df0c6ce7e1157213d9fb92c3b2b05ebf9b5d9bdff03a
GET /h5/files/overlay/1602-overlay-preview.png HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhd.com/h5/files/15972/300x250.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2Fef7ed9bf-02b1-42a7-b41c-1a88029074bd%3Fcv1%3D8d836e31-4375-11ed-900a-e2e38133f3a0%26cv10%3D62fe56a361d6e272ea2a6a61%26cv2%3D4982d74cc5945eb5f443cbeab8c29c8c%26cv3%3Ddesktop%26cv4%3D62fe933961d6e278cd572307%26cv5%3D62fe933061d6e278cd572305%26cv6%3Den%26cv7%3DNTVA-Bestjavporn%26cv8%3DFirefox%26cv9%3D62fe56a361d6e272ea2a6a61%26externalId%3D8d836e31-4375-11ed-900a-e2e38133f3a0%26p%3DeyJiIjoyNzc0NTIsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3Nzc5fQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:08 GMT
content-type: image/png
content-length: 1546
last-modified: Wed, 20 Apr 2022 13:56:48 GMT
etag: "62601120-60a"
expires: Tue, 23 May 2023 11:04:47 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684839887
server: CDN77-Turbo
x-77-nzt: AblMCQ3+uqz/8QmwAA
x-77-nzt-ray: CN/t5zdtd9c
x-cache: HIT
x-age: 11536881
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
static.javhd.com/h5/files/overlay/1602-overlay.png
200 OK 1.8 kB URL HTTP/2 static.javhd.com/h5/files/overlay/1602-overlay.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash f4403fc07b7c414db6ec613317885035
457d3e8f9e9fb0456292efdbd5f18b318e804ea7
00ffbfa9483f4a6e8b85b6ab368a9547cf29e54c1aeb2bfcf81f34ec2bf50ee7
GET /h5/files/overlay/1602-overlay.png HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhd.com/h5/files/15972/300x250.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2Fef7ed9bf-02b1-42a7-b41c-1a88029074bd%3Fcv1%3D8d836e31-4375-11ed-900a-e2e38133f3a0%26cv10%3D62fe56a361d6e272ea2a6a61%26cv2%3D4982d74cc5945eb5f443cbeab8c29c8c%26cv3%3Ddesktop%26cv4%3D62fe933961d6e278cd572307%26cv5%3D62fe933061d6e278cd572305%26cv6%3Den%26cv7%3DNTVA-Bestjavporn%26cv8%3DFirefox%26cv9%3D62fe56a361d6e272ea2a6a61%26externalId%3D8d836e31-4375-11ed-900a-e2e38133f3a0%26p%3DeyJiIjoyNzc0NTIsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3Nzc5fQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:08 GMT
content-type: image/png
content-length: 1839
last-modified: Wed, 20 Apr 2022 13:56:47 GMT
etag: "6260111f-72f"
expires: Tue, 23 May 2023 11:04:47 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684839887
server: CDN77-Turbo
x-77-nzt: AblMCQ09xdD/8QmwAA
x-77-nzt-ray: Qnfv9ah5TzM
x-cache: HIT
x-age: 11536881
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
static.javhd.com/h5/files/button/29-button.png
200 OK 733 B URL HTTP/2 static.javhd.com/h5/files/button/29-button.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 82a66a2d222379716ca9a03ff50d8f42
ae43d917ff791f9172edc527baa6266416182aaa
cc5da7b40e498d30bf5eaae43e59cae32202737076422676489dd8d3030803de
GET /h5/files/button/29-button.png HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhd.com/h5/files/15972/300x250.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2Fef7ed9bf-02b1-42a7-b41c-1a88029074bd%3Fcv1%3D8d836e31-4375-11ed-900a-e2e38133f3a0%26cv10%3D62fe56a361d6e272ea2a6a61%26cv2%3D4982d74cc5945eb5f443cbeab8c29c8c%26cv3%3Ddesktop%26cv4%3D62fe933961d6e278cd572307%26cv5%3D62fe933061d6e278cd572305%26cv6%3Den%26cv7%3DNTVA-Bestjavporn%26cv8%3DFirefox%26cv9%3D62fe56a361d6e272ea2a6a61%26externalId%3D8d836e31-4375-11ed-900a-e2e38133f3a0%26p%3DeyJiIjoyNzc0NTIsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3Nzc5fQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:08 GMT
content-type: image/png
content-length: 733
last-modified: Tue, 22 Dec 2015 18:41:22 GMT
etag: "56799952-2dd"
expires: Tue, 23 May 2023 11:04:47 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684839887
server: CDN77-Turbo
x-77-nzt: AblMCQ1cxOn/8QmwAA
x-77-nzt-ray: JBsJyHg+DLw
x-cache: HIT
x-age: 11536881
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
adxadserv.com/px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D62fe56a361d6e272ea2a6a61%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fwww3.bestjavporn.com%252Fvideo%252Fdvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their%252F%2526dt%253D1664840767752%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fwww3.bestjavporn.com%252F&d_r=1&d_s=1280x1024&d_w=293x250&t_s=1664840768120&t_i=1664840768129&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=827252f2-6dec-4b48-9219-095ef0ef4080&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=8d836e31-4375-11ed-900a-e2e38133f3a0&spid=62fe56a361d6e272ea2a6a61&fpid_sa=1664840768129&fpid=&feid_sa=1664840768129&sid_sa=1664840768129&feid=4617f372616be71225947b648be48ea9&sid=f807e6ded010178c176409138b84013b&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www3.bestjavporn.com&s_rst=1&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.299
200 OK 0 B URL HTTP/1.1 adxadserv.com/px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D62fe56a361d6e272ea2a6a61%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fwww3.bestjavporn.com%252Fvideo%252Fdvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their%252F%2526dt%253D1664840767752%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fwww3.bestjavporn.com%252F&d_r=1&d_s=1280x1024&d_w=293x250&t_s=1664840768120&t_i=1664840768129&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=827252f2-6dec-4b48-9219-095ef0ef4080&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=8d836e31-4375-11ed-900a-e2e38133f3a0&spid=62fe56a361d6e272ea2a6a61&fpid_sa=1664840768129&fpid=&feid_sa=1664840768129&sid_sa=1664840768129&feid=4617f372616be71225947b648be48ea9&sid=f807e6ded010178c176409138b84013b&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www3.bestjavporn.com&s_rst=1&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.299
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D62fe56a361d6e272ea2a6a61%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fwww3.bestjavporn.com%252Fvideo%252Fdvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their%252F%2526dt%253D1664840767752%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fwww3.bestjavporn.com%252F&d_r=1&d_s=1280x1024&d_w=293x250&t_s=1664840768120&t_i=1664840768129&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=827252f2-6dec-4b48-9219-095ef0ef4080&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=8d836e31-4375-11ed-900a-e2e38133f3a0&spid=62fe56a361d6e272ea2a6a61&fpid_sa=1664840768129&fpid=&feid_sa=1664840768129&sid_sa=1664840768129&feid=4617f372616be71225947b648be48ea9&sid=f807e6ded010178c176409138b84013b&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www3.bestjavporn.com&s_rst=1&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.299 HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 03 Oct 2022 23:46:08 GMT
Content-Length: 0
Connection: keep-alive
yearlylight.com/2b/d8/d3/2bd8d300136a6fd50bcb5a7f3f4a12fa.js
200 OK 13 kB URL HTTP/1.1 yearlylight.com/2b/d8/d3/2bd8d300136a6fd50bcb5a7f3f4a12fa.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37145), with no line terminators
Hash bfac3ddd8df973b9746785dab0c28b42
abf43aec236b8b91436e33f45642ce11b095c5c7
be79761f9450e07bee0d5ab344e0a0539f750a97686f7508474356f18dba6035
Analyzer Verdict Alert quad9 Sinkholed
GET /2b/d8/d3/2bd8d300136a6fd50bcb5a7f3f4a12fa.js HTTP/1.1
Host: yearlylight.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Mon, 03 Oct 2022 23:46:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b1c7ed016f722dd72be0ed0a6f13ece4
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
static.javhd.com/h5/files/video/4734-19503-300x250.medium.mp4
206 Partial Content 549 kB URL HTTP/2 static.javhd.com/h5/files/video/4734-19503-300x250.medium.mp4
IP
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 549 kB (549402 bytes)
Hash edd7513eea5abd22959d4ceda5bd149b
b1e643b27e90d7129028dc77e840626147539551
1880219e619f48106770df961ef2172abf30edbbd84f76e83c79143cce1c4831
GET /h5/files/video/4734-19503-300x250.medium.mp4 HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://static.javhd.com/h5/files/15972/300x250.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2Fef7ed9bf-02b1-42a7-b41c-1a88029074bd%3Fcv1%3D8d836e31-4375-11ed-900a-e2e38133f3a0%26cv10%3D62fe56a361d6e272ea2a6a61%26cv2%3D4982d74cc5945eb5f443cbeab8c29c8c%26cv3%3Ddesktop%26cv4%3D62fe933961d6e278cd572307%26cv5%3D62fe933061d6e278cd572305%26cv6%3Den%26cv7%3DNTVA-Bestjavporn%26cv8%3DFirefox%26cv9%3D62fe56a361d6e272ea2a6a61%26externalId%3D8d836e31-4375-11ed-900a-e2e38133f3a0%26p%3DeyJiIjoyNzc0NTIsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3Nzc5fQ
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Mon, 03 Oct 2022 23:46:08 GMT
content-type: video/mp4
content-length: 549402
last-modified: Mon, 07 Feb 2022 07:41:52 GMT
etag: "6200cd40-8621a"
expires: Tue, 24 May 2022 11:06:46 GMT
cache-control: max-age=86400
access-control-allow-origin: *
x-accel-expires: @1664869623
server: CDN77-Turbo
x-77-nzt: AblMCQ0iU8X/yeAAAA
x-77-nzt-ray: o8YW1Gm8kf0
x-cache: HIT
x-age: 57545
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-549401/549402
X-Firefox-Spdy: h2
adxadserv.com/t/re/v4?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D62fe56a361d6e272ea2a6a61%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fwww3.bestjavporn.com%252Fvideo%252Fdvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their%252F%2526dt%253D1664840767752%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fwww3.bestjavporn.com%252F&d_r=1&d_s=1280x1024&d_w=293x250&t_s=1664840768120&t_i=1664840768129&u_tz=0&u_l=en-US&u_l2=&u_l3=&n_c=&n_s=&pv_uid=37b68dc7-1f1a-4554-9c08-b4bde47a9ebc&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&p_tt=desktop&p_l=en&p_z=NONAUTHORIZED&p_u_s=GUEST&fpid_sa=null&fpid=&feid_sa=null&sid_sa=null&feid=3173bdedd86eda541c3114de09c16af5&sid=5ac487ddb5c577b3adbab16209552e48&u_adb=0&vn=R-1.0&utm_typ=referral&utm_src=www3.bestjavporn.com&s_rst=1&st_d=%7B%7D&e_d=%7B%22spotId%22%3A%2262fe56a361d6e272ea2a6a61%22%2C%22impressionId%22%3A%228d836e31-4375-11ed-900a-e2e38133f3a0%22%7D&t_op=0.505&cb=gl.cb.pv
200 OK 65 B URL HTTP/1.1 adxadserv.com/t/re/v4?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D62fe56a361d6e272ea2a6a61%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fwww3.bestjavporn.com%252Fvideo%252Fdvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their%252F%2526dt%253D1664840767752%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fwww3.bestjavporn.com%252F&d_r=1&d_s=1280x1024&d_w=293x250&t_s=1664840768120&t_i=1664840768129&u_tz=0&u_l=en-US&u_l2=&u_l3=&n_c=&n_s=&pv_uid=37b68dc7-1f1a-4554-9c08-b4bde47a9ebc&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&p_tt=desktop&p_l=en&p_z=NONAUTHORIZED&p_u_s=GUEST&fpid_sa=null&fpid=&feid_sa=null&sid_sa=null&feid=3173bdedd86eda541c3114de09c16af5&sid=5ac487ddb5c577b3adbab16209552e48&u_adb=0&vn=R-1.0&utm_typ=referral&utm_src=www3.bestjavporn.com&s_rst=1&st_d=%7B%7D&e_d=%7B%22spotId%22%3A%2262fe56a361d6e272ea2a6a61%22%2C%22impressionId%22%3A%228d836e31-4375-11ed-900a-e2e38133f3a0%22%7D&t_op=0.505&cb=gl.cb.pv
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 397b84d87cdab1f976fad07e1adb62b4
c09c3b5271f0d17e339b1771e33a69d2ced75108
a32cb324cae7f55ea784c5fda43f3cfebf7a8ee16e9ba71861431a78b6d03266
GET /t/re/v4?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D62fe56a361d6e272ea2a6a61%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fwww3.bestjavporn.com%252Fvideo%252Fdvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their%252F%2526dt%253D1664840767752%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fwww3.bestjavporn.com%252F&d_r=1&d_s=1280x1024&d_w=293x250&t_s=1664840768120&t_i=1664840768129&u_tz=0&u_l=en-US&u_l2=&u_l3=&n_c=&n_s=&pv_uid=37b68dc7-1f1a-4554-9c08-b4bde47a9ebc&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&p_tt=desktop&p_l=en&p_z=NONAUTHORIZED&p_u_s=GUEST&fpid_sa=null&fpid=&feid_sa=null&sid_sa=null&feid=3173bdedd86eda541c3114de09c16af5&sid=5ac487ddb5c577b3adbab16209552e48&u_adb=0&vn=R-1.0&utm_typ=referral&utm_src=www3.bestjavporn.com&s_rst=1&st_d=%7B%7D&e_d=%7B%22spotId%22%3A%2262fe56a361d6e272ea2a6a61%22%2C%22impressionId%22%3A%228d836e31-4375-11ed-900a-e2e38133f3a0%22%7D&t_op=0.505&cb=gl.cb.pv HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 03 Oct 2022 23:46:08 GMT
Content-Type: text/javascript
Content-Length: 65
Connection: keep-alive
Set-Cookie: xfeid=dbe808107dae2cc067eaa8c14de13eac; expires=Tue, 01 Jan 2030 00:00:00 GMT; path=/; domain=.adxadserv.com
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: content-type
Access-Control-Max-Age: 864000
poweredby.jads.co/adshow.php?adzone=784300
200 OK 1.5 kB URL HTTP/1.1 poweredby.jads.co/adshow.php?adzone=784300
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (351), with CRLF, LF line terminators
Hash 3b1687af393e76d73d2914cebe360935
afe222a1994d49ef61964b2a6ea2a5e838a4e26c
753ca142e714ececad38c7aee3a33b2199429d9b85c9f8a310e27fb0acd4142f
GET /adshow.php?adzone=784300 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 23:46:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=17ff81c9f1ea333e6967fe392dcd6160; expires=Tue, 03-Oct-2023 23:46:07 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YTowOnt9; expires=Thu, 06-Oct-2022 23:46:07 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Thu, 06-Oct-2022 23:46:07 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 326bace71fd3c3cbcb1c31240b519c69
21551272aad334fc812492415fd04ca092d04e4f
4b0973f474992b8238f1d3e9b02a4869d5d7378a73f81f78515fb524a6be5e6e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4B0973F474992B8238F1D3E9B02A4869D5D7378A73F81F78515FB524A6BE5E6E"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18116
Expires: Tue, 04 Oct 2022 04:48:05 GMT
Date: Mon, 03 Oct 2022 23:46:09 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5051734aa47e871f30936254a98cebee
38ecb55e50d18f22f54e1ebc0bf5d70f6912cc97
45727a8f22a365165d5bfd7b562ee3fe43cb02f918228bcd6441deb4a33bd421
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 03 Oct 2022 23:46:09 GMT
Last-Modified: Mon, 03 Oct 2022 22:40:58 GMT
Server: ECS (nyb/1D1D)
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: FdglQcON2rpXdOTfnrPLIYZXqDM566O-7ymyEDUY-bMyKxQQ2Vcq0A==
Age: 3911
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 19531173b89e9f6114a25f0d43e1ce06
554452052e649ea9aa3f8a07c015a980c88880bb
6c72062a4751961b067771c9e9de89cd6c633713ff6a2619ae711ff8227f6b4e
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www3.bestjavporn.com
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:09 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www3.bestjavporn.com
access-control-allow-credentials: true
set-cookie: uid_id2=0967bdb9-d6ff-4fc8-a331-32bf7a90c186:1:1; expires=Thu, 30 Sep 2032 23:46:09 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
analitits.com/t/xfeid?cb=gl.cb.xf
200 OK 65 B URL HTTP/1.1 analitits.com/t/xfeid?cb=gl.cb.xf
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash cd9b4a6cafb02bd9beaad102cb5ce24b
e22df8d5c5ad3e3362fc62c52e07edc458d018e9
28e64711709561bb66a65a3be2a41a159fe802ec2e9ec7f74f90fa1f78d1fd40
GET /t/xfeid?cb=gl.cb.xf HTTP/1.1
Host: analitits.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.10.3 (Ubuntu)
Date: Mon, 03 Oct 2022 23:46:09 GMT
Content-Type: application/octet-stream
Content-Length: 65
Connection: keep-alive
Set-Cookie: xfeid=507c26ba121170c5f3f96ce23b6611e9; expires=Tue, 01 Jan 2030 00:00:00 GMT; path=/; domain=.analitits.com
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: content-type
Access-Control-Max-Age: 864000
r.trwl1.com/s1/4121eca0-ff5a-4c89-9772-768fbbfd1900?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=126401&cv4=237443&cv5=784300&cv6=
200 OK 745 B URL HTTP/1.1 r.trwl1.com/s1/4121eca0-ff5a-4c89-9772-768fbbfd1900?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=126401&cv4=237443&cv5=784300&cv6=
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (549)
Hash 7893e6c405f251166749865ae2a40ef9
2592449340e73fe62ae6b6c8217839c0d2e9177a
0b62ff2f5b8eedef4b402acb6347db3ac57beb976a4872569cb75f0fe85c9bec
GET /s1/4121eca0-ff5a-4c89-9772-768fbbfd1900?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=126401&cv4=237443&cv5=784300&cv6= HTTP/1.1
Host: r.trwl1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poweredby.jads.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 03 Oct 2022 23:46:09 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 745
Connection: close
Set-Cookie: uid=A5bD18atM; Path=/; Domain=trwl1.com; Expires=Tue, 04 Oct 2022 23:46:09 GMT; HttpOnly
X-Request-Id: 911acca5-5d14-4066-bb23-06bf9e1c4a37
static.adxadserv.com/js/adb.js
200 OK 2.2 kB URL HTTP/2 static.adxadserv.com/js/adb.js
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (511), with CRLF line terminators
Hash 0a5bf753179b100fe2243544f42b633f
cbdbe76e53bd4582eff5bdbed48e8e6f6699e159
4336267648a82586622ea3c11be201c81f28e4ffc5bd1704fce30d9d4b5683c6
GET /js/adb.js HTTP/1.1
Host: static.adxadserv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:08 GMT
content-type: application/javascript
last-modified: Tue, 24 Mar 2020 11:15:59 GMT
etag: W/"5e79ebef-532"
x-accel-expires: @1665745594
server: CDN77-Turbo
x-77-nzt: AblMCRQVssX/hgMCAA
x-77-nzt-ray: aAczwnNW12A
x-cache: HIT
x-age: 131974
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
static.javhd.com/h5/files/overlay/16-overlay-preview.png
200 OK 507 B URL HTTP/2 static.javhd.com/h5/files/overlay/16-overlay-preview.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 728 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash db53e5222242237b3bf9cfa0e57ba892
682eff797b686263d1259a4cb5e56475f6b49abe
90b8ab0ecc1d52738d7f0c0bb413375bd6e2f7d7f22d4adf1b1df004ee5d4d43
GET /h5/files/overlay/16-overlay-preview.png HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhd.com/h5/files/15540/728x90.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2F71c4b258-85d7-4b68-903c-9b5137533963%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D237443%26cv5%3D784300%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzY3NTUsImJoIjo5MCwiYnciOjcyOCwiZiI6MSwibyI6MywicCI6MSwicyI6MjEwMzR9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:09 GMT
content-type: image/png
content-length: 507
last-modified: Tue, 06 Feb 2018 18:18:14 GMT
etag: "5a79f166-1fb"
expires: Tue, 23 May 2023 11:06:53 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684840013
server: CDN77-Turbo
x-77-nzt: AblMCQ1K94r/dAmwAA
x-77-nzt-ray: GML2HJyMZmg
x-cache: HIT
x-age: 11536756
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11865
Expires: Tue, 04 Oct 2022 03:03:54 GMT
Date: Mon, 03 Oct 2022 23:46:09 GMT
Connection: keep-alive
static.javhd.com/h5/files/overlay/16-overlay.png
200 OK 4.2 kB URL HTTP/2 static.javhd.com/h5/files/overlay/16-overlay.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 728 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash d66274c14945df9c552f3f29b2edb39e
ab31d71d26c8486aa6e5662459341e1db4171ecb
eca2a576dcb0e650c0701e96f1d4e7336cd0adc970cedbc7e8a72638ca2aa43e
GET /h5/files/overlay/16-overlay.png HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhd.com/h5/files/15540/728x90.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2F71c4b258-85d7-4b68-903c-9b5137533963%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D237443%26cv5%3D784300%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzY3NTUsImJoIjo5MCwiYnciOjcyOCwiZiI6MSwibyI6MywicCI6MSwicyI6MjEwMzR9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:09 GMT
content-type: image/png
content-length: 4224
last-modified: Tue, 06 Feb 2018 18:15:47 GMT
etag: "5a79f0d3-1080"
expires: Tue, 23 May 2023 11:06:55 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684840015
server: CDN77-Turbo
x-77-nzt: AblMCQ2QOh3/cgmwAA
x-77-nzt-ray: lHzfdYilqbQ
x-cache: HIT
x-age: 11536754
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
static.javhd.com/h5/files/15540/728x90.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2F71c4b258-85d7-4b68-903c-9b5137533963%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D237443%26cv5%3D784300%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzY3NTUsImJoIjo5MCwiYnciOjcyOCwiZiI6MSwibyI6MywicCI6MSwicyI6MjEwMzR9
200 OK 1.5 kB URL HTTP/2 static.javhd.com/h5/files/15540/728x90.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2F71c4b258-85d7-4b68-903c-9b5137533963%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D237443%26cv5%3D784300%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzY3NTUsImJoIjo5MCwiYnciOjcyOCwiZiI6MSwibyI6MywicCI6MSwicyI6MjEwMzR9
IP
ASN #60068 Datacamp Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash edc333d200856495d2a9db497d592673
fb669e9b137821312c88479c95fd87f8e0ca62d3
f7a932b592a278f467be0265a296dcd18597dd570ead0b87bd5b4560ec1441ea
GET /h5/files/15540/728x90.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2F71c4b258-85d7-4b68-903c-9b5137533963%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D237443%26cv5%3D784300%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzY3NTUsImJoIjo5MCwiYnciOjcyOCwiZiI6MSwibyI6MywicCI6MSwicyI6MjEwMzR9 HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r.trwl1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:09 GMT
content-type: text/html
last-modified: Mon, 07 Feb 2022 07:42:09 GMT
etag: W/"6200cd51-c7f"
expires: Mon, 24 Oct 2022 22:32:52 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-accel-expires: @1666650772
server: CDN77-Turbo
x-77-nzt: AblMCQ1QR0b/re4LAA
x-77-nzt-ray: 0SRnPTCPQZQ
x-cache: HIT
x-age: 781997
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11865
Expires: Tue, 04 Oct 2022 03:03:54 GMT
Date: Mon, 03 Oct 2022 23:46:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11865
Expires: Tue, 04 Oct 2022 03:03:54 GMT
Date: Mon, 03 Oct 2022 23:46:09 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 206fb65e75dbadf119512f71e0b78402
58ff0bf8ce7528b303d28bab01a80ad721705569
56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 04:42:51 GMT
age: 68598
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7df28993-57e6-4e7f-9751-93778578bd1e.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7df28993-57e6-4e7f-9751-93778578bd1e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6258b8768ba4c3edcc049c494dac733a
40e4337611c74e26efbc53633ba1a9ac04d9ae81
b170aaabbd17b712ed861f5e1d13ad2ff3604b47e9ec833077caeb1199f44d08
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7df28993-57e6-4e7f-9751-93778578bd1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10595
x-amzn-requestid: 7cc6c91c-4dfc-4c17-b27c-5c0eec4a390a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcqdOHTzoAMFYdw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5787-11525116257b72eb382ecefa;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:43:35 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qglxUK18M0WVvuSzN-pkwoIagT-hMmp_77qKAVaGq-3vJ4gwwsRzdA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:08:41 GMT
age: 5848
etag: "40e4337611c74e26efbc53633ba1a9ac04d9ae81"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f5624b4-8e2a-461e-a32a-38d6b5a3a8d2.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f5624b4-8e2a-461e-a32a-38d6b5a3a8d2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ae824db4a95391149198a4b6b8556c70
db07d58d8feff4ea01866d095e5264ee5c8e1ca3
19e96d204813247697e1858daf9e07d6c4cafd9ab1175a3bf39a7f07f6991521
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f5624b4-8e2a-461e-a32a-38d6b5a3a8d2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11101
x-amzn-requestid: f98e84d9-1e66-4436-b793-219a777f2ba0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcqcvE8JoAMFQ2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5784-25bd2b234c1093de70074c92;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:43:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: becOxfqUowywFrxzDSeK7F1lFdDVTSHIF1TLC5k5aSlLPpsR6F8gjw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:08:47 GMT
age: 5842
etag: "db07d58d8feff4ea01866d095e5264ee5c8e1ca3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdb412b7-1bf6-4a48-b9f1-b171f540e434.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdb412b7-1bf6-4a48-b9f1-b171f540e434.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24a4a122273ef9f772852031eb13114a
c20f1fac9020eb4bd6c84583f73872979639b991
8e1ffbed5f156637ed2f22e81d03f6d85eff0c28237c1639ea5f977e92ee7b70
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdb412b7-1bf6-4a48-b9f1-b171f540e434.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4151
x-amzn-requestid: f709a11e-cbea-4965-8502-94ddbd8768bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvSF3YIAMFdow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-29bfa31d51e8f60b38136dba;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7H1QKlOtoBoVz93G5lddxHSGiTjtMnHJCZX5FhwqhNPkspslaDoFQA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:57:01 GMT
age: 6548
etag: "c20f1fac9020eb4bd6c84583f73872979639b991"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
creepingbrings.com/sfp.js
200 OK 35 kB URL HTTP/2 creepingbrings.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 60ad0a3d6baf1cb3baa2467330e15252
0fffef6a74ed918f1dcf3fc30c1f86cd295168e3
a2348118a17e984396e192a6c6ab46d980b22e815a9725b30fba11f52aee4220
GET /sfp.js HTTP/1.1
Host: creepingbrings.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:09 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 6961455815d4beaf667f718e883e1122
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Mon, 03 Oct 2022 23:46:08 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8mANnjg4QzySj0RwkTQEgzjU0imHPbNQ2CKM6%2BzRjqLOlqFoyOkKkFG38LRJgfg9fzmdNfGZigSpJGClTOW444soM31ms%2FC2X7H9zBY3RltqfbsE7z0bojrtW1j1D9RbkN6RowM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75498e35c85b771f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.jads.co/1x1.gif
200 OK 43 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /1x1.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=99cf76cb84f706d3d8463dff34a8d669; juicy_data_1=YTowOnt9; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:09 GMT
etag: "1457030838"
cache-control: max-age=22384497
content-length: 43
content-type: image/gif
last-modified: Thu, 03 Mar 2016 18:47:18 GMT
accept-ranges: bytes
x-hw: 1664840769.dop066.sk1.t,1664840769.cds218.sk1.hn,1664840769.cds217.sk1.c
X-Firefox-Spdy: h2
r.trwl1.com/s1/5146bd48-0d31-4836-a052-4f7292431eec?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=126401&cv4=237443&cv5=794135&cv6=
200 OK 749 B URL HTTP/1.1 r.trwl1.com/s1/5146bd48-0d31-4836-a052-4f7292431eec?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=126401&cv4=237443&cv5=794135&cv6=
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (553)
Hash 5b434e109c4302234910637f62cd85c9
d409d5bf9c211214fefad501b3cb95d084c256c1
49279171573d9b240ad9ff1efb2fab50971f6c0b01323892798eef80a02f2887
GET /s1/5146bd48-0d31-4836-a052-4f7292431eec?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=126401&cv4=237443&cv5=794135&cv6= HTTP/1.1
Host: r.trwl1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poweredby.jads.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 03 Oct 2022 23:46:09 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 749
Connection: close
Set-Cookie: uid=FUbD18atp; Path=/; Domain=trwl1.com; Expires=Tue, 04 Oct 2022 23:46:09 GMT; HttpOnly
X-Request-Id: 0e740bbf-e906-4aad-9e60-4bb2c126d6c8
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5adb9dd0-c21d-4cd0-8ffd-04efc8b9dc4b.jpeg
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5adb9dd0-c21d-4cd0-8ffd-04efc8b9dc4b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d0bf28d3c594b68bdaff2db4a30c479a
b5103d52781a6a139cb87fbcd41757d79347bc97
c9c0e66132efff0ba7fda3a5ff771a089d36b9566aac0cd3b1ccde3adc67b043
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5adb9dd0-c21d-4cd0-8ffd-04efc8b9dc4b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16247
x-amzn-requestid: b81ea53b-2591-4c86-b019-d0f1a330c1db
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTHR3oAMF6eQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-43713e23070d4d935033616a;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: s4l1Qez6weaSsAf-StBGbZb2B3YS2d53YC19MWvHVkMjJ53OCVWpOQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:56:44 GMT
age: 6565
etag: "b5103d52781a6a139cb87fbcd41757d79347bc97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static.javhd.com/h5/files/video/3189-24876-728x90.medium.mp4
206 Partial Content 205 kB URL HTTP/2 static.javhd.com/h5/files/video/3189-24876-728x90.medium.mp4
IP
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 205 kB (204831 bytes)
Hash 877e2ae109071e4fb354ce8b4d098415
a757cf8aee15d17d54b478de2b4ae8586a346882
8b6962104162ecedc810a93026d9e1d60725180d936b6e352bfc66c28c818313
GET /h5/files/video/3189-24876-728x90.medium.mp4 HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://static.javhd.com/h5/files/15540/728x90.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2F71c4b258-85d7-4b68-903c-9b5137533963%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D237443%26cv5%3D784300%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzY3NTUsImJoIjo5MCwiYnciOjcyOCwiZiI6MSwibyI6MywicCI6MSwicyI6MjEwMzR9
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Mon, 03 Oct 2022 23:46:09 GMT
content-type: video/mp4
content-length: 523070
last-modified: Mon, 07 Feb 2022 07:42:08 GMT
etag: "6200cd50-7fb3e"
expires: Tue, 24 May 2022 11:07:07 GMT
cache-control: max-age=86400
access-control-allow-origin: *
x-accel-expires: @1664887684
server: CDN77-Turbo
x-77-nzt: AblMCQ0B5bL/PZoAAA
x-77-nzt-ray: FWiRG4EFJwE
x-cache: HIT
x-age: 39485
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-523069/523070
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 07c714f43bfac15ee4c1a35124f9381e
3bb0d940bf0ae74cf8640242d84f441e32ea3c61
cfa61d914f225b6bca0cc1fb793720b422102dfec0c6fe873eb036fd8ff43a9e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CFA61D914F225B6BCA0CC1FB793720B422102DFEC0C6FE873EB036FD8FF43A9E"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4992
Expires: Tue, 04 Oct 2022 01:09:21 GMT
Date: Mon, 03 Oct 2022 23:46:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8f0a90608c8247239491a1d2f9b05151
edb6b67b1a46a7e64c2f48cd1803749ac9219387
3443cba19eb70aa0d6bc0adc3c0420dbc27f52fa86ede9ec5a77597e2c9f3193
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3443CBA19EB70AA0D6BC0ADC3C0420DBC27F52FA86EDE9EC5A77597E2C9F3193"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12659
Expires: Tue, 04 Oct 2022 03:17:09 GMT
Date: Mon, 03 Oct 2022 23:46:10 GMT
Connection: keep-alive
static.javhd.com/h5/files/16441/300x250.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2Ff194c970-bc2d-4827-8b0a-7f39df13c295%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D237443%26cv5%3D794135%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzgxNTYsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjIsInAiOjEsInMiOjIxOTM5fQ
200 OK 972 B URL HTTP/2 static.javhd.com/h5/files/16441/300x250.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2Ff194c970-bc2d-4827-8b0a-7f39df13c295%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D237443%26cv5%3D794135%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzgxNTYsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjIsInAiOjEsInMiOjIxOTM5fQ
IP
ASN #60068 Datacamp Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash df0f282ce3c0a43aeb4baa1f92b7f3fe
e4d892fcc75aed1b4b4253b7abc67187b9589326
ff044037d50a7713981d656f0fe51294dcc44896875b3f2799dfb2374f59b15d
GET /h5/files/16441/300x250.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2Ff194c970-bc2d-4827-8b0a-7f39df13c295%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D237443%26cv5%3D794135%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzgxNTYsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjIsInAiOjEsInMiOjIxOTM5fQ HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r.trwl1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:09 GMT
content-type: text/html
last-modified: Tue, 26 Jul 2022 12:47:16 GMT
etag: W/"62dfe254-c86"
expires: Fri, 21 Oct 2022 18:23:56 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-accel-expires: @1666376636
server: CDN77-Turbo
x-77-nzt: AblMCQ1hz+L/hR0QAA
x-77-nzt-ray: UXcn44Fa02E
x-cache: HIT
x-age: 1056133
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
governessmagnituderecoil.com/sbar.json?key=2bd8d300136a6fd50bcb5a7f3f4a12fa&uuid=0967bdb9-d6ff-4fc8-a331-32bf7a90c186%3A1%3A1
200 OK 4.4 kB URL HTTP/1.1 governessmagnituderecoil.com/sbar.json?key=2bd8d300136a6fd50bcb5a7f3f4a12fa&uuid=0967bdb9-d6ff-4fc8-a331-32bf7a90c186%3A1%3A1
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (6173), with no line terminators
Hash 7d3a39bd62f1b6cf529136b0483aa093
1927ce61b50a97a95cc341269c39d7bb0abe54ba
7687264de127c6e99e9ba240ca52135aa48dfaa647ec98057d4aacbcc8f376d0
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=2bd8d300136a6fd50bcb5a7f3f4a12fa&uuid=0967bdb9-d6ff-4fc8-a331-32bf7a90c186%3A1%3A1 HTTP/1.1
Host: governessmagnituderecoil.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www3.bestjavporn.com
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Mon, 03 Oct 2022 23:46:10 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www3.bestjavporn.com
Access-Control-Allow-Origin: https://www3.bestjavporn.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17179025; expires=Tue, 04 Oct 2022 23:46:10 GMT; secure; SameSite=None
uid_id2=0967bdb9-d6ff-4fc8-a331-32bf7a90c186:1:1; expires=Mon, 10 Oct 2022 23:46:10 GMT; secure; SameSite=None
pdhtkv=true; expires=Tue, 04 Oct 2022 23:46:10 GMT; secure; SameSite=None
uncs=1; expires=Tue, 04 Oct 2022 23:46:10 GMT; secure; SameSite=None
pdhtkv29=true; expires=Tue, 04 Oct 2022 23:46:10 GMT; secure; SameSite=None
uncs29=1; expires=Tue, 04 Oct 2022 23:46:10 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1f8e8cd1353f413c71ff12e7b555b6cd
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
governessmagnituderecoil.com/ren.gif?sid=H4sIAAAAAAAC%2F1RS32scVRi904SC%2BKJSEEHLij4oms382J3dNWAxxkgwbWqr6IvInXtnNre5M3e8d2ZnExCCQSmlD1v%2FgsnZpEEtVp%2Fsi0GmBcGAkPUpD%2BYf8EkKfZbdBqMfDN%2BZe86F853vfrWdHxMbOT1auKg2hJR0tlm3a6987DhztWWR5P1av%2B1%2F6jfmarr3Rsev26%2FW3g3Zmpp1bce2HdupLQodRqo%2FOyYh0jsdp96x6w237jQb6Ov%2F%2F5vcgqEWeO%2BYPAPBR9MPrHMQrEIS%2F7AQmrVMpa%2B%2FE%2BeSZkqjx%2Fc%2BTNYSVSSIT2GkLUTJ3okayhwu7kMluxO7UL1%2FhYEYEevXfQTJ3olJBL2dic9AIkwQ8CdR9CqEsoKgFZjaguCHBGAcl1aQxLcvKV3Q9ccsHbMjMv3oIUQxItN%2FnkMSfz8vRb92Vck8Eyox6EclRL%2BC6FZI8%2FvINs5AFPfBsi8g%2BO9k9tEyknhnxUgFwY9etjt%2BK%2BBBZ4b7UTTTiFh7hnqeM%2BO5QdSiHZs5bX8SkBAVRFRBhgNQYyEff8JCHlnIUwsxP6oxx3FaNmfUbncY83grDHxuO7QVOdSx%2FTZyNp5hgCwdgMkBmN5EqjexJr4%2BbL50%2BMlr0PkvMKslDLdgMoIeL1GEBIUhKChBIQiKjKDolbtcGteUt7k0eeCcdPeke%2BVQZd1tuquybpiQ7fSYPD2Ozzr74i2shUc1N%2BBt7tm24%2FnUj3jTDljQpK3IixrUcSMKI0oIc2Yy7IYYkamzW0jFiJyZ%2BxsBrWBkBSaeAs1fAC2GLdcGXR022jY2krtBaLJrtJcqndSZisFViTSbRrZubctj8txkk82fLiJkBxf2773%2F15fn74HpEqkucU08IOjK68MrqiA7V1RhyI8raSZisUHHW76a0Syc%2Bva9cL1Qmi8tmME3b7ExMYZ3PghNtkwTLpKuId%2FNC85Dvag0C8nPS%2BajMLicm9X5XCd5unz57cWlONWhMUIlFag4NDfBxIg8QdXk%2BT7%2F7A0IXUHnJeL8gJwUhKrA0k2Y9NS9UVPQ8lQTpBaKvBxqNzg9lGJE3Ie%2FQYYHF%2B5%2Brj%2B7eeNN0KCECf9z8RRvm%2Bvo6vOg2RaSuERPl%2BjJElQOYPKpYZbqgwt%2FeJNCIK1hILW1E0gtbz2O14ijWsvzbOp3mk6rRcNW0HDbke9wSt2G7%2Fo%2B9ZCZEZvL5v8BAAD%2F%2FwEAAP%2F%2FNbg5GY0EAAA%3D
200 OK 7 B URL HTTP/1.1 governessmagnituderecoil.com/ren.gif?sid=H4sIAAAAAAAC%2F1RS32scVRi904SC%2BKJSEEHLij4oms382J3dNWAxxkgwbWqr6IvInXtnNre5M3e8d2ZnExCCQSmlD1v%2FgsnZpEEtVp%2Fsi0GmBcGAkPUpD%2BYf8EkKfZbdBqMfDN%2BZe86F853vfrWdHxMbOT1auKg2hJR0tlm3a6987DhztWWR5P1av%2B1%2F6jfmarr3Rsev26%2FW3g3Zmpp1bce2HdupLQodRqo%2FOyYh0jsdp96x6w237jQb6Ov%2F%2F5vcgqEWeO%2BYPAPBR9MPrHMQrEIS%2F7AQmrVMpa%2B%2FE%2BeSZkqjx%2Fc%2BTNYSVSSIT2GkLUTJ3okayhwu7kMluxO7UL1%2FhYEYEevXfQTJ3olJBL2dic9AIkwQ8CdR9CqEsoKgFZjaguCHBGAcl1aQxLcvKV3Q9ccsHbMjMv3oIUQxItN%2FnkMSfz8vRb92Vck8Eyox6EclRL%2BC6FZI8%2FvINs5AFPfBsi8g%2BO9k9tEyknhnxUgFwY9etjt%2BK%2BBBZ4b7UTTTiFh7hnqeM%2BO5QdSiHZs5bX8SkBAVRFRBhgNQYyEff8JCHlnIUwsxP6oxx3FaNmfUbncY83grDHxuO7QVOdSx%2FTZyNp5hgCwdgMkBmN5EqjexJr4%2BbL50%2BMlr0PkvMKslDLdgMoIeL1GEBIUhKChBIQiKjKDolbtcGteUt7k0eeCcdPeke%2BVQZd1tuquybpiQ7fSYPD2Ozzr74i2shUc1N%2BBt7tm24%2FnUj3jTDljQpK3IixrUcSMKI0oIc2Yy7IYYkamzW0jFiJyZ%2BxsBrWBkBSaeAs1fAC2GLdcGXR022jY2krtBaLJrtJcqndSZisFViTSbRrZubctj8txkk82fLiJkBxf2773%2F15fn74HpEqkucU08IOjK68MrqiA7V1RhyI8raSZisUHHW76a0Syc%2Bva9cL1Qmi8tmME3b7ExMYZ3PghNtkwTLpKuId%2FNC85Dvag0C8nPS%2BajMLicm9X5XCd5unz57cWlONWhMUIlFag4NDfBxIg8QdXk%2BT7%2F7A0IXUHnJeL8gJwUhKrA0k2Y9NS9UVPQ8lQTpBaKvBxqNzg9lGJE3Ie%2FQYYHF%2B5%2Brj%2B7eeNN0KCECf9z8RRvm%2Bvo6vOg2RaSuERPl%2BjJElQOYPKpYZbqgwt%2FeJNCIK1hILW1E0gtbz2O14ijWsvzbOp3mk6rRcNW0HDbke9wSt2G7%2Fo%2B9ZCZEZvL5v8BAAD%2F%2FwEAAP%2F%2FNbg5GY0EAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RS32scVRi904SC%2BKJSEEHLij4oms382J3dNWAxxkgwbWqr6IvInXtnNre5M3e8d2ZnExCCQSmlD1v%2FgsnZpEEtVp%2Fsi0GmBcGAkPUpD%2BYf8EkKfZbdBqMfDN%2BZe86F853vfrWdHxMbOT1auKg2hJR0tlm3a6987DhztWWR5P1av%2B1%2F6jfmarr3Rsev26%2FW3g3Zmpp1bce2HdupLQodRqo%2FOyYh0jsdp96x6w237jQb6Ov%2F%2F5vcgqEWeO%2BYPAPBR9MPrHMQrEIS%2F7AQmrVMpa%2B%2FE%2BeSZkqjx%2Fc%2BTNYSVSSIT2GkLUTJ3okayhwu7kMluxO7UL1%2FhYEYEevXfQTJ3olJBL2dic9AIkwQ8CdR9CqEsoKgFZjaguCHBGAcl1aQxLcvKV3Q9ccsHbMjMv3oIUQxItN%2FnkMSfz8vRb92Vck8Eyox6EclRL%2BC6FZI8%2FvINs5AFPfBsi8g%2BO9k9tEyknhnxUgFwY9etjt%2BK%2BBBZ4b7UTTTiFh7hnqeM%2BO5QdSiHZs5bX8SkBAVRFRBhgNQYyEff8JCHlnIUwsxP6oxx3FaNmfUbncY83grDHxuO7QVOdSx%2FTZyNp5hgCwdgMkBmN5EqjexJr4%2BbL50%2BMlr0PkvMKslDLdgMoIeL1GEBIUhKChBIQiKjKDolbtcGteUt7k0eeCcdPeke%2BVQZd1tuquybpiQ7fSYPD2Ozzr74i2shUc1N%2BBt7tm24%2FnUj3jTDljQpK3IixrUcSMKI0oIc2Yy7IYYkamzW0jFiJyZ%2BxsBrWBkBSaeAs1fAC2GLdcGXR022jY2krtBaLJrtJcqndSZisFViTSbRrZubctj8txkk82fLiJkBxf2773%2F15fn74HpEqkucU08IOjK68MrqiA7V1RhyI8raSZisUHHW76a0Syc%2Bva9cL1Qmi8tmME3b7ExMYZ3PghNtkwTLpKuId%2FNC85Dvag0C8nPS%2BajMLicm9X5XCd5unz57cWlONWhMUIlFag4NDfBxIg8QdXk%2BT7%2F7A0IXUHnJeL8gJwUhKrA0k2Y9NS9UVPQ8lQTpBaKvBxqNzg9lGJE3Ie%2FQYYHF%2B5%2Brj%2B7eeNN0KCECf9z8RRvm%2Bvo6vOg2RaSuERPl%2BjJElQOYPKpYZbqgwt%2FeJNCIK1hILW1E0gtbz2O14ijWsvzbOp3mk6rRcNW0HDbke9wSt2G7%2Fo%2B9ZCZEZvL5v8BAAD%2F%2FwEAAP%2F%2FNbg5GY0EAAA%3D HTTP/1.1
Host: governessmagnituderecoil.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Cookie: u_pl=17179025; uid_id2=0967bdb9-d6ff-4fc8-a331-32bf7a90c186:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Mon, 03 Oct 2022 23:46:10 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5cd3225247712050d875a5a214903958
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9146d25c45dab7180d18f0edd7d77e93
50824129baa7a1a6e2ef3263ede4777703b8f7e9
4060355b75eadcd014f6f7fd40016aad26684bb6a5b837fb515dd2242a20201c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4060355B75EADCD014F6F7FD40016AAD26684BB6A5B837FB515DD2242A20201C"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5604
Expires: Tue, 04 Oct 2022 01:19:34 GMT
Date: Mon, 03 Oct 2022 23:46:10 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 66909c9078632d44ebf4a15cd12a5595
c11a63fa7f302a0bafc7f20821d0e9ca9328f9d2
b525db57340ac0c9ac960f9e711431b1992008b5b1506d72e8260ad3743b8f3b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "B525DB57340AC0C9AC960F9E711431B1992008B5B1506D72E8260AD3743B8F3B"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5491
Expires: Tue, 04 Oct 2022 01:17:41 GMT
Date: Mon, 03 Oct 2022 23:46:10 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 66909c9078632d44ebf4a15cd12a5595
c11a63fa7f302a0bafc7f20821d0e9ca9328f9d2
b525db57340ac0c9ac960f9e711431b1992008b5b1506d72e8260ad3743b8f3b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "B525DB57340AC0C9AC960F9E711431B1992008B5B1506D72E8260AD3743B8F3B"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5491
Expires: Tue, 04 Oct 2022 01:17:41 GMT
Date: Mon, 03 Oct 2022 23:46:10 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 66909c9078632d44ebf4a15cd12a5595
c11a63fa7f302a0bafc7f20821d0e9ca9328f9d2
b525db57340ac0c9ac960f9e711431b1992008b5b1506d72e8260ad3743b8f3b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "B525DB57340AC0C9AC960F9E711431B1992008B5B1506D72E8260AD3743B8F3B"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5491
Expires: Tue, 04 Oct 2022 01:17:41 GMT
Date: Mon, 03 Oct 2022 23:46:10 GMT
Connection: keep-alive
governessmagnituderecoil.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F5d%2F1e%2F66%2F5d1e6654b79f5bf053b789353432e45e%2F1613739250.html&l=1274&fd=389
200 OK 0 B URL HTTP/1.1 governessmagnituderecoil.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F5d%2F1e%2F66%2F5d1e6654b79f5bf053b789353432e45e%2F1613739250.html&l=1274&fd=389
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F5d%2F1e%2F66%2F5d1e6654b79f5bf053b789353432e45e%2F1613739250.html&l=1274&fd=389 HTTP/1.1
Host: governessmagnituderecoil.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Cookie: u_pl=17179025; uid_id2=0967bdb9-d6ff-4fc8-a331-32bf7a90c186:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Mon, 03 Oct 2022 23:46:10 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 66909c9078632d44ebf4a15cd12a5595
c11a63fa7f302a0bafc7f20821d0e9ca9328f9d2
b525db57340ac0c9ac960f9e711431b1992008b5b1506d72e8260ad3743b8f3b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "B525DB57340AC0C9AC960F9E711431B1992008B5B1506D72E8260AD3743B8F3B"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5491
Expires: Tue, 04 Oct 2022 01:17:41 GMT
Date: Mon, 03 Oct 2022 23:46:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a81efbd7f92e8ab877070b2f9cd6247
389efbc67268d7460da1c041ecd8bd3de503bced
08f20e6c48dc1f16fb405a6e21df212677b34c1dcaf75335d163a3d1e18c40bc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08F20E6C48DC1F16FB405A6E21DF212677B34C1DCAF75335D163A3D1E18C40BC"
Last-Modified: Sun, 02 Oct 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13828
Expires: Tue, 04 Oct 2022 03:36:39 GMT
Date: Mon, 03 Oct 2022 23:46:11 GMT
Connection: keep-alive
governessmagnituderecoil.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Fwhatsapp%2Fcss%2Fanimate.css&l=79245&fd=123
200 OK 0 B URL HTTP/1.1 governessmagnituderecoil.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Fwhatsapp%2Fcss%2Fanimate.css&l=79245&fd=123
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Fwhatsapp%2Fcss%2Fanimate.css&l=79245&fd=123 HTTP/1.1
Host: governessmagnituderecoil.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Cookie: u_pl=17179025; uid_id2=0967bdb9-d6ff-4fc8-a331-32bf7a90c186:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Mon, 03 Oct 2022 23:46:11 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.cloudimagesb.com/si/c6/9a/f6/c69af62e3cbd0d91d332fbb8d334d20d/1664809088.jpg
200 OK 18 kB URL HTTP/2 cdn.cloudimagesb.com/si/c6/9a/f6/c69af62e3cbd0d91d332fbb8d334d20d/1664809088.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 134787da0bebf45283b62cd462fbbe5c
abcba8dbf3806bc9729947b296f9f8bcfae50923
fdb4a9fce0bb8aef8727ef30b222eb392858f6cbd5683d6709f130286f8981c8
GET /si/c6/9a/f6/c69af62e3cbd0d91d332fbb8d334d20d/1664809088.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:11 GMT
content-type: image/jpeg
content-length: 18489
server: nginx/1.17.6
last-modified: Mon, 03 Oct 2022 14:58:17 GMT
etag: "633af889-4839"
expires: Wed, 05 Oct 2022 23:46:11 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
governessmagnituderecoil.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Fwhatsapp%2Fjs%2Fscript.js&l=444&fd=118
200 OK 660 B URL HTTP/1.1 governessmagnituderecoil.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Fwhatsapp%2Fjs%2Fscript.js&l=444&fd=118
IP
ASN #39572 DataWeb Global Group B.V.
File type gzip compressed data, max compression\012- data
Hash 5860c780c8e9daa4f852038f02b5bdc2
c75c8b4db36bffe075ce493f06d011f855d5541a
f11b9f8e851e15c0c6abd53a9994c6dcef78ceeebd0f0b8bbde610fec8332c85
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Fwhatsapp%2Fjs%2Fscript.js&l=444&fd=118 HTTP/1.1
Host: governessmagnituderecoil.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Cookie: u_pl=17179025; uid_id2=0967bdb9-d6ff-4fc8-a331-32bf7a90c186:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Mon, 03 Oct 2022 23:46:11 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
governessmagnituderecoil.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Fwhatsapp%2Fcss%2Fstyle.css&l=6334&fd=125
200 OK 0 B URL HTTP/1.1 governessmagnituderecoil.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Fwhatsapp%2Fcss%2Fstyle.css&l=6334&fd=125
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Fwhatsapp%2Fcss%2Fstyle.css&l=6334&fd=125 HTTP/1.1
Host: governessmagnituderecoil.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Cookie: u_pl=17179025; uid_id2=0967bdb9-d6ff-4fc8-a331-32bf7a90c186:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Mon, 03 Oct 2022 23:46:11 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www3.bestjavporn.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Sep 2022 19:34:08 GMT
expires: Thu, 28 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 447123
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www3.bestjavporn.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Sep 2022 19:34:08 GMT
expires: Thu, 28 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 447123
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
governessmagnituderecoil.com/pixel/sbs?c=1
200 OK 0 B URL HTTP/1.1 governessmagnituderecoil.com/pixel/sbs?c=1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: governessmagnituderecoil.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Cookie: u_pl=17179025; uid_id2=0967bdb9-d6ff-4fc8-a331-32bf7a90c186:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Mon, 03 Oct 2022 23:46:11 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
governessmagnituderecoil.com/impr.gif?sid=H4sIAAAAAAAC%2F1RS32scVRi904SC%2BKJSEEHLij4oms3M%2Fl4DFmONFNMftoq%2BiNxfs73NnbnjvTM7m4AQDEopfdj6F0zOJg1qsfpkXwwyLQgGhKxPeTD%2FgE9S6LPsNhj9YPjO3HMunO9896vN7JD4yOjB2fNmTWlN55tVv%2FLKx0GwUFlWcTaoDDqtT1uNhYrtv9FtVf1XK%2B9KvmLma37g%2B4EfVJaUlaEZzE9IqORON6h2%2FWqjVg2aDQzs%2F%2F9d5sFRD6J%2FSJ6BEuPZB94pKF4ijn44K91KapLX34kyTVNj0Rc7H8YrscljRMcwtB7CeOdIDeP2l3Zh4u2pXZj%2Bv0KmxsT7dRcs3jkyCdbfmvpkGjIGE08i75eQuoSiJbjZgBL7BOACFy4ijm5fMDanq49ZOmHHZPbRQ6h8TGb%2FPIU4%2Bn5Rq0HlitFZqkzsMAgLqEEJ1SuRZPeRrp2Ayu%2BDp19Aid%2FJ%2FKNlxNHWRacNlDh42e%2B22kyw7pxoheFcI%2BSdOVqvB3P1GgvbtOvzoNOaBqRUCRWW0HII6jxkk095yEIPWeIhEgcVHgRB2xec%2Bp0u53XRlqwl%2FIC2w4AGfquDjE9mGCJNhuB6CG7Xkdh1rKiv95sv7X%2FyGmz2C9zVAk54cClBXxTIJUHuCHJKkCuCPCXI%2B8W20K7mittCu4wFR7121OvFyKS9Tbpt0p6MyWZySJ6exOedfPEWVuRBpcZER9R9P6i3aCsUTZ9x1qTtsB42aFALKZwqoNyJ6bBrakxmTm4gUWNyYuFvMFrC6RJcPQWavQCaj9o1H%2FTqqNHxsRbfZdKl12g%2FMTauchNBmAJJOot01dvUh%2BS56SabP52H5Htndu%2B9%2F9eXp%2B%2BB2wKJLXBNPSDo6eujyyYnW5dN7siPF5NURWqNTrZ8JaWpnPn2PbmaGyvOnXXDb97iE2IC73wgXbpMY6HiniPfLSohpF0ylkvy8zn3kWSXMnd1MbNxlixfenvpXJRY6ZwycQmq9t1NcDUmT1Azfb7PP3sDypawWYEo2yNHBWVK8GQdLjl278wMrD7WsMRDnhUjW2PHh1qNSe3hb9By78zdz%2B1nN2%2B8CcoKOPmfi8d4011Hz54GTTcQRwX6tkBfF6B6CJfNjNLE7p35oz4tMO2NmLbeFtNW33ocr1MHlbov2kyGss1ko9kIJRes2WQ%2BDzmri06HI3VjvpAu%2FgMAAP%2F%2FAQAA%2F%2F%2B1bOzxjQQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 governessmagnituderecoil.com/impr.gif?sid=H4sIAAAAAAAC%2F1RS32scVRi904SC%2BKJSEEHLij4oms3M%2Fl4DFmONFNMftoq%2BiNxfs73NnbnjvTM7m4AQDEopfdj6F0zOJg1qsfpkXwwyLQgGhKxPeTD%2FgE9S6LPsNhj9YPjO3HMunO9896vN7JD4yOjB2fNmTWlN55tVv%2FLKx0GwUFlWcTaoDDqtT1uNhYrtv9FtVf1XK%2B9KvmLma37g%2B4EfVJaUlaEZzE9IqORON6h2%2FWqjVg2aDQzs%2F%2F9d5sFRD6J%2FSJ6BEuPZB94pKF4ijn44K91KapLX34kyTVNj0Rc7H8YrscljRMcwtB7CeOdIDeP2l3Zh4u2pXZj%2Bv0KmxsT7dRcs3jkyCdbfmvpkGjIGE08i75eQuoSiJbjZgBL7BOACFy4ijm5fMDanq49ZOmHHZPbRQ6h8TGb%2FPIU4%2Bn5Rq0HlitFZqkzsMAgLqEEJ1SuRZPeRrp2Ayu%2BDp19Aid%2FJ%2FKNlxNHWRacNlDh42e%2B22kyw7pxoheFcI%2BSdOVqvB3P1GgvbtOvzoNOaBqRUCRWW0HII6jxkk095yEIPWeIhEgcVHgRB2xec%2Bp0u53XRlqwl%2FIC2w4AGfquDjE9mGCJNhuB6CG7Xkdh1rKiv95sv7X%2FyGmz2C9zVAk54cClBXxTIJUHuCHJKkCuCPCXI%2B8W20K7mittCu4wFR7121OvFyKS9Tbpt0p6MyWZySJ6exOedfPEWVuRBpcZER9R9P6i3aCsUTZ9x1qTtsB42aFALKZwqoNyJ6bBrakxmTm4gUWNyYuFvMFrC6RJcPQWavQCaj9o1H%2FTqqNHxsRbfZdKl12g%2FMTauchNBmAJJOot01dvUh%2BS56SabP52H5Htndu%2B9%2F9eXp%2B%2BB2wKJLXBNPSDo6eujyyYnW5dN7siPF5NURWqNTrZ8JaWpnPn2PbmaGyvOnXXDb97iE2IC73wgXbpMY6HiniPfLSohpF0ylkvy8zn3kWSXMnd1MbNxlixfenvpXJRY6ZwycQmq9t1NcDUmT1Azfb7PP3sDypawWYEo2yNHBWVK8GQdLjl278wMrD7WsMRDnhUjW2PHh1qNSe3hb9By78zdz%2B1nN2%2B8CcoKOPmfi8d4011Hz54GTTcQRwX6tkBfF6B6CJfNjNLE7p35oz4tMO2NmLbeFtNW33ocr1MHlbov2kyGss1ko9kIJRes2WQ%2BDzmri06HI3VjvpAu%2FgMAAP%2F%2FAQAA%2F%2F%2B1bOzxjQQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RS32scVRi904SC%2BKJSEEHLij4oms3M%2Fl4DFmONFNMftoq%2BiNxfs73NnbnjvTM7m4AQDEopfdj6F0zOJg1qsfpkXwwyLQgGhKxPeTD%2FgE9S6LPsNhj9YPjO3HMunO9896vN7JD4yOjB2fNmTWlN55tVv%2FLKx0GwUFlWcTaoDDqtT1uNhYrtv9FtVf1XK%2B9KvmLma37g%2B4EfVJaUlaEZzE9IqORON6h2%2FWqjVg2aDQzs%2F%2F9d5sFRD6J%2FSJ6BEuPZB94pKF4ijn44K91KapLX34kyTVNj0Rc7H8YrscljRMcwtB7CeOdIDeP2l3Zh4u2pXZj%2Bv0KmxsT7dRcs3jkyCdbfmvpkGjIGE08i75eQuoSiJbjZgBL7BOACFy4ijm5fMDanq49ZOmHHZPbRQ6h8TGb%2FPIU4%2Bn5Rq0HlitFZqkzsMAgLqEEJ1SuRZPeRrp2Ayu%2BDp19Aid%2FJ%2FKNlxNHWRacNlDh42e%2B22kyw7pxoheFcI%2BSdOVqvB3P1GgvbtOvzoNOaBqRUCRWW0HII6jxkk095yEIPWeIhEgcVHgRB2xec%2Bp0u53XRlqwl%2FIC2w4AGfquDjE9mGCJNhuB6CG7Xkdh1rKiv95sv7X%2FyGmz2C9zVAk54cClBXxTIJUHuCHJKkCuCPCXI%2B8W20K7mittCu4wFR7121OvFyKS9Tbpt0p6MyWZySJ6exOedfPEWVuRBpcZER9R9P6i3aCsUTZ9x1qTtsB42aFALKZwqoNyJ6bBrakxmTm4gUWNyYuFvMFrC6RJcPQWavQCaj9o1H%2FTqqNHxsRbfZdKl12g%2FMTauchNBmAJJOot01dvUh%2BS56SabP52H5Htndu%2B9%2F9eXp%2B%2BB2wKJLXBNPSDo6eujyyYnW5dN7siPF5NURWqNTrZ8JaWpnPn2PbmaGyvOnXXDb97iE2IC73wgXbpMY6HiniPfLSohpF0ylkvy8zn3kWSXMnd1MbNxlixfenvpXJRY6ZwycQmq9t1NcDUmT1Azfb7PP3sDypawWYEo2yNHBWVK8GQdLjl278wMrD7WsMRDnhUjW2PHh1qNSe3hb9By78zdz%2B1nN2%2B8CcoKOPmfi8d4011Hz54GTTcQRwX6tkBfF6B6CJfNjNLE7p35oz4tMO2NmLbeFtNW33ocr1MHlbov2kyGss1ko9kIJRes2WQ%2BDzmri06HI3VjvpAu%2FgMAAP%2F%2FAQAA%2F%2F%2B1bOzxjQQAAA%3D%3D HTTP/1.1
Host: governessmagnituderecoil.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Cookie: u_pl=17179025; uid_id2=0967bdb9-d6ff-4fc8-a331-32bf7a90c186:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Mon, 03 Oct 2022 23:46:11 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a26c5484a9a6b48308818ffc90838030
Strict-Transport-Security: max-age=0; includeSubdomains
adxadserv.com/px/heartbeat/v1?pv_uid=827252f2-6dec-4b48-9219-095ef0ef4080&t_op=5.3&p_nn=adxad-rtb&fpid_sa=1664840768129&fpid=06b61c45186b25aa28faa3141c74e735&feid_sa=1664840768129&sid_sa=1664840768129&feid=4617f372616be71225947b648be48ea9&sid=f807e6ded010178c176409138b84013b&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www3.bestjavporn.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=0&lb=0&cd=24&hc=16&dm=-1&dt=2&ed=0&sr=5497558139882&fb=10384
200 OK 0 B URL HTTP/1.1 adxadserv.com/px/heartbeat/v1?pv_uid=827252f2-6dec-4b48-9219-095ef0ef4080&t_op=5.3&p_nn=adxad-rtb&fpid_sa=1664840768129&fpid=06b61c45186b25aa28faa3141c74e735&feid_sa=1664840768129&sid_sa=1664840768129&feid=4617f372616be71225947b648be48ea9&sid=f807e6ded010178c176409138b84013b&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www3.bestjavporn.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=0&lb=0&cd=24&hc=16&dm=-1&dt=2&ed=0&sr=5497558139882&fb=10384
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /px/heartbeat/v1?pv_uid=827252f2-6dec-4b48-9219-095ef0ef4080&t_op=5.3&p_nn=adxad-rtb&fpid_sa=1664840768129&fpid=06b61c45186b25aa28faa3141c74e735&feid_sa=1664840768129&sid_sa=1664840768129&feid=4617f372616be71225947b648be48ea9&sid=f807e6ded010178c176409138b84013b&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www3.bestjavporn.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=0&lb=0&cd=24&hc=16&dm=-1&dt=2&ed=0&sr=5497558139882&fb=10384 HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1
Origin: https://ads.adxadserv.com
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Mon, 03 Oct 2022 23:46:13 GMT
Content-Length: 0
Connection: keep-alive
www3.bestjavporn.com/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.1.0
200 OK 0 B URL HTTP/2 www3.bestjavporn.com/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.1.0
IP
GET /wp-content/themes/retrotube/assets/js/navigation.js?ver=1.1.0 HTTP/1.1
Host: www3.bestjavporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:06 GMT
content-type: application/javascript
cf-connecting-ip: 85.165.146.201
cf-bgj: minify
cf-polished: origSize=6149
etag: W/"6336a64f-1805"
last-modified: Fri, 30 Sep 2022 08:18:23 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-rocket-args: ver=1.1.0
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/assets/js/navigation.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 28761
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dURYDnrki3fGIxAeG9vi5JjMQjnYuY8rEN1HFpbIv71047g%2BOC9%2BcW04qFov0PObp27CSfUM08kBf71J1GqqUfxMJFPDG6GDoOqEKZeekq4ZUMsc7hHvJolPuMRPvvK5%2Bgb5YHn%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75498e298a1f0b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
pics.pornfhd.com/digital/video/1dvdes00843/1dvdes00843pl.jpg
200 OK 0 B URL HTTP/2 pics.pornfhd.com/digital/video/1dvdes00843/1dvdes00843pl.jpg
IP
GET /digital/video/1dvdes00843/1dvdes00843pl.jpg HTTP/1.1
Host: pics.pornfhd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:07 GMT
content-type: image/jpeg
last-modified: Mon, 03 Oct 2016 00:04:06 GMT
vary: Accept-Encoding
etag: W/"57f1a076-39aa3"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 93961
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vYQK8kJSNuK7x8F7My8zG5lax0EJclHLUYapr58ZOPQGJYaeyhkjqBFbewYVDMPrcsB0Ps1UTTtmv%2BZlp1g9lXobMUo%2FwthVSn20nmMBW7vKZ0K3XrY90e06xkVsqfDrLTCm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75498e2a58b7889d-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pics.pornfhd.com/s/digital/video/miad00711/miad00711pl.jpg
200 OK 0 B URL HTTP/2 pics.pornfhd.com/s/digital/video/miad00711/miad00711pl.jpg
IP
GET /s/digital/video/miad00711/miad00711pl.jpg HTTP/1.1
Host: pics.pornfhd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:07 GMT
content-type: image/jpeg
last-modified: Thu, 28 Aug 2014 08:05:22 GMT
vary: Accept-Encoding
etag: W/"53fee2c2-8a16"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 400046
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BPH4zmtt8HmfRmLUfcyKgosVRP7l4Tons1ZEIcPWK5Bka1rR5JT6hdN81ZCGZ2sPwPubaNsuak%2F9Z3oK6pDJgJAJLKRkF4lvs21cZddL7akRHQqc8NwhSWlFhie%2F9G6EnPMy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75498e2c9c6c889d-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img.bestjavporn.net/favicon.ico
200 OK 0 B URL HTTP/2 img.bestjavporn.net/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: img.bestjavporn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:07 GMT
content-type: image/x-icon
last-modified: Thu, 16 Jul 2020 11:00:10 GMT
etag: W/"5f10333a-3c2e"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 116102
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mp4Uz30ftuhkYHc6Hmwg575exyMhyKtOWlLk3p8wTediFFiDsX3Q9m5LEMrguvNeA1jtw6fGlhINlndl0vH41BvtM%2BjEy0rqB06tao6fYGNi7wQoP%2Be0fjt9dneafF8p7k0KTT0e"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75498e2e09ae76d2-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www3.bestjavporn.com/wp-content/themes/retrotube/ajax-view.php
200 OK 0 B URL HTTP/2 www3.bestjavporn.com/wp-content/themes/retrotube/ajax-view.php
IP
POST /wp-content/themes/retrotube/ajax-view.php HTTP/1.1
Host: www3.bestjavporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 48
Origin: https://www3.bestjavporn.com
Connection: keep-alive
Referer: https://www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:07 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
cf-edge-cache: cache,platform=wordpress
cf-connecting-ip: 91.90.42.154
x-frame-options: SAMEORIGIN
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/ajax-view.php
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bAfDiSdBXGL0FkffT8HDtsFy3ISFZJld3YPCI2DZRbNKU2L8xL%2FDs1VWK5s%2BDerXzGPSIY5d5z0ww%2F26drQSlina7klLKjOMKxyPHFXTf6mxIBn4n6qYYTg0iBzT9duJJC%2FZFhZz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75498e2d4bd30b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/ssp/utility/social-media/whatsapp/css/animate.css
200 OK 0 B URL HTTP/2 cdn.sb4you1.com/sb/ssp/utility/social-media/whatsapp/css/animate.css
IP
GET /sb/ssp/utility/social-media/whatsapp/css/animate.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www3.bestjavporn.com
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:10 GMT
content-type: text/css
last-modified: Sat, 20 Feb 2021 08:44:40 GMT
etag: W/"6030cbf8-1358d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2721055
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rrJVRW3zONKmtGwtZzs9BtGP4amxm4RDua3k7ztyPvLKz4VpwiYFh6HqkoqhlxWV4v45ODSyKHfZLcI9NcWbVEXcqD1tDMaHD9Q5rXQsUVcmX8gnEMPB03h9%2BTalmDaqEak%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75498e424f5276ff-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/
200 OK 0 B URL HTTP/2 www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/
IP
GET /video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/ HTTP/1.1
Host: www3.bestjavporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:06 GMT
content-type: text/html; charset=UTF-8
cf-ray: 75498e2749050b39-OSL
cache-control: max-age=3600
last-modified: Mon, 03 Oct 2022 01:23:40 GMT
link: <https://www3.bestjavporn.com/wp-json/>; rel="https://api.w.org/", <https://www3.bestjavporn.com/?p=52277>; rel=shortlink
vary: Accept-Encoding
cf-cache-status: HIT
cf-apo-via: tcache
cf-connecting-ip: 2606:54c0:76a1:4910::10:127
cf-edge-cache: cache,platform=wordpress
x-frame-options: SAMEORIGIN
x-pingback: https://www3.bestjavporn.com/xmlrpc.php
x-rocket-nginx-serving-static: No
x-rocket-uri: /index.php
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aji%2FmoAKzZnK7cFIBSUP8xV9sf5Ub%2F2Dt%2F3FDIH2SS42JRXmiwM9N5XQtZbCBjJ5OqvtEu%2BFHEBCHbC288pKY35BioLg2z2A%2Bkq4hmgvMgHxpVhe5nWTRa1pZeqOl2fHkUytkWQS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
www3.bestjavporn.com/wp-content/themes/retrotube/assets/js/main.js?ver=1.4.2
200 OK 0 B URL HTTP/2 www3.bestjavporn.com/wp-content/themes/retrotube/assets/js/main.js?ver=1.4.2
IP
GET /wp-content/themes/retrotube/assets/js/main.js?ver=1.4.2 HTTP/1.1
Host: www3.bestjavporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:06 GMT
content-type: application/javascript
cf-connecting-ip: 193.213.6.182
cf-bgj: minify
cf-polished: origSize=51870
etag: W/"6336f837-ca9e"
last-modified: Fri, 30 Sep 2022 14:07:51 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-rocket-args: ver=1.4.2
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/assets/js/main.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 26886
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zGkWdzg83Yejw9ps9yWl9s3VZnG8V%2F4VErRehb3jCRPN0JuWYes1dvGUZ93rWtjnPRMSVcAGdWDUgpXvpNhNJ7FKv3FVAX%2BekFuSEzgLdn0Cz6BOOMct%2B1Nv5UWmKI5bxSBtCrbf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75498e299a220b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
www3.bestjavporn.com/wp-includes/js/comment-reply.min.js?ver=5.2.16
200 OK 0 B URL HTTP/2 www3.bestjavporn.com/wp-includes/js/comment-reply.min.js?ver=5.2.16
IP
GET /wp-includes/js/comment-reply.min.js?ver=5.2.16 HTTP/1.1
Host: www3.bestjavporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:06 GMT
content-type: application/javascript
last-modified: Thu, 15 Apr 2021 19:27:31 GMT
vary: Accept-Encoding
etag: W/"607893a3-870"
cf-connecting-ip: 86.114.193.182
x-frame-options: SAMEORIGIN
x-rocket-nginx-serving-static: No
x-rocket-args: ver=5.2.16
x-rocket-uri: /wp-includes/js/comment-reply.min.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 27879
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qeibYAriN90oyjDnXQ6edUkTIfzyxEtQBWzJ0pgm5yCtAQut%2B3duiP5GGEVxdNukmoK55qiP8XUG2jbuGGi0YGwUxqOxlN8xBtc0VHwciJUdNH%2FdrtyA5zFj8j%2Beck%2Fvwr5XgS5Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75498e29aa2f0b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans&display=swap
IP
GET /css?family=Open+Sans&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 03 Oct 2022 23:46:07 GMT
date: Mon, 03 Oct 2022 23:46:07 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.javhd.com/h5/files/15972/300x250.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2Fef7ed9bf-02b1-42a7-b41c-1a88029074bd%3Fcv1%3D8d836e31-4375-11ed-900a-e2e38133f3a0%26cv10%3D62fe56a361d6e272ea2a6a61%26cv2%3D4982d74cc5945eb5f443cbeab8c29c8c%26cv3%3Ddesktop%26cv4%3D62fe933961d6e278cd572307%26cv5%3D62fe933061d6e278cd572305%26cv6%3Den%26cv7%3DNTVA-Bestjavporn%26cv8%3DFirefox%26cv9%3D62fe56a361d6e272ea2a6a61%26externalId%3D8d836e31-4375-11ed-900a-e2e38133f3a0%26p%3DeyJiIjoyNzc0NTIsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3Nzc5fQ
200 OK 0 B URL HTTP/2 static.javhd.com/h5/files/15972/300x250.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2Fef7ed9bf-02b1-42a7-b41c-1a88029074bd%3Fcv1%3D8d836e31-4375-11ed-900a-e2e38133f3a0%26cv10%3D62fe56a361d6e272ea2a6a61%26cv2%3D4982d74cc5945eb5f443cbeab8c29c8c%26cv3%3Ddesktop%26cv4%3D62fe933961d6e278cd572307%26cv5%3D62fe933061d6e278cd572305%26cv6%3Den%26cv7%3DNTVA-Bestjavporn%26cv8%3DFirefox%26cv9%3D62fe56a361d6e272ea2a6a61%26externalId%3D8d836e31-4375-11ed-900a-e2e38133f3a0%26p%3DeyJiIjoyNzc0NTIsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3Nzc5fQ
IP
ASN #60068 Datacamp Limited
GET /h5/files/15972/300x250.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2Fef7ed9bf-02b1-42a7-b41c-1a88029074bd%3Fcv1%3D8d836e31-4375-11ed-900a-e2e38133f3a0%26cv10%3D62fe56a361d6e272ea2a6a61%26cv2%3D4982d74cc5945eb5f443cbeab8c29c8c%26cv3%3Ddesktop%26cv4%3D62fe933961d6e278cd572307%26cv5%3D62fe933061d6e278cd572305%26cv6%3Den%26cv7%3DNTVA-Bestjavporn%26cv8%3DFirefox%26cv9%3D62fe56a361d6e272ea2a6a61%26externalId%3D8d836e31-4375-11ed-900a-e2e38133f3a0%26p%3DeyJiIjoyNzc0NTIsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3Nzc5fQ HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r.trwl1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:08 GMT
content-type: text/html
last-modified: Wed, 20 Apr 2022 14:38:20 GMT
etag: W/"62601adc-c86"
expires: Wed, 02 Nov 2022 23:46:08 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-accel-expires: @1667432768
server: CDN77-Turbo
x-77-nzt: AblMCQ05c+6h
x-77-nzt-ray: 0rPvt1Iv11k
x-cache: MISS
x-77-pop: stockholmSE
x-77-cache: MISS
content-encoding: br
X-Firefox-Spdy: h2
static.javhd.com/h5/files/video/6461-19699-300x250.medium.mp4
206 Partial Content 0 B URL HTTP/2 static.javhd.com/h5/files/video/6461-19699-300x250.medium.mp4
IP
ASN #60068 Datacamp Limited
GET /h5/files/video/6461-19699-300x250.medium.mp4 HTTP/1.1
Host: static.javhd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://static.javhd.com/h5/files/16441/300x250.html?targetUrl=http%3A%2F%2Fr.trwl1.com%2Fc1%2Ff194c970-bc2d-4827-8b0a-7f39df13c295%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D237443%26cv5%3D794135%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzgxNTYsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjIsInAiOjEsInMiOjIxOTM5fQ
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Mon, 03 Oct 2022 23:46:09 GMT
content-type: video/mp4
content-length: 524664
last-modified: Tue, 26 Jul 2022 12:47:15 GMT
etag: "62dfe253-80178"
expires: Sun, 31 Jul 2022 08:21:00 GMT
cache-control: max-age=86400
access-control-allow-origin: *
x-accel-expires: @1664898108
server: CDN77-Turbo
x-77-nzt: AblMCQ24yM7/hXEAAA
x-77-nzt-ray: aBWdpHckOnc
x-cache: HIT
x-age: 29061
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-524663/524664
X-Firefox-Spdy: h2
cdn.barscreative1.com/sb/au/5d/1e/66/5d1e6654b79f5bf053b789353432e45e/1613739250.html
200 OK 0 B URL HTTP/2 cdn.barscreative1.com/sb/au/5d/1e/66/5d1e6654b79f5bf053b789353432e45e/1613739250.html
IP
ASN #39572 DataWeb Global Group B.V.
Analyzer Verdict Alert fortinet Phishing
GET /sb/au/5d/1e/66/5d1e6654b79f5bf053b789353432e45e/1613739250.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www3.bestjavporn.com
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:10 GMT
content-type: text/html; charset=utf-8
server: nginx/1.17.6
last-modified: Fri, 19 Feb 2021 12:54:16 GMT
etag: W/"602fb4f8-4fa"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Tue, 04 Oct 2022 00:46:10 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/ssp/utility/social-media/whatsapp/js/script.js
200 OK 0 B URL HTTP/2 cdn.sb4you1.com/sb/ssp/utility/social-media/whatsapp/js/script.js
IP
GET /sb/ssp/utility/social-media/whatsapp/js/script.js HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www3.bestjavporn.com
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:10 GMT
content-type: application/javascript
last-modified: Sat, 20 Feb 2021 08:47:14 GMT
etag: W/"6030cc92-1bc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 5318147
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YMKYd1u7%2B7dr%2FRqXgvq5Lg1meUCNEuhyQQcGXFi8IPH5XcjzCOIIwJi1NWOTIHFOVDPzGAO3IToquS5k7lmBfjXefmGpb83r7Kz0HCmFLQkmd3s6O9Pkj8t2nip7oK7L3Co%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75498e424f5b76ff-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pics.pornfhd.com/s/mono/movie/adult/atkd341/atkd341pl.jpg
200 OK 0 B URL HTTP/2 pics.pornfhd.com/s/mono/movie/adult/atkd341/atkd341pl.jpg
IP
GET /s/mono/movie/adult/atkd341/atkd341pl.jpg HTTP/1.1
Host: pics.pornfhd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:07 GMT
content-type: image/jpeg
last-modified: Fri, 02 Sep 2022 01:36:40 GMT
vary: Accept-Encoding
etag: W/"63115e28-ab94"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 159319
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TrLM5vSAj06eF9Ln%2BMPgJ%2BKXDPQ4xLbO6QhI8f2pYjBlGUM%2F7vkDxb5RsKzVaFPxRYkRLj7WZ69F5W1ZFALF84LhNsGxBmfDNuyy3jN%2Bjs2O2KJdGeabs7nsQmK5Yk92DqlY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75498e2c9c67889d-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www3.bestjavporn.com/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18
200 OK 0 B URL HTTP/2 www3.bestjavporn.com/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18
IP
GET /wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18 HTTP/1.1
Host: www3.bestjavporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:06 GMT
content-type: application/javascript
last-modified: Fri, 15 Jan 2021 20:53:56 GMT
vary: Accept-Encoding
etag: W/"600200e4-4fdb"
cf-connecting-ip: 145.14.97.233
x-frame-options: SAMEORIGIN
x-rocket-nginx-serving-static: No
x-rocket-args: ver=1.6.18
x-rocket-uri: /wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 31429
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u12aU5OoUau%2B5OXhwsv%2BY4qX%2Fo4qvayF5goRSNEgh5x8aCaq46mVu0t4w4mD8OFKrN7p20glSGR7k2EB36DJRCv2GmDzRINni%2BNDK1Alcpv%2FO9mM8nvj3ooJT5%2F8JTKQSx6LTRcl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75498e299a210b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/ssp/utility/social-media/whatsapp/img/close.svg
200 OK 0 B URL HTTP/2 cdn.sb4you1.com/sb/ssp/utility/social-media/whatsapp/img/close.svg
IP
GET /sb/ssp/utility/social-media/whatsapp/img/close.svg HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:10 GMT
content-type: image/svg+xml
last-modified: Thu, 11 Feb 2021 15:19:43 GMT
etag: W/"60254b0f-52a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 5319720
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w5pbE3uo8J7%2F42wF2bzS%2FZqWqd5zHoIIDIbogO7xOSpU44Eb3PVwZ3uPgt%2BR5jBhXAxxxnGcYbP4aaYcK0eaNRk7%2F6xQryHr2GL1d2f56Gd%2FrzE7EeoNS9l7g9ufB7i%2F1lE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75498e426f7d76ff-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pics.pornfhd.com/s/mono/movie/adult/mmb431/mmb431pl.jpg
200 OK 0 B URL HTTP/2 pics.pornfhd.com/s/mono/movie/adult/mmb431/mmb431pl.jpg
IP
GET /s/mono/movie/adult/mmb431/mmb431pl.jpg HTTP/1.1
Host: pics.pornfhd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:07 GMT
content-type: image/jpeg
last-modified: Mon, 29 Aug 2022 07:39:25 GMT
vary: Accept-Encoding
etag: W/"630c6d2d-c4c1"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 81909
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RlEvaFKJ8nOFBgMj0kxB143S4G3XMHgVzA91QAwn3MioLX5F0qu%2BCIBUO4hliVpzI6%2Fcf%2BYFbQUx19q0HUKOreQ%2BpMy1kvW6ZXOWEfnDxjPQwyxCOWGWtoxghGUor865LBVX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75498e2c9c63889d-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www3.bestjavporn.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
200 OK 0 B URL HTTP/2 www3.bestjavporn.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: www3.bestjavporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:06 GMT
content-type: application/javascript
last-modified: Mon, 26 Sep 2022 11:11:52 GMT
etag: W/"633188f8-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2%2FjWgAgBfEzFWfAor2vS%2B8lqgehSLT8vCOXMQidrBmsP8Q3KEw5neIkZfn10Kw3P8bZ%2FFPnbIq2wvbWcF9uHZH%2B5hwdSCqIkKNCnjtBMlosGw0PRiNeb2lvzcK%2F28pFJhJkq6ZW3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75498e298a1c0b39-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Wed, 05 Oct 2022 23:46:06 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
www3.bestjavporn.com/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0
200 OK 0 B URL HTTP/2 www3.bestjavporn.com/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0
IP
GET /wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 HTTP/1.1
Host: www3.bestjavporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:06 GMT
content-type: application/javascript
cf-connecting-ip: 95.109.44.254
cf-bgj: minify
cf-polished: origSize=683
etag: W/"600200e4-2ab"
last-modified: Fri, 15 Jan 2021 20:53:56 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-rocket-args: ver=1.0.0
x-rocket-nginx-serving-static: No
x-rocket-uri: /wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js
cache-control: max-age=3600
cf-cache-status: HIT
age: 62675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DT%2BiHGI88DMaZRNHpmGRB98MKUrOqw%2B1%2F%2BSGfoKTpfNc%2FQ7%2BSWkBmpnj87oT0T7AluCWyF45r0Iv8QoNe6w%2BucN2lTpdU%2FzxO9pfWC1ZHmf7KHyiI3Fw6bwUhfFQR3XLtcMpgVyB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75498e29aa2b0b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
asg.phukienthoitranggiare.com/api/spots/184920?host=www3.bestjavporn.com&ev=196&wh=939&ww=1280
200 OK 0 B URL HTTP/2 asg.phukienthoitranggiare.com/api/spots/184920?host=www3.bestjavporn.com&ev=196&wh=939&ww=1280
IP
ASN #24940 Hetzner Online GmbH
GET /api/spots/184920?host=www3.bestjavporn.com&ev=196&wh=939&ww=1280 HTTP/1.1
Host: asg.phukienthoitranggiare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 03 Oct 2022 23:46:09 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
set-cookie: nauid=5Ym2GCn8rTmVrCg5NjRp; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
www3.bestjavporn.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0
200 OK 0 B URL HTTP/2 www3.bestjavporn.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0
IP
GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: www3.bestjavporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www3.bestjavporn.com/video/dvdes-843-porn-movies-online-rina-hatsumi-saki-hatsumi-all-in-the-family-truth-or-dare-with-a-milf-and-her-four-daughters-all-five-girls-monopolize-their/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:06 GMT
content-type: text/css
last-modified: Fri, 30 Sep 2022 08:18:23 GMT
vary: Accept-Encoding
etag: W/"6336a64f-7a75"
cf-connecting-ip: 145.14.97.233
x-frame-options: SAMEORIGIN
x-rocket-nginx-serving-static: No
x-rocket-args: ver=4.7.0
x-rocket-uri: /wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css
cache-control: max-age=3600
cf-cache-status: HIT
age: 31430
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N1Vh9B%2FDcbfIbx5Dk7HiG%2FsR88OWciq%2FoFunV3DHpC06U1oR1At2RW23xcjXvkNEvJrplerCTTre%2BzKL8WWAjlcltYUMhs5EqwmUFvRNHlUpYzRMdjkOz9QZ%2Bhl%2BBuhHiCaF%2F40W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75498e297a100b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
pics.pornfhd.com/s/digital/video/cjod00178/cjod00178pl.jpg
200 OK 0 B URL HTTP/2 pics.pornfhd.com/s/digital/video/cjod00178/cjod00178pl.jpg
IP
GET /s/digital/video/cjod00178/cjod00178pl.jpg HTTP/1.1
Host: pics.pornfhd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 23:46:07 GMT
content-type: image/jpeg
last-modified: Thu, 24 Jan 2019 23:12:51 GMT
vary: Accept-Encoding
etag: W/"5c4a4673-bd10"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 941915
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HO8TAGYNTBG8jLvIMDt2pRg9in6KJF3%2BeS65dO4gHH%2FYP7eMlwyA6UxNquOd7VAoJAVssBnGEi20GYRk7%2FhiQXvv4CLXR5zlwcfmLn6Vgwpb9bItP1N2T7H1PMpEz3bunpXT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75498e2c9c6a889d-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
172.67.68.13
23.36.77.32
185.76.9.22
135.181.208.216
104.21.235.64
185.94.236.247
3.66.118.16
93.184.220.29