dailyporn.club/watch/lilly-layva-car-fuck/
301 Moved Permanently 0 B URL HTTP/1.1 dailyporn.club/watch/lilly-layva-car-fuck/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch/lilly-layva-car-fuck/ HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 04 Dec 2022 22:43:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 04 Dec 2022 23:43:14 GMT
Location: https://dailyporn.club/watch/lilly-layva-car-fuck/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4gN%2FTQJEz40U9LZgy0MMGeglz%2Fx2hWGNfVntSDOwIhPMJKQ9Ddoz1xbh2rPzHqTSDRJPMJffjEBde4czOsDvFfUwtwxL0f4G4P1ZHiuzChA%2F3mnvNhiT0zDM%2BtpFfRVvig%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77480f4fee52743b-LHR
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8102
Expires: Mon, 05 Dec 2022 00:58:16 GMT
Date: Sun, 04 Dec 2022 22:43:14 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash fb2c0697c6d9a96a5411dd2952947458
79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4
3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2518
Cache-Control: max-age=131401
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:43:14 GMT
Etag: "638c76f5-1d7"
Expires: Tue, 06 Dec 2022 11:13:15 GMT
Last-Modified: Sun, 04 Dec 2022 10:31:17 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 04 Dec 2022 22:18:24 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1490
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4060
Expires: Sun, 04 Dec 2022 23:50:54 GMT
Date: Sun, 04 Dec 2022 22:43:14 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: nDGNjqzSP47A3vsOoa84vD2cBsu+bpzFevxx/VAciBfV8ziJcTDmdvQlbLojY56zn5G6eMC4G9w=
x-amz-request-id: KEV89HDX6VG07XD1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 04 Dec 2022 21:47:43 GMT
age: 3331
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 1ab3b90662e5b0dca23dc46ba524e0f2
0101e6d61a3e7e2082f8a430a196fc37dd8da6ae
8ea15ab72cbe3f45ee597daf2957d343c2b6a0a442ea176be1dfc81e988d9404
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 152
Cache-Control: max-age=124363
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:43:14 GMT
Etag: "638c64b5-117"
Expires: Tue, 06 Dec 2022 09:15:57 GMT
Last-Modified: Sun, 04 Dec 2022 09:13:25 GMT
Server: ECS (amb/6B7C)
X-Cache: HIT
Content-Length: 279
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 22:43:14 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.slim.min.js
200 OK 22 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.slim.min.js
IP
File type ASCII text, with very long lines (65241)
Hash 4adf3071d9c336f9f45a00f064e4607e
7cd00a057fdd3efddb1357bad8509172f093a8fc
bbc7ae78b342920166360e191a11d880758f57c077f1a52b1acb6e8891515d30
GET /ajax/libs/jquery/3.6.0/jquery.slim.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dailyporn.club
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 22329
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-11ab4"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 19159581
expires: Fri, 24 Nov 2023 22:43:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YAeJ%2BTGOxYFZoemorprdqX%2FX5hFNrQATYpaEFDi%2BbxBSs8zIlF5Un8ds5JlaWptKVJCin3oMnTGNZRFpwqWPkdFTL73TzUzVjDdMvCJmPxH7RBDpZpoqVcLZYEjsOlq6UWLHq%2B1S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77480f53fcb10b65-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.0/lazysizes.min.js
200 OK 3.2 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.0/lazysizes.min.js
IP
File type ASCII text, with very long lines (7862)
Hash 84b29a85e9b1ac0f746206cf453253fa
bbd86752badc5d0e0b048c4b2098dd17072aca70
c10fce5f80054f9ce23b201029368b8804a504b84724479464fd0e906c4ae1eb
GET /ajax/libs/lazysizes/5.3.0/lazysizes.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 3150
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5ff0b799-1ed1"
last-modified: Sat, 02 Jan 2021 18:12:41 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 15637941
expires: Fri, 24 Nov 2023 22:43:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RHF2vlP2BmxlNuKfYSadv8NZufwq%2B1ZEd7OR3MXVT6yNy%2Fz71QlPbGUYNEbPSgxkjA6RkulgdlMgGiV1FLtAct16pjnhngmAL%2FIfvz7xDqSZDWQKWdYxC1A%2FXqdNd9m3CiWV6TLP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77480f541c74b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.fluidplayer.com/v3/current/fluidplayer.min.js
200 OK 47 kB URL HTTP/1.1 cdn.fluidplayer.com/v3/current/fluidplayer.min.js
IP
File type ASCII text, with very long lines (62751)
Hash a600a1d5894852aa5e6f4a063a491bc2
45290012903acf8301dc95e20610ab6f76a154b3
4b6168065d3487bc14b0ce3b81212293a5bb0108ac4a24857298e2095be742ca
GET /v3/current/fluidplayer.min.js HTTP/1.1
Host: cdn.fluidplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 22:43:15 GMT
Connection: Keep-Alive
ETag: "1666105328"
Cache-Control: max-age=58826
Content-Encoding: gzip
Content-Length: 46959
Content-Type: application/javascript
Last-Modified: Tue, 18 Oct 2022 15:02:08 GMT
Accept-Ranges: bytes
X-HW: 1670193795.dop009.sk1.t,1670193795.cds203.sk1.shn,1670193795.cds203.sk1.c
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:43:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:43:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dailyporn.club/img/prism.png
200 OK 9.7 kB URL HTTP/2 dailyporn.club/img/prism.png
IP
File type PNG image data, 400 x 400, 4-bit colormap, non-interlaced\012- data
Hash eac71941e1cbb5fb308359bfd9fd5f0a
d403667d133eb7c015208580b9e8e00b4d425757
9479c874360d933932901cc49d9671c778e84c92c31b954a8cb281c111766604
GET /img/prism.png HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyporn.club/style.css?v=87
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: image/png
content-length: 9697
cache-control: public, max-age=5356800
expires: Fri, 04 Nov 2022 19:43:14 GMT
etag: "25e1-61d896a7-1f14d;;;"
last-modified: Fri, 07 Jan 2022 19:38:15 GMT
cf-cache-status: HIT
age: 174506
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S9QiwWtUpHMOEZ9YwMhkBvZ4dOd3d3yTTmCvwoLjDfTd8D7bhLDgwrjLTaGAOaFV%2B8315GtEqatHPbuEwU9DQKVkUYuGzbVWdq2myv3%2FyiiUjW7AzywLo8AYy9tXWatbnA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f54f9b87761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:43:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dailyporn.club/img/dailyporn_back.png
200 OK 1.9 kB URL HTTP/2 dailyporn.club/img/dailyporn_back.png
IP
File type PNG image data, 81 x 59, 8-bit/color RGBA, non-interlaced\012- data
Hash b0ac5f71973e606ec64555650ddf9b92
b9460476a9842cc03efc9aa0ede21755c5050af2
81671debeb3dfcd5431e7f5a38a3e82b6201745a77452e6e6834a44c7c94dfdd
GET /img/dailyporn_back.png HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyporn.club/style.css?v=87
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: image/png
content-length: 1860
cache-control: public, max-age=5356800
expires: Thu, 03 Mar 2022 14:42:39 GMT
etag: "744-61d896a6-1f144;;;"
last-modified: Fri, 07 Jan 2022 19:38:14 GMT
cf-cache-status: HIT
age: 182245
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sLDw3OslT3sWlNFxTCcCKMuDImWoBGzKvqp9Rm1dAxz1wLfBhB87naZd9xMPPBtVI3PtMUOloIXDMw5bdbVzstUsPma7tlsY%2FAAMUB3EQUm5S5mPMcvKB6mnRcN4gbnQmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f556a807761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 6e1ef2ff80de1e6622ed18f0b3812ad8
587c06892ded462c7e6189ce335dcc16747bb5d0
e04522e45330d0b0710224059734015b38266392db0a6e442351db418548470c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4199
Cache-Control: max-age=107519
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:43:15 GMT
Etag: "638c131b-116"
Expires: Tue, 06 Dec 2022 04:35:14 GMT
Last-Modified: Sun, 04 Dec 2022 03:25:15 GMT
Server: ECS (amb/6B7C)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 279 B IP
Hash 4565b4d4233caab2154ed1afdf70665b
5f7782939b120d383d31bbfcefb068cb24f61302
a77b1ec325a3430cdb73efaf27d5ed4c04b5c8cd138431f5f02acc5ab30fe6b7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1651
Cache-Control: max-age=96323
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:43:15 GMT
Etag: "638bf153-117"
Expires: Tue, 06 Dec 2022 01:28:38 GMT
Last-Modified: Sun, 04 Dec 2022 01:01:07 GMT
Server: ECS (amb/6B7C)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 278 B IP
Hash 6e1ef2ff80de1e6622ed18f0b3812ad8
587c06892ded462c7e6189ce335dcc16747bb5d0
e04522e45330d0b0710224059734015b38266392db0a6e442351db418548470c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4199
Cache-Control: max-age=107519
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:43:15 GMT
Etag: "638c131b-116"
Expires: Tue, 06 Dec 2022 04:35:14 GMT
Last-Modified: Sun, 04 Dec 2022 03:25:15 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 278
a.realsrv.com/ad-provider.js
200 OK 26 kB URL HTTP/2 a.realsrv.com/ad-provider.js
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (51260)
Hash 718817071c67ca4ffb6ddf329f306fe8
bebc203c5eb46039498da02583987884a015da13
31c918b416597513d2a2a98462d9a0933f5b86b47d85fc576915693e25de2746
GET /ad-provider.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: application/javascript
etag: W/"f26c91d131ffc1bbddb296d644e"
expires: Fri, 02 Dec 2022 12:50:41 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1670201487
server: CDN77-Turbo
x-77-nzt: AblMCRQzl3H/JAwAAA
x-77-nzt-ray: af5856305096de2183228d630e27940e
x-cache: HIT
x-age: 3108
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 4565b4d4233caab2154ed1afdf70665b
5f7782939b120d383d31bbfcefb068cb24f61302
a77b1ec325a3430cdb73efaf27d5ed4c04b5c8cd138431f5f02acc5ab30fe6b7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1651
Cache-Control: max-age=96323
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:43:15 GMT
Etag: "638bf153-117"
Expires: Tue, 06 Dec 2022 01:28:38 GMT
Last-Modified: Sun, 04 Dec 2022 01:01:07 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/1/7/1/s/1/171s1os7nr50r643546pp26o757p5n951653632525-134.wct.jpg
200 OK 7.5 kB URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/1/7/1/s/1/171s1os7nr50r643546pp26o757p5n951653632525-134.wct.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 237x154, components 3\012- data
Hash 8d8cb9e083561aa980643d3333b2ff54
0ccebc52d0122e56f0d53b0849b1c8b42cbeb9f3
43dc2a06da3fd0713cb0f555d7f30f554cd818ec6e82444b25ce100ab3359176
GET /images/pqar-cvpf.lbhwvmm.pbz/1/7/1/s/1/171s1os7nr50r643546pp26o757p5n951653632525-134.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: image/jpeg
content-length: 7546
cache-control: public, max-age=5356800
expires: Sat, 10 Dec 2022 15:01:24 GMT
x-litespeed-cache: miss
last-modified: Sat, 03 Dec 2022 15:01:24 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fQ67kEVQkMAyil24bJ7fSM96wa6MJBXIVSCVvfgox3fx84c6k%2FLPjkJOy2Sk5RQ0efZvtYjlx5pUKQYVA9UsEHgd97kp2X7FpCMemuhNTIK2k0diM2VgFvwVlNaYpIrvoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f56ac6e7761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/p/4/3/7/1/p4371nn9881qn41qn6sn18r16p3670991653174122-94.wct.jpg
200 OK 7.6 kB URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/p/4/3/7/1/p4371nn9881qn41qn6sn18r16p3670991653174122-94.wct.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 237x154, components 3\012- data
Hash 3d04f39f58e141b2069888ea73db5831
88171ea3000197f6d0b485a8eadb19e8e0c3aa7f
8fb98653da2ba843328bd1b8a0ba42e42cba3961636e70f03423246e8e1ac177
GET /images/pqar-cvpf.lbhwvmm.pbz/p/4/3/7/1/p4371nn9881qn41qn6sn18r16p3670991653174122-94.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: image/jpeg
content-length: 7646
cache-control: public, max-age=5356800
expires: Thu, 08 Dec 2022 06:51:51 GMT
x-litespeed-cache: miss
last-modified: Thu, 01 Dec 2022 06:51:51 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wSobikPdnAvNRqRb8ExIRLWUqrB8nzbPdFzu443jX2XQMDlPVGTbfDPoIGhUkUkQr80i7Ct5v9aILisqW4fxDujYRCrM7En4RFA%2BskVr2BSG1JH9UL9vmFB5q5m7ghhgsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f56bca37761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/3/1/0/r/o/310roopprn3o9p7qq340r92414r3q0r81662508684-133.wct.jpg
200 OK 8.3 kB URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/3/1/0/r/o/310roopprn3o9p7qq340r92414r3q0r81662508684-133.wct.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 237x154, components 3\012- data
Hash af7c92d0a2d055a82ddb12867c2cdc65
9b33452d7386131c02134ac1343cc5a055dbc4fa
238dc2bcbdab2de6acc53e65580358f3057a22cfbf1aeb812123cb3f7556aa83
GET /images/pqar-cvpf.lbhwvmm.pbz/3/1/0/r/o/310roopprn3o9p7qq340r92414r3q0r81662508684-133.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: image/jpeg
content-length: 8290
cache-control: public, max-age=5356800
expires: Mon, 05 Dec 2022 10:48:54 GMT
x-litespeed-cache: miss
last-modified: Mon, 28 Nov 2022 10:48:55 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7vZr9lXoDUmqfUdSFGG12raUIZuCNFiwmCoG8KFfqtEprsW44WNlGAgCX%2ByP%2BHC94iag%2BfakwcrGRmxDCyMbrtIFaXH4mSaX5pNXZE%2BlTUFdO%2B2ynxZn5cXFz98nVjXAEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f56ccbb7761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 04 Dec 2022 22:11:19 GMT
cache-control: public,max-age=3600
age: 1916
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8cb9f43232d3ffe2f67524c7de4fce2a
df8c2c02d1b269d37aa25c201620b6bf295896f2
38a8851d279f731d038b8e11c5b891e9dbdf095d3c9feb184b32e4345605d271
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "38A8851D279F731D038B8E11C5B891E9DBDF095D3C9FEB184B32E4345605D271"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2893
Expires: Sun, 04 Dec 2022 23:31:28 GMT
Date: Sun, 04 Dec 2022 22:43:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8cb9f43232d3ffe2f67524c7de4fce2a
df8c2c02d1b269d37aa25c201620b6bf295896f2
38a8851d279f731d038b8e11c5b891e9dbdf095d3c9feb184b32e4345605d271
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "38A8851D279F731D038B8E11C5B891E9DBDF095D3C9FEB184B32E4345605D271"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2893
Expires: Sun, 04 Dec 2022 23:31:28 GMT
Date: Sun, 04 Dec 2022 22:43:15 GMT
Connection: keep-alive
sexufly.com/webcam_native_one.php?id=GfDxBjMfili
200 OK 1.7 kB URL HTTP/2 sexufly.com/webcam_native_one.php?id=GfDxBjMfili
IP
File type HTML document, ASCII text, with very long lines (1651), with CRLF line terminators
Hash 3b3e208a806e365f93f043c5158d09b6
4b924905e1e2938f1db1fdee3e94cf234e0779da
2580721ead2818cf0e1e664d87a61e310de7d12693e81ed59e1997924f91d621
GET /webcam_native_one.php?id=GfDxBjMfili HTTP/1.1
Host: sexufly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sexufly.com/jfPbyZosb2.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Sun, 11 Dec 2022 22:27:31 GMT
x-litespeed-cache: hit
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t%2FsylYdRNFff%2BzFsmOOo1eC59NcPIf%2BwOTP%2BGCQBXT3L4z3Z5p18Otj%2B6AdODwddCRbtfyW4t1vD6zca7ZvGcrmajHPGCQ%2BLPZj%2F9i42u8txxLDvBfqmG8PGaiFQ7w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77480f5629271c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dailyporn.club/mp4/3400008837/lilly-layva-car-fuck.mp4
302 Found 0 B URL HTTP/2 dailyporn.club/mp4/3400008837/lilly-layva-car-fuck.mp4
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mp4/3400008837/lilly-layva-car-fuck.mp4 HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: video/mp4
content-length: 0
location: https://cdne-mobile.youjizz.com/videos/1/f/d/b/f/1fdbf6c89690277674ee4e366406ea901657198804-426-240-449-h264.mp4?validfrom=1670107395&validto=1670280195&rate=86208&hash=%2BDOzaIQQR%2FmlXSKmHkN5yhi59b4%3D
x-litespeed-cache-control: no-cache
x-rack-cache: MISS
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BMoDjtBS10ACkwZ2MrbJ6hLxeHWQkDNYtk54d3UKODn743GgyOQlX%2Fed95ECEJC%2BB8gpOSy8%2FL2Gs0UQDgBVIy13JK8EuLxvejRZWgXlnCeoX3wROA9fS2P7w8Os4PhxrA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77480f54b9417761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
roomimg.stream.highwebmedia.com/minifap/amandamedrano.jpg
200 OK 6.7 kB URL HTTP/2 roomimg.stream.highwebmedia.com/minifap/amandamedrano.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 360x270, components 3\012- data
Hash c750f7ee133c5d6b6b8614683a0d1d88
3462c5f62f6f62fa08e80689bd817bcd2452dab8
12787ecc4ec196ea85315cb5e67f342c52ad8e901d3696d8172b457cd5d284ec
GET /minifap/amandamedrano.jpg HTTP/1.1
Host: roomimg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sexufly.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: image/jpeg
content-length: 6683
cache-control: no-cache, must-revalidate
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
x-frame-options: DENY
cf-cache-status: MISS
last-modified: Sun, 04 Dec 2022 22:43:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DiMXMqrUTIY%2Far%2FFR5DaIEuEGRQXvHhoEbXHvkdtaIMKr8jCxT8TzfdL6tGc16qaldaYWoZ9as30p4RpuWR4Cc0OEAr7AROvF%2Fe%2BEg15D5DuuunXBZ%2F1ZWk4l42k%2FfQJoldhtadtVUjBQzSF%2FpT%2Ff0Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=WPQNfkdGvtjypPXJEahF.4LSr3G2X8uIuy339HFyvRI-1670193795981-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 77480f588a260b59-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/4/4/3/4434ro584q5pr4156r08r33sqr9n716q1656954605-1920-1080-4318-u264.zc4-9.wct.jpg
200 OK 23 kB URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/4/4/3/4434ro584q5pr4156r08r33sqr9n716q1656954605-1920-1080-4318-u264.zc4-9.wct.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 237x154, components 3\012- data
Hash 3999b5815a5063abaebb17522088f6b8
a41abcd614f2a5e44361d26f7b3ed46a4321fb6b
3c1577394ac6dc812c7d0ea5edf0fc24064b953a4b98450a2e38835623f1d361
GET /images/pqar-cvpf.lbhwvmm.pbz/4/4/3/4434ro584q5pr4156r08r33sqr9n716q1656954605-1920-1080-4318-u264.zc4-9.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: image/jpeg
content-length: 22835
cache-control: public, max-age=5356800
expires: Thu, 08 Dec 2022 14:26:59 GMT
x-litespeed-cache: miss
last-modified: Thu, 01 Dec 2022 14:26:59 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zQZ6owUKOEWPtla4loci7jWsrhHdnWx%2FwQzvY44In7cUjA%2Ba6LielQRAW%2B9A1Lt72oAe4lYk7HhSfEiMCwu2TXnXUSaqbNwSPX8M%2F0juOhqgDhgKdfnH7lfyVspsGsgP9w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f58a8367761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/9/q/1/6/o/9q16o0265rnq2106o18965qn2264o7491669359246-77.wct.jpg
200 OK 8.1 kB URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/9/q/1/6/o/9q16o0265rnq2106o18965qn2264o7491669359246-77.wct.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 237x154, components 3\012- data
Hash e6a6f73a0dcba6e572e5ac3fd6bb89ef
b53d47b6b5dc0d0fef82f21da5846429f61f2b30
d731c329ceea4ac488683bb53f79f4086243a8adb94304db25750684b79b40a9
GET /images/pqar-cvpf.lbhwvmm.pbz/9/q/1/6/o/9q16o0265rnq2106o18965qn2264o7491669359246-77.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: image/jpeg
content-length: 8149
cache-control: public, max-age=5356800
expires: Sun, 11 Dec 2022 07:49:41 GMT
x-litespeed-cache: miss
last-modified: Sun, 04 Dec 2022 07:49:41 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XtcxTg1HIEkowqITWECRFynWRO2dOf0PDJZuqDtG%2F5RgXy7dsa%2BFFmjL2ssRZ1CuEXz%2Bnjc%2F9RzuISSgKOsYyh498Rv1Ks0rDBRh8FA7DZHpI%2BxL5t5UXoOfxkdJ3HXCLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f58a8417761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/4/s/s/4ss6r208o493115103qp07o27p2259891644830283-1436-1080-3359-u264.zc4-9.wct.jpg
200 OK 9.2 kB URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/4/s/s/4ss6r208o493115103qp07o27p2259891644830283-1436-1080-3359-u264.zc4-9.wct.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 237x154, components 3\012- data
Hash daf8f70dd58fedf39cfb79b03fbf299d
ac972b1b6386a8bde5a758a29b6a074e618bb263
c7311965f2bfba24294db4f4e333d0a853adf817f290b292672a0e4aedb88279
GET /images/pqar-cvpf.lbhwvmm.pbz/4/s/s/4ss6r208o493115103qp07o27p2259891644830283-1436-1080-3359-u264.zc4-9.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: image/jpeg
content-length: 9158
cache-control: public, max-age=5356800
expires: Sat, 10 Dec 2022 15:01:32 GMT
x-litespeed-cache: miss
last-modified: Sat, 03 Dec 2022 15:01:32 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dh6HPWU9t2gZ7BFyTQn73nYRQKQbSr6StOJg8sDKkEsEdpbR%2FtnbQD9yy6gVrte1zOWU76XFxD3MX2phSFi4Lo6nSLHP%2FBmcajY7JptZ0HbSRMtqijwcZIfnRKBIUdyyYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f58a8537761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/r/8/s/r8spn3r62291n75s8pq0n2p1n6qn81oq1641027723-3840-2160-5310-u264.zc4-9.wct.jpg
200 OK 8.1 kB URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/r/8/s/r8spn3r62291n75s8pq0n2p1n6qn81oq1641027723-3840-2160-5310-u264.zc4-9.wct.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 237x154, components 3\012- data
Hash 0d1593a1f4cfef8a0e2e47e7f7229e21
0da18658a37b747cf5af2891d05433c9a4777c90
62e4e9e360c8d099229d4534811854e8b5c69c0c1f524238a573616f5eb6d8d3
GET /images/pqar-cvpf.lbhwvmm.pbz/r/8/s/r8spn3r62291n75s8pq0n2p1n6qn81oq1641027723-3840-2160-5310-u264.zc4-9.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: image/jpeg
content-length: 8063
cache-control: public, max-age=5356800
expires: Sat, 10 Dec 2022 15:01:27 GMT
x-litespeed-cache: miss
last-modified: Sat, 03 Dec 2022 15:01:27 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=okrBLghZJ18PHWRmLn4zEDoM58QFWPV36c7y2n4x%2FHHeUGLzRwZIe6lkZDu%2Fp54kmomWW1Vu%2BzecKTHIsTS8fh5j8427ydOD0EMlwIPvZEwOeMeWbU%2BKyVX5Ts7DzTQaIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f58a8527761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/7/n/7/7n7o7sq89983o6p537q83988pp69so6n1462963509-960-540-1200-u264.syi-1.wct.jpg
200 OK 23 kB URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/7/n/7/7n7o7sq89983o6p537q83988pp69so6n1462963509-960-540-1200-u264.syi-1.wct.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 237x154, components 3\012- data
Hash 3999b5815a5063abaebb17522088f6b8
a41abcd614f2a5e44361d26f7b3ed46a4321fb6b
3c1577394ac6dc812c7d0ea5edf0fc24064b953a4b98450a2e38835623f1d361
GET /images/pqar-cvpf.lbhwvmm.pbz/7/n/7/7n7o7sq89983o6p537q83988pp69so6n1462963509-960-540-1200-u264.syi-1.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: image/jpeg
content-length: 22835
cache-control: public, max-age=5356800
expires: Sun, 11 Dec 2022 22:43:15 GMT
x-litespeed-cache: miss
last-modified: Sun, 04 Dec 2022 22:43:15 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eY8YTc58hmi61Ff7tD7Fh%2B%2BjxLVg9PXqHEATWJfoI5385XaYkyVRQFNv89yVIYdCN2JA2Wt8pnkonBWyNlq4Lyx9%2BafZ2jes3LW2hnxCo%2BLWDdSh4SSrxK18hOr61d%2BRzQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f58b8587761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
profoundrollcompatibility.com/1005cdb02ee288be217fb42fa4ed10d1/invoke.js
200 OK 9.3 kB URL HTTP/1.1 profoundrollcompatibility.com/1005cdb02ee288be217fb42fa4ed10d1/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (25093), with no line terminators
Hash 54a57db2afd2682db3da569c80986a34
614c72bae0ce829c3a7f5468796178e8fab6bb16
3b1c41133becc1fc3e8d30cd43951fee159f36a6c51a8dedda6d5d9fe4d43379
Analyzer Verdict Alert quad9 Sinkholed
GET /1005cdb02ee288be217fb42fa4ed10d1/invoke.js HTTP/1.1
Host: profoundrollcompatibility.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 04 Dec 2022 22:43:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fc09a3e82e5197577538ed8c1151831b
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/q/7/4/q7415r50377q42o3534p7r2732nr3po71493736932-588-392-371-u264.zc4-1.wct.jpg
200 OK 8.2 kB URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/q/7/4/q7415r50377q42o3534p7r2732nr3po71493736932-588-392-371-u264.zc4-1.wct.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 237x154, components 3\012- data
Hash 56ac527f607b193fec970099a1b89f42
f7b3d83fb162729d768bd2ee9d558fe546d49a57
403c6ad2c12d4ac7e45dd84fc0ec2765e8e13339f4852a4697cfb872a72d2975
GET /images/pqar-cvpf.lbhwvmm.pbz/q/7/4/q7415r50377q42o3534p7r2732nr3po71493736932-588-392-371-u264.zc4-1.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: image/jpeg
content-length: 8185
cache-control: public, max-age=5356800
expires: Sun, 11 Dec 2022 22:43:16 GMT
x-litespeed-cache: miss
last-modified: Sun, 04 Dec 2022 22:43:16 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9kU3lPUzhsh%2BQ63KukorWFe%2FPIPoQghR9dtUduwvKAzxYnx3xnDfP1cSZJNlC5DRx6D64kQ3I4Zo%2FWyCqrSnp68pEyNm711UyfJZmzS2in5DY8G%2Byh%2BQU%2BzXdjGPPjF9Ug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f58b85b7761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 280 B IP
Hash fe81538e07b7c219a0618e8bc273b676
e81a88a41f02c8ed7e7ce9bae321be31c467509b
55ca09955297fe3f54eb5025f0818765fb440ccdbc6586bab872cf51f61f5e08
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 22:43:16 GMT
Content-Type: application/ocsp-response
Content-Length: 280
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 21:53:51 GMT
Expires: Fri, 09 Dec 2022 21:53:50 GMT
Etag: "e81a88a41f02c8ed7e7ce9bae321be31c467509b"
Cache-Control: max-age=428433,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77480f581f0fb50f-OSL
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/r/r/1/rr15p3r7o05o5p7po89n6193436ro98o1484435135-292-238-511-u264.zc4-6.wct.jpg
200 OK 6.2 kB URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/r/r/1/rr15p3r7o05o5p7po89n6193436ro98o1484435135-292-238-511-u264.zc4-6.wct.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 237x154, components 3\012- data
Hash 6f17f626b43d8cb89f9c82657dcece8c
cc325e7b72a1560ec502b62830259205b5df322a
8a1dfca3988d38b04d864c5c7fc17ffe41eb0e8a8e24675dbb98e31b40a8e024
GET /images/pqar-cvpf.lbhwvmm.pbz/r/r/1/rr15p3r7o05o5p7po89n6193436ro98o1484435135-292-238-511-u264.zc4-6.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: image/jpeg
content-length: 6208
cache-control: public, max-age=5356800
expires: Sun, 11 Dec 2022 22:43:15 GMT
x-litespeed-cache: miss
last-modified: Sun, 04 Dec 2022 22:43:16 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DAEFMASHA3w1OjLlC0nLkzGBQbJjpsa5HdeapHMQ1hJIA1vAXOlhyJBEVdVVLXDRFzv5B4wq5UwE3Uym1YCkEYWXYrqqlWDNZOii%2FrDJepxMun0gJSYiz3yI5dDKQjWCHg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f58b8567761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
profoundrollcompatibility.com/cf/cf/f1/cfcff15295c1791b133bdd6ccda46168.js
200 OK 13 kB URL HTTP/1.1 profoundrollcompatibility.com/cf/cf/f1/cfcff15295c1791b133bdd6ccda46168.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37137), with no line terminators
Hash 677cbdc0132dc0ce168c503ee3538365
d884e2c4cc013ced19bb64b9d5708f9f8a76a5be
f0f802d861db6f3bf004023d03e27a317ccc279ab2177de0b07f97b9b0683179
Analyzer Verdict Alert quad9 Sinkholed
GET /cf/cf/f1/cfcff15295c1791b133bdd6ccda46168.js HTTP/1.1
Host: profoundrollcompatibility.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 04 Dec 2022 22:43:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fed6dec91cd2a67a9acfab3a767c3234
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/2/r/7/8/0/2r7800spn0o401p5259r1rrn4s70n0nq1656981841-108.wct.jpg
200 OK 9.1 kB URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/2/r/7/8/0/2r7800spn0o401p5259r1rrn4s70n0nq1656981841-108.wct.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 237x154, components 3\012- data
Hash 9d7c55f9135cd2dbfef0b3b41b490c28
ef40bbffd5017cc321c052863b9d7bc81f84a432
1fc4771d9e6484d88819d0da9b241132d69c102ed04dfb3f5ec064b95777a1ee
GET /images/pqar-cvpf.lbhwvmm.pbz/2/r/7/8/0/2r7800spn0o401p5259r1rrn4s70n0nq1656981841-108.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: image/jpeg
content-length: 9119
cache-control: public, max-age=5356800
expires: Tue, 06 Dec 2022 08:54:58 GMT
x-litespeed-cache: miss
last-modified: Tue, 29 Nov 2022 08:54:58 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ho8NFP6rN1ySDV%2BTnFoHkeIvDBZ5V56EEL50owPCdIyBj1PeOTTOx14kPoQCkIfJbsYceXbookYp9fv2Ibs6sZRG%2BCV5T6vE08s%2FCbVfqm%2FJCsJttpyrrvjNjJbFIrj7IQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f59ba817761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/p/2/o/p2o91s871679086p50rn0nn8o295rrop1501006507-1280-720-4158-u264.zc4-6.wct.jpg
200 OK 6.2 kB URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/p/2/o/p2o91s871679086p50rn0nn8o295rrop1501006507-1280-720-4158-u264.zc4-6.wct.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 237x154, components 3\012- data
Hash ddd0b2faa9a9e20a8913ed4560e5721d
b1aa03797bebb1db2194eb0d614698337cb753fc
bc8d3fbbf19dbe90a8742c3d983156bccacbf18ab184a4aa9a69f04c762eba4a
GET /images/pqar-cvpf.lbhwvmm.pbz/p/2/o/p2o91s871679086p50rn0nn8o295rrop1501006507-1280-720-4158-u264.zc4-6.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: image/jpeg
content-length: 6230
cache-control: public, max-age=5356800
expires: Sun, 11 Dec 2022 22:43:10 GMT
x-litespeed-cache: miss
last-modified: Sun, 04 Dec 2022 22:43:10 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pj56BKC5uPCM70vHrJvWpznHNXWbdW8HRjsb1g7yLk%2Fgn%2BilKvnwa3g%2FFYBCUbzYGZ2JfJBP8wmTYe5j1fy9Qog%2FzmjLCrdmga18n02INovGLgllXVUu%2BaWpSL5b3k62Dw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f59ca967761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: W2riYY0bVb0pyivF/XGP8g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Lxd4pPYRmlOblJQxWa8UmJqpS8o=
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash ffb1fa188f11f4b1ec69136d1920502b
8aac404d7cf025e415c22f6170fea74bf537c603
7beabb9b7af824e542dc5f62308e6d44c4a38dee34d69836ca4c1cf966592b82
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "7BEABB9B7AF824E542DC5F62308E6D44C4A38DEE34D69836CA4C1CF966592B82"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12642
Expires: Mon, 05 Dec 2022 02:13:58 GMT
Date: Sun, 04 Dec 2022 22:43:16 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 79c225db327a78b782f5a9512b07eaf0
398a1be3a70264d959146d6670d2ca54cdf4e91a
8539ea44d81775448ae8c6179d54d8a397c559b112291fa78abcf6ac6c480815
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:43:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:43:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/kaushanscript/v14/vm8vdRfvXFLG3OLnsO15WYS5DG74wNI.woff2
200 OK 35 kB URL HTTP/2 fonts.gstatic.com/s/kaushanscript/v14/vm8vdRfvXFLG3OLnsO15WYS5DG74wNI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 34728, version 1.0\012- data
Hash 9d8c616f488d1cbb3c235ae2a1679fb1
c56b4e0a9b2fc7973eb939bcb244f200f9508cfc
cce6e5a4ccc41fd81d52d0802348827f4828bf7fc6b78e24002ed02a690d21b5
GET /s/kaushanscript/v14/vm8vdRfvXFLG3OLnsO15WYS5DG74wNI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dailyporn.club
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34728
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 18:01:34 GMT
expires: Wed, 29 Nov 2023 18:01:34 GMT
cache-control: public, max-age=31536000
age: 448902
last-modified: Tue, 26 Apr 2022 15:00:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
200 OK 26 kB URL HTTP/2 fonts.gstatic.com/s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 25672, version 1.0\012- data
Hash fe3e5be2baa0126122ba9367ebab73c8
40bec99106dfab5f3721ed725483eb618a9016cd
8b166007d6f54c33b3ea10ea23572bc3166f55f365840d3cbd6ef7b5dcf6674e
GET /s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dailyporn.club
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25672
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 21:56:29 GMT
expires: Fri, 01 Dec 2023 21:56:29 GMT
cache-control: public, max-age=31536000
age: 262007
last-modified: Mon, 18 Jul 2022 19:12:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f0f8b0d8806166791f6d6d9a9aa908ca
e30099fed67b541c022984b41b6de1e9ca8e01bb
c8d3589546edd372653dbcc6fe1bc48340d7bf5dc3b0f37324a9ff8014aa912b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=141479
Date: Sun, 04 Dec 2022 22:43:16 GMT
Etag: "638ca11c-1d7"
Expires: Tue, 06 Dec 2022 14:01:15 GMT
Last-Modified: Sun, 04 Dec 2022 13:31:08 GMT
Server: ECS (nyb/1D2E)
X-Cache: Miss from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tlwcexl5GPyFY_931BJSbeNUZd8yzhlSOTZebADdiCRzsCR62wH4vg==
Age: 1807
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/p/6/r/p6rn474srpr37744135sp2nrnp2q800s1484847945-640-480-599-u264.zc4-4.wct.jpg
200 OK 7.2 kB URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/p/6/r/p6rn474srpr37744135sp2nrnp2q800s1484847945-640-480-599-u264.zc4-4.wct.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 237x154, components 3\012- data
Hash e1d151f707a0f0d076ac77ce968b02aa
77f778458b4e36dbaa2d69601b61f70d02ab5099
7016278173ebb6a5eb4691b16899e4251f31872c4543180ffb83266b69331d1a
GET /images/pqar-cvpf.lbhwvmm.pbz/p/6/r/p6rn474srpr37744135sp2nrnp2q800s1484847945-640-480-599-u264.zc4-4.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: image/jpeg
content-length: 7214
cache-control: public, max-age=5356800
expires: Sun, 11 Dec 2022 22:43:16 GMT
x-litespeed-cache: miss
last-modified: Sun, 04 Dec 2022 22:43:16 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FJcHKnFXWUfwG4YxLSLfoKY03ITli%2BNfk5OCGWWphlEwNGwVKYtLQCzsRijUsLaihj6y5DwcscWKNB8BGu5BG1dxpfoCXxy8ATQ5iklf9cnvDwwWM7qFQyJBQpGmQXw3Iw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f59ca847761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:43:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 43700ee6c98ddacfa19514b33126cf7e
99d9eaa0f5f881c386c3b23c47ede77b4983a814
94c0f00b3604de595e9786983a580da6f9f6c217372e59a5d2ada7cb43a3832a
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dailyporn.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://www.clicksgear.com
access-control-allow-credentials: true
set-cookie: uid_id2=752a5dfb-bb15-4ee7-bca2-df04854487b9:1:1; expires=Wed, 01 Dec 2032 22:43:16 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f0f8b0d8806166791f6d6d9a9aa908ca
e30099fed67b541c022984b41b6de1e9ca8e01bb
c8d3589546edd372653dbcc6fe1bc48340d7bf5dc3b0f37324a9ff8014aa912b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=141475
Date: Sun, 04 Dec 2022 22:43:16 GMT
Etag: "638ca11c-1d7"
Expires: Tue, 06 Dec 2022 14:01:11 GMT
Last-Modified: Sun, 04 Dec 2022 13:31:08 GMT
Server: ECS (nyb/1D1C)
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EmHiq4IxdBmnDx3pmulI2u9yes833ibJiQY18nqhoud3ZN-J26JtCg==
Age: 1803
s3t3d2y8.afcdn.net/library/140058/e57cf07a049e49b51c156d752ea761aa0dcd4bda.webp
200 OK 9.2 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/140058/e57cf07a049e49b51c156d752ea761aa0dcd4bda.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 65c256aae6dc21765215f9a9b0792c23
e57cf07a049e49b51c156d752ea761aa0dcd4bda
de75f84d56e9a91f819ea220a66a911a37ea5cfb226d9c8576265fdcb281a62b
GET /library/140058/e57cf07a049e49b51c156d752ea761aa0dcd4bda.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: image/webp
content-length: 9202
last-modified: Wed, 03 Nov 2021 11:53:07 GMT
etag: "61827823-23f2"
expires: Fri, 30 Jun 2023 11:10:34 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195276
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ1I9RX/OIXOAA
x-77-nzt-ray: c0a4cc28dee0b1e684228d63aec4a412
x-cache: HIT
x-age: 13534520
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/759202/14cdf1353d64a64ee271f5211a0dc1e60cf6f0e6.webp
200 OK 7.8 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/759202/14cdf1353d64a64ee271f5211a0dc1e60cf6f0e6.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d207740399aab46e880de871c8aaed60
14cdf1353d64a64ee271f5211a0dc1e60cf6f0e6
2eeb7427375b10973a39daaccbc7adac1a143988e3fe2768ec7cacac8aa73c48
GET /library/759202/14cdf1353d64a64ee271f5211a0dc1e60cf6f0e6.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: image/webp
content-length: 7778
last-modified: Thu, 04 Nov 2021 11:46:24 GMT
etag: "6183c810-1e62"
expires: Tue, 24 Oct 2023 16:35:29 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
x-accel-expires: @1699449825
server: CDN77-Turbo
x-77-nzt: AblMCQ2joWD/I8oiAA
x-77-nzt-ray: c0a4cc28dee0b1e684228d638253ff12
x-cache: HIT
x-age: 2279971
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/8/o/9/8o965p910o019sor3po2q75q8s169rnn1480949168-1280-720-1489-u264.zc4-21.wct.jpg
200 OK 24 kB URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/8/o/9/8o965p910o019sor3po2q75q8s169rnn1480949168-1280-720-1489-u264.zc4-21.wct.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 237x154, components 3\012- data
Hash 7160aff4134d188f398387743e59b697
408f44bdded6f76648781c7862c56c85b748393e
a507691d5b02ad82c41d4b179870940bf53bbf7a741bc5b739a2b423907a98ec
GET /images/pqar-cvpf.lbhwvmm.pbz/8/o/9/8o965p910o019sor3po2q75q8s169rnn1480949168-1280-720-1489-u264.zc4-21.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: image/jpeg
cache-control: public, max-age=5356800
expires: Sat, 10 Dec 2022 14:14:23 GMT
x-litespeed-cache: miss
last-modified: Sat, 03 Dec 2022 14:14:23 GMT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uHAY2SFt7e%2BhU%2BYmZSXpoSJS2Now3DncV7LpgvUuaB2k1%2FA9eSyh3VCTF3ACyNpNCudP4agGMdGEP7z0uasHO5TVEVqFf42jNdks7qQNgfMr8y6axeVeaRC0NTjvZCYJMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f59ca867761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/802444/179ee3ab587e6094f27c3d5081fc701b07651398.webp
200 OK 4.5 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/802444/179ee3ab587e6094f27c3d5081fc701b07651398.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3a33d738939052a11a2ad76f9eade5d1
179ee3ab587e6094f27c3d5081fc701b07651398
fb72cfbb711af96a1abc7daab64778f7e9a21c0c5da3d5c6b07211e5f0ffb067
GET /library/802444/179ee3ab587e6094f27c3d5081fc701b07651398.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: image/webp
content-length: 4498
last-modified: Fri, 15 Jul 2022 11:08:07 GMT
etag: "62d14a97-1192"
expires: Sat, 15 Jul 2023 11:45:37 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1689450959
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ0aMr7/NVy7AA
x-77-nzt-ray: c0a4cc28dee0b1e684228d63cc294813
x-cache: HIT
x-age: 12278837
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/802444/d12ccb590ad00f4923f36212a376a907910dcbf6.webp
200 OK 9.0 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/802444/d12ccb590ad00f4923f36212a376a907910dcbf6.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 03a466116a5e875e0bd4dfa768d88d94
d12ccb590ad00f4923f36212a376a907910dcbf6
1095a12ca3638c3d19f40704809776f1f6349a7b06e35cba865e2126ed6ba52c
GET /library/802444/d12ccb590ad00f4923f36212a376a907910dcbf6.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: image/webp
content-length: 9022
last-modified: Fri, 15 Jul 2022 11:08:07 GMT
etag: "62d14a97-233e"
expires: Sat, 15 Jul 2023 11:38:32 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1689614225
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ39roj/c964AA
x-77-nzt-ray: c0a4cc28dee0b1e684228d6371138013
x-cache: HIT
x-age: 12115571
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 7ed239003f33b5afc5a6be6e222c51b2
db94c94c31e47f0c14469c85a60a132b0a7f0971
69784e5da9588c2fb91c5f09f3f81be82a026c2c0465bed89222d0efc3c15eb9
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dailyporn.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://www.clicksgear.com
access-control-allow-credentials: true
set-cookie: uid_id2=6060b325-6be8-41b1-991e-a6c66f569d86:3:1; expires=Wed, 01 Dec 2032 22:43:16 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash ffb1fa188f11f4b1ec69136d1920502b
8aac404d7cf025e415c22f6170fea74bf537c603
7beabb9b7af824e542dc5f62308e6d44c4a38dee34d69836ca4c1cf966592b82
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "7BEABB9B7AF824E542DC5F62308E6D44C4A38DEE34D69836CA4C1CF966592B82"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12642
Expires: Mon, 05 Dec 2022 02:13:58 GMT
Date: Sun, 04 Dec 2022 22:43:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7d941b87e1205cc1ad124f8b7859c7e4
882a41ef00bb38a9149b3390d5e56206c910078c
cfbcb70963f834c890329d427cbb9e99cad13ba236c323fd3afde4c8237f96c8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CFBCB70963F834C890329D427CBB9E99CAD13BA236C323FD3AFDE4C8237F96C8"
Last-Modified: Fri, 02 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9809
Expires: Mon, 05 Dec 2022 01:26:45 GMT
Date: Sun, 04 Dec 2022 22:43:16 GMT
Connection: keep-alive
syndication.realsrv.com/v1/api.php
200 OK 4.8 kB URL HTTP/1.1 syndication.realsrv.com/v1/api.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (8961), with no line terminators
Hash 8f06a6efc0aa002dbf889620e2763ce5
8ec343ebe7a9df6ee76abe95c3df9e692d66c39b
3c7007e37d5150d1c22e86edd28837a6ac2a207833021995956f3d37f2993028
POST /v1/api.php HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 378
Origin: https://dailyporn.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 22:43:16 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://dailyporn.club
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638d22836fd8b8.385511913920550194%22%3B%7D; expires=Tue, 03-Dec-2024 22:43:16 GMT; Max-Age=63072000; path=/; domain=realsrv.com; secure; SameSite=None
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA11PW0oEQQy8iheYIY9Kd3q//VZQPEBPzw4IyyqKsAs5vN2j7ocpAnlUkoqQyMQyEe44H6AHTlF4LjRDZjbEw+NTgGOtr6fr+9vHeW6nryWM2RzBxTlLH0guCGQrnhFGHqYEkhQ5ifiggkKDOsQUGNFMpCQWmeLl+X53HuhEoosY9WRcjy6pnwq6jHFvGVLXRTcrW1qOJEfnVr3wVrCpDeJ/tfSDWX3vy18hlKECiYlvCaIbxd6un9dzi7jR6ffF1CPb12gwMIQGN4eW2qr5Qnn1mjMqatqg61EN325OQVtpAQAA
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA11PW0oEQQy8iheYIY9Kd3q//VZQPEBPzw4IyyqKsAs5vN2j7ocpAnlUkoqQyMQyEe44H6AHTlF4LjRDZjbEw+NTgGOtr6fr+9vHeW6nryWM2RzBxTlLH0guCGQrnhFGHqYEkhQ5ifiggkKDOsQUGNFMpCQWmeLl+X53HuhEoosY9WRcjy6pnwq6jHFvGVLXRTcrW1qOJEfnVr3wVrCpDeJ/tfSDWX3vy18hlKECiYlvCaIbxd6un9dzi7jR6ffF1CPb12gwMIQGN4eW2qr5Qnn1mjMqatqg61EN325OQVtpAQAA
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA11PW0oEQQy8iheYIY9Kd3q//VZQPEBPzw4IyyqKsAs5vN2j7ocpAnlUkoqQyMQyEe44H6AHTlF4LjRDZjbEw+NTgGOtr6fr+9vHeW6nryWM2RzBxTlLH0guCGQrnhFGHqYEkhQ5ifiggkKDOsQUGNFMpCQWmeLl+X53HuhEoosY9WRcjy6pnwq6jHFvGVLXRTcrW1qOJEfnVr3wVrCpDeJ/tfSDWX3vy18hlKECiYlvCaIbxd6un9dzi7jR6ffF1CPb12gwMIQGN4eW2qr5Qnn1mjMqatqg61EN325OQVtpAQAA HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dailyporn.club
Connection: keep-alive
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638d22836fd8b8.385511913920550194%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4852284%7C71987234%7C100644%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C8c742adb3f59f6be02e81ca891f94f35%7C0%7Cdailyporn.club%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 22:43:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://dailyporn.club
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638d22836fd8b8.385511913920550194%22%3B%7D; expires=Tue, 03 Dec 2024 22:43:16 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
__upt=%7B%22v%22%3A1%2C%22id%22%3A%22638d22836fd8b8.385511913920550194%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D; expires=Tue, 03 Dec 2024 22:43:16 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA11P7UoEMQx8FV9gl3y2zf32t4LiA3S3tyAcpyjCHczD2656P8xQyKSTZCIkMrFMZHecD6YHTgieg2aTmd3w8PgEY7T6erq+v32c5/X0tcCZvRg4CmfpDamIwbJHyQanAlcykoScRIqXBCMoqENczUY2EymJIxNenu/3xwNdSHQRp07GdnRLfRXoMtrLmk1qW3Tz2NJyJDkWXmsJ3sI29SH875Z+MJvyGCR/BXSuYoKJb8TQg7B/18/reQVucvo9MfXM9zEKNhtGocJ2XJpJsxoR7tG0RE4RrbZo/g2cEfP8aQEAAA==
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA11P7UoEMQx8FV9gl3y2zf32t4LiA3S3tyAcpyjCHczD2656P8xQyKSTZCIkMrFMZHecD6YHTgieg2aTmd3w8PgEY7T6erq+v32c5/X0tcCZvRg4CmfpDamIwbJHyQanAlcykoScRIqXBCMoqENczUY2EymJIxNenu/3xwNdSHQRp07GdnRLfRXoMtrLmk1qW3Tz2NJyJDkWXmsJ3sI29SH875Z+MJvyGCR/BXSuYoKJb8TQg7B/18/reQVucvo9MfXM9zEKNhtGocJ2XJpJsxoR7tG0RE4RrbZo/g2cEfP8aQEAAA==
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA11P7UoEMQx8FV9gl3y2zf32t4LiA3S3tyAcpyjCHczD2656P8xQyKSTZCIkMrFMZHecD6YHTgieg2aTmd3w8PgEY7T6erq+v32c5/X0tcCZvRg4CmfpDamIwbJHyQanAlcykoScRIqXBCMoqENczUY2EymJIxNenu/3xwNdSHQRp07GdnRLfRXoMtrLmk1qW3Tz2NJyJDkWXmsJ3sI29SH875Z+MJvyGCR/BXSuYoKJb8TQg7B/18/reQVucvo9MfXM9zEKNhtGocJ2XJpJsxoR7tG0RE4RrbZo/g2cEfP8aQEAAA== HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dailyporn.club
Connection: keep-alive
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638d22836fd8b8.385511913920550194%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4852284%7C71987234%7C100644%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C8c742adb3f59f6be02e81ca891f94f35%7C0%7Cdailyporn.club%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 22:43:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://dailyporn.club
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638d22836fd8b8.385511913920550194%22%3B%7D; expires=Tue, 03 Dec 2024 22:43:16 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
__upt=%7B%22v%22%3A1%2C%22id%22%3A%22638d22836fd8b8.385511913920550194%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D; expires=Tue, 03 Dec 2024 22:43:16 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA11PUWpDIRC8Si/wZHcdV813v1to6QHUPKEQ0pJSSGAP332vJR91Vhx1xh2FRBaWhfDA+YB4YLXKoVKABE6wp+cXA9uxvZ9unx+Xcxin724R0KzGtXAWN2gRGKQqqVqiYigqFbBMlAuBzCsaOSS5eWOBiJML7O31cZ/sEItEV0nkfGtt4lbndN28ZWRIO/Y4U53aV5K18Gil8qyYMW3C/1HpF6FCsDf4O7DIiAKxhe8bmA+y/bp93c7D7C73HDnV4r8mS/sznhfYFmsxQ1PJcQhIsU6RTl5tQHrX+QM0XRhjZgEAAA==
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA11PUWpDIRC8Si/wZHcdV813v1to6QHUPKEQ0pJSSGAP332vJR91Vhx1xh2FRBaWhfDA+YB4YLXKoVKABE6wp+cXA9uxvZ9unx+Xcxin724R0KzGtXAWN2gRGKQqqVqiYigqFbBMlAuBzCsaOSS5eWOBiJML7O31cZ/sEItEV0nkfGtt4lbndN28ZWRIO/Y4U53aV5K18Gil8qyYMW3C/1HpF6FCsDf4O7DIiAKxhe8bmA+y/bp93c7D7C73HDnV4r8mS/sznhfYFmsxQ1PJcQhIsU6RTl5tQHrX+QM0XRhjZgEAAA==
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA11PUWpDIRC8Si/wZHcdV813v1to6QHUPKEQ0pJSSGAP332vJR91Vhx1xh2FRBaWhfDA+YB4YLXKoVKABE6wp+cXA9uxvZ9unx+Xcxin724R0KzGtXAWN2gRGKQqqVqiYigqFbBMlAuBzCsaOSS5eWOBiJML7O31cZ/sEItEV0nkfGtt4lbndN28ZWRIO/Y4U53aV5K18Gil8qyYMW3C/1HpF6FCsDf4O7DIiAKxhe8bmA+y/bp93c7D7C73HDnV4r8mS/sznhfYFmsxQ1PJcQhIsU6RTl5tQHrX+QM0XRhjZgEAAA== HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dailyporn.club
Connection: keep-alive
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638d22836fd8b8.385511913920550194%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4852284%7C71987234%7C100644%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C8c742adb3f59f6be02e81ca891f94f35%7C0%7Cdailyporn.club%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 22:43:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://dailyporn.club
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638d22836fd8b8.385511913920550194%22%3B%7D; expires=Tue, 03 Dec 2024 22:43:16 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
__upt=%7B%22v%22%3A1%2C%22id%22%3A%22638d22836fd8b8.385511913920550194%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D; expires=Tue, 03 Dec 2024 22:43:16 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
ad.a-ads.com/1852932?size=300x250&background_color=000000&text_color=aba4a4&title_color=ffcc00&title_hover_color=ffffff&link_color=979090&link_hover_color=fdfdfd
200 OK 4.7 kB URL HTTP/2 ad.a-ads.com/1852932?size=300x250&background_color=000000&text_color=aba4a4&title_color=ffcc00&title_hover_color=ffffff&link_color=979090&link_hover_color=fdfdfd
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11122)
Hash 37b9397e35732840c444d55c52a83481
ad37e7200e7e6a8c7fe722e01e6ee54067fc2e26
09244f656b9b1f732aa8cedd1beaad23ad2618bf2c6d700c25cf2e78a8eafa4b
GET /1852932?size=300x250&background_color=000000&text_color=aba4a4&title_color=ffcc00&title_hover_color=ffffff&link_color=979090&link_hover_color=fdfdfd HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://handymag.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://handymag.net/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/140058/2070e64c383c389e7bdb22362555c34d8bc3db44.mp4
206 Partial Content 37 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/140058/2070e64c383c389e7bdb22362555c34d8bc3db44.mp4
IP
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 7d71e6c04758f1fa0f5a74af70428e9c
2070e64c383c389e7bdb22362555c34d8bc3db44
f306367574976dfe7536c9ed175986feda46562d359afae4594eddbdd7555c44
GET /library/140058/2070e64c383c389e7bdb22362555c34d8bc3db44.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: video/mp4
content-length: 37279
last-modified: Thu, 26 Mar 2020 19:07:11 GMT
etag: "5e7cfd5f-919f"
expires: Fri, 30 Jun 2023 13:55:15 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195417
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ3uBNb/q4TOAA
x-77-nzt-ray: c0a4cc28dee0b1e684228d6385b26328
x-cache: HIT
x-age: 13534379
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-37278/37279
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/448451/e2992aed94e3ab1b92e7eba60ec25912cdbe4f8b.mp4
206 Partial Content 11 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/448451/e2992aed94e3ab1b92e7eba60ec25912cdbe4f8b.mp4
IP
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 0362ca66d2648842761ab7e897210c2b
e2992aed94e3ab1b92e7eba60ec25912cdbe4f8b
6112e64eff0942f4a746c8840cc94ec23121f5fcc51fa1ac1523a38d05bfa124
GET /library/448451/e2992aed94e3ab1b92e7eba60ec25912cdbe4f8b.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: video/mp4
content-length: 10631
last-modified: Tue, 09 Aug 2022 11:14:51 GMT
etag: "62f241ab-2987"
expires: Wed, 09 Aug 2023 11:37:57 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1691581153
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ1uzXn/I9uaAA
x-77-nzt-ray: c0a4cc28dee0b1e684228d632d727228
x-cache: HIT
x-age: 10148643
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-10630/10631
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/448451/359bcfd452157f843775443ad291243f09e06523.mp4
206 Partial Content 10 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/448451/359bcfd452157f843775443ad291243f09e06523.mp4
IP
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash db5939ffe060aa00b1849cbdb7314ded
359bcfd452157f843775443ad291243f09e06523
0979b45674a0f2eca1e083f8e16af3b4efb53ba71fd2d6fe7ab6d28a9acd6ee8
GET /library/448451/359bcfd452157f843775443ad291243f09e06523.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: video/mp4
content-length: 10322
last-modified: Tue, 09 Aug 2022 11:14:51 GMT
etag: "62f241ab-2852"
expires: Wed, 09 Aug 2023 11:37:56 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1691581129
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ2xU+f/O9uaAA
x-77-nzt-ray: c0a4cc28dee0b1e684228d634e3a7628
x-cache: HIT
x-age: 10148667
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-10321/10322
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/448451/b55663983b553c9f9adb0e1ada3af807a55715ec.mp4
206 Partial Content 12 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/448451/b55663983b553c9f9adb0e1ada3af807a55715ec.mp4
IP
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 96ad52c24f7c0e4db3bf8e6c12b35a4d
b55663983b553c9f9adb0e1ada3af807a55715ec
f31922b7651e0582b68857a63239cc02dc53c0e30565fa5d11b74bf43e85527a
GET /library/448451/b55663983b553c9f9adb0e1ada3af807a55715ec.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: video/mp4
content-length: 12161
last-modified: Tue, 09 Aug 2022 11:14:51 GMT
etag: "62f241ab-2f81"
expires: Wed, 09 Aug 2023 11:37:35 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1691581143
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ3nRvj/LduaAA
x-77-nzt-ray: c0a4cc28dee0b1e684228d6314e67828
x-cache: HIT
x-age: 10148653
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-12160/12161
X-Firefox-Spdy: h2
iceboxlitre.com/e8/c5/88/e8c5880348109e0543aa23d61ee69616.js
200 OK 29 kB URL HTTP/1.1 iceboxlitre.com/e8/c5/88/e8c5880348109e0543aa23d61ee69616.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash d9ed1195a1858cfc64c2292735a41494
24d13b0822fc56db70c4eef0039dbdd7a88bc23a
7e398a083c57391b1113630d5814bde0be2c7bdcf4d6930f1de28c21d2a8aa63
Analyzer Verdict Alert quad9 Sinkholed
GET /e8/c5/88/e8c5880348109e0543aa23d61ee69616.js HTTP/1.1
Host: iceboxlitre.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 22:43:16 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f6951af9155afee4ac5b549f925b3cc5
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 280 B IP
Hash ca20b22868f83d258c3424c2781dd1ce
b05abeced5046120a19a25cc81afad35d9fd2f1f
64b156fb7487e9228a06309481051507f616e2fc551856b05fdc97c169e353ac
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1783
Cache-Control: max-age=151522
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:43:16 GMT
Etag: "638cc86f-118"
Expires: Tue, 06 Dec 2022 16:48:38 GMT
Last-Modified: Sun, 04 Dec 2022 16:18:55 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash ca20b22868f83d258c3424c2781dd1ce
b05abeced5046120a19a25cc81afad35d9fd2f1f
64b156fb7487e9228a06309481051507f616e2fc551856b05fdc97c169e353ac
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1963
Cache-Control: max-age=151702
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:43:16 GMT
Etag: "638cc86f-118"
Expires: Tue, 06 Dec 2022 16:51:38 GMT
Last-Modified: Sun, 04 Dec 2022 16:18:55 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 280
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA11OW0oEQQy8iheYIe+k99tvBcUD9PRsg7CssiLsQg5vzyj7YYqQCqkURUA0IU0gD+gH4QNaFpwLzEIzquTT80sK5lrfT7fPj8t5bqfvJVEANBJLoNN4sCBJoWJglgrjEoqMnmhEzFZSIDlhgJRFNjYDoGsQkKVDvr0+7o0DlAxwJYXBtwBJkDI4XDeHaC5U14W7lm7LEegY2GoU7EU66yb8Hxh+MUfx3f9vT0ZhEsoJ74vkKMj9XL9u55Z5l48YriXcBtPdZsQV2UYKs9YGnX0NCe4VvHlQ4VhXOxr9ACKwM1xrAQAA
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA11OW0oEQQy8iheYIe+k99tvBcUD9PRsg7CssiLsQg5vzyj7YYqQCqkURUA0IU0gD+gH4QNaFpwLzEIzquTT80sK5lrfT7fPj8t5bqfvJVEANBJLoNN4sCBJoWJglgrjEoqMnmhEzFZSIDlhgJRFNjYDoGsQkKVDvr0+7o0DlAxwJYXBtwBJkDI4XDeHaC5U14W7lm7LEegY2GoU7EU66yb8Hxh+MUfx3f9vT0ZhEsoJ74vkKMj9XL9u55Z5l48YriXcBtPdZsQV2UYKs9YGnX0NCe4VvHlQ4VhXOxr9ACKwM1xrAQAA
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA11OW0oEQQy8iheYIe+k99tvBcUD9PRsg7CssiLsQg5vzyj7YYqQCqkURUA0IU0gD+gH4QNaFpwLzEIzquTT80sK5lrfT7fPj8t5bqfvJVEANBJLoNN4sCBJoWJglgrjEoqMnmhEzFZSIDlhgJRFNjYDoGsQkKVDvr0+7o0DlAxwJYXBtwBJkDI4XDeHaC5U14W7lm7LEegY2GoU7EU66yb8Hxh+MUfx3f9vT0ZhEsoJ74vkKMj9XL9u55Z5l48YriXcBtPdZsQV2UYKs9YGnX0NCe4VvHlQ4VhXOxr9ACKwM1xrAQAA HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dailyporn.club
Connection: keep-alive
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638d22836fd8b8.385511913920550194%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4852284%7C71987234%7C100644%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C8c742adb3f59f6be02e81ca891f94f35%7C0%7Cdailyporn.club%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 22:43:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://dailyporn.club
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638d22836fd8b8.385511913920550194%22%3B%7D; expires=Tue, 03 Dec 2024 22:43:16 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
__upt=%7B%22v%22%3A1%2C%22id%22%3A%22638d22836fd8b8.385511913920550194%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D; expires=Tue, 03 Dec 2024 22:43:16 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA11Q0UoEMQz8FX9gS5JOm/aefVZQ/IB2dwvCcYoi3EE+3nSRe7AhMGkmkyFCIgvLQnhgPSGeOFvlUClAAifY0/OLgW1r7+fb58fXJaznn25AQWLjWljFB3IRGKRW4WKJPCXX7FqaGJDoTbJo5CEpAhMFIjYle3t9PJJnOIvoykRezNUmZHBM1zlbVoW0rceR6sh9J9kLr61UHhUjpkn8b5WO4KDQ2Ze/D1/EiAKxhe8FzB/Z0W7ft8tqdqe7D021aHaUDhn3BUyjtvZWdd9la7sU9aOMPJzZm7hqL/oLH1O9WmYBAAA=
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA11Q0UoEMQz8FX9gS5JOm/aefVZQ/IB2dwvCcYoi3EE+3nSRe7AhMGkmkyFCIgvLQnhgPSGeOFvlUClAAifY0/OLgW1r7+fb58fXJaznn25AQWLjWljFB3IRGKRW4WKJPCXX7FqaGJDoTbJo5CEpAhMFIjYle3t9PJJnOIvoykRezNUmZHBM1zlbVoW0rceR6sh9J9kLr61UHhUjpkn8b5WO4KDQ2Ze/D1/EiAKxhe8FzB/Z0W7ft8tqdqe7D021aHaUDhn3BUyjtvZWdd9la7sU9aOMPJzZm7hqL/oLH1O9WmYBAAA=
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA11Q0UoEMQz8FX9gS5JOm/aefVZQ/IB2dwvCcYoi3EE+3nSRe7AhMGkmkyFCIgvLQnhgPSGeOFvlUClAAifY0/OLgW1r7+fb58fXJaznn25AQWLjWljFB3IRGKRW4WKJPCXX7FqaGJDoTbJo5CEpAhMFIjYle3t9PJJnOIvoykRezNUmZHBM1zlbVoW0rceR6sh9J9kLr61UHhUjpkn8b5WO4KDQ2Ze/D1/EiAKxhe8FzB/Z0W7ft8tqdqe7D021aHaUDhn3BUyjtvZWdd9la7sU9aOMPJzZm7hqL/oLH1O9WmYBAAA= HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dailyporn.club
Connection: keep-alive
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638d22836fd8b8.385511913920550194%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4852284%7C71987234%7C100644%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C8c742adb3f59f6be02e81ca891f94f35%7C0%7Cdailyporn.club%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 22:43:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://dailyporn.club
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638d22836fd8b8.385511913920550194%22%3B%7D; expires=Tue, 03 Dec 2024 22:43:16 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
__upt=%7B%22v%22%3A1%2C%22id%22%3A%22638d22836fd8b8.385511913920550194%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D; expires=Tue, 03 Dec 2024 22:43:16 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA11O0UoEMQz8FX9gS5JO2/SefVZQ/IB2uwvCcYoi3EE+3nSRe7BDYJJOJiMksrAshAcuJ8QTZ6scKgVI4AR7en4xsI32fr59fnxdwnr+6QYoEhtX5SK+kFVgkFqF1RJ5Sa7ZvUpiQGI2kEUjh6QITBaI2ArZ2+vjUTzhKqIrE3kzT5uQwTld566uBdJGj3uqe+4byaa8Nq28V+wxTeH/qHSAQ9E0jeRv4IcYUSC28L2B+SM7vtv37bKa3eWeo6SqJTtLh43bATOojajUS9lix6YjMzVqmaNn2lg7j1+Jw4tQZgEAAA==
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA11O0UoEMQz8FX9gS5JO2/SefVZQ/IB2uwvCcYoi3EE+3nSRe7BDYJJOJiMksrAshAcuJ8QTZ6scKgVI4AR7en4xsI32fr59fnxdwnr+6QYoEhtX5SK+kFVgkFqF1RJ5Sa7ZvUpiQGI2kEUjh6QITBaI2ArZ2+vjUTzhKqIrE3kzT5uQwTld566uBdJGj3uqe+4byaa8Nq28V+wxTeH/qHSAQ9E0jeRv4IcYUSC28L2B+SM7vtv37bKa3eWeo6SqJTtLh43bATOojajUS9lix6YjMzVqmaNn2lg7j1+Jw4tQZgEAAA==
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA11O0UoEMQz8FX9gS5JO2/SefVZQ/IB2uwvCcYoi3EE+3nSRe7BDYJJOJiMksrAshAcuJ8QTZ6scKgVI4AR7en4xsI32fr59fnxdwnr+6QYoEhtX5SK+kFVgkFqF1RJ5Sa7ZvUpiQGI2kEUjh6QITBaI2ArZ2+vjUTzhKqIrE3kzT5uQwTld566uBdJGj3uqe+4byaa8Nq28V+wxTeH/qHSAQ9E0jeRv4IcYUSC28L2B+SM7vtv37bKa3eWeo6SqJTtLh43bATOojajUS9lix6YjMzVqmaNn2lg7j1+Jw4tQZgEAAA== HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dailyporn.club
Connection: keep-alive
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638d22836fd8b8.385511913920550194%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4852284%7C71987234%7C100644%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C8c742adb3f59f6be02e81ca891f94f35%7C0%7Cdailyporn.club%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 22:43:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://dailyporn.club
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638d22836fd8b8.385511913920550194%22%3B%7D; expires=Tue, 03 Dec 2024 22:43:16 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
__upt=%7B%22v%22%3A1%2C%22id%22%3A%22638d22836fd8b8.385511913920550194%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D; expires=Tue, 03 Dec 2024 22:43:16 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
go.xlivrdr.com/smartpop/519fe30cdea876d1b02b3e92894492ca6c8136dabaff4c3273c5dd7492202a01?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&sourceId=5304026&memberId=ooddNHdLHTPHNVS4ASOpsqutspdZXPPbVbW6V1Esqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc63WymfPbSjiq7ivTeWfe2bXO26bi6niip0rts._liCQEevx9HOdK6V0rpXSuldK6myq62yt0rg.w--&p1=5304026&trackOff=1&kbLimit=1000
302 Found 0 B URL HTTP/2 go.xlivrdr.com/smartpop/519fe30cdea876d1b02b3e92894492ca6c8136dabaff4c3273c5dd7492202a01?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&sourceId=5304026&memberId=ooddNHdLHTPHNVS4ASOpsqutspdZXPPbVbW6V1Esqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc63WymfPbSjiq7ivTeWfe2bXO26bi6niip0rts._liCQEevx9HOdK6V0rpXSuldK6myq62yt0rg.w--&p1=5304026&trackOff=1&kbLimit=1000
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smartpop/519fe30cdea876d1b02b3e92894492ca6c8136dabaff4c3273c5dd7492202a01?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&sourceId=5304026&memberId=ooddNHdLHTPHNVS4ASOpsqutspdZXPPbVbW6V1Esqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc63WymfPbSjiq7ivTeWfe2bXO26bi6niip0rts._liCQEevx9HOdK6V0rpXSuldK6myq62yt0rg.w--&p1=5304026&trackOff=1&kbLimit=1000 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyporn.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 04 Dec 2022 22:43:16 GMT
content-length: 0
location: https://creative.xlivrdr.com/widgets/v4/Universal?autoplay=firstThumb&autoplayForce=1&campaignId=519fe30cdea876d1b02b3e92894492ca6c8136dabaff4c3273c5dd7492202a01&campaignType=smartpop&creativeId=11a22b935576d0bdbfd46a4b3d1889f5c873ac3bfbdb27b3563d2b3ce1276705&iterationId=375137&kbLimit=1000&masterSmartpopId=1914&memberId=ooddNHdLHTPHNVS4ASOpsqutspdZXPPbVbW6V1Esqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc63WymfPbSjiq7ivTeWfe2bXO26bi6niip0rts._liCQEevx9HOdK6V0rpXSuldK6myq62yt0rg.w--&p1=5304026&ruleId=17&smartpopId=432&sourceId=5304026&tag=-girls%2Findian&trackOff=1&userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&variationId=29907
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: DYNAMIC
set-cookie: _var=732574.29907; Path=/; HttpOnly; SameSite=Strict
__cflb=02DiuDfsBaY2bRYJiCeSF4mw3pyDiW7pyQCEfLHQ6scK6; SameSite=None; Secure; path=/; expires=Mon, 05-Dec-22 21:43:16 GMT; HttpOnly
server: cloudflare
cf-ray: 77480f5daef1b515-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
go.xlivrdr.com/smartpop/519fe30cdea876d1b02b3e92894492ca6c8136dabaff4c3273c5dd7492202a01?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&sourceId=5304026&memberId=ooddNHdLHTPHNVS4ASOpsqutspdZXPPbVbS6V1Esqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc63WymfPbSjiq7ivTeWfe2bXO26bi6niip0rts._liCQEevx9HOdK6V0rpXSuldK6myq62yt0rg.w--&p1=5304026&kbLimit=1000
302 Found 0 B URL HTTP/2 go.xlivrdr.com/smartpop/519fe30cdea876d1b02b3e92894492ca6c8136dabaff4c3273c5dd7492202a01?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&sourceId=5304026&memberId=ooddNHdLHTPHNVS4ASOpsqutspdZXPPbVbS6V1Esqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc63WymfPbSjiq7ivTeWfe2bXO26bi6niip0rts._liCQEevx9HOdK6V0rpXSuldK6myq62yt0rg.w--&p1=5304026&kbLimit=1000
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smartpop/519fe30cdea876d1b02b3e92894492ca6c8136dabaff4c3273c5dd7492202a01?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&sourceId=5304026&memberId=ooddNHdLHTPHNVS4ASOpsqutspdZXPPbVbS6V1Esqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc63WymfPbSjiq7ivTeWfe2bXO26bi6niip0rts._liCQEevx9HOdK6V0rpXSuldK6myq62yt0rg.w--&p1=5304026&kbLimit=1000 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyporn.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 04 Dec 2022 22:43:16 GMT
content-length: 0
location: https://creative.xlivrdr.com/widgets/v4/Universal?autoplay=firstThumb&autoplayForce=1&campaignId=519fe30cdea876d1b02b3e92894492ca6c8136dabaff4c3273c5dd7492202a01&campaignType=smartpop&creativeId=11a22b935576d0bdbfd46a4b3d1889f5c873ac3bfbdb27b3563d2b3ce1276705&iterationId=375137&kbLimit=1000&masterSmartpopId=1914&memberId=ooddNHdLHTPHNVS4ASOpsqutspdZXPPbVbS6V1Esqp6pXVS2upmdQ6mV0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc63WymfPbSjiq7ivTeWfe2bXO26bi6niip0rts._liCQEevx9HOdK6V0rpXSuldK6myq62yt0rg.w--&p1=5304026&ruleId=17&smartpopId=432&sourceId=5304026&tag=-girls%2Findian&userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&variationId=29907
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: DYNAMIC
set-cookie: _var=732574.29907; Path=/; HttpOnly; SameSite=Strict
__cflb=02DiuDfsBaY2bRYJiCeRhAptQvDh5wz7o3DrfmHMWB3g8; SameSite=None; Secure; path=/; expires=Mon, 05-Dec-22 21:43:16 GMT; HttpOnly
server: cloudflare
cf-ray: 77480f5daef5b515-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 7ed239003f33b5afc5a6be6e222c51b2
db94c94c31e47f0c14469c85a60a132b0a7f0971
69784e5da9588c2fb91c5f09f3f81be82a026c2c0465bed89222d0efc3c15eb9
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dailyporn.club
Connection: keep-alive
Cookie: uid_id2=6060b325-6be8-41b1-991e-a6c66f569d86:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://www.clicksgear.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash ca20b22868f83d258c3424c2781dd1ce
b05abeced5046120a19a25cc81afad35d9fd2f1f
64b156fb7487e9228a06309481051507f616e2fc551856b05fdc97c169e353ac
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1783
Cache-Control: max-age=151522
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:43:16 GMT
Etag: "638cc86f-118"
Expires: Tue, 06 Dec 2022 16:48:38 GMT
Last-Modified: Sun, 04 Dec 2022 16:18:55 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 280
ocsp.sectigo.com/
200 OK 472 B IP
Hash 97ed590964137353c8ffd5bce77a7fbf
4e3a1f139e7243c66a7dbb8a7ab5ed3add77994d
ee852f9b0de7073fa3ca9c588c9cd2734abdd284fc150550659bad8de8c6fcf4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 22:43:16 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 21:07:05 GMT
Expires: Fri, 09 Dec 2022 21:07:04 GMT
Etag: "4e3a1f139e7243c66a7dbb8a7ab5ed3add77994d"
Cache-Control: max-age=425627,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77480f5dfe8bb50f-OSL
iceboxlitre.com/ntv.json?key=1005cdb02ee288be217fb42fa4ed10d1&vstc=3
200 OK 13 kB URL HTTP/1.1 iceboxlitre.com/ntv.json?key=1005cdb02ee288be217fb42fa4ed10d1&vstc=3
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (12922), with no line terminators
Hash 40609d736f8e6599937fa6ec609df8a1
18d46224c6f3ad22bb6a16a29cbe08166222a66f
41b5a1c1e6a1944df358971c01794a9f88db8faeb992a60f9f052a8c24164524
Analyzer Verdict Alert quad9 Sinkholed
GET /ntv.json?key=1005cdb02ee288be217fb42fa4ed10d1&vstc=3 HTTP/1.1
Host: iceboxlitre.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dailyporn.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 22:43:16 GMT
Content-Type: application/json
Content-Length: 12931
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://dailyporn.club
Access-Control-Allow-Origin: https://dailyporn.club
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17480071; expires=Mon, 05 Dec 2022 22:43:16 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 05 Dec 2022 22:43:16 GMT; secure; SameSite=None
uncs=1; expires=Mon, 05 Dec 2022 22:43:16 GMT; secure; SameSite=None
pdhtkv49=true; expires=Mon, 05 Dec 2022 22:43:16 GMT; secure; SameSite=None
uncs49=1; expires=Mon, 05 Dec 2022 22:43:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a6e3d93bc24b16a5ce12b3f42f295d97
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b8164e9ec8114baa223074b63d1e73c
d5cfd187409b203d1b6f015c8b4b619d2eb4a02c
bae1b392756a67f3d4d1e2baa87fbcadf2deb533d076719c9adef224d19aabdd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BAE1B392756A67F3D4D1E2BAA87FBCADF2DEB533D076719C9ADEF224D19AABDD"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14957
Expires: Mon, 05 Dec 2022 02:52:34 GMT
Date: Sun, 04 Dec 2022 22:43:17 GMT
Connection: keep-alive
iceboxlitre.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzWtc1Rs%2Bt81vk99GxYWuHFwpyOTc%2BWhmWiRYayQYk9hWshHxfN3Jac7ccznn3rmT4CJY0W6EETfq6uaZpEEtxeLKhbRM3NSAkNmULAz%2BA4IgdC13MhB84b4f93kXz%2FO857Pd7JRQZOxk7V27rY1hc80qrbyyrmNpc19ZuVkJaZVeqazr%2BFLjSqVfJte7HNJmlb5aeVuJTTtXoyGlIQ0ri9qpyPbnJih0cq8dVtu02qhVw2YDffff2WcBPAsge6fkOWg5%2Ft%2FG4wfQYoS4%2B%2BM15TdTm7z2VjczLLUOPXnwfrwZ2zxG97yNXIAoPphuw%2FoxIV9fgI0Ppgpge3ulAnA9JsGTEDw%2BmNIE7%2B2fMeUGKgaX%2F0feG0GZETQbQdjb0PKYAEJiZRVx9%2B6KdTnbOkNZiY7JzNN%2FoPMxmfnjecTd%2B1eN7lduWJOl2sYe%2FaiA7o%2BgOyMk2SHS7QA6P4RIP4GWv5O5p8uIu3ur3lhoWUzUaz2CjkYwagDmA2TlpwNkUYAsCdCVJxXWbEeUzkc8qtdbDSFEvS5Es3VJNmW90YooMlHSGyBNBhBmAOF2kLgdbOoBXPYIfqOAlwF8OibBezvoyQK5Isg9Qc4Ick2QpwR5r9iXxtd8cVcan%2FFwWmvTWi%2BGNu3ssn2bdlRMdpNT8mzpSzD78%2BfYVCeVkNKmkJzWlKq1WlzVwvmIN2oRaygZUhnC6wLaX5hI3dZj8sJAINHHwZ%2Fg7BDeHELoZ8CyECwfztco2Maw0aLYju9Lps1WYl1cFSbjkLZAks4g3Qp2zSl5cXKfyx90oMTRwm8fNhc%2B%2FutLCFcgcQVu6V8JOubO8LrNyd51m3vyYDVJdVdvs%2FJ2N1KWqpnv31FbuXVy6ZoffPeGKIGyvXdT%2BXSZxVLHHU9%2BuKqlVG7ROqHIL0t%2BXfG1zG9czVycJctrby4udROnvNc2HoHp448eQugxmR1UJ6%2FypdZP0G4ElxXoZkdkGtB2BJHswCdHC4%2BGT2ZfT%2FbgLYEz5zs8CZBnxdDV%2BPlPowmMOp8ZL%2BDVuQVcHT38%2Bwzb9XfQcRfB0tuIuwV6rkDPFGBmAJ%2FNDtPEHS08%2FqaMb8HNxSE37uIeN858NbG2TLfKpOH1SUU1IxopWlM8avNonlHZjhptztqhmudNFiL1Y%2FHFy5%2F%2BCwAA%2F%2F8BAAD%2F%2FxP3GLF3BAAA
200 OK 7 B URL HTTP/1.1 iceboxlitre.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzWtc1Rs%2Bt81vk99GxYWuHFwpyOTc%2BWhmWiRYayQYk9hWshHxfN3Jac7ccznn3rmT4CJY0W6EETfq6uaZpEEtxeLKhbRM3NSAkNmULAz%2BA4IgdC13MhB84b4f93kXz%2FO857Pd7JRQZOxk7V27rY1hc80qrbyyrmNpc19ZuVkJaZVeqazr%2BFLjSqVfJte7HNJmlb5aeVuJTTtXoyGlIQ0ri9qpyPbnJih0cq8dVtu02qhVw2YDffff2WcBPAsge6fkOWg5%2Ft%2FG4wfQYoS4%2B%2BM15TdTm7z2VjczLLUOPXnwfrwZ2zxG97yNXIAoPphuw%2FoxIV9fgI0Ppgpge3ulAnA9JsGTEDw%2BmNIE7%2B2fMeUGKgaX%2F0feG0GZETQbQdjb0PKYAEJiZRVx9%2B6KdTnbOkNZiY7JzNN%2FoPMxmfnjecTd%2B1eN7lduWJOl2sYe%2FaiA7o%2BgOyMk2SHS7QA6P4RIP4GWv5O5p8uIu3ur3lhoWUzUaz2CjkYwagDmA2TlpwNkUYAsCdCVJxXWbEeUzkc8qtdbDSFEvS5Es3VJNmW90YooMlHSGyBNBhBmAOF2kLgdbOoBXPYIfqOAlwF8OibBezvoyQK5Isg9Qc4Ick2QpwR5r9iXxtd8cVcan%2FFwWmvTWi%2BGNu3ssn2bdlRMdpNT8mzpSzD78%2BfYVCeVkNKmkJzWlKq1WlzVwvmIN2oRaygZUhnC6wLaX5hI3dZj8sJAINHHwZ%2Fg7BDeHELoZ8CyECwfztco2Maw0aLYju9Lps1WYl1cFSbjkLZAks4g3Qp2zSl5cXKfyx90oMTRwm8fNhc%2B%2FutLCFcgcQVu6V8JOubO8LrNyd51m3vyYDVJdVdvs%2FJ2N1KWqpnv31FbuXVy6ZoffPeGKIGyvXdT%2BXSZxVLHHU9%2BuKqlVG7ROqHIL0t%2BXfG1zG9czVycJctrby4udROnvNc2HoHp448eQugxmR1UJ6%2FypdZP0G4ElxXoZkdkGtB2BJHswCdHC4%2BGT2ZfT%2FbgLYEz5zs8CZBnxdDV%2BPlPowmMOp8ZL%2BDVuQVcHT38%2Bwzb9XfQcRfB0tuIuwV6rkDPFGBmAJ%2FNDtPEHS08%2FqaMb8HNxSE37uIeN858NbG2TLfKpOH1SUU1IxopWlM8avNonlHZjhptztqhmudNFiL1Y%2FHFy5%2F%2BCwAA%2F%2F8BAAD%2F%2FxP3GLF3BAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSzWtc1Rs%2Bt81vk99GxYWuHFwpyOTc%2BWhmWiRYayQYk9hWshHxfN3Jac7ccznn3rmT4CJY0W6EETfq6uaZpEEtxeLKhbRM3NSAkNmULAz%2BA4IgdC13MhB84b4f93kXz%2FO857Pd7JRQZOxk7V27rY1hc80qrbyyrmNpc19ZuVkJaZVeqazr%2BFLjSqVfJte7HNJmlb5aeVuJTTtXoyGlIQ0ri9qpyPbnJih0cq8dVtu02qhVw2YDffff2WcBPAsge6fkOWg5%2Ft%2FG4wfQYoS4%2B%2BM15TdTm7z2VjczLLUOPXnwfrwZ2zxG97yNXIAoPphuw%2FoxIV9fgI0Ppgpge3ulAnA9JsGTEDw%2BmNIE7%2B2fMeUGKgaX%2F0feG0GZETQbQdjb0PKYAEJiZRVx9%2B6KdTnbOkNZiY7JzNN%2FoPMxmfnjecTd%2B1eN7lduWJOl2sYe%2FaiA7o%2BgOyMk2SHS7QA6P4RIP4GWv5O5p8uIu3ur3lhoWUzUaz2CjkYwagDmA2TlpwNkUYAsCdCVJxXWbEeUzkc8qtdbDSFEvS5Es3VJNmW90YooMlHSGyBNBhBmAOF2kLgdbOoBXPYIfqOAlwF8OibBezvoyQK5Isg9Qc4Ick2QpwR5r9iXxtd8cVcan%2FFwWmvTWi%2BGNu3ssn2bdlRMdpNT8mzpSzD78%2BfYVCeVkNKmkJzWlKq1WlzVwvmIN2oRaygZUhnC6wLaX5hI3dZj8sJAINHHwZ%2Fg7BDeHELoZ8CyECwfztco2Maw0aLYju9Lps1WYl1cFSbjkLZAks4g3Qp2zSl5cXKfyx90oMTRwm8fNhc%2B%2FutLCFcgcQVu6V8JOubO8LrNyd51m3vyYDVJdVdvs%2FJ2N1KWqpnv31FbuXVy6ZoffPeGKIGyvXdT%2BXSZxVLHHU9%2BuKqlVG7ROqHIL0t%2BXfG1zG9czVycJctrby4udROnvNc2HoHp448eQugxmR1UJ6%2FypdZP0G4ElxXoZkdkGtB2BJHswCdHC4%2BGT2ZfT%2FbgLYEz5zs8CZBnxdDV%2BPlPowmMOp8ZL%2BDVuQVcHT38%2Bwzb9XfQcRfB0tuIuwV6rkDPFGBmAJ%2FNDtPEHS08%2FqaMb8HNxSE37uIeN858NbG2TLfKpOH1SUU1IxopWlM8avNonlHZjhptztqhmudNFiL1Y%2FHFy5%2F%2BCwAA%2F%2F8BAAD%2F%2FxP3GLF3BAAA HTTP/1.1
Host: iceboxlitre.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: u_pl=17480071; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 22:43:16 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ca8d07589ded84e23cc4645814afdc2b
Strict-Transport-Security: max-age=0; includeSubdomains
iceboxlitre.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzWtc1Rs%2Bt80PftSNigsFwcGNCjI5dz6amXYRrLUSjElsKwER8XzdyWnO3HM55965k%2BAiWNFuhBE36urmmaRBDcVuBBdSmbipASGDIFkY%2FAcEQeha7mQg%2BMJ9P%2B7zLp7nec%2FH29kJocjY8cqbdlMbw2abVVp5cVXH0ua%2BsnSzEtIqvVxZ1fHFxuVKv0yudymkzSp9qfK6Eut2tkZDSkMaVq5ppyLbn52g0Ml%2BO6y2abVRq4bNBvruv7PPAngWQPZOyJPQcvy%2FtYf3ocUIcfe7q8qvpzZ5%2BbVuZlhqHXpy7%2B14PbZ5jO5ZG7kAUbw33Yb1Y0K%2BOAcb700VwPZ2SgXgekyC30PweG9KE7y3e8qUG6gYXD6GvDeCMiNoNoKwt6HlEQGExNIy4u7dJetytnGKshIdk5lH%2F0DnYzLzx1OIu%2FeuGN2v3LAmS7WNPfpRAd0fQXdGSLIDpJsBdH4AkX4ILX8ls48WEXd3lr2x0LKYqNd6BB2NYNQAzAfIyk8HyKIAWRKgK48rrNmOKJ2LeFSvtxpCiHpdiGbromzKeqMVUWSipDdAmgwgzADCbSFxW1jXA7jsJ%2Fi1Al4G8OmYBG9toScL5Iog9wQ5I8g1QZ4S5L1iVxpf88VdaXzGw2mtTWu9GNq0s812bdpRMdlOTsgTpS%2FBhR8%2Bwbo6roSUNoXktKZUrdXiqhbORbxRi1hDyZDKEF4X0P7cROqmHpOnBwKJPgr%2BBGcH8OYAQj8OloVg%2BXCuRsHWho0WxWZ8TzJtNhLr4qowGYe0BZJ0BulGsG1OyDOT%2B1x69xaUOJz%2F7Z1n9%2F8fvgDhCiSuwC39M0HH3BletznZuW5zT%2B4vJ6nu6k1W3u5GylI1880baiO3Ti5c9YOvXxElULb7N5VPF1ksddzx5NsrWkrlrlknFPlxwa8qvpL5tSuZi7NkceXVawvdxCnvtY1HYPro%2FQcQekwuDKqTV%2Flc63toN4LLCnSzQzINaDuCSLbgk8P5X95rzn%2Fw12fwlsCZsx2enEOeFUNX42c%2FjSYw6mxmvIBXZxZwdfjg71Ns299Bx50HS28j7hbouQI9U4CZAXx2YZgm7nD%2B4ZdlfAVuzg%2B5ced3uHHm89LazsTfMml4fVxRzYhGitYUj9o8mmNUtqNGm7N2qOZ4k4VI%2FVh8%2BvxH%2FwIAAP%2F%2FAQAA%2F%2F%2BfxAWUdwQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 iceboxlitre.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzWtc1Rs%2Bt80PftSNigsFwcGNCjI5dz6amXYRrLUSjElsKwER8XzdyWnO3HM55965k%2BAiWNFuhBE36urmmaRBDcVuBBdSmbipASGDIFkY%2FAcEQeha7mQg%2BMJ9P%2B7zLp7nec%2FH29kJocjY8cqbdlMbw2abVVp5cVXH0ua%2BsnSzEtIqvVxZ1fHFxuVKv0yudymkzSp9qfK6Eut2tkZDSkMaVq5ppyLbn52g0Ml%2BO6y2abVRq4bNBvruv7PPAngWQPZOyJPQcvy%2FtYf3ocUIcfe7q8qvpzZ5%2BbVuZlhqHXpy7%2B14PbZ5jO5ZG7kAUbw33Yb1Y0K%2BOAcb700VwPZ2SgXgekyC30PweG9KE7y3e8qUG6gYXD6GvDeCMiNoNoKwt6HlEQGExNIy4u7dJetytnGKshIdk5lH%2F0DnYzLzx1OIu%2FeuGN2v3LAmS7WNPfpRAd0fQXdGSLIDpJsBdH4AkX4ILX8ls48WEXd3lr2x0LKYqNd6BB2NYNQAzAfIyk8HyKIAWRKgK48rrNmOKJ2LeFSvtxpCiHpdiGbromzKeqMVUWSipDdAmgwgzADCbSFxW1jXA7jsJ%2Fi1Al4G8OmYBG9toScL5Iog9wQ5I8g1QZ4S5L1iVxpf88VdaXzGw2mtTWu9GNq0s812bdpRMdlOTsgTpS%2FBhR8%2Bwbo6roSUNoXktKZUrdXiqhbORbxRi1hDyZDKEF4X0P7cROqmHpOnBwKJPgr%2BBGcH8OYAQj8OloVg%2BXCuRsHWho0WxWZ8TzJtNhLr4qowGYe0BZJ0BulGsG1OyDOT%2B1x69xaUOJz%2F7Z1n9%2F8fvgDhCiSuwC39M0HH3BletznZuW5zT%2B4vJ6nu6k1W3u5GylI1880baiO3Ti5c9YOvXxElULb7N5VPF1ksddzx5NsrWkrlrlknFPlxwa8qvpL5tSuZi7NkceXVawvdxCnvtY1HYPro%2FQcQekwuDKqTV%2Flc63toN4LLCnSzQzINaDuCSLbgk8P5X95rzn%2Fw12fwlsCZsx2enEOeFUNX42c%2FjSYw6mxmvIBXZxZwdfjg71Ns299Bx50HS28j7hbouQI9U4CZAXx2YZgm7nD%2B4ZdlfAVuzg%2B5ced3uHHm89LazsTfMml4fVxRzYhGitYUj9o8mmNUtqNGm7N2qOZ4k4VI%2FVh8%2BvxH%2FwIAAP%2F%2FAQAA%2F%2F%2BfxAWUdwQAAA%3D%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSzWtc1Rs%2Bt80PftSNigsFwcGNCjI5dz6amXYRrLUSjElsKwER8XzdyWnO3HM55965k%2BAiWNFuhBE36urmmaRBDcVuBBdSmbipASGDIFkY%2FAcEQeha7mQg%2BMJ9P%2B7zLp7nec%2FH29kJocjY8cqbdlMbw2abVVp5cVXH0ua%2BsnSzEtIqvVxZ1fHFxuVKv0yudymkzSp9qfK6Eut2tkZDSkMaVq5ppyLbn52g0Ml%2BO6y2abVRq4bNBvruv7PPAngWQPZOyJPQcvy%2FtYf3ocUIcfe7q8qvpzZ5%2BbVuZlhqHXpy7%2B14PbZ5jO5ZG7kAUbw33Yb1Y0K%2BOAcb700VwPZ2SgXgekyC30PweG9KE7y3e8qUG6gYXD6GvDeCMiNoNoKwt6HlEQGExNIy4u7dJetytnGKshIdk5lH%2F0DnYzLzx1OIu%2FeuGN2v3LAmS7WNPfpRAd0fQXdGSLIDpJsBdH4AkX4ILX8ls48WEXd3lr2x0LKYqNd6BB2NYNQAzAfIyk8HyKIAWRKgK48rrNmOKJ2LeFSvtxpCiHpdiGbromzKeqMVUWSipDdAmgwgzADCbSFxW1jXA7jsJ%2Fi1Al4G8OmYBG9toScL5Iog9wQ5I8g1QZ4S5L1iVxpf88VdaXzGw2mtTWu9GNq0s812bdpRMdlOTsgTpS%2FBhR8%2Bwbo6roSUNoXktKZUrdXiqhbORbxRi1hDyZDKEF4X0P7cROqmHpOnBwKJPgr%2BBGcH8OYAQj8OloVg%2BXCuRsHWho0WxWZ8TzJtNhLr4qowGYe0BZJ0BulGsG1OyDOT%2B1x69xaUOJz%2F7Z1n9%2F8fvgDhCiSuwC39M0HH3BletznZuW5zT%2B4vJ6nu6k1W3u5GylI1880baiO3Ti5c9YOvXxElULb7N5VPF1ksddzx5NsrWkrlrlknFPlxwa8qvpL5tSuZi7NkceXVawvdxCnvtY1HYPro%2FQcQekwuDKqTV%2Flc63toN4LLCnSzQzINaDuCSLbgk8P5X95rzn%2Fw12fwlsCZsx2enEOeFUNX42c%2FjSYw6mxmvIBXZxZwdfjg71Ns299Bx50HS28j7hbouQI9U4CZAXx2YZgm7nD%2B4ZdlfAVuzg%2B5ced3uHHm89LazsTfMml4fVxRzYhGitYUj9o8mmNUtqNGm7N2qOZ4k4VI%2FVh8%2BvxH%2FwIAAP%2F%2FAQAA%2F%2F%2BfxAWUdwQAAA%3D%3D HTTP/1.1
Host: iceboxlitre.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: u_pl=17480071; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 04 Dec 2022 22:43:16 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1f4de797597c741f5455f1b61bc10894
Strict-Transport-Security: max-age=0; includeSubdomains
ocsp.digicert.com/
200 OK 279 B IP
Hash 2f24fad0b0fd8e8c377f6ca44f754776
2554471bfeebca173f9c6b60c2b092fb8054eafb
52178458b71696363e913ce0961f56c820f00edcbc5b6934dfb915559513d4b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1357
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:43:17 GMT
Last-Modified: Sun, 04 Dec 2022 22:20:40 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 2f24fad0b0fd8e8c377f6ca44f754776
2554471bfeebca173f9c6b60c2b092fb8054eafb
52178458b71696363e913ce0961f56c820f00edcbc5b6934dfb915559513d4b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1328
Cache-Control: max-age=101764
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:43:17 GMT
Etag: "638c07d9-117"
Expires: Tue, 06 Dec 2022 02:59:21 GMT
Last-Modified: Sun, 04 Dec 2022 02:37:13 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ddb39861247447d4893bb0c047341873
e98e593991fd7aafdca51a41de2ab418cce988ed
88c10bd0a2532486d293e37d2c3b7e2572428c40165afbafd97d464f1b42a60f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "88C10BD0A2532486D293E37D2C3B7E2572428C40165AFBAFD97D464F1B42A60F"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19663
Expires: Mon, 05 Dec 2022 04:11:00 GMT
Date: Sun, 04 Dec 2022 22:43:17 GMT
Connection: keep-alive
video.ktkjmp.com/adsbygoogle.js
200 OK 16 B URL HTTP/2 video.ktkjmp.com/adsbygoogle.js
IP
Hash 3d7f7a60216d40dea48e495fef6903c9
fecdb5184f55cf012563d78940eb97b10b9cc99b
96d83ac9f20fc0b88404f307f135e212642e02d6ea295c96b28aed0d771a224f
GET /adsbygoogle.js HTTP/1.1
Host: video.ktkjmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlivrdr.com/
Origin: https://creative.xlivrdr.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:17 GMT
content-type: application/javascript
content-length: 16
x-amz-id-2: umnGOMVCjminO+qe5UBV06OrSizh/U59KvaEibge5v1gMRbq/UnThpljPBepeh+5w7wEpQIcu/4=
x-amz-request-id: 3YW9SERF7DC7262X
last-modified: Thu, 10 Mar 2022 13:52:07 GMT
etag: "3d7f7a60216d40dea48e495fef6903c9"
x-amz-meta-s3cmd-attrs: atime:1646920284/ctime:1646920283/gid:20/gname:staff/md5:3d7f7a60216d40dea48e495fef6903c9/mode:33188/mtime:1646920283/uid:501/uname:mikhailchubar
x-amz-version-id: eIgLIBoMMcsEXtxOH6UDjWyfAquRpkIG
access-control-allow-origin: https://creative.xlivrdr.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: HIT
age: 1906
expires: Mon, 05 Dec 2022 02:43:17 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f5fbfdab51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 2f24fad0b0fd8e8c377f6ca44f754776
2554471bfeebca173f9c6b60c2b092fb8054eafb
52178458b71696363e913ce0961f56c820f00edcbc5b6934dfb915559513d4b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1357
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:43:17 GMT
Last-Modified: Sun, 04 Dec 2022 22:20:40 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
s3t3d2y8.afcdn.net/library/344676/05d662f8d932fc5a40623ac79ba30570488d9fee.mp4
206 Partial Content 64 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/344676/05d662f8d932fc5a40623ac79ba30570488d9fee.mp4
IP
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash ccaabbcf2b9ab1c754ac894ece3db6fa
fa6d10d73e2d95235ca2cc5818cfbffabcf2f00b
6977f46b69b86c5f16caedf8e54026d6ba82aaa767418dd71587af01107473f2
GET /library/344676/05d662f8d932fc5a40623ac79ba30570488d9fee.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: video/mp4
content-length: 81331
last-modified: Thu, 20 Jan 2022 15:19:55 GMT
etag: "61e97d9b-13db3"
expires: Fri, 30 Jun 2023 11:37:31 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195314
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ1Bj27/EoXOAA
x-77-nzt-ray: c0a4cc28dee0b1e684228d636aa46c28
x-cache: HIT
x-age: 13534482
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-81330/81331
X-Firefox-Spdy: h2
reproductiontape.com/pixel/purst?dl=0&th=0&sc=0&rs=2273&rd=2273&fd=680&bv=22.10.v.10&tmpl=136
200 OK 0 B URL HTTP/1.1 reproductiontape.com/pixel/purst?dl=0&th=0&sc=0&rs=2273&rd=2273&fd=680&bv=22.10.v.10&tmpl=136
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=2273&rd=2273&fd=680&bv=22.10.v.10&tmpl=136 HTTP/1.1
Host: reproductiontape.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 04 Dec 2022 22:43:17 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
reproductiontape.com/pixel/pure
204 No Content 0 B URL HTTP/1.1 reproductiontape.com/pixel/pure
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
OPTIONS /pixel/pure HTTP/1.1
Host: reproductiontape.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://dailyporn.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.22.0
Date: Sun, 04 Dec 2022 22:43:17 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
Content-Type: text/plain; charset=utf-8
Content-Length: 0
img.strpst.com/thumbs/1670193301/85364341
200 OK 40 kB URL HTTP/2 img.strpst.com/thumbs/1670193301/85364341
IP
Hash 28df58235064ce5d0a5c82baa3920de7
5ac1185771e8eb4fe67e6aecd4eda53c28a126a8
498032eaeb77ad453e6fa4156a099f512c586b9c6091ba1b4b53fa4696168c97
GET /thumbs/1670193301/85364341 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xlivrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:17 GMT
content-type: image/jpeg
content-length: 39176
cf-bgj: imgq:100,h2pri
cf-polished: origSize=40895, status=webp_bigger
etag: "c51d63258dd77d1d61cdd717dd0d820c"
last-modified: Sun, 04 Dec 2022 22:34:41 GMT
cf-cache-status: HIT
age: 412
expires: Sun, 04 Dec 2022 22:44:17 GMT
cache-control: public, max-age=60
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f6168a7b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
reproductiontape.com/pixel/pure
200 OK 0 B URL HTTP/1.1 reproductiontape.com/pixel/pure
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
POST /pixel/pure HTTP/1.1
Host: reproductiontape.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 75
Origin: https://dailyporn.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 04 Dec 2022 22:43:17 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
tallysaturatesnare.com/sbar.json?key=cfcff15295c1791b133bdd6ccda46168
200 OK 4.2 kB URL HTTP/1.1 tallysaturatesnare.com/sbar.json?key=cfcff15295c1791b133bdd6ccda46168
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (5897), with no line terminators
Hash 27be58160d9de9e17c10fcedab55b52d
287da539e0cbc99590f32bbdefc41b2d8acfb2c4
f63b5107d33725fce8270df0501b5eb2c833f5b4a134a9faa65ff994653083db
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=cfcff15295c1791b133bdd6ccda46168 HTTP/1.1
Host: tallysaturatesnare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dailyporn.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 04 Dec 2022 22:43:17 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://dailyporn.club
Access-Control-Allow-Origin: https://dailyporn.club
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16560384; expires=Mon, 05 Dec 2022 22:43:17 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 05 Dec 2022 22:43:17 GMT; secure; SameSite=None
uncs=1; expires=Mon, 05 Dec 2022 22:43:17 GMT; secure; SameSite=None
pdhtkv29=true; expires=Mon, 05 Dec 2022 22:43:17 GMT; secure; SameSite=None
uncs29=1; expires=Mon, 05 Dec 2022 22:43:17 GMT; secure; SameSite=None
sleccfcff15295c1791b133bdd6ccda46168=[3789938]; expires=Sun, 04 Dec 2022 22:43:22 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e7436212ffded80e55e100f214160cff
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
dailyporn.club/favicon-16x16.png
200 OK 483 B URL HTTP/2 dailyporn.club/favicon-16x16.png
IP
Hash 42532cade14b2de007dd22fc8ba3bb9b
ce003d47afaddeed948f942d3e31d203d9068b64
01c2c1aafdc61c7b4df0e821798d063e264c8ff8e31c864feaebcd17aa043577
GET /favicon-16x16.png HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: sb_main_cfcff15295c1791b133bdd6ccda46168=1; sb_count_cfcff15295c1791b133bdd6ccda46168=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=iceboxlitre.com; ppu_idelay_e8c5880348109e0543aa23d61ee69616=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:17 GMT
content-type: image/png
content-length: 406
cache-control: public, max-age=5356800
expires: Thu, 17 Nov 2022 19:36:33 GMT
etag: "196-61d895a4-1e93b;;;"
last-modified: Fri, 07 Jan 2022 19:33:56 GMT
cf-cache-status: HIT
age: 486823
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KdTZHr1oesVMYaktbIdd3mF9UgGfQfjxrOyzMuaipIeM1s0amD9QtHuhMNI0DHzbwk4I9lnk8fShBXTuyisokm2FtMIos5sjfcda6g%2F3CAbKBzoSiGlWCXGVU1y2sy7%2Bsg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f626a0a7761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dailyporn.club/apple-touch-icon.png
200 OK 5.4 kB URL HTTP/2 dailyporn.club/apple-touch-icon.png
IP
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 21dd942d3f400bc16f9fa61dd450cbbe
3d68d48dd9ee19c464c789cac3569c3005bf743e
a1fc2af3ee78c51b4db0732d4044effe39f06208510d3bb91201391e36897798
GET /apple-touch-icon.png HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: sb_main_cfcff15295c1791b133bdd6ccda46168=1; sb_count_cfcff15295c1791b133bdd6ccda46168=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=iceboxlitre.com; ppu_idelay_e8c5880348109e0543aa23d61ee69616=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:17 GMT
content-type: image/png
content-length: 5364
cache-control: public, max-age=5356800
expires: Fri, 04 Mar 2022 01:05:35 GMT
etag: "14f4-61d895a4-1e92b;;;"
last-modified: Fri, 07 Jan 2022 19:33:56 GMT
cf-cache-status: HIT
age: 430164
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KGMSphohq2qCc9sbAlEBTHRTcZw3hSrjhdVvQnKZ%2Be33o3LgPfhEsGNw1Xm9HpkBbuIQvRpoyKoco9cOhmdAx2dpGA1dYwP%2Fm0YNQBCeU%2BItv4nANOrECev%2FkHsDTwIVdA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f626a087761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 825a300d1eb0cc3ad3b7ac0c0499b946
5798cd7466b04d4ca41a415b31ea566fb5cd910d
94205b8ddbdc5fcbd36d52ebc36a56e14b7c0a207bb3db2ca1ea1a3bd25cebc1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 22:43:17 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 03 Dec 2022 05:29:15 GMT
Expires: Sat, 10 Dec 2022 05:29:14 GMT
Etag: "5798cd7466b04d4ca41a415b31ea566fb5cd910d"
Cache-Control: max-age=455756,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77480f625c05b50f-OSL
tallysaturatesnare.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzWskRRytXuNFLyp7WA9K48kFmXTPR5JxD8F13XVxP%2BLuSq7WV0%2FKVHc1Vd3TkzkFg2EvwngTROy8STaoS9j8AbIyWQ8yIGRckCAGxZO3hYU9eZCZDAR%2FUPX7Vb13eO9VbW7lxyRATo%2BWrpuu0prONiqB%2F%2BaySoQpnH%2Fjjh8GleCCv6ySufoFvzPebPvtMGhUgvP%2BFclXzWw1CIMgDEL%2FsrIyMp3ZCQqV3m%2BGlWZQqVcrYaOOjv3%2F2eUeHPUg2sfkFSgxen7l530oPkASP7gk3Wpm0rfei3NNM2PRFrsfJauJKRLEp2NkPUTJ7pQN40aEfHkGJtmdOoBpb48dgKkR8X4LwZLdqUyw9s6JUqYhEzDxIor2AFIPoOgA3GxAiUMCcIEbN5HE924YW9C1E5SO0RGZefYUqhiRmT%2FOIon3LmrV8W8bnWfKJA6dqITqDKBaA6T5AbKuB1UcgGefQolfyOyza0ji7ZtOGyhRTtwrNYCKBtCyB%2Bo85OOlPOSRhzz1EIsjnzaaURDMRyyq1RbqnPNajfPGwpxoiFp9IQqQ87G8HrK0B6574HYdqV3HqurB5j%2FCrZRwwoPLRsT7cB1tUaKQBIUjKChBoQiKjKBolztCu6or7wntchZOe3Xaa2XfZK0tumOylkzIVnpMXp7k8u8%2Bwao88nnEoyhsVJsNHs43QxbWakyIOc4Frc%2BFcwtwqoRyZyZWu2pEzvU4UnXo%2FQlGD%2BD0Abh6CTR%2FDbToz1cD0JV%2BfSFAN9kTVOm11NikwnXOIEyJNJtBtuZt6WPy6kRH87GF5MPFJw%2F8R1%2Ft%2FA1uS6S2xCfqEUFL3%2B3fMgXZvmUKR%2FZvppmKVZeO3%2B52RjM5890Hcq0wVly95HrfvsPHwHi8f0e67BpNhEpajnx%2FUQkh7WVjuSQ%2FXHXLki3lbuVibpM8vbb07uWrcWqlc8okA1B1%2BPFDcDUiL8Sbk1%2F5%2Bu%2BbUHYAm5eI8yGZFpQ5AE%2FX4dLh4j9X9s52%2F3ofzhBYfcphqYciL%2Fu2yk4vtRqR6tOfoOVw8euNc9cff3MelJVw8jQGJocPn5zwt9xdtKwHmm0giUu0bYm2LkF1Dy5%2Frp%2Bldrj4a21SYNrrM229baat%2FuIkXqeOfNmIgkgGVcmiJovmaSCaUb3JaDOU86xBQ2RuxD9%2F47P%2FAAAA%2F%2F8BAAD%2F%2F5CsEiFxBAAA
200 OK 7 B URL HTTP/1.1 tallysaturatesnare.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzWskRRytXuNFLyp7WA9K48kFmXTPR5JxD8F13XVxP%2BLuSq7WV0%2FKVHc1Vd3TkzkFg2EvwngTROy8STaoS9j8AbIyWQ8yIGRckCAGxZO3hYU9eZCZDAR%2FUPX7Vb13eO9VbW7lxyRATo%2BWrpuu0prONiqB%2F%2BaySoQpnH%2Fjjh8GleCCv6ySufoFvzPebPvtMGhUgvP%2BFclXzWw1CIMgDEL%2FsrIyMp3ZCQqV3m%2BGlWZQqVcrYaOOjv3%2F2eUeHPUg2sfkFSgxen7l530oPkASP7gk3Wpm0rfei3NNM2PRFrsfJauJKRLEp2NkPUTJ7pQN40aEfHkGJtmdOoBpb48dgKkR8X4LwZLdqUyw9s6JUqYhEzDxIor2AFIPoOgA3GxAiUMCcIEbN5HE924YW9C1E5SO0RGZefYUqhiRmT%2FOIon3LmrV8W8bnWfKJA6dqITqDKBaA6T5AbKuB1UcgGefQolfyOyza0ji7ZtOGyhRTtwrNYCKBtCyB%2Bo85OOlPOSRhzz1EIsjnzaaURDMRyyq1RbqnPNajfPGwpxoiFp9IQqQ87G8HrK0B6574HYdqV3HqurB5j%2FCrZRwwoPLRsT7cB1tUaKQBIUjKChBoQiKjKBolztCu6or7wntchZOe3Xaa2XfZK0tumOylkzIVnpMXp7k8u8%2Bwao88nnEoyhsVJsNHs43QxbWakyIOc4Frc%2BFcwtwqoRyZyZWu2pEzvU4UnXo%2FQlGD%2BD0Abh6CTR%2FDbToz1cD0JV%2BfSFAN9kTVOm11NikwnXOIEyJNJtBtuZt6WPy6kRH87GF5MPFJw%2F8R1%2Ft%2FA1uS6S2xCfqEUFL3%2B3fMgXZvmUKR%2FZvppmKVZeO3%2B52RjM5890Hcq0wVly95HrfvsPHwHi8f0e67BpNhEpajnx%2FUQkh7WVjuSQ%2FXHXLki3lbuVibpM8vbb07uWrcWqlc8okA1B1%2BPFDcDUiL8Sbk1%2F5%2Bu%2BbUHYAm5eI8yGZFpQ5AE%2FX4dLh4j9X9s52%2F3ofzhBYfcphqYciL%2Fu2yk4vtRqR6tOfoOVw8euNc9cff3MelJVw8jQGJocPn5zwt9xdtKwHmm0giUu0bYm2LkF1Dy5%2Frp%2Bldrj4a21SYNrrM229baat%2FuIkXqeOfNmIgkgGVcmiJovmaSCaUb3JaDOU86xBQ2RuxD9%2F47P%2FAAAA%2F%2F8BAAD%2F%2F5CsEiFxBAAA
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSzWskRRytXuNFLyp7WA9K48kFmXTPR5JxD8F13XVxP%2BLuSq7WV0%2FKVHc1Vd3TkzkFg2EvwngTROy8STaoS9j8AbIyWQ8yIGRckCAGxZO3hYU9eZCZDAR%2FUPX7Vb13eO9VbW7lxyRATo%2BWrpuu0prONiqB%2F%2BaySoQpnH%2Fjjh8GleCCv6ySufoFvzPebPvtMGhUgvP%2BFclXzWw1CIMgDEL%2FsrIyMp3ZCQqV3m%2BGlWZQqVcrYaOOjv3%2F2eUeHPUg2sfkFSgxen7l530oPkASP7gk3Wpm0rfei3NNM2PRFrsfJauJKRLEp2NkPUTJ7pQN40aEfHkGJtmdOoBpb48dgKkR8X4LwZLdqUyw9s6JUqYhEzDxIor2AFIPoOgA3GxAiUMCcIEbN5HE924YW9C1E5SO0RGZefYUqhiRmT%2FOIon3LmrV8W8bnWfKJA6dqITqDKBaA6T5AbKuB1UcgGefQolfyOyza0ji7ZtOGyhRTtwrNYCKBtCyB%2Bo85OOlPOSRhzz1EIsjnzaaURDMRyyq1RbqnPNajfPGwpxoiFp9IQqQ87G8HrK0B6574HYdqV3HqurB5j%2FCrZRwwoPLRsT7cB1tUaKQBIUjKChBoQiKjKBolztCu6or7wntchZOe3Xaa2XfZK0tumOylkzIVnpMXp7k8u8%2Bwao88nnEoyhsVJsNHs43QxbWakyIOc4Frc%2BFcwtwqoRyZyZWu2pEzvU4UnXo%2FQlGD%2BD0Abh6CTR%2FDbToz1cD0JV%2BfSFAN9kTVOm11NikwnXOIEyJNJtBtuZt6WPy6kRH87GF5MPFJw%2F8R1%2Ft%2FA1uS6S2xCfqEUFL3%2B3fMgXZvmUKR%2FZvppmKVZeO3%2B52RjM5890Hcq0wVly95HrfvsPHwHi8f0e67BpNhEpajnx%2FUQkh7WVjuSQ%2FXHXLki3lbuVibpM8vbb07uWrcWqlc8okA1B1%2BPFDcDUiL8Sbk1%2F5%2Bu%2BbUHYAm5eI8yGZFpQ5AE%2FX4dLh4j9X9s52%2F3ofzhBYfcphqYciL%2Fu2yk4vtRqR6tOfoOVw8euNc9cff3MelJVw8jQGJocPn5zwt9xdtKwHmm0giUu0bYm2LkF1Dy5%2Frp%2Bldrj4a21SYNrrM229baat%2FuIkXqeOfNmIgkgGVcmiJovmaSCaUb3JaDOU86xBQ2RuxD9%2F47P%2FAAAA%2F%2F8BAAD%2F%2F5CsEiFxBAAA HTTP/1.1
Host: tallysaturatesnare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: u_pl=16560384; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleccfcff15295c1791b133bdd6ccda46168=[3789938]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 04 Dec 2022 22:43:17 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b49b6ebab0513545951e39cdeb118887
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8747
Expires: Mon, 05 Dec 2022 01:09:04 GMT
Date: Sun, 04 Dec 2022 22:43:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8747
Expires: Mon, 05 Dec 2022 01:09:04 GMT
Date: Sun, 04 Dec 2022 22:43:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8747
Expires: Mon, 05 Dec 2022 01:09:04 GMT
Date: Sun, 04 Dec 2022 22:43:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 408b9ba72dc83c47c6821c825897d586
39c533b3ecadd39dcc4be7e5d6b1a5fece62de8b
3b1904ae01a75c6c530b0d4e952f53b823b8ebc3bd4eaf62794dac74999d6b23
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3B1904AE01A75C6C530B0D4E952F53B823B8EBC3BD4EAF62794DAC74999D6B23"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7340
Expires: Mon, 05 Dec 2022 00:45:37 GMT
Date: Sun, 04 Dec 2022 22:43:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8747
Expires: Mon, 05 Dec 2022 01:09:04 GMT
Date: Sun, 04 Dec 2022 22:43:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d616b0b14e0c5cda5c98d0b99cccbaf3
657299c8f642a892045dbfe2a6958133e6b57f99
3590d6a37989c47a5d082655909defed76f2f4a467d3f6700134bba4ffb130f7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3590D6A37989C47A5D082655909DEFED76F2F4A467D3F6700134BBA4FFB130F7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4073
Expires: Sun, 04 Dec 2022 23:51:10 GMT
Date: Sun, 04 Dec 2022 22:43:17 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47f316c5-1381-4b6e-9e8d-f1956258ef3e.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47f316c5-1381-4b6e-9e8d-f1956258ef3e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a349d02cce160f72cc93f6fb6e45fa46
a6f82481ea0a820da0f199e8f9051a4aa4013c82
ab320118577a2dcb6ab7ad904d6350e187501a94b39b71fdd70b31cbc8853b24
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47f316c5-1381-4b6e-9e8d-f1956258ef3e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6826
x-amzn-requestid: f0abdba6-14c8-4aae-ba3b-37ba0af2ff08
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_t2FsLIAMFekA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d1325-3452be066acddb554f528cc3;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: d5IKLNblcA9AzCoGMpGmIGwUu-kQlHlouju5mm2NwsSOin4MFT40mg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:56:21 GMT
age: 2816
etag: "a6f82481ea0a820da0f199e8f9051a4aa4013c82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d407108-e7e2-4672-80f5-d4b4c3e66151.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d407108-e7e2-4672-80f5-d4b4c3e66151.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3130c86c084c4c925fb9179dfa5c145d
203f27660f3885d5c1bc68a535baef4e48ff6582
faf2c48c2286fe2149908947de9037640007d32e13694c1261f610250caf3f8f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d407108-e7e2-4672-80f5-d4b4c3e66151.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6173
x-amzn-requestid: dc73ee0d-b1ec-407f-8e98-3ba264725ee3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_sqHqwIAMFwqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d131d-56d74e8d45baa9e87136708f;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Gp9v8CfWmPctcSly9jWOxy0VCbBOE-CZs9z636yfpgpVi8eNt_PVvg==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:48:29 GMT
etag: "203f27660f3885d5c1bc68a535baef4e48ff6582"
content-type: image/jpeg
age: 3288
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd33bab20-1689-4962-985e-15e304482bee.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd33bab20-1689-4962-985e-15e304482bee.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 37b58bb09c00b591c2819c89e371d927
aa487f4a7767cb4591fe620592da65bde90c0aa2
9b7791d79d1e9702c23e63450d556e7f1f287f4d02788fc147822c1d90f64657
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd33bab20-1689-4962-985e-15e304482bee.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9825
x-amzn-requestid: 1ab366f4-78f2-4aaa-af7b-aa203c2d8234
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_1ZE23IAMFnhw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d1355-35c7b5bb6e4623e93900810c;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:38:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: iTF4eWWXKKT97b6S9ONW7NopJ8hXWdOe9y3IwzVF7J9m2eJlT43bCg==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:49:04 GMT
age: 3253
etag: "aa487f4a7767cb4591fe620592da65bde90c0aa2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feff698a5-ffc4-43ea-b7a3-b681cafeb108.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feff698a5-ffc4-43ea-b7a3-b681cafeb108.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5d72fb8d20c29763234c2817b119d11b
d4924ec714f5157bcb2fddcb5f768188a3dd37dc
e9aa59142e0673ed3f58b36beaca48213c678dbe4655f9c4b64581cb0f6f22f6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feff698a5-ffc4-43ea-b7a3-b681cafeb108.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12830
x-amzn-requestid: 66f5f2fa-8472-4484-bbea-20ece7e98b1f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmcsxGDyIAMFX4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e51-146167697890d9312ce3dbac;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CYvQg9Tc0rQB9_DoDW4RoLx2GEdMSEaXViCY3qXbijd0P5mMSZWE6Q==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 03:35:27 GMT
age: 68870
etag: "d4924ec714f5157bcb2fddcb5f768188a3dd37dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa99f7bcf-386e-4655-b6f0-99abdf67f097.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa99f7bcf-386e-4655-b6f0-99abdf67f097.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2f60a6490f38a772dcd50a1132e98e1b
ff254a1df087d2c157d88a6ef04e395dc49efe5e
653e40becd103cd76cc2f194a87e933e8c548d346f87520fefca3b16430fc4ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa99f7bcf-386e-4655-b6f0-99abdf67f097.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8469
x-amzn-requestid: c17eff92-da62-4f0f-9e75-2741012ec43a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_sqFSjoAMFQ6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d131d-61d61d2f0bb01ecb21b809ea;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kf_hcK2d2YFhladZn1S4cyGq7vLTSKdWgPUTNT0M9LwHXuOV-nlgGw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:52:07 GMT
age: 3070
etag: "ff254a1df087d2c157d88a6ef04e395dc49efe5e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa1caf4c1-b9c0-4db1-a780-00b9a6198731.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa1caf4c1-b9c0-4db1-a780-00b9a6198731.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8d76ec668361348eb17d54001fd2e6c6
534299a20a76ea6e3250f0fb35fe772cac04ef51
22676fae3909acf18e6cd4f505ec718fdac156990edb20926afdae2a359a2859
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa1caf4c1-b9c0-4db1-a780-00b9a6198731.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5209
x-amzn-requestid: 682056d5-7815-4fd1-b05b-723619128d8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjKUXF5eoAMFRvQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638abdb5-6df5d866267739212832ee66;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 03:08:37 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pFKMx6_a5Ml_dBK1dafOt4KFMeC5SwUqNlNpc8sO4DVj0Ocb2Yksrw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 03:17:39 GMT
age: 69938
etag: "534299a20a76ea6e3250f0fb35fe772cac04ef51"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
sstatic1.histats.com/0.gif?4618213&101
200 OK 120 B URL HTTP/1.1 sstatic1.histats.com/0.gif?4618213&101
IP
Hash 181bb7debc49865c3c7797be270eaf08
b837802b1972a1130924867b1db83d5270a6df55
139d395a28307f49c69297e168e89a2fcf5713c94f2c91adf6d622ec58362d49
GET /0.gif?4618213&101 HTTP/1.1
Host: sstatic1.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 22:43:17 GMT
Content-Type: image/gif
Content-Length: 43
Connection: close
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash a9ff5fa0b5c4765b050f2381f57f5520
0ce842b0fbaef98e256cc66eff4615df094b9d51
95e33b8d7c38a952cbc353b5e2587cd1154da32d9ba29f010bd4b70a4ff2c487
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "95E33B8D7C38A952CBC353B5E2587CD1154DA32D9BA29F010BD4B70A4FF2C487"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6021
Expires: Mon, 05 Dec 2022 00:23:38 GMT
Date: Sun, 04 Dec 2022 22:43:17 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash a9ff5fa0b5c4765b050f2381f57f5520
0ce842b0fbaef98e256cc66eff4615df094b9d51
95e33b8d7c38a952cbc353b5e2587cd1154da32d9ba29f010bd4b70a4ff2c487
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "95E33B8D7C38A952CBC353B5E2587CD1154DA32D9BA29F010BD4B70A4FF2C487"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6021
Expires: Mon, 05 Dec 2022 00:23:38 GMT
Date: Sun, 04 Dec 2022 22:43:17 GMT
Connection: keep-alive
tallysaturatesnare.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F2%2Findex.html&l=1300&fd=232
200 OK 0 B URL HTTP/1.1 tallysaturatesnare.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F2%2Findex.html&l=1300&fd=232
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F2%2Findex.html&l=1300&fd=232 HTTP/1.1
Host: tallysaturatesnare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: u_pl=16560384; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleccfcff15295c1791b133bdd6ccda46168=[3789938]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 04 Dec 2022 22:43:17 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/img/close.svg
200 OK 796 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/img/close.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text
Hash 51f2522d025f309c64df5ba59a429736
5a9baf436923cabb4fa770daa0b2b6c6c4e6ae3f
e363e67082535d193fb672418781e9e43a14cda4119deaa80838f663f111f98e
GET /sb/notifications/games/nutaku/multi/2/img/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:17 GMT
content-type: image/svg+xml
last-modified: Thu, 18 Aug 2022 08:55:17 GMT
etag: W/"62fdfe75-415"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1673477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vAR%2Bts3ah9nN%2BdqfFqhHMCZWLD9jlWo7GcTThS6VlbyuIoLzqJnDUOoqjeIp9kow4Nr2%2B2WX%2FlUr0s%2BjYnhWJTG2YZ1B5IWWnrskbuuwrJ2pSncm4l72OCnJkIx%2B7OtT%2FC3tdlVQI3Y0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f656d557765-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/img/girls.png
200 OK 322 kB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/img/girls.png
IP
File type PNG image data, 729 x 331, 8-bit/color RGBA, non-interlaced\012- data
Size 322 kB (322399 bytes)
Hash 47b7ae41a98644de6d46d58a0e51a793
b0f736609af3c0b3214ee52cc9f0798dcc972df6
b2ad5bf8fc066203168fbceb53b7df6012e8897be344b240e94105af1b4ba0f2
GET /sb/notifications/games/nutaku/multi/2/img/girls.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:17 GMT
content-type: image/png
content-length: 322399
last-modified: Wed, 07 Sep 2022 14:37:32 GMT
etag: "6318acac-4eb5f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1673477
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qFwg6%2B7xbkLbNvEgQhqrN%2Ftfgzx5Qey%2FYV1ggSaIulRySTkZTkI6k6p8qxi1XCIGvoGi%2BcsDf61qC%2Bw6Rpt7vP8V2yHhAcc0zVFSG8bTrj81vwqHg5Ypynt41Lik1z7h24WOfHqk9%2BSF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f656d5b7765-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
tallysaturatesnare.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F2%2Fcss%2Fstyles.css&l=11401&fd=255
200 OK 0 B URL HTTP/1.1 tallysaturatesnare.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F2%2Fcss%2Fstyles.css&l=11401&fd=255
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F2%2Fcss%2Fstyles.css&l=11401&fd=255 HTTP/1.1
Host: tallysaturatesnare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: u_pl=16560384; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleccfcff15295c1791b133bdd6ccda46168=[3789938]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 04 Dec 2022 22:43:18 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
tallysaturatesnare.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F2%2Fcss%2Fanimate.css&l=79249&fd=363
200 OK 0 B URL HTTP/1.1 tallysaturatesnare.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F2%2Fcss%2Fanimate.css&l=79249&fd=363
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fnutaku%2Fmulti%2F2%2Fcss%2Fanimate.css&l=79249&fd=363 HTTP/1.1
Host: tallysaturatesnare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: u_pl=16560384; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleccfcff15295c1791b133bdd6ccda46168=[3789938]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 04 Dec 2022 22:43:18 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/js/main.js
200 OK 4.1 kB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/js/main.js
IP
Hash 4d35d2bc8d8e06a426e274716da2afa3
f96bc0fbfedfe4e6e03c5e6a6274e589c5a91e9f
30822752beb7c9938b81b1cacbcffe0a74096422f6132d2d67354ea3e133664f
GET /sb/notifications/games/nutaku/multi/2/js/main.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dailyporn.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:18 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 07:29:33 GMT
etag: W/"632abd5d-20ea"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jVE0QVQMyachHpaLyR6aAoiz%2BDzUxZzVljcKX7jWUyNrpQXUytBVEXL7HzWA7mGz4rZDmFUlvmiPLUwJXXfsaYotk5vPv3tCzCK3BkapBTIGnidliQkiUPQ6Dwu8gzkLB00Bqfki1huw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f663ec87765-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
widgets.amung.us/small/02/218.png
200 OK 326 B URL HTTP/2 widgets.amung.us/small/02/218.png
IP
File type PNG image data, 80 x 15, 8-bit colormap, non-interlaced\012- data
Hash ed931e131bda07d1207dff42a1603223
bf25cf8a865a057c1a131e757b5d952a551fa3f5
e7a805eb2641768236cfc185773bc09a12a7e8f355000c53ff6170ba7f81d574
GET /small/02/218.png HTTP/1.1
Host: widgets.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:18 GMT
content-type: image/png
content-length: 326
last-modified: Sun, 13 Jun 2010 09:48:29 GMT
etag: "4c14a96d-146"
expires: Wed, 16 Nov 2022 09:59:09 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
cf-cache-status: HIT
age: 1687449
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f692d41b51d-OSL
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 7ed239003f33b5afc5a6be6e222c51b2
db94c94c31e47f0c14469c85a60a132b0a7f0971
69784e5da9588c2fb91c5f09f3f81be82a026c2c0465bed89222d0efc3c15eb9
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dailyporn.club
Connection: keep-alive
Cookie: uid_id2=6060b325-6be8-41b1-991e-a6c66f569d86:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:18 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://www.clicksgear.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
tallysaturatesnare.com/pixel/sbs?c=1
200 OK 0 B URL HTTP/1.1 tallysaturatesnare.com/pixel/sbs?c=1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: tallysaturatesnare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: u_pl=16560384; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleccfcff15295c1791b133bdd6ccda46168=[3789938]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 04 Dec 2022 22:43:18 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
tallysaturatesnare.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitXuNFLyp7WA9K48kFmXTPj8yMewiu667BbBJ3V3K1uqp6Uqa6q6nqnp7MKRgMexHGmyBi502yQV3C5g%2BQlcl6kAEh44IEMSievC0s7MmDzGQg%2BEHV91W9d3jvVW3vZKfEQ0ZPVm7qrlSKztZKnvvmqoy5zq27dMf1vZJ3xV2V8Vz1itsZb6b9tu%2FVSt5l94Zg63q27Pme53u%2Be10aEerO7ASFTO43%2FVLTK1XLJb9WRcf8%2F2wzB5Y64O1T8gokHz2%2F9vMhJBsgjh5cE3Y91clb70WZoqk2aPP9j%2BL1WOcxovMxNA7CeH%2FKhrYjQr68AB3vTx1At3fHDhDIEXF%2B8xHE%2B1OZCNp7Z0oDBREj4C8ibw8g1ACSDsD0FiQ%2FJgDjWFpGHN1b0ianG2coHaMjMvPsKWQ%2BIjN%2FXEQcHVxVsuPe1ipLpY4tOmEB2RlAtgZIsiOkXQcyPwJLP4Xkv5DZZ4uIo91lqzQkLybupRxAhgMo0QO1DrLxkg6y0EGWOIj4iUtrzdDz6mEQViqNKmOsUmGs1pjjNV6pNkIPGRvL6yFNemCqB2Y2kZhNrMseTPYj7FoByx3YdEScDzfR5gVyQZBbgpwS5JIgTwnydrHHlS3b4h5XNgv8aS9Pe6Xo67S1Q%2Fd02hIx2UlOycuTXP49JFgXJy4LWRj6tXKzxvx60w%2F8SiXgfI4xTqtz%2FlwDVhaQ9sLEaleOyKUeQyKPnT8R0CNYdQQmXwLNXgPN%2B%2FWyB7rWrzY8dOMDTqXaSLSJS0xlAbgukKQzSDecHXVKXp3oaD42EGw4%2F%2BSB%2B%2Birvb%2FBTIHEFPhEPiJoqbv9Wzonu7d0bsnhcpLKSHbp%2BO1upzQVM999IDZybfjCNdv79h02Bsbj%2FTvCpos05jJuWfL9Vcm5MNe1YYL8sGBXRbCS2bWrmYmzZHHl3esLUWKEtVLHA1B5%2FPFDMDkiL0Tbk1%2F5%2Bu%2FbkGYAkxWIsiGZFqQ%2BAks2YZPh%2FD83Di52%2F3ofVhMYdc4JEgd5VvRNOTi%2FVHJEyk9%2FghLD%2Ba%2B3Lt18%2FM1l0KCAFecxBGL48MkZf8feRcs4oOkW4qhA2xRoqwJU9WCz5%2FppYobzv1YmhUA5%2FUAZZzdQRn1xFq%2BVJ27Nr4pG0KgzzgPBuF8vVxoVzytzXq03hd9Eakfs8zc%2B%2Bw8AAP%2F%2FAQAA%2F%2F%2BEpJzHcQQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 tallysaturatesnare.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitXuNFLyp7WA9K48kFmXTPj8yMewiu667BbBJ3V3K1uqp6Uqa6q6nqnp7MKRgMexHGmyBi502yQV3C5g%2BQlcl6kAEh44IEMSievC0s7MmDzGQg%2BEHV91W9d3jvVW3vZKfEQ0ZPVm7qrlSKztZKnvvmqoy5zq27dMf1vZJ3xV2V8Vz1itsZb6b9tu%2FVSt5l94Zg63q27Pme53u%2Be10aEerO7ASFTO43%2FVLTK1XLJb9WRcf8%2F2wzB5Y64O1T8gokHz2%2F9vMhJBsgjh5cE3Y91clb70WZoqk2aPP9j%2BL1WOcxovMxNA7CeH%2FKhrYjQr68AB3vTx1At3fHDhDIEXF%2B8xHE%2B1OZCNp7Z0oDBREj4C8ibw8g1ACSDsD0FiQ%2FJgDjWFpGHN1b0ianG2coHaMjMvPsKWQ%2BIjN%2FXEQcHVxVsuPe1ipLpY4tOmEB2RlAtgZIsiOkXQcyPwJLP4Xkv5DZZ4uIo91lqzQkLybupRxAhgMo0QO1DrLxkg6y0EGWOIj4iUtrzdDz6mEQViqNKmOsUmGs1pjjNV6pNkIPGRvL6yFNemCqB2Y2kZhNrMseTPYj7FoByx3YdEScDzfR5gVyQZBbgpwS5JIgTwnydrHHlS3b4h5XNgv8aS9Pe6Xo67S1Q%2Fd02hIx2UlOycuTXP49JFgXJy4LWRj6tXKzxvx60w%2F8SiXgfI4xTqtz%2FlwDVhaQ9sLEaleOyKUeQyKPnT8R0CNYdQQmXwLNXgPN%2B%2FWyB7rWrzY8dOMDTqXaSLSJS0xlAbgukKQzSDecHXVKXp3oaD42EGw4%2F%2BSB%2B%2Birvb%2FBTIHEFPhEPiJoqbv9Wzonu7d0bsnhcpLKSHbp%2BO1upzQVM999IDZybfjCNdv79h02Bsbj%2FTvCpos05jJuWfL9Vcm5MNe1YYL8sGBXRbCS2bWrmYmzZHHl3esLUWKEtVLHA1B5%2FPFDMDkiL0Tbk1%2F5%2Bu%2FbkGYAkxWIsiGZFqQ%2BAks2YZPh%2FD83Di52%2F3ofVhMYdc4JEgd5VvRNOTi%2FVHJEyk9%2FghLD%2Ba%2B3Lt18%2FM1l0KCAFecxBGL48MkZf8feRcs4oOkW4qhA2xRoqwJU9WCz5%2FppYobzv1YmhUA5%2FUAZZzdQRn1xFq%2BVJ27Nr4pG0KgzzgPBuF8vVxoVzytzXq03hd9Eakfs8zc%2B%2Bw8AAP%2F%2FAQAA%2F%2F%2BEpJzHcQQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitXuNFLyp7WA9K48kFmXTPj8yMewiu667BbBJ3V3K1uqp6Uqa6q6nqnp7MKRgMexHGmyBi502yQV3C5g%2BQlcl6kAEh44IEMSievC0s7MmDzGQg%2BEHV91W9d3jvVW3vZKfEQ0ZPVm7qrlSKztZKnvvmqoy5zq27dMf1vZJ3xV2V8Vz1itsZb6b9tu%2FVSt5l94Zg63q27Pme53u%2Be10aEerO7ASFTO43%2FVLTK1XLJb9WRcf8%2F2wzB5Y64O1T8gokHz2%2F9vMhJBsgjh5cE3Y91clb70WZoqk2aPP9j%2BL1WOcxovMxNA7CeH%2FKhrYjQr68AB3vTx1At3fHDhDIEXF%2B8xHE%2B1OZCNp7Z0oDBREj4C8ibw8g1ACSDsD0FiQ%2FJgDjWFpGHN1b0ianG2coHaMjMvPsKWQ%2BIjN%2FXEQcHVxVsuPe1ipLpY4tOmEB2RlAtgZIsiOkXQcyPwJLP4Xkv5DZZ4uIo91lqzQkLybupRxAhgMo0QO1DrLxkg6y0EGWOIj4iUtrzdDz6mEQViqNKmOsUmGs1pjjNV6pNkIPGRvL6yFNemCqB2Y2kZhNrMseTPYj7FoByx3YdEScDzfR5gVyQZBbgpwS5JIgTwnydrHHlS3b4h5XNgv8aS9Pe6Xo67S1Q%2Fd02hIx2UlOycuTXP49JFgXJy4LWRj6tXKzxvx60w%2F8SiXgfI4xTqtz%2FlwDVhaQ9sLEaleOyKUeQyKPnT8R0CNYdQQmXwLNXgPN%2B%2FWyB7rWrzY8dOMDTqXaSLSJS0xlAbgukKQzSDecHXVKXp3oaD42EGw4%2F%2BSB%2B%2Birvb%2FBTIHEFPhEPiJoqbv9Wzonu7d0bsnhcpLKSHbp%2BO1upzQVM999IDZybfjCNdv79h02Bsbj%2FTvCpos05jJuWfL9Vcm5MNe1YYL8sGBXRbCS2bWrmYmzZHHl3esLUWKEtVLHA1B5%2FPFDMDkiL0Tbk1%2F5%2Bu%2FbkGYAkxWIsiGZFqQ%2BAks2YZPh%2FD83Di52%2F3ofVhMYdc4JEgd5VvRNOTi%2FVHJEyk9%2FghLD%2Ba%2B3Lt18%2FM1l0KCAFecxBGL48MkZf8feRcs4oOkW4qhA2xRoqwJU9WCz5%2FppYobzv1YmhUA5%2FUAZZzdQRn1xFq%2BVJ27Nr4pG0KgzzgPBuF8vVxoVzytzXq03hd9Eakfs8zc%2B%2Bw8AAP%2F%2FAQAA%2F%2F%2BEpJzHcQQAAA%3D%3D HTTP/1.1
Host: tallysaturatesnare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: u_pl=16560384; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleccfcff15295c1791b133bdd6ccda46168=[3789938]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 04 Dec 2022 22:43:18 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 68679d0fc5fad8281b652816daeea9bb
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 227de73c2950d257905eda6128f90ea9
d700e7cbc5c620f274ec53c336dba15988f046d9
306cc0e4114a9e5b3f9125f9a6fe9746e2db74d94c7991c714e6abb2de046fbc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "306CC0E4114A9E5B3F9125F9A6FE9746E2DB74D94C7991C714E6ABB2DE046FBC"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8989
Expires: Mon, 05 Dec 2022 01:13:08 GMT
Date: Sun, 04 Dec 2022 22:43:19 GMT
Connection: keep-alive
unseenreport.com/pxf.gif?uuid=&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=cfcff15295c1791b133bdd6ccda46168&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=cfcff15295c1791b133bdd6ccda46168&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=cfcff15295c1791b133bdd6ccda46168&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 04 Dec 2022 22:43:19 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 782e1a0427ae37fdc2eb730424cff12a
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=e8c5880348109e0543aa23d61ee69616&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=e8c5880348109e0543aa23d61ee69616&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=e8c5880348109e0543aa23d61ee69616&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=22 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 04 Dec 2022 22:43:19 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a05d1f0bfbb3f1337c65c378632653c6
Strict-Transport-Security: max-age=0; includeSubdomains
dailyporn.club/sw.js
200 OK 7.6 kB IP
File type ASCII text, with no line terminators
Hash 485efdfe38cb5ed9b4973f6c6710e580
aca8056f123ff8268ddb24239d158d8c608e80f0
d0e7be72f8b0922235ad490f06e37d39e40835885988976596e1198047d4753f
GET /sw.js HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: sb_main_cfcff15295c1791b133bdd6ccda46168=1; sb_count_cfcff15295c1791b133bdd6ccda46168=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=iceboxlitre.com; ppu_idelay_e8c5880348109e0543aa23d61ee69616=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=tallysaturatesnare.com
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:18 GMT
content-type: application/x-javascript
cache-control: public, max-age=5356800
expires: Fri, 04 Nov 2022 20:23:14 GMT
etag: W/"33-61d895a5-1e95f;;;"
last-modified: Fri, 07 Jan 2022 19:33:57 GMT
cf-cache-status: HIT
age: 184022
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qqzHR%2Faj8nxjzo13SuSDDdn71naiIof7RrvBxJ0RmckMlS%2FuswlWUaiusqfmn1rQVmJv3aXKYkn1R8MjdNYPh22cK9LeNRvQm63ygAIBEF3%2BpZgXr%2FtK1q9DyPYmLD11WQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f695f9f7761-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/3/p/5/3p56p2n0qo66446nspn44912r2osr4611624817766-1280-720-1274-u264.zc4-9.wct.jpg
200 OK 0 B URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/3/p/5/3p56p2n0qo66446nspn44912r2osr4611624817766-1280-720-1274-u264.zc4-9.wct.jpg
IP
GET /images/pqar-cvpf.lbhwvmm.pbz/3/p/5/3p56p2n0qo66446nspn44912r2osr4611624817766-1280-720-1274-u264.zc4-9.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: image/jpeg
cache-control: public, max-age=5356800
expires: Sat, 10 Dec 2022 15:01:27 GMT
x-litespeed-cache: miss
last-modified: Sat, 03 Dec 2022 15:01:27 GMT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tvyp1CiMAJzaNcjIqz%2BC7I0rBrABlxFUVDiTwVmDvL%2F7Wg6%2F7uuOUUZl5B5blYKdJ4PTuc2FHCJH5hOVZe9nEJeLaSxZfkCncDqQ6oo3lwxWIx5MLD9HthOw5WBItelLkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f58a84a7761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/q/4/9/q49p8s9prnpp08383npo4452s566qq171571217602-1280-720-3561-u264.zc4-1.wct.jpg
200 OK 0 B URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/q/4/9/q49p8s9prnpp08383npo4452s566qq171571217602-1280-720-3561-u264.zc4-1.wct.jpg
IP
GET /images/pqar-cvpf.lbhwvmm.pbz/q/4/9/q49p8s9prnpp08383npo4452s566qq171571217602-1280-720-3561-u264.zc4-1.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: image/jpeg
cache-control: public, max-age=5356800
expires: Sun, 11 Dec 2022 22:43:16 GMT
x-litespeed-cache: miss
last-modified: Sun, 04 Dec 2022 22:43:16 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f3AtGMS3EnfxIwkk2lTjysrNeJwAzi05lYZZ6kgFHs0O8VlhIoCu%2BTzOr3BmjQ0QyDHbKdyNwX%2Fh2t6TOLcVCze8T5dmRwof7sgIIOl59DVQU4zdQukqc4Dyl%2BJHlhkphw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f59ca927761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dailyporn.club/style.css?v=87
200 OK 0 B URL HTTP/2 dailyporn.club/style.css?v=87
IP
GET /style.css?v=87 HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: text/css
cache-control: public, max-age=5356800
expires: Fri, 04 Nov 2022 19:28:05 GMT
etag: W/"29a9-61d895a5-1e95e;gz"
last-modified: Fri, 07 Jan 2022 19:33:57 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 391188
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EwaSXgUpNJRiHiKDAp1sQq6dY4LsGxprUz6dAivtLgZNF6rbL12em4sr3kZAksCsyTZz3fmHM%2B6sF36g0jphsPlpi0eNCDctD6zstMmlU35ZwsEQpj%2FE%2ByS6O1BqyjkHXg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77480f53cf607761-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
a.realsrv.com/nativeads-v2.js
200 OK 0 B URL HTTP/2 a.realsrv.com/nativeads-v2.js
IP
ASN #60068 Datacamp Limited
GET /nativeads-v2.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: application/javascript
etag: W/"3eb4c0066ecfc78c36ab17afea4"
expires: Fri, 02 Dec 2022 12:50:41 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1670201487
server: CDN77-Turbo
x-77-nzt: AblMCRQ+d9n/JAwAAA
x-77-nzt-ray: af5856305096de2183228d636ec0a510
x-cache: HIT
x-age: 3108
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Kaushan+Script&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Kaushan+Script&display=swap
IP
GET /css2?family=Kaushan+Script&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 04 Dec 2022 22:43:15 GMT
date: Sun, 04 Dec 2022 22:43:15 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
handymag.net/unit1.php?bgcolor=000000
200 OK 0 B URL HTTP/2 handymag.net/unit1.php?bgcolor=000000
IP
GET /unit1.php?bgcolor=000000 HTTP/1.1
Host: handymag.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-litespeed-cache: hit
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pxJcU3f6CPPusqPq3%2BDYDHwC35Ioi8pnIdnMJXzgEb3hHjyWJEUyALf%2BlcI5fuVGZU4GH8dRjjcDlFwLWikuRQwi%2BLo9fKiJlU8ApegP1xW%2Bzr9bqlxpUjnras%2BeQJM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77480f55e8770b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/p/s/n/r/9/psnr9979r4n53028ss23po5nq50873221649392208-5.wct.jpg
200 OK 0 B URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/p/s/n/r/9/psnr9979r4n53028ss23po5nq50873221649392208-5.wct.jpg
IP
GET /images/pqar-cvpf.lbhwvmm.pbz/p/s/n/r/9/psnr9979r4n53028ss23po5nq50873221649392208-5.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: image/jpeg
cache-control: public, max-age=5356800
expires: Sat, 10 Dec 2022 15:01:24 GMT
x-litespeed-cache: miss
last-modified: Sat, 03 Dec 2022 15:01:24 GMT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kGv0pL9DXNGm554fYI%2FOaaNt9nMhnyr8l15n2Hc6UYhzMv2y8z4t%2BfdHFw5hBgPuUoDZDze%2B%2Fh8%2BkOta2Eb6eK7RnHnyE6codGYFyUn9dntCO6m4iRdGShshwEIoFqEtFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f56bc8d7761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/js/jquery.min.js
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/js/jquery.min.js
IP
GET /sb/notifications/games/nutaku/multi/2/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:18 GMT
content-type: application/javascript
last-modified: Thu, 18 Aug 2022 08:55:27 GMT
etag: W/"62fdfe7f-15d94"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1673477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i%2F5Mhp%2BTYsHHIeylPs%2BrBUwGmuCUpcbIBJdmeH4MxFJ4seJ%2F5MWKu%2FSiWM9YD7uz9r4QeWQnunJvubgUVbgwpFxJ9YQiY5%2Ftgj7asm%2BBkleqcg48LYVN4yE2QzmK4F%2Bv%2BaSmu7Y%2BQG8V"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f656d647765-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdne-mobile.youjizz.com/videos/1/f/d/b/f/1fdbf6c89690277674ee4e366406ea901657198804-426-240-449-h264.mp4?validfrom=1670107395&validto=1670280195&rate=86208&hash=%2BDOzaIQQR%2FmlXSKmHkN5yhi59b4%3D
206 Partial Content 0 B URL HTTP/2 cdne-mobile.youjizz.com/videos/1/f/d/b/f/1fdbf6c89690277674ee4e366406ea901657198804-426-240-449-h264.mp4?validfrom=1670107395&validto=1670280195&rate=86208&hash=%2BDOzaIQQR%2FmlXSKmHkN5yhi59b4%3D
IP
GET /videos/1/f/d/b/f/1fdbf6c89690277674ee4e366406ea901657198804-426-240-449-h264.mp4?validfrom=1670107395&validto=1670280195&rate=86208&hash=%2BDOzaIQQR%2FmlXSKmHkN5yhi59b4%3D HTTP/1.1
Host: cdne-mobile.youjizz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Range: bytes=0-
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 206 Partial Content
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: video/mp4
content-length: 41240179
last-modified: Thu, 07 Jul 2022 14:00:51 GMT
expires: Tue, 08 Nov 2022 01:13:51 GMT
cache-control: max-age=10503197
accept-ranges: bytes
timing-allow-origin: *
content-range: bytes 0-41240178/41240179
x-cdn-diag: ams5-7059-6-44912-m-0-0-200-0.036--;7060-25-23481----0-1-36
X-Firefox-Spdy: h2
cdn.barscreative1.com/sb/notifications/games/nutaku/multi/2/index.html
200 OK 0 B URL HTTP/2 cdn.barscreative1.com/sb/notifications/games/nutaku/multi/2/index.html
IP
ASN #39572 DataWeb Global Group B.V.
Analyzer Verdict Alert fortinet Phishing
GET /sb/notifications/games/nutaku/multi/2/index.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dailyporn.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:17 GMT
content-type: text/html; charset=utf-8
server: nginx/1.17.6
last-modified: Thu, 15 Sep 2022 10:38:26 GMT
etag: W/"632300a2-514"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Sun, 04 Dec 2022 23:43:17 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/css/styles.css
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/css/styles.css
IP
GET /sb/notifications/games/nutaku/multi/2/css/styles.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dailyporn.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:18 GMT
content-type: text/css
last-modified: Wed, 21 Sep 2022 08:03:32 GMT
etag: W/"632ac554-2c89"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uFc78%2Fw8gY8v00gdPmFEJWEDcun5irzUAnMDd6oFo%2FmRqsYSrwbqg3LWgBp4%2FXZUyXD9zWJ2hvQtBcCJPyGXJt4mxNTXAy513RHyJKkhusskzV5wmDrVk6kYQcaY2U7xeb2NRR3WQBk9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f654d2a7765-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dailyporn.club/watch/lilly-layva-car-fuck/
200 OK 0 B URL HTTP/2 dailyporn.club/watch/lilly-layva-car-fuck/
IP
GET /watch/lilly-layva-car-fuck/ HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:14 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-litespeed-cache: hit
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H9x57N7Gt5tVNwacppzBesIDi4fVhmh1iXnrjhNd8bDTD41O7hSPooBVc%2BQDES73ql25fCfhg%2FeNyKr%2F9P2ANGvgeaFncEEtlJxhU9li7WPeH1amRV9qR3CKgwKaag1Ajg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77480f528d0f7761-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/3/o/1/3o194pqon67n4p09058508s0n55903071524607270-1280-720-4148-u264.zc4-6.wct.jpg
200 OK 0 B URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/3/o/1/3o194pqon67n4p09058508s0n55903071524607270-1280-720-4148-u264.zc4-6.wct.jpg
IP
GET /images/pqar-cvpf.lbhwvmm.pbz/3/o/1/3o194pqon67n4p09058508s0n55903071524607270-1280-720-4148-u264.zc4-6.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: image/jpeg
cache-control: public, max-age=5356800
expires: Sat, 10 Dec 2022 14:14:24 GMT
x-litespeed-cache: miss
last-modified: Sat, 03 Dec 2022 14:14:24 GMT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MDMXpokAx7gcrSEdr8aalm6UhkHS%2BWfxRIy4GSENlva2Ng%2BMSqszETrxq%2FI085M4zgLJJsby7vOfCqwzJHniUmu84HikejmmpfXbUvvEfD1HVb2Gl0fMwmHjJfIxzksycA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f59ca907761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Quicksand:400,700&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Quicksand:400,700&display=swap
IP
GET /css?family=Quicksand:400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 04 Dec 2022 22:43:15 GMT
date: Sun, 04 Dec 2022 22:43:15 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.scptp1.com/mnpw3.js
404 Not Found 0 B URL HTTP/2 static.scptp1.com/mnpw3.js
IP
GET /mnpw3.js HTTP/1.1
Host: static.scptp1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Sun, 04 Dec 2022 22:43:15 GMT
accept-ranges: bytes
content-encoding: gzip
content-type: application/xml
x-amz-request-id: YXV4QPXMMC1YE5MF
x-amz-id-2: vUX1k2r/G28cNFRw6iMEj6OXu4dK1k/0fFcJbGWDFJN0RCN2JeL7WfG9rQeluuCfKdEMQb5XK7k=
server: AmazonS3
x-hw: 1670193795.cds022.sk1.hn,1670193795.cds262.sk1.sc,1670193795.cds262.sk1.p
access-control-allow-origin: *
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 0 B URL HTTP/2 friendshipmale.com/sfp.js
IP
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 6ab4c4eb8eec310ba8be20010815ecb4
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sun, 04 Dec 2022 22:43:16 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=05Vg4h2goDUCVFlrnSXZ%2Fu4N%2BuDwkhihQ6eSv8lwPNt5cm%2FgWcA%2BI2wB6gKF6eD%2BgRUGFWrTghaWhzu3me9Me7H%2F6thjuOD1FDAgRPHriWswhGQ6YEMscWpAojhEM6SkUJ0eDPw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f5a5ca5731a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/css/animate.css
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/games/nutaku/multi/2/css/animate.css
IP
GET /sb/notifications/games/nutaku/multi/2/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dailyporn.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:18 GMT
content-type: text/css
last-modified: Thu, 15 Sep 2022 10:38:28 GMT
etag: W/"632300a4-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bLG8PQEeyH7HsWPHUOkprKJqEJTTQFphkmhr2mrdPLukUHZt686xZkJByVdcYBHDzJ6Oh6IBeizkryMEvL4kdtW2HEQ%2F%2FxFw0ecq4%2F6ba7pe4Qmi%2F5PtwLkWUyUArJqB1g%2BDXt6ztwte"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f654d237765-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/4/r/3/4/1/4r341ooq3r72r22102n974938874983n1649391845-77.wct.jpg
200 OK 0 B URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/4/r/3/4/1/4r341ooq3r72r22102n974938874983n1649391845-77.wct.jpg
IP
GET /images/pqar-cvpf.lbhwvmm.pbz/4/r/3/4/1/4r341ooq3r72r22102n974938874983n1649391845-77.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:15 GMT
content-type: image/jpeg
cache-control: public, max-age=5356800
expires: Sat, 10 Dec 2022 15:01:24 GMT
x-litespeed-cache: miss
last-modified: Sat, 03 Dec 2022 15:01:24 GMT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jBHpTjXCdUcKQtQgOh6sxTcorCKadQ%2Fkm1XWTzPhdGpGrtexi8iwgZC%2BuZbrz3OxQpkDtYhVDuzEUJ0ALVNHldY4V%2FChipqsOLuaBnbipQemG7D4%2BkB7XEykgfKxB8V7iw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f56bc9f7761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/4/7/8/4784442427srq6o9qpn5165q663106701490677225-640-360-580-u264.zc4-6.wct.jpg
200 OK 0 B URL HTTP/2 dailyporn.club/images/pqar-cvpf.lbhwvmm.pbz/4/7/8/4784442427srq6o9qpn5165q663106701490677225-640-360-580-u264.zc4-6.wct.jpg
IP
GET /images/pqar-cvpf.lbhwvmm.pbz/4/7/8/4784442427srq6o9qpn5165q663106701490677225-640-360-580-u264.zc4-6.wct.jpg HTTP/1.1
Host: dailyporn.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 22:43:16 GMT
content-type: image/jpeg
cache-control: public, max-age=5356800
expires: Sun, 11 Dec 2022 22:43:15 GMT
x-litespeed-cache: miss
last-modified: Sun, 04 Dec 2022 22:43:16 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xd5iP4iQZTyyqkvuiDSvVZbHs9mTa%2B96RutMGIqtIMWBn4T5zj0AoV9OhlNBFEA3aSIpIEBWK8A%2FASi492ovDqveKALcKW6yCBRfeRx%2Fq0XOG4hAnWwSuNulmTG7hmvHrw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77480f58b8577761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
whos.amung.us/swidget/7szek6qvkn.png
307 Temporary Redirect 0 B URL HTTP/2 whos.amung.us/swidget/7szek6qvkn.png
IP
GET /swidget/7szek6qvkn.png HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
date: Sun, 04 Dec 2022 22:43:17 GMT
content-type: text/html; charset=UTF-8
location: https://widgets.amung.us/small/02/218.png
cache-control: no-cache, no-store, must-revalidate
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77480f63be9ab51d-OSL
X-Firefox-Spdy: h2
104.21.235.154
104.19.241.83
142.250.74.35
185.76.9.16
95.211.229.245
149.56.240.130
148.251.152.47
93.184.220.29
23.36.77.32