datawav.club/big-breasted-dominatrix/
301 Moved Permanently 178 B URL HTTP/1.1 datawav.club/big-breasted-dominatrix/
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /big-breasted-dominatrix/ HTTP/1.1
Host: datawav.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 17 Nov 2022 22:53:42 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://datawav.club/big-breasted-dominatrix/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d27590a1d3cbe1e9632b8ae92aaae3f4
202b34e8a0c3b88c8826fd56c6227b34f2cd6f46
6bcfa518476658128c1fb4ea2435c4e58531454cf97138dce7ece9def589aead
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6BCFA518476658128C1FB4EA2435C4E58531454CF97138DCE7ECE9DEF589AEAD"
Last-Modified: Wed, 16 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4352
Expires: Fri, 18 Nov 2022 00:06:14 GMT
Date: Thu, 17 Nov 2022 22:53:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3a38b6dd8a4cc335c026aebf2ed348b6
8a386e0ccb0ca4dc502746c45b2ebc3aa3f83cf8
8b4040a645cec1841a00a22765eb3a74978559daf15c54bd4b41b6b48aab7f95
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B4040A645CEC1841A00A22765EB3A74978559DAF15C54BD4B41B6B48AAB7F95"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5869
Expires: Fri, 18 Nov 2022 00:31:31 GMT
Date: Thu, 17 Nov 2022 22:53:42 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash be1be806b5dca7facbb45a6c3db44652
7ae9380a2f3eca959fe6ff6b3832a17cffd12cf4
1f3338058f8e9cae5c9fdd733c74564312726b01c6efdcd628d851d0c99876b0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5463
Cache-Control: max-age=133724
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 22:53:42 GMT
Etag: "63760d7b-1d7"
Expires: Sat, 19 Nov 2022 12:02:26 GMT
Last-Modified: Thu, 17 Nov 2022 10:31:23 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: U1gPDKE/5PKWBG5suvnhHyKNokqGJ/5HNoBScZvg1lNMympizux6RDJ++8Srm4wC3x0xbmqV8cE=
x-amz-request-id: CF0HNYXQXSE8NBMQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 17 Nov 2022 22:15:19 GMT
age: 2303
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 17 Nov 2022 22:44:57 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 525
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:42 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 17 Nov 2022 22:44:49 GMT
cache-control: public,max-age=3600
age: 533
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash db01c373b6931879e47ec58b7996e25e
dceef91aad7092565233054252155d7e0476defa
be4350eebca07eae4a03d40a40fa24f7e9950b0929b604615126ae27b0281fa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE4350EEBCA07EAE4A03D40A40FA24F7E9950B0929B604615126AE27B0281FA2"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7853
Expires: Fri, 18 Nov 2022 01:04:35 GMT
Date: Thu, 17 Nov 2022 22:53:42 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash c10055ce87434f700ff8b20e3be1f919
477b3c9f1da0c464282bb54572737e76b6e346da
4d78eb296876122e5ff40fcd7667adf1bf8a4b1ee4c8203c88a63ce8d7910a57
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2382
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 22:53:43 GMT
Last-Modified: Thu, 17 Nov 2022 22:14:01 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
datawav.club/big-breasted-dominatrix/
200 OK 13 kB URL HTTP/1.1 datawav.club/big-breasted-dominatrix/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (8047), with CRLF, LF line terminators
Hash dbacad0956708e49d572fc00b765ac67
8080efe4593d25587de0a274a7abdf318c864fa2
bc4b04940713eb74f3968180539ef6c75b172a93d9c3f7697148cf2bdf0a836f
GET /big-breasted-dominatrix/ HTTP/1.1
Host: datawav.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Nov 2022 22:53:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Link: <https://datawav.club/wp-json/>; rel="https://api.w.org/", <https://datawav.club/wp-json/wp/v2/posts/402381>; rel="alternate"; type="application/json", <https://datawav.club/?p=402381>; rel=shortlink
X-ElasticPress-Query: true
Content-Encoding: gzip
X-Cache-Status: HIT
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9e20a99f56d244cd43bd10781eb8e1d8
000f6ecfc6a9412d2e062028ee553801f573fd92
17cae43cd454fc69beff944925994d2810f859261cd40bfa58d573163a40b23c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 22:53:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
datawav.club/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3
200 OK 12 kB URL HTTP/1.1 datawav.club/wp-includes/css/dist/block-library/style.min.css?ver=6.0.3
IP
File type ASCII text, with very long lines (43771)
Hash 88f413500303dc21250157a6aa913a32
ca138ec102d96e6d7b30bf83b7dab60a16f0b5d6
65e072ca8d53bf38d5dde355a039a61f6c7204206a9a58ded75d2d2730cc0999
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.3 HTTP/1.1
Host: datawav.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/big-breasted-dominatrix/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Nov 2022 22:53:43 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 28 Aug 2022 06:31:23 GMT
Vary: Accept-Encoding
ETag: W/"630b0bbb-15b64"
Expires: Tue, 07 Nov 2023 08:22:15 GMT
Cache-Control: max-age=31104000
Content-Encoding: gzip
X-Cache-Status: HIT
fonts.googleapis.com/css?family=Gudea%3A400%2C400italic%2C700%2C700italic%7CMagra%3A400%2C400italic%2C700%2C700italic&subset=latin%2Clatin-ext
200 OK 951 B URL HTTP/2 fonts.googleapis.com/css?family=Gudea%3A400%2C400italic%2C700%2C700italic%7CMagra%3A400%2C400italic%2C700%2C700italic&subset=latin%2Clatin-ext
IP
Hash 27c353379035643573154279770fcf5c
f007b994d6ff937810c1677cafc6f67639ff6b80
6438d10a3f32d113019a9644ae8851c45dc17ff4fd1abacfe02b72385310773f
GET /css?family=Gudea%3A400%2C400italic%2C700%2C700italic%7CMagra%3A400%2C400italic%2C700%2C700italic&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 17 Nov 2022 22:53:43 GMT
date: Thu, 17 Nov 2022 22:53:43 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: yq4APEeAyAnN54FmDqTzjQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: G/kRkHZRt5wQgYkcS9zvVBvwVxg=
datawav.club/wp-content/themes/wellington/css/genericons/genericons.css?ver=3.4.1
200 OK 16 kB URL HTTP/1.1 datawav.club/wp-content/themes/wellington/css/genericons/genericons.css?ver=3.4.1
IP
File type ASCII text, with very long lines (18732), with CRLF line terminators
Hash f9330a5b1ff4bb3d35693982b212e4bd
c2c837ab1e60cfec1d60eaf6a1e2ecfcf8c7b884
3019eb8fd0dc294ad6c3cce11f5b7ae2f1bf72fe259dc2b54b625e74af4e33ee
GET /wp-content/themes/wellington/css/genericons/genericons.css?ver=3.4.1 HTTP/1.1
Host: datawav.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/big-breasted-dominatrix/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Nov 2022 22:53:43 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 17 Apr 2017 08:17:29 GMT
Vary: Accept-Encoding
ETag: W/"58f47a19-6f71"
Expires: Tue, 07 Nov 2023 08:22:15 GMT
Cache-Control: max-age=31104000
Content-Encoding: gzip
X-Cache-Status: HIT
datawav.club/wp-content/plugins/elasticpress/dist/css/related-posts-block-styles.min.css?ver=3.3
200 OK 585 B URL HTTP/1.1 datawav.club/wp-content/plugins/elasticpress/dist/css/related-posts-block-styles.min.css?ver=3.3
IP
File type ASCII text, with very long lines (698)
Hash 4a29f243de4db57d16a28456bf19954a
894346c1a950364903cca4273974e0153dfa3b2d
861c2ef18073d68121f761bcf826617adf97a2d54629efb8b9ef7670a3f7d09c
GET /wp-content/plugins/elasticpress/dist/css/related-posts-block-styles.min.css?ver=3.3 HTTP/1.1
Host: datawav.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/big-breasted-dominatrix/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Nov 2022 22:53:43 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 31 Oct 2022 05:16:11 GMT
Vary: Accept-Encoding
ETag: W/"635f5a1b-399"
Expires: Tue, 07 Nov 2023 08:22:15 GMT
Cache-Control: max-age=31104000
Content-Encoding: gzip
X-Cache-Status: HIT
datawav.club/wp-content/themes/wellington/style.css?ver=1.0.6
200 OK 9.1 kB URL HTTP/1.1 datawav.club/wp-content/themes/wellington/style.css?ver=1.0.6
IP
File type ASCII text, with very long lines (355), with CRLF line terminators
Hash dea6095724497c9701e5e96321ea6bd0
a4bd04afdf2ede1b155b87872a34d1c97e443fe2
7ba56aa8ba7a9708aa49cc91cdd1db8a177af6505a735e68fa2f85a7e51b3d4c
GET /wp-content/themes/wellington/style.css?ver=1.0.6 HTTP/1.1
Host: datawav.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/big-breasted-dominatrix/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Nov 2022 22:53:43 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 17 Apr 2017 08:17:29 GMT
Vary: Accept-Encoding
ETag: W/"58f47a19-c499"
Expires: Tue, 07 Nov 2023 08:22:15 GMT
Cache-Control: max-age=31104000
Content-Encoding: gzip
X-Cache-Status: HIT
datawav.club/wp-content/themes/wellington/css/themezee-related-posts.css?ver=20160421
200 OK 931 B URL HTTP/1.1 datawav.club/wp-content/themes/wellington/css/themezee-related-posts.css?ver=20160421
IP
File type ASCII text, with CRLF line terminators
Hash 99fddbd49303e57f150b016c8714159d
ed798b602726b08ea1e331d61469aab3138a558c
c2345b323c0571f8d9c95256a1d44ceefd33a0791e786afe4a4a534060e3275f
GET /wp-content/themes/wellington/css/themezee-related-posts.css?ver=20160421 HTTP/1.1
Host: datawav.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/big-breasted-dominatrix/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Nov 2022 22:53:43 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 17 Apr 2017 08:17:29 GMT
Vary: Accept-Encoding
ETag: W/"58f47a19-1514"
Expires: Tue, 07 Nov 2023 08:22:17 GMT
Cache-Control: max-age=31104000
Content-Encoding: gzip
X-Cache-Status: HIT
datawav.club/wp-content/themes/wellington/js/navigation.js?ver=20160719
200 OK 1.6 kB URL HTTP/1.1 datawav.club/wp-content/themes/wellington/js/navigation.js?ver=20160719
IP
File type ASCII text, with CRLF line terminators
Hash a73417e3fe8baa2f33f152e3bbc14097
622a93a734e15fc786f8f6887554c2c253028aad
8cb4ff8750d3f21e630c95a3c3ed5fc046e232b8c66c94c4580119bf4ae30c94
GET /wp-content/themes/wellington/js/navigation.js?ver=20160719 HTTP/1.1
Host: datawav.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/big-breasted-dominatrix/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Nov 2022 22:53:43 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 17 Apr 2017 08:17:29 GMT
Vary: Accept-Encoding
ETag: W/"58f47a19-1538"
Expires: Tue, 07 Nov 2023 08:22:15 GMT
Cache-Control: max-age=31104000
Content-Encoding: gzip
X-Cache-Status: HIT
datawav.club/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.2 kB URL HTTP/1.1 datawav.club/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash 5629711d7fdd5b28441bac39b851299f
4e0bf2b7383097f7c352023a1b1b1b48a50356b6
44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: datawav.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/big-breasted-dominatrix/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Nov 2022 22:53:43 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 28 Aug 2022 06:31:23 GMT
Vary: Accept-Encoding
ETag: W/"630b0bbb-2bd8"
Expires: Tue, 07 Nov 2023 08:22:15 GMT
Cache-Control: max-age=31104000
Content-Encoding: gzip
X-Cache-Status: HIT
datawav.club/uomdacwoqbvxwxj.php
200 OK 11 kB URL HTTP/1.1 datawav.club/uomdacwoqbvxwxj.php
IP
File type ASCII text, with very long lines (10335)
Hash 14abae8a24facdcc57f6490cec8ee3f6
1efbf03ac34f9027ab7acf347027ea6db52ce2d9
4716ecf44bceb9580e15bf0a8452a79a7b4adb11d21611c6a6711b0e5c685e1d
GET /uomdacwoqbvxwxj.php HTTP/1.1
Host: datawav.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/big-breasted-dominatrix/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Nov 2022 22:53:43 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
X-Cache-Status: HIT
datawav.club/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
200 OK 5.0 kB URL HTTP/1.1 datawav.club/wp-includes/js/wp-emoji-release.min.js?ver=6.0.3
IP
File type ASCII text, with very long lines (15660)
Hash 1b982d290af16dac5885f21a198aaa66
f847ca85d23c2f240938bbde0135f3de97925759
0b6e238cc0728a0bace390dfff472ff8bb5a5fd4714bcfcdac7c28621d67b8dc
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.3 HTTP/1.1
Host: datawav.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/big-breasted-dominatrix/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Nov 2022 22:53:43 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 28 Aug 2022 06:31:23 GMT
Vary: Accept-Encoding
ETag: W/"630b0bbb-48b9"
Expires: Tue, 07 Nov 2023 08:22:14 GMT
Cache-Control: max-age=31104000
Content-Encoding: gzip
X-Cache-Status: HIT
datawav.club/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 31 kB URL HTTP/1.1 datawav.club/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
File type ASCII text, with very long lines (65447)
Hash 7a6e4a1e4a67fac0cd39ca1dd1982f47
a8bf880e5db17a703293d5a3c92623a97d5a1df1
daf4bcb15594deb268cc05f030ccaf8dfe4acab417758dd16a6f3b2d86d2908f
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: datawav.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/big-breasted-dominatrix/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Nov 2022 22:53:43 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 28 Aug 2022 06:31:23 GMT
Vary: Accept-Encoding
ETag: W/"630b0bbb-15db1"
Expires: Tue, 07 Nov 2023 08:22:15 GMT
Cache-Control: max-age=31104000
Content-Encoding: gzip
X-Cache-Status: HIT
i1.wp.com/s.smutty.com/media_smutty/w/i/s/h/p/wish-ful-1-s2zwe-ebd32a.jpg
200 OK 43 kB URL HTTP/2 i1.wp.com/s.smutty.com/media_smutty/w/i/s/h/p/wish-ful-1-s2zwe-ebd32a.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 620x924, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8491e6b60538ed06f6ca85f70bfd6f49
3b07e911c2b0301e84fb8ea0eda7bdba37d512cd
60f17802828384598fa5fa7731b6a7072014ba3e29a386e834cd96ce784187b0
GET /s.smutty.com/media_smutty/w/i/s/h/p/wish-ful-1-s2zwe-ebd32a.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:43 GMT
content-type: image/webp
content-length: 42800
last-modified: Wed, 05 Oct 2022 08:57:03 GMT
expires: Fri, 04 Oct 2024 20:57:03 GMT
cache-control: public, max-age=63115200
link: <http://s.smutty.com/media_smutty/w/i/s/h/p/wish-ful-1-s2zwe-ebd32a.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "b2a07aed942dc4f0"
vary: Accept
x-nc: HIT arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.boobpedia.com/wiki/images/1/1d/NikkiKnockers_open.jpg
200 OK 44 kB URL HTTP/2 i0.wp.com/www.boobpedia.com/wiki/images/1/1d/NikkiKnockers_open.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5ab53dccdaaf57838a9f736550aaac48
0a44fbe220311dee28289e3206ad4bc224a7b48e
8047b9ac9eae2afa62f20f14499939e9124d36b344ba19a6786b5a56262b098b
GET /www.boobpedia.com/wiki/images/1/1d/NikkiKnockers_open.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:43 GMT
content-type: image/webp
content-length: 44342
last-modified: Sun, 25 Sep 2022 02:58:37 GMT
expires: Tue, 24 Sep 2024 14:58:37 GMT
cache-control: public, max-age=63115200
link: <http://www.boobpedia.com/wiki/images/1/1d/NikkiKnockers_open.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "2e4d291da7b910b5"
vary: Accept
x-nc: HIT arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i2.wp.com/24.media.tumblr.com/7964fe848744c88f122240323e1bd1f3/tumblr_mq172s1Ul91rikcljo1_1280.jpg
200 OK 99 kB URL HTTP/2 i2.wp.com/24.media.tumblr.com/7964fe848744c88f122240323e1bd1f3/tumblr_mq172s1Ul91rikcljo1_1280.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1278x1705, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c224c4e7194896d9fd355bfbbd8a189f
04a5a68f36cbfbd6b29fae2b269b874bfd539974
1c50292bb4d530c5c588191d5d9170b92bf8890733b048366863a3820fddecc8
GET /24.media.tumblr.com/7964fe848744c88f122240323e1bd1f3/tumblr_mq172s1Ul91rikcljo1_1280.jpg HTTP/1.1
Host: i2.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:43 GMT
content-type: image/webp
content-length: 99002
last-modified: Fri, 07 Oct 2022 17:26:40 GMT
expires: Mon, 07 Oct 2024 05:26:40 GMT
cache-control: public, max-age=63115200
link: <http://24.media.tumblr.com/7964fe848744c88f122240323e1bd1f3/tumblr_mq172s1Ul91rikcljo1_1280.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "9fdb15a635283972"
vary: Accept
x-nc: HIT arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/www.coedcherry.com/content/1845587/1845587/10.jpg
200 OK 35 kB URL HTTP/2 i1.wp.com/www.coedcherry.com/content/1845587/1845587/10.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 684x1024, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b089925a8ddc4fa421177b8610fe0e08
eadced5ef0360b77d5108b9cd28ea9a4fff1be57
f642ea2ff2ae71b3f439cd90a00c9af5f7efc08e4f1f5f866d8765ec5e9b0dd8
GET /www.coedcherry.com/content/1845587/1845587/10.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:43 GMT
content-type: image/webp
content-length: 35054
last-modified: Sat, 15 Oct 2022 01:59:27 GMT
expires: Mon, 14 Oct 2024 13:59:27 GMT
cache-control: public, max-age=63115200
link: <http://www.coedcherry.com/content/1845587/1845587/10.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "4d61430e49035c0c"
vary: Accept
x-nc: HIT arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/s.smutty.com/media_smutty_2/p/r/i/n/p/prinzpony-xvhjx-b534e4.jpg
200 OK 35 kB URL HTTP/2 i0.wp.com/s.smutty.com/media_smutty_2/p/r/i/n/p/prinzpony-xvhjx-b534e4.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 620x953, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8a0a4f19ab5caaf563a6a7521d42738b
2ae566426fef8c880e3a24a66c753029fc356e87
98597deedac93edb39b3f64954b211950a80df2d6c2ded1af0f7798a8af377ed
GET /s.smutty.com/media_smutty_2/p/r/i/n/p/prinzpony-xvhjx-b534e4.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:43 GMT
content-type: image/webp
content-length: 35196
last-modified: Thu, 17 Nov 2022 21:20:44 GMT
expires: Sun, 17 Nov 2024 09:20:44 GMT
cache-control: public, max-age=63115200
link: <http://s.smutty.com/media_smutty_2/p/r/i/n/p/prinzpony-xvhjx-b534e4.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "bbeedad595b58ad1"
vary: Accept
x-nc: HIT arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i2.wp.com/www.boobpedia.com/wiki/images/thumb/3/34/Lms17.jpg/480px-Lms17.jpg
200 OK 33 kB URL HTTP/2 i2.wp.com/www.boobpedia.com/wiki/images/thumb/3/34/Lms17.jpg/480px-Lms17.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 480x731, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash dda3902788db62313a64608174984958
f37d7d4238b881b6d73699de20331a96e0d7140d
9a5db6b31d469ad51a2a791c3fa7a323ebf1679e2d28a788d8de5a2e32d5f3cc
GET /www.boobpedia.com/wiki/images/thumb/3/34/Lms17.jpg/480px-Lms17.jpg HTTP/1.1
Host: i2.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:43 GMT
content-type: image/webp
content-length: 33228
last-modified: Mon, 31 Oct 2022 00:14:01 GMT
expires: Wed, 30 Oct 2024 12:14:01 GMT
cache-control: public, max-age=63115200
link: <http://www.boobpedia.com/wiki/images/thumb/3/34/Lms17.jpg/480px-Lms17.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "2a5842f2c7954c48"
vary: Accept
x-nc: HIT arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/mylust.com/contents/albums/main/700x525/4000/4479/37464.jpg
200 OK 56 kB URL HTTP/2 i0.wp.com/mylust.com/contents/albums/main/700x525/4000/4479/37464.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 474x525, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9f21f0be205407592fa14ba774cf9b15
0f0e9d3c6db1a7b6de64050146405780e3a4c0e7
a5a1f2ae70710f6998a2d022000db854512599d0729ee87dda9dd14871f45e3c
GET /mylust.com/contents/albums/main/700x525/4000/4479/37464.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:43 GMT
content-type: image/webp
content-length: 56022
last-modified: Wed, 19 Oct 2022 02:52:51 GMT
expires: Fri, 18 Oct 2024 14:52:51 GMT
cache-control: public, max-age=63115200
link: <http://mylust.com/contents/albums/main/700x525/4000/4479/37464.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "ef817be4a4776a79"
vary: Accept
x-nc: HIT arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i2.wp.com/s.smutty.com/media_smutty_2/o/h/p/m/p/ohpmyn-g1w31-f4473a.jpg
200 OK 65 kB URL HTTP/2 i2.wp.com/s.smutty.com/media_smutty_2/o/h/p/m/p/ohpmyn-g1w31-f4473a.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 620x862, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash fa4f5cbb4c1d1b2bd6747c03d9c65d84
92466aaed0c6cec735d16b2a80af75f80266fd23
51b1bc56b0058d087c6a73a74be4c26edee571d6aff22e06e7ec469aad0893ab
GET /s.smutty.com/media_smutty_2/o/h/p/m/p/ohpmyn-g1w31-f4473a.jpg HTTP/1.1
Host: i2.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:43 GMT
content-type: image/webp
content-length: 64616
last-modified: Sat, 12 Nov 2022 10:23:27 GMT
expires: Mon, 11 Nov 2024 22:23:27 GMT
cache-control: public, max-age=63115200
link: <http://s.smutty.com/media_smutty_2/o/h/p/m/p/ohpmyn-g1w31-f4473a.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "7c91d413742231d8"
vary: Accept
x-nc: HIT arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/s.smutty.com/media_smutty/s/e/r/g/b/sergecorisco-pk7ls-78c51e.jpg
200 OK 74 kB URL HTTP/2 i1.wp.com/s.smutty.com/media_smutty/s/e/r/g/b/sergecorisco-pk7ls-78c51e.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x773, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5c3f80fc821536890a4a972d97209568
0c69dd1bf6cc6b20677c84c7e217adf834e0641d
924fa94f3d6efe8981df1d378d39e30fbaab15599c4a29dbca38d1e29d80fd0a
GET /s.smutty.com/media_smutty/s/e/r/g/b/sergecorisco-pk7ls-78c51e.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:43 GMT
content-type: image/webp
content-length: 74416
last-modified: Sun, 06 Nov 2022 02:46:27 GMT
expires: Tue, 05 Nov 2024 14:46:27 GMT
cache-control: public, max-age=63115200
link: <http://s.smutty.com/media_smutty/s/e/r/g/b/sergecorisco-pk7ls-78c51e.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "fc6e225e5c26bd7e"
vary: Accept
x-nc: MISS arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
gnditiklas.com/solid.gif?z=1830123&abvar=0
200 OK 43 B URL HTTP/2 gnditiklas.com/solid.gif?z=1830123&abvar=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
POST /solid.gif?z=1830123&abvar=0 HTTP/1.1
Host: gnditiklas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://datawav.club
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:43 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
i0.wp.com/s.smutty.com/media_smutty/9/m/e/n/p/9menstrong-frqsu-349264.jpg
200 OK 42 kB URL HTTP/2 i0.wp.com/s.smutty.com/media_smutty/9/m/e/n/p/9menstrong-frqsu-349264.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 620x953, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 72e9edeec568726e6fafc0ea6113ce98
81b75128b5ae10f88198cc23f5e051c4db90d0a8
a8c17adafd5be73d0504ed84073cd6f9e232b7171e51bc60194567fc73d4dd31
GET /s.smutty.com/media_smutty/9/m/e/n/p/9menstrong-frqsu-349264.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:43 GMT
content-type: image/webp
content-length: 42448
last-modified: Tue, 15 Nov 2022 07:13:25 GMT
expires: Thu, 14 Nov 2024 19:13:25 GMT
cache-control: public, max-age=63115200
link: <http://s.smutty.com/media_smutty/9/m/e/n/p/9menstrong-frqsu-349264.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "0f9052989232bb5d"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/s.smutty.com/media_smutty_2/c/a/p/t/p/capt-shmo-2uftx-e06c8e.jpg
200 OK 52 kB URL HTTP/2 i0.wp.com/s.smutty.com/media_smutty_2/c/a/p/t/p/capt-shmo-2uftx-e06c8e.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 620x850, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5c1e45817d695e8009041f1a93f7726f
6f347ec545676a0f747ac773ef14ec2534cbb8ec
bdec7cefdddcffa9f176248bd5022e63d11cf4e1cb52131ec30db959e5a3aa36
GET /s.smutty.com/media_smutty_2/c/a/p/t/p/capt-shmo-2uftx-e06c8e.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:43 GMT
content-type: image/webp
content-length: 52278
last-modified: Wed, 26 Oct 2022 00:04:30 GMT
expires: Fri, 25 Oct 2024 12:04:30 GMT
cache-control: public, max-age=63115200
link: <http://s.smutty.com/media_smutty_2/c/a/p/t/p/capt-shmo-2uftx-e06c8e.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "b24d67cf164fc61c"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i2.wp.com/i.smutty.com/media_smutty/s/h/a/m/p/shame85-1hj6b-e9966e.jpg
200 OK 74 kB URL HTTP/2 i2.wp.com/i.smutty.com/media_smutty/s/h/a/m/p/shame85-1hj6b-e9966e.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 620x928, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 674be092dec1cd5683ff1c40e35e9a18
d4e59dc81645fb6c6a44874d61b6e6ac3c653fd2
ea2cc2a9c1a126bf55700942216857401532bea21dbd7fd72090525150c50b93
GET /i.smutty.com/media_smutty/s/h/a/m/p/shame85-1hj6b-e9966e.jpg HTTP/1.1
Host: i2.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:43 GMT
content-type: image/webp
content-length: 73492
last-modified: Fri, 28 Oct 2022 22:56:43 GMT
expires: Mon, 28 Oct 2024 10:56:43 GMT
cache-control: public, max-age=63115200
link: <http://i.smutty.com/media_smutty/s/h/a/m/p/shame85-1hj6b-e9966e.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "97b7c700598a59f5"
vary: Accept
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/25.media.tumblr.com/tumblr_ma0f1hCaPW1rfynkho1_400.jpg
200 OK 16 kB URL HTTP/2 i0.wp.com/25.media.tumblr.com/tumblr_ma0f1hCaPW1rfynkho1_400.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x386, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 60e9e5f1cff107f4aa2358a7daa33bba
6b7b7ff710dcc059b03f55a2e3964734ad33a4ea
22598a617aa41407990466fe3fedaba2acd9dc64f079644554d69bfcde95c9d5
GET /25.media.tumblr.com/tumblr_ma0f1hCaPW1rfynkho1_400.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:43 GMT
content-type: image/webp
content-length: 15852
last-modified: Fri, 21 Oct 2022 07:50:53 GMT
expires: Sun, 20 Oct 2024 19:50:53 GMT
cache-control: public, max-age=63115200
link: <http://25.media.tumblr.com/tumblr_ma0f1hCaPW1rfynkho1_400.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "280c614ca2e23d7f"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i2.wp.com/gelbooru.com/images/3a/58/3a58401a9032f7118570176fbe3b51d6.jpg
403 Forbidden 146 B URL HTTP/2 i2.wp.com/gelbooru.com/images/3a/58/3a58401a9032f7118570176fbe3b51d6.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 9fe3cb2b7313dc79bb477bc8fde184a7
4d7b3cb41e90618358d0ee066c45c76227a13747
32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864
GET /gelbooru.com/images/3a/58/3a58401a9032f7118570176fbe3b51d6.jpg HTTP/1.1
Host: i2.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
server: nginx
date: Thu, 17 Nov 2022 22:53:43 GMT
content-type: text/html
content-length: 146
x-nc: MISS arn 2
X-Firefox-Spdy: h2
gnditiklas.com/get/1830123?zoneid=1830123&jp=_clnrapw7duaenjrkb8jza1&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=3487061322953741
200 OK 2.0 kB URL HTTP/2 gnditiklas.com/get/1830123?zoneid=1830123&jp=_clnrapw7duaenjrkb8jza1&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=3487061322953741
IP
Hash c5c0e33539ca5eb96405422811afe918
0bb2e43fee8d00a086ef846f5b413d95adced11d
64cdee2d37a8ff86577849b56ce9f03614356e79819a1c9fec78d0154c44d931
Analyzer Verdict Alert quad9 Sinkholed
GET /get/1830123?zoneid=1830123&jp=_clnrapw7duaenjrkb8jza1&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=3487061322953741 HTTP/1.1
Host: gnditiklas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:43 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=221117175327cc4abfe97b4672bac61b4387; Path=/; Expires=Fri, 17 Nov 2023 22:53:43 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 759d55a9f00851e8653847413a8a3db5
2424e3d7aae0972c57bee3a60a50b3b8a82bba23
5d07bc72f8be0bc42f91b8cb202f4cdc83fb4e5f5f360998066dad08a7fef6ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 22:53:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2
200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7920, version 1.0\012- data
Hash 797ad5f8d84a297ab16f9a9c983adfc2
af074543e3bbd78e086cefa983867e0936515c41
e0037277509761be84d1c44b520649c2363df89e00568561ebf015cb3cedc91a
GET /s/gudea/v15/neIIzCqgsI0mp9gz25WBFqw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datawav.club
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 20:56:29 GMT
expires: Fri, 17 Nov 2023 20:56:29 GMT
cache-control: public, max-age=31536000
age: 7035
last-modified: Thu, 21 Apr 2022 16:51:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 759d55a9f00851e8653847413a8a3db5
2424e3d7aae0972c57bee3a60a50b3b8a82bba23
5d07bc72f8be0bc42f91b8cb202f4cdc83fb4e5f5f360998066dad08a7fef6ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 22:53:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 759d55a9f00851e8653847413a8a3db5
2424e3d7aae0972c57bee3a60a50b3b8a82bba23
5d07bc72f8be0bc42f91b8cb202f4cdc83fb4e5f5f360998066dad08a7fef6ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 22:53:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2
200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7908, version 1.0\012- data
Hash 15d9bbcfbc1d668a43c85d156d23262b
c436963710c58453c4ae27e66c051e85c084cd49
6db83475c4b6e3bcd2df60ca7afcedabc5140c3b55c9a6bb0ca636c5b6438e5f
GET /s/gudea/v15/neIFzCqgsI0mp9CI_oA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datawav.club
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7908
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 11 Nov 2022 00:23:17 GMT
expires: Sat, 11 Nov 2023 00:23:17 GMT
cache-control: public, max-age=31536000
age: 599427
last-modified: Thu, 21 Apr 2022 16:47:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/magra/v14/uK_w4ruaZus72nbNDycQGvo.woff2
200 OK 9.4 kB URL HTTP/2 fonts.gstatic.com/s/magra/v14/uK_w4ruaZus72nbNDycQGvo.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9436, version 1.0\012- data
Hash 267ecd80d0d89a255f676a8b3cce0db0
215515b0a5be67a4d9c980e8926231225b036ef6
c4920b39f85de27baf31e69b334cdf828ec2875ac4ec3a4a2d7a2e52773f7e79
GET /s/magra/v14/uK_w4ruaZus72nbNDycQGvo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datawav.club
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9436
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 15 Nov 2022 22:18:24 GMT
expires: Wed, 15 Nov 2023 22:18:24 GMT
cache-control: public, max-age=31536000
age: 174920
last-modified: Tue, 26 Apr 2022 15:28:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 759d55a9f00851e8653847413a8a3db5
2424e3d7aae0972c57bee3a60a50b3b8a82bba23
5d07bc72f8be0bc42f91b8cb202f4cdc83fb4e5f5f360998066dad08a7fef6ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 22:53:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
limurol.com/ssp/req/1830123/?pb=2e03c8e7c2cc2233a48623f93879413f1668732823&psp=6tXj_Ep9cxuZNCYdvN3boqeBqY4pMnTW00Yoz-D1aixOLXB9UR1YGKPWrHFliW1IZQkoS6Z9jhIz5GSYEYg6_0vXXggquVOLbzY1f9UKbEWCyltT2cKdFLNvVpUOnxUhTtF0-hsWENT43bb7v-hi89zXYjyMutbQ4e1SQhJevc7RHzu3500_tBZSZIMX_VYdPJzleVuRP2xXmB7Xp4LRgHMY0ZdNeVyqkaXLzxezevnCbRcooMh93jGrqKwOu6nil7Xqc6SFr6ElhhTa5f96o8dAVx6f0uZgR44Or7oFPbOxGxYheQwIXGi_Wy3E_vXBT2J4hXsGkDCK6AdynL066nvmnzmxtP4c8Jt1lvgek4TERp6ePDA4ZVOQFx4h2QHDE7bsm_vcPYUDVg7NxK2BnMnkgPNOMYB4NjCji3moz6viWWk4BKz5IsLtvqicMg2Wap0JYNRAb-OCXTtQhyQtTDWhUmNFC6fZIxvEZ9rkR0RiicwrDH9-sB7wZe0-wKFtrcWXtFqsB-c-do2FVx8WZHW7_GJLdMjWmLiKToH2NmrX3IN72Bpf8i9dGyOqlg-9jOR2gTHhY8Mqod3GKwDQbxAt-OLUjXf_x5DUWFrUq1v3haK2esVJ4993y0ECjTyKqBvhzSDtpQv_KYCXQ943BalCM6Pzzj7ArXPmIM2q13cpBR6BrRuyNMovdII5E-Nfm3ZH_AaI6pW-5GMdmhJb_habdH4iKhd15ZMpTXP_5Axs2dtjJKqJIl99l6DnU7dYDdHwBGVB68x-aWzifTtebq6l2R2AbVRPT6IrQlvfED_9d7iQl-URggkawwThG9rUTDaVB-p_25nYIV9iYw==&cb=_cld4bsk4rq6k0mopfmjwhg&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
200 OK 7 B URL HTTP/2 limurol.com/ssp/req/1830123/?pb=2e03c8e7c2cc2233a48623f93879413f1668732823&psp=6tXj_Ep9cxuZNCYdvN3boqeBqY4pMnTW00Yoz-D1aixOLXB9UR1YGKPWrHFliW1IZQkoS6Z9jhIz5GSYEYg6_0vXXggquVOLbzY1f9UKbEWCyltT2cKdFLNvVpUOnxUhTtF0-hsWENT43bb7v-hi89zXYjyMutbQ4e1SQhJevc7RHzu3500_tBZSZIMX_VYdPJzleVuRP2xXmB7Xp4LRgHMY0ZdNeVyqkaXLzxezevnCbRcooMh93jGrqKwOu6nil7Xqc6SFr6ElhhTa5f96o8dAVx6f0uZgR44Or7oFPbOxGxYheQwIXGi_Wy3E_vXBT2J4hXsGkDCK6AdynL066nvmnzmxtP4c8Jt1lvgek4TERp6ePDA4ZVOQFx4h2QHDE7bsm_vcPYUDVg7NxK2BnMnkgPNOMYB4NjCji3moz6viWWk4BKz5IsLtvqicMg2Wap0JYNRAb-OCXTtQhyQtTDWhUmNFC6fZIxvEZ9rkR0RiicwrDH9-sB7wZe0-wKFtrcWXtFqsB-c-do2FVx8WZHW7_GJLdMjWmLiKToH2NmrX3IN72Bpf8i9dGyOqlg-9jOR2gTHhY8Mqod3GKwDQbxAt-OLUjXf_x5DUWFrUq1v3haK2esVJ4993y0ECjTyKqBvhzSDtpQv_KYCXQ943BalCM6Pzzj7ArXPmIM2q13cpBR6BrRuyNMovdII5E-Nfm3ZH_AaI6pW-5GMdmhJb_habdH4iKhd15ZMpTXP_5Axs2dtjJKqJIl99l6DnU7dYDdHwBGVB68x-aWzifTtebq6l2R2AbVRPT6IrQlvfED_9d7iQl-URggkawwThG9rUTDaVB-p_25nYIV9iYw==&cb=_cld4bsk4rq6k0mopfmjwhg&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
IP
File type ASCII text, with no line terminators
Hash a97eb6fbe6f13b601d5d48c0eba8baae
736efb938caf3d0edec406932ada889f1a4f2268
a04bf061f53e0011fd2f43bdf081526344f003c50146c88c42c2d95ef22c1821
Analyzer Verdict Alert quad9 Sinkholed
GET /ssp/req/1830123/?pb=2e03c8e7c2cc2233a48623f93879413f1668732823&psp=6tXj_Ep9cxuZNCYdvN3boqeBqY4pMnTW00Yoz-D1aixOLXB9UR1YGKPWrHFliW1IZQkoS6Z9jhIz5GSYEYg6_0vXXggquVOLbzY1f9UKbEWCyltT2cKdFLNvVpUOnxUhTtF0-hsWENT43bb7v-hi89zXYjyMutbQ4e1SQhJevc7RHzu3500_tBZSZIMX_VYdPJzleVuRP2xXmB7Xp4LRgHMY0ZdNeVyqkaXLzxezevnCbRcooMh93jGrqKwOu6nil7Xqc6SFr6ElhhTa5f96o8dAVx6f0uZgR44Or7oFPbOxGxYheQwIXGi_Wy3E_vXBT2J4hXsGkDCK6AdynL066nvmnzmxtP4c8Jt1lvgek4TERp6ePDA4ZVOQFx4h2QHDE7bsm_vcPYUDVg7NxK2BnMnkgPNOMYB4NjCji3moz6viWWk4BKz5IsLtvqicMg2Wap0JYNRAb-OCXTtQhyQtTDWhUmNFC6fZIxvEZ9rkR0RiicwrDH9-sB7wZe0-wKFtrcWXtFqsB-c-do2FVx8WZHW7_GJLdMjWmLiKToH2NmrX3IN72Bpf8i9dGyOqlg-9jOR2gTHhY8Mqod3GKwDQbxAt-OLUjXf_x5DUWFrUq1v3haK2esVJ4993y0ECjTyKqBvhzSDtpQv_KYCXQ943BalCM6Pzzj7ArXPmIM2q13cpBR6BrRuyNMovdII5E-Nfm3ZH_AaI6pW-5GMdmhJb_habdH4iKhd15ZMpTXP_5Axs2dtjJKqJIl99l6DnU7dYDdHwBGVB68x-aWzifTtebq6l2R2AbVRPT6IrQlvfED_9d7iQl-URggkawwThG9rUTDaVB-p_25nYIV9iYw==&cb=_cld4bsk4rq6k0mopfmjwhg&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24 HTTP/1.1
Host: limurol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:44 GMT
content-type: text/javascript
content-length: 7
x-route-id: ssp.bet
set-cookie: UID=2211171753ef3bec00e1f34260a0c9a82918; Path=/; Expires=Fri, 17 Nov 2023 22:53:44 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
limurol.com/ssp/req/1830123/?pb=2e03c8e7c2cc2233a48623f93879413f1668732823&psp=6tXj_Ep9cxuZNCYdvN3boqeBqY4pMnTW00Yoz-D1aixOLXB9UR1YGKPWrHFliW1IZQkoS6Z9jhIz5GSYEYg6_0vXXggquVOLbzY1f9UKbEWCyltT2cKdFLNvVpUOnxUhTtF0-hsWENT43bb7v-hi89zXYjyMutbQ4e1SQhJevc7RHzu3500_tBZSZIMX_VYdPJzleVuRP2xXmB7Xp4LRgHMY0ZdNeVyqkaXLzxezevnCbRcooMh93jGrqKwOu6nil7Xqc6SFr6ElhhTa5f96o8dAVx6f0uZgR44Or7oFPbOxGxYheQwIXGi_Wy3E_vXBT2J4hXsGkDCK6AdynL066nvmnzmxtP4c8Jt1lvgek4TERp6ePDA4ZVOQFx4h2QHDE7bsm_vcPYUDVg7NxK2BnMnkgPNOMYB4NjCji3moz6viWWk4BKz5IsLtvqicMg2Wap0JYNRAb-OCXTtQhyQtTDWhUmNFC6fZIxvEZ9rkR0RiicwrDH9-sB7wZe0-wKFtrcWXtFqsB-c-do2FVx8WZHW7_GJLdMjWmLiKToH2NmrX3IN72Bpf8i9dGyOqlg-9jOR2gTHhY8Mqod3GKwDQbxAt-OLUjXf_x5DUWFrUq1v3haK2esVJ4993y0ECjTyKqBvhzSDtpQv_KYCXQ943BalCM6Pzzj7ArXPmIM2q13cpBR6BrRuyNMovdII5E-Nfm3ZH_AaI6pW-5GMdmhJb_habdH4iKhd15ZMpTXP_5Axs2dtjJKqJIl99l6DnU7dYDdHwBGVB68x-aWzifTtebq6l2R2AbVRPT6IrQlvfED_9d7iQl-URggkawwThG9rUTDaVB-p_25nYIV9iYw==&cb=_cld4bsk4rq6k0mopfmjwhg&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
200 OK 7 B URL HTTP/2 limurol.com/ssp/req/1830123/?pb=2e03c8e7c2cc2233a48623f93879413f1668732823&psp=6tXj_Ep9cxuZNCYdvN3boqeBqY4pMnTW00Yoz-D1aixOLXB9UR1YGKPWrHFliW1IZQkoS6Z9jhIz5GSYEYg6_0vXXggquVOLbzY1f9UKbEWCyltT2cKdFLNvVpUOnxUhTtF0-hsWENT43bb7v-hi89zXYjyMutbQ4e1SQhJevc7RHzu3500_tBZSZIMX_VYdPJzleVuRP2xXmB7Xp4LRgHMY0ZdNeVyqkaXLzxezevnCbRcooMh93jGrqKwOu6nil7Xqc6SFr6ElhhTa5f96o8dAVx6f0uZgR44Or7oFPbOxGxYheQwIXGi_Wy3E_vXBT2J4hXsGkDCK6AdynL066nvmnzmxtP4c8Jt1lvgek4TERp6ePDA4ZVOQFx4h2QHDE7bsm_vcPYUDVg7NxK2BnMnkgPNOMYB4NjCji3moz6viWWk4BKz5IsLtvqicMg2Wap0JYNRAb-OCXTtQhyQtTDWhUmNFC6fZIxvEZ9rkR0RiicwrDH9-sB7wZe0-wKFtrcWXtFqsB-c-do2FVx8WZHW7_GJLdMjWmLiKToH2NmrX3IN72Bpf8i9dGyOqlg-9jOR2gTHhY8Mqod3GKwDQbxAt-OLUjXf_x5DUWFrUq1v3haK2esVJ4993y0ECjTyKqBvhzSDtpQv_KYCXQ943BalCM6Pzzj7ArXPmIM2q13cpBR6BrRuyNMovdII5E-Nfm3ZH_AaI6pW-5GMdmhJb_habdH4iKhd15ZMpTXP_5Axs2dtjJKqJIl99l6DnU7dYDdHwBGVB68x-aWzifTtebq6l2R2AbVRPT6IrQlvfED_9d7iQl-URggkawwThG9rUTDaVB-p_25nYIV9iYw==&cb=_cld4bsk4rq6k0mopfmjwhg&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
IP
File type ASCII text, with no line terminators
Hash a97eb6fbe6f13b601d5d48c0eba8baae
736efb938caf3d0edec406932ada889f1a4f2268
a04bf061f53e0011fd2f43bdf081526344f003c50146c88c42c2d95ef22c1821
Analyzer Verdict Alert quad9 Sinkholed
GET /ssp/req/1830123/?pb=2e03c8e7c2cc2233a48623f93879413f1668732823&psp=6tXj_Ep9cxuZNCYdvN3boqeBqY4pMnTW00Yoz-D1aixOLXB9UR1YGKPWrHFliW1IZQkoS6Z9jhIz5GSYEYg6_0vXXggquVOLbzY1f9UKbEWCyltT2cKdFLNvVpUOnxUhTtF0-hsWENT43bb7v-hi89zXYjyMutbQ4e1SQhJevc7RHzu3500_tBZSZIMX_VYdPJzleVuRP2xXmB7Xp4LRgHMY0ZdNeVyqkaXLzxezevnCbRcooMh93jGrqKwOu6nil7Xqc6SFr6ElhhTa5f96o8dAVx6f0uZgR44Or7oFPbOxGxYheQwIXGi_Wy3E_vXBT2J4hXsGkDCK6AdynL066nvmnzmxtP4c8Jt1lvgek4TERp6ePDA4ZVOQFx4h2QHDE7bsm_vcPYUDVg7NxK2BnMnkgPNOMYB4NjCji3moz6viWWk4BKz5IsLtvqicMg2Wap0JYNRAb-OCXTtQhyQtTDWhUmNFC6fZIxvEZ9rkR0RiicwrDH9-sB7wZe0-wKFtrcWXtFqsB-c-do2FVx8WZHW7_GJLdMjWmLiKToH2NmrX3IN72Bpf8i9dGyOqlg-9jOR2gTHhY8Mqod3GKwDQbxAt-OLUjXf_x5DUWFrUq1v3haK2esVJ4993y0ECjTyKqBvhzSDtpQv_KYCXQ943BalCM6Pzzj7ArXPmIM2q13cpBR6BrRuyNMovdII5E-Nfm3ZH_AaI6pW-5GMdmhJb_habdH4iKhd15ZMpTXP_5Axs2dtjJKqJIl99l6DnU7dYDdHwBGVB68x-aWzifTtebq6l2R2AbVRPT6IrQlvfED_9d7iQl-URggkawwThG9rUTDaVB-p_25nYIV9iYw==&cb=_cld4bsk4rq6k0mopfmjwhg&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24 HTTP/1.1
Host: limurol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Cookie: UID=2211171753ef3bec00e1f34260a0c9a82918
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:44 GMT
content-type: text/javascript
content-length: 7
x-route-id: ssp.bet
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
limurol.com/ssp/req/1830123/?pb=2e03c8e7c2cc2233a48623f93879413f1668732823&psp=6tXj_Ep9cxuZNCYdvN3boqeBqY4pMnTW00Yoz-D1aixOLXB9UR1YGKPWrHFliW1IZQkoS6Z9jhIz5GSYEYg6_0vXXggquVOLbzY1f9UKbEWCyltT2cKdFLNvVpUOnxUhTtF0-hsWENT43bb7v-hi89zXYjyMutbQ4e1SQhJevc7RHzu3500_tBZSZIMX_VYdPJzleVuRP2xXmB7Xp4LRgHMY0ZdNeVyqkaXLzxezevnCbRcooMh93jGrqKwOu6nil7Xqc6SFr6ElhhTa5f96o8dAVx6f0uZgR44Or7oFPbOxGxYheQwIXGi_Wy3E_vXBT2J4hXsGkDCK6AdynL066nvmnzmxtP4c8Jt1lvgek4TERp6ePDA4ZVOQFx4h2QHDE7bsm_vcPYUDVg7NxK2BnMnkgPNOMYB4NjCji3moz6viWWk4BKz5IsLtvqicMg2Wap0JYNRAb-OCXTtQhyQtTDWhUmNFC6fZIxvEZ9rkR0RiicwrDH9-sB7wZe0-wKFtrcWXtFqsB-c-do2FVx8WZHW7_GJLdMjWmLiKToH2NmrX3IN72Bpf8i9dGyOqlg-9jOR2gTHhY8Mqod3GKwDQbxAt-OLUjXf_x5DUWFrUq1v3haK2esVJ4993y0ECjTyKqBvhzSDtpQv_KYCXQ943BalCM6Pzzj7ArXPmIM2q13cpBR6BrRuyNMovdII5E-Nfm3ZH_AaI6pW-5GMdmhJb_habdH4iKhd15ZMpTXP_5Axs2dtjJKqJIl99l6DnU7dYDdHwBGVB68x-aWzifTtebq6l2R2AbVRPT6IrQlvfED_9d7iQl-URggkawwThG9rUTDaVB-p_25nYIV9iYw==&cb=_cld4bsk4rq6k0mopfmjwhg&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
200 OK 7 B URL HTTP/2 limurol.com/ssp/req/1830123/?pb=2e03c8e7c2cc2233a48623f93879413f1668732823&psp=6tXj_Ep9cxuZNCYdvN3boqeBqY4pMnTW00Yoz-D1aixOLXB9UR1YGKPWrHFliW1IZQkoS6Z9jhIz5GSYEYg6_0vXXggquVOLbzY1f9UKbEWCyltT2cKdFLNvVpUOnxUhTtF0-hsWENT43bb7v-hi89zXYjyMutbQ4e1SQhJevc7RHzu3500_tBZSZIMX_VYdPJzleVuRP2xXmB7Xp4LRgHMY0ZdNeVyqkaXLzxezevnCbRcooMh93jGrqKwOu6nil7Xqc6SFr6ElhhTa5f96o8dAVx6f0uZgR44Or7oFPbOxGxYheQwIXGi_Wy3E_vXBT2J4hXsGkDCK6AdynL066nvmnzmxtP4c8Jt1lvgek4TERp6ePDA4ZVOQFx4h2QHDE7bsm_vcPYUDVg7NxK2BnMnkgPNOMYB4NjCji3moz6viWWk4BKz5IsLtvqicMg2Wap0JYNRAb-OCXTtQhyQtTDWhUmNFC6fZIxvEZ9rkR0RiicwrDH9-sB7wZe0-wKFtrcWXtFqsB-c-do2FVx8WZHW7_GJLdMjWmLiKToH2NmrX3IN72Bpf8i9dGyOqlg-9jOR2gTHhY8Mqod3GKwDQbxAt-OLUjXf_x5DUWFrUq1v3haK2esVJ4993y0ECjTyKqBvhzSDtpQv_KYCXQ943BalCM6Pzzj7ArXPmIM2q13cpBR6BrRuyNMovdII5E-Nfm3ZH_AaI6pW-5GMdmhJb_habdH4iKhd15ZMpTXP_5Axs2dtjJKqJIl99l6DnU7dYDdHwBGVB68x-aWzifTtebq6l2R2AbVRPT6IrQlvfED_9d7iQl-URggkawwThG9rUTDaVB-p_25nYIV9iYw==&cb=_cld4bsk4rq6k0mopfmjwhg&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
IP
File type ASCII text, with no line terminators
Hash a97eb6fbe6f13b601d5d48c0eba8baae
736efb938caf3d0edec406932ada889f1a4f2268
a04bf061f53e0011fd2f43bdf081526344f003c50146c88c42c2d95ef22c1821
Analyzer Verdict Alert quad9 Sinkholed
GET /ssp/req/1830123/?pb=2e03c8e7c2cc2233a48623f93879413f1668732823&psp=6tXj_Ep9cxuZNCYdvN3boqeBqY4pMnTW00Yoz-D1aixOLXB9UR1YGKPWrHFliW1IZQkoS6Z9jhIz5GSYEYg6_0vXXggquVOLbzY1f9UKbEWCyltT2cKdFLNvVpUOnxUhTtF0-hsWENT43bb7v-hi89zXYjyMutbQ4e1SQhJevc7RHzu3500_tBZSZIMX_VYdPJzleVuRP2xXmB7Xp4LRgHMY0ZdNeVyqkaXLzxezevnCbRcooMh93jGrqKwOu6nil7Xqc6SFr6ElhhTa5f96o8dAVx6f0uZgR44Or7oFPbOxGxYheQwIXGi_Wy3E_vXBT2J4hXsGkDCK6AdynL066nvmnzmxtP4c8Jt1lvgek4TERp6ePDA4ZVOQFx4h2QHDE7bsm_vcPYUDVg7NxK2BnMnkgPNOMYB4NjCji3moz6viWWk4BKz5IsLtvqicMg2Wap0JYNRAb-OCXTtQhyQtTDWhUmNFC6fZIxvEZ9rkR0RiicwrDH9-sB7wZe0-wKFtrcWXtFqsB-c-do2FVx8WZHW7_GJLdMjWmLiKToH2NmrX3IN72Bpf8i9dGyOqlg-9jOR2gTHhY8Mqod3GKwDQbxAt-OLUjXf_x5DUWFrUq1v3haK2esVJ4993y0ECjTyKqBvhzSDtpQv_KYCXQ943BalCM6Pzzj7ArXPmIM2q13cpBR6BrRuyNMovdII5E-Nfm3ZH_AaI6pW-5GMdmhJb_habdH4iKhd15ZMpTXP_5Axs2dtjJKqJIl99l6DnU7dYDdHwBGVB68x-aWzifTtebq6l2R2AbVRPT6IrQlvfED_9d7iQl-URggkawwThG9rUTDaVB-p_25nYIV9iYw==&cb=_cld4bsk4rq6k0mopfmjwhg&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24 HTTP/1.1
Host: limurol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Cookie: UID=2211171753ef3bec00e1f34260a0c9a82918
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:44 GMT
content-type: text/javascript
content-length: 7
x-route-id: ssp.bet
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash e49845c488d250b950ee3cdea4062144
79c82d3d9089063a38594bf14a35ebfae5285d38
16a725bbeb2eceaafdaa44cc1ba6222eaecd63d4e0508cd4c830e1aed904baac
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 17 Nov 2022 22:53:44 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 00:04:32 GMT
Expires: Thu, 24 Nov 2022 00:04:31 GMT
Etag: "79c82d3d9089063a38594bf14a35ebfae5285d38"
Cache-Control: max-age=522046,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76bc0b4ed99bb51e-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash e49845c488d250b950ee3cdea4062144
79c82d3d9089063a38594bf14a35ebfae5285d38
16a725bbeb2eceaafdaa44cc1ba6222eaecd63d4e0508cd4c830e1aed904baac
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 17 Nov 2022 22:53:44 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 00:04:32 GMT
Expires: Thu, 24 Nov 2022 00:04:31 GMT
Etag: "79c82d3d9089063a38594bf14a35ebfae5285d38"
Cache-Control: max-age=522046,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76bc0b504ae1b51e-OSL
6.adsco.re/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://datawav.club
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 17 Nov 2022 22:53:44 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://datawav.club
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 76bc0b513f2eb50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 17af07b019100dc8adb529ce85f827bd
602adaa722e9a3ee89600ebe40cea7033c435483
aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8616
Expires: Fri, 18 Nov 2022 01:17:20 GMT
Date: Thu, 17 Nov 2022 22:53:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 17af07b019100dc8adb529ce85f827bd
602adaa722e9a3ee89600ebe40cea7033c435483
aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8616
Expires: Fri, 18 Nov 2022 01:17:20 GMT
Date: Thu, 17 Nov 2022 22:53:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 17af07b019100dc8adb529ce85f827bd
602adaa722e9a3ee89600ebe40cea7033c435483
aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8616
Expires: Fri, 18 Nov 2022 01:17:20 GMT
Date: Thu, 17 Nov 2022 22:53:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 17af07b019100dc8adb529ce85f827bd
602adaa722e9a3ee89600ebe40cea7033c435483
aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8616
Expires: Fri, 18 Nov 2022 01:17:20 GMT
Date: Thu, 17 Nov 2022 22:53:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 17af07b019100dc8adb529ce85f827bd
602adaa722e9a3ee89600ebe40cea7033c435483
aec801578f867078e0a82d90e78290f0a3ef4f1f4936eb763801b869e0fae747
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AEC801578F867078E0A82D90E78290F0A3EF4F1F4936EB763801B869E0FAE747"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8616
Expires: Fri, 18 Nov 2022 01:17:20 GMT
Date: Thu, 17 Nov 2022 22:53:44 GMT
Connection: keep-alive
4.adsco.re/
200 OK 62 B IP
File type ASCII text, with no line terminators
Hash adde5febc7b5b6c2c759ec735cce83a0
77ec17be8a9970ff04663294d41c590d0d24fde4
ce2b9f2e5005195de7add565505005be6f2ef0d37521771e15106d1e1b9260ff
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://datawav.club
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 17 Nov 2022 22:53:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://datawav.club
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9672fb80-baaa-4ab8-b080-dc8c1ce94400.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9672fb80-baaa-4ab8-b080-dc8c1ce94400.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 05289172c1455c4134e496c6f4606efd
ce1bb33256b0754f9acc01e7e9f3e5dc85f89244
a8b4411a0310cc376efe2aec7c0830b8d3b63b8827631b0ff43ec092f1f80f82
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9672fb80-baaa-4ab8-b080-dc8c1ce94400.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12065
x-amzn-requestid: 45c97153-71c7-4985-a1ad-fc21a509d153
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-K5FyVIAMFtDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376aa45-0f9d22dd544a4580570f3089;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: dxT2WJB7m5tUhgBn2PwTIN4Zskzm3X7CW-29hl1nCyNPbKt5j6q5iA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:55:27 GMT
age: 3497
etag: "ce1bb33256b0754f9acc01e7e9f3e5dc85f89244"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b2b393e36ee2c9649d90db136aa49542
e88c5832ff0c49bab181d948c3a510d88343bb6f
8b524701df43bff56ac52a021ff0fbd964e06f00e84b4861aa557ec6ae6b4ffd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7631
x-amzn-requestid: b47e545d-1fb6-4a62-ab45-28cdb9d3f0b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-vQE0XoAMFS3w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab2e-56365eed3d4c082c53b172b3;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:44:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qpoQa1Lhe-h27dGooXDCtujesSTg7Tb0Ov-PNLnUP0288ZofwHxkhQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:52:40 GMT
age: 3664
etag: "e88c5832ff0c49bab181d948c3a510d88343bb6f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44ba3263-9329-4559-836c-276171e025ed.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44ba3263-9329-4559-836c-276171e025ed.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 86031fc92c8180ae6e705b264f22a3db
218a3019acb40a251de89c66b42cba265f4554e8
b3f4c1825d35cae0c3a5f4de5ea26a9175a4ae03b16738e909353365acd3a73b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44ba3263-9329-4559-836c-276171e025ed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6637
x-amzn-requestid: b821413a-b325-40bb-9b89-30707f71e661
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-7vETlIAMFTMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab7e-1f1856e545d5c6521385a4de;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:45:34 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: xe8OcDgFv6akQwAdoXVtB6Dp288li05jmMJlshlERoQeENkABsmDRQ==
via: 1.1 b04d82bf2bc15ab146955a862be263f0.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:52:40 GMT
age: 3664
etag: "218a3019acb40a251de89c66b42cba265f4554e8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38915691-004a-4ae6-a5c6-fd071040ffba.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38915691-004a-4ae6-a5c6-fd071040ffba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4998f097d23ee5f19cae27d5b938e5fc
4369c8ebe61b9944e639bb2731feb51c5a758fe7
5691c66766c9578e9c4aa71240608653821162c668abc63ee40e553ede2450e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38915691-004a-4ae6-a5c6-fd071040ffba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6339
x-amzn-requestid: 0be5dee5-272d-4577-ba55-5cdb7935ea60
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-MCExBoAMFz6Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376aa4c-15fd613336aa6fcb165d0b26;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:40:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: NYs-Nf0PzWqhXP5nkvanTjhJ6vfwRIU--YD06RFIGPEuwDCu6fvEPg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:52:40 GMT
age: 3664
etag: "4369c8ebe61b9944e639bb2731feb51c5a758fe7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 04723c950551657af1649aff54fd76b8
3e90ef11b1e14a00c786cabab60f1f02684738f1
6ed24966054e86fbeaa87f496ac8af4b577cd8931fbed70d8c46d0642d90d77c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 891
Cache-Control: max-age=169810
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 22:53:44 GMT
Etag: "6376ac50-118"
Expires: Sat, 19 Nov 2022 22:03:54 GMT
Last-Modified: Thu, 17 Nov 2022 21:49:04 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 280
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4724f84-de93-48d7-8d33-1427f27e15a0.webp
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4724f84-de93-48d7-8d33-1427f27e15a0.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 55801be30fc7e7d24ba2418d00ce4ca2
31935f7d11269f0f4177a48d2c166e09fec1f377
05e58892cab261aca3abe7e29ff482b51f5f7e4261b8579e7b9f85487f53eeda
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4724f84-de93-48d7-8d33-1427f27e15a0.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7539
x-amzn-requestid: 96d0ad29-0b25-4e4b-93ea-da9fde83aa8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw9V5E2boAMFbiA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376a8f2-33f7f4592f8574486987e233;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:34:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: r1X3PUyrso5VkyphYHqBQdYo6lmmIvTQdA_kPA5I-lds8qn9RtEIpw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:05:38 GMT
etag: "31935f7d11269f0f4177a48d2c166e09fec1f377"
content-type: image/jpeg
age: 2886
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 032386e5c9dffff1ba1ee5e8a322d438
dd4fd6c803a9b333bace9a541c6bd183d0c56bb9
0e9f559a0aa7e114c5810a27ba243c0da7b44dc0bf7aec2b7ab32b8f0e2b536c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11667
x-amzn-requestid: ae092a0a-1709-4497-9f07-0348a28d2491
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqZOIEN7oAMFlaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637408c0-5ac595df302a8f1d3703ad8d;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:46:40 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: c_SJMaV3uYSUysTSOFV--jQqDUxw-fBp8cXWWUZw9vUjt0d6PsOpxA==
via: 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 02:49:36 GMT
age: 72248
etag: "dd4fd6c803a9b333bace9a541c6bd183d0c56bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
adserver.juicyads.com/js/jads.js
200 OK 1.7 kB URL HTTP/1.1 adserver.juicyads.com/js/jads.js
IP
File type ASCII text, with very long lines (3769), with no line terminators
Hash 65b1efdf55163b144c5018b8772765ad
509de5f40450f3cf05e0d8d1b939fed2bbb11cbe
cf23ab637d84de0eb1c1e67764e05ca0aa140e6ee932a60700fc35661644ee48
GET /js/jads.js HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Nov 2022 22:53:44 GMT
Content-Type: application/x-javascript
Last-Modified: Thu, 07 Jul 2022 14:07:12 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"62c6e890-eb9"
Content-Encoding: gzip
datawav.club/favicon.ico
404 Not Found 184 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 8ea8556770bd53150ab76b23f87936a6
6c615fdc6839c5ed11a30ebc227646ac6aef493b
c4f8c99f5287623d6325502365d07eb6dc33d0c58c1c2def811f9b06ff7d68f0
GET /favicon.ico HTTP/1.1
Host: datawav.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/big-breasted-dominatrix/
Cookie: a=rCI6fGJKdqbWVfJAzTQzhfNyqXeqK4XP
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 17 Nov 2022 22:53:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"5f77c832-f7"
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0f71636d0ec9656fc1f93a4733b18093
29c14535b94b9db0c703219fdac11487209fcdee
665a33bed34a09e01a23fa2d34a83202308ceb58796e314f6d0a1bd6f7a6a367
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "665A33BED34A09E01A23FA2D34A83202308CEB58796E314F6D0A1BD6F7A6A367"
Last-Modified: Wed, 16 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6483
Expires: Fri, 18 Nov 2022 00:41:47 GMT
Date: Thu, 17 Nov 2022 22:53:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b692e973218a2d35cb66df26fe855672
f5870565fc926567ffd31ab5879b8ed8172fee49
6095ea306c8fde43649f18f8d855e70b3230927ff973f3af6434f8675b6b130d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6095EA306C8FDE43649F18F8D855E70B3230927FF973F3AF6434F8675B6B130D"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12576
Expires: Fri, 18 Nov 2022 02:23:20 GMT
Date: Thu, 17 Nov 2022 22:53:44 GMT
Connection: keep-alive
s10.histats.com/js15_as.js
200 OK 4.4 kB URL HTTP/2 s10.histats.com/js15_as.js
IP
File type HTML document, ASCII text, with very long lines (11440), with no line terminators
Hash ed192092c129db6123a3397855f42619
067e9b8e26cf6246eb84c6b9cf3da0c192ce7b3e
998fff486a7fb38b6ed445edc36c9b317b70950cd39efcf4012ca641312fcee1
GET /js15_as.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 17 Nov 2022 22:46:54 GMT
etag: "-375139978"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 504957533
content-type: application/javascript; charset=UTF-8
content-encoding: br
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4364
X-Firefox-Spdy: h2
rtl1h6mfc7zr.n4.adsco.re/
200 OK 0 B URL HTTP/1.1 rtl1h6mfc7zr.n4.adsco.re/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: rtl1h6mfc7zr.n4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://datawav.club
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 17 Nov 2022 22:53:44 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:32:42 GMT
Connection: close
ETag: "5b5f2f9a-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
adsco.re/p
200 OK 170 B IP
File type ASCII text, with no line terminators
Hash 3ec0e21baa860d9d1280190efe15ce76
1a14342cc5409944ea69d58317f7ecdc16f59890
eaccee912ae75f4e121f12fd948ee23a132fe640e96096548c1775c06c62ba3a
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 1884
Origin: https://datawav.club
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 17 Nov 2022 22:53:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Access-Control-Allow-Origin: https://datawav.club
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
adserver.juicyads.com/adshow.php?adzone=770180
200 OK 1.5 kB URL HTTP/1.1 adserver.juicyads.com/adshow.php?adzone=770180
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (436), with CRLF, LF line terminators
Hash ac8a57f4e327150914c49990bbbb204c
e59765e6340c4e1d1e08579f1bd6321db2194c8a
6154db8b2840c7230c4511b475131201c7544207f8136edfdb51b7d7349d00d7
GET /adshow.php?adzone=770180 HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Nov 2022 22:53:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=cc2e045d6eb9463cecf803a29f516cd6; expires=Fri, 17-Nov-2023 22:53:44 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.juicyads.com
imps12957=1; expires=Fri, 18-Nov-2022 22:53:44 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.juicyads.com
juicy_data_1=YToxOntpOjc4MzgxNjtpOjE2Njg5ODQ4MjQ7fQ%3D%3D; expires=Sun, 20-Nov-2022 22:53:44 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Sun, 20-Nov-2022 22:53:44 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bb81ef3a45292d25eeaf367e175e24ff
8e31e0d617d1e152364006178d849507a42f8878
0e88e98d0eb8e2978ba3d21aaf73cfbbad1f159efd86179aa852b7587928a6b8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E88E98D0EB8E2978BA3D21AAF73CFBBAD1F159EFD86179AA852B7587928A6B8"
Last-Modified: Wed, 16 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5499
Expires: Fri, 18 Nov 2022 00:25:24 GMT
Date: Thu, 17 Nov 2022 22:53:45 GMT
Connection: keep-alive
s4.histats.com/stats/0.php?3916601&@f16&@g1&@h1&@i1&@j1668725623442&@k0&@l1&@mBig%20Breasted%20Dominatrix&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:114497115&@b3:1668725623&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fdatawav.club%2Fbig-breasted-dominatrix%2F&@w
200 OK 52 B URL HTTP/1.1 s4.histats.com/stats/0.php?3916601&@f16&@g1&@h1&@i1&@j1668725623442&@k0&@l1&@mBig%20Breasted%20Dominatrix&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:114497115&@b3:1668725623&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fdatawav.club%2Fbig-breasted-dominatrix%2F&@w
IP
File type ASCII text, with no line terminators
Hash 1c9db6f7f855e86fa2e57d3432baaff2
14a29eb7d914f58e789923848bf3b9cb422cdb04
a8417a318766b9c223c0e7f4333a6ba7acb0d341a5136b1d7ff1cc5fdfa8add4
GET /stats/0.php?3916601&@f16&@g1&@h1&@i1&@j1668725623442&@k0&@l1&@mBig%20Breasted%20Dominatrix&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:114497115&@b3:1668725623&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fdatawav.club%2Fbig-breasted-dominatrix%2F&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 17 Nov 2022 22:53:45 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 52
Connection: close
adserver.juicyads.com/adshow.php?adzone=593090
200 OK 1.5 kB URL HTTP/1.1 adserver.juicyads.com/adshow.php?adzone=593090
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (412), with CRLF, LF line terminators
Hash fad6c66b0775fd1345ab993d2867b085
ba9a3593256f732298083a4f647fb4ff69d73ff5
89c04da9794aabe2d38649133ceb6582df14dd18956c1305895f0fc7b966c88c
GET /adshow.php?adzone=593090 HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Nov 2022 22:53:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=cc2e045d6eb9463cecf803a29f516cd6; expires=Fri, 17-Nov-2023 22:53:44 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.juicyads.com
imps31838=1; expires=Fri, 18-Nov-2022 22:53:44 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.juicyads.com
juicy_data_1=YToxOntpOjc0NjYwNjtpOjE2Njg5ODQ4MjQ7fQ%3D%3D; expires=Sun, 20-Nov-2022 22:53:44 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Sun, 20-Nov-2022 22:53:44 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=juicyads.com
Content-Encoding: gzip
ads.juicyads.me/network/user47819/12957-1563401671-0174313001563401671.jpg
200 OK 35 kB URL HTTP/2 ads.juicyads.me/network/user47819/12957-1563401671-0174313001563401671.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1], baseline, precision 8, 300x250, components 3\012- data
Hash a2bccfaee9f1596dc8a22b0e9740d75b
0c010036b26386ac89ea5e476f955505bfee0b83
41c187f10bd7f93543aa1670203fcf01ab1da78e965e0ac5b4070440ba2d5cd2
GET /network/user47819/12957-1563401671-0174313001563401671.jpg HTTP/1.1
Host: ads.juicyads.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adserver.juicyads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 17 Nov 2022 22:53:45 GMT
etag: "1563401671"
cache-control: max-age=18557307
content-length: 35412
content-type: image/jpeg
last-modified: Wed, 17 Jul 2019 22:14:31 GMT
accept-ranges: bytes
x-hw: 1668725625.dop232.sk1.t,1668725625.cds225.sk1.hn,1668725625.cds247.sk1.c
X-Firefox-Spdy: h2
ads.juicyads.me/network/user14811/31788-1552226044-0961380001552226044.jpg
200 OK 24 kB URL HTTP/2 ads.juicyads.me/network/user14811/31788-1552226044-0961380001552226044.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 728x90, components 3\012- data
Hash a1031b466941f4693e17a238a8c86080
4c24606fd8790060ccd69e92c1303571523c21eb
cd411b9e5f2d64710595232169a4127d1a2461192cca3c240d0e225d91ca1e7f
GET /network/user14811/31788-1552226044-0961380001552226044.jpg HTTP/1.1
Host: ads.juicyads.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adserver.juicyads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 22:53:45 GMT
etag: "1552226044"
cache-control: max-age=3258494
content-length: 23557
content-type: image/jpeg
last-modified: Sun, 10 Mar 2019 13:54:04 GMT
accept-ranges: bytes
x-hw: 1668725625.dop232.sk1.t,1668725625.cds225.sk1.hn,1668725625.cds222.sk1.c
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash f49a45b3d76c6a1df50afa1d1779f04b
98bce70b58774993fe614d1f9610dcba70e78424
45dd7b84f5ac958072fc8f4800a46be9807ebe77c483fe25bfeb36d58f8a229f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 17 Nov 2022 22:53:45 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 01:12:43 GMT
Expires: Wed, 23 Nov 2022 01:12:42 GMT
Etag: "98bce70b58774993fe614d1f9610dcba70e78424"
Cache-Control: max-age=439736,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76bc0b56a935b51e-OSL
adserver.juicyads.com/adshow.php?adzone=593091
200 OK 1.5 kB URL HTTP/1.1 adserver.juicyads.com/adshow.php?adzone=593091
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (433), with CRLF, LF line terminators
Hash f04fdd7ce53c21058b16be33567b024f
130bd7a771474c7255ed7b9f0dce072d2e8334e0
b7e3a21804b63fc96b73dc49fd3eb93ab56eb266930b3d359224de10a10001a7
GET /adshow.php?adzone=593091 HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Nov 2022 22:53:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=cc2e045d6eb9463cecf803a29f516cd6; expires=Fri, 17-Nov-2023 22:53:44 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.juicyads.com
imps5492=1; expires=Fri, 18-Nov-2022 22:53:45 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.juicyads.com
juicy_data_1=YToxOntpOjE0Nzg5MzI7aToxNjY4OTg0ODI0O30%3D; expires=Sun, 20-Nov-2022 22:53:44 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=juicyads.com
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Sun, 20-Nov-2022 22:53:44 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=juicyads.com
Content-Encoding: gzip
ads.juicyads.me/network/user12421/5492-1665506451-0897987001665506451.jpg
200 OK 76 kB URL HTTP/2 ads.juicyads.me/network/user12421/5492-1665506451-0897987001665506451.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 300x250, components 3\012- data
Hash 27409ac051a8717c7aff47f0e6a4b288
7c18af3f894d6642c666c8357cbb9fc7de01364d
97367a8e4b33c03f6e766d129859f2aa8d8a6417ebd348ecd111db2535bb9624
GET /network/user12421/5492-1665506451-0897987001665506451.jpg HTTP/1.1
Host: ads.juicyads.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adserver.juicyads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 22:53:45 GMT
etag: "1665506451"
cache-control: max-age=31296710
content-length: 76519
content-type: image/jpeg
last-modified: Tue, 11 Oct 2022 16:40:51 GMT
accept-ranges: bytes
x-hw: 1668725625.dop232.sk1.t,1668725625.cds225.sk1.hn,1668725625.cds245.sk1.c
X-Firefox-Spdy: h2
blockadsnot.com/wAboQ.php?_=BAYAY3a7eQFjdrt5gAGBAsAAIO1p9heDYKiTFB8A2pOrT2piLJLdDRjAojJcgIUayqIIwQBIMEYCIQC6Pjvi17f_wSjfjhOApeS0ATzPuLGjfq64lDPMIx7stgIhAMeCTgFd_Nyp6nrlk9tcjgY2XRAtCqNbpgmXHO7EODDx&v=4&SWmGEziC=1955226&minBid=&KmvYihQy=0,0&lyPEvoqh=&FhWpOeGV=&s=1280,1024,1,1280,1024,0
200 OK 44 B URL HTTP/2 blockadsnot.com/wAboQ.php?_=BAYAY3a7eQFjdrt5gAGBAsAAIO1p9heDYKiTFB8A2pOrT2piLJLdDRjAojJcgIUayqIIwQBIMEYCIQC6Pjvi17f_wSjfjhOApeS0ATzPuLGjfq64lDPMIx7stgIhAMeCTgFd_Nyp6nrlk9tcjgY2XRAtCqNbpgmXHO7EODDx&v=4&SWmGEziC=1955226&minBid=&KmvYihQy=0,0&lyPEvoqh=&FhWpOeGV=&s=1280,1024,1,1280,1024,0
IP
File type ASCII text, with no line terminators
Hash d5f0a25e4d3522d56d48ce7bc3e518fb
86794caff58f7fee6e684c2ba7195f970a8d6f4c
9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /wAboQ.php?_=BAYAY3a7eQFjdrt5gAGBAsAAIO1p9heDYKiTFB8A2pOrT2piLJLdDRjAojJcgIUayqIIwQBIMEYCIQC6Pjvi17f_wSjfjhOApeS0ATzPuLGjfq64lDPMIx7stgIhAMeCTgFd_Nyp6nrlk9tcjgY2XRAtCqNbpgmXHO7EODDx&v=4&SWmGEziC=1955226&minBid=&KmvYihQy=0,0&lyPEvoqh=&FhWpOeGV=&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: blockadsnot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Thu, 17 Nov 2022 22:53:45 GMT
X-Firefox-Spdy: h2
rtl1h6mfc7zr.s4.adsco.re/
200 OK 0 B URL HTTP/1.1 rtl1h6mfc7zr.s4.adsco.re/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: rtl1h6mfc7zr.s4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://datawav.club
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 17 Nov 2022 22:53:45 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:38:01 GMT
Connection: close
ETag: "5b5f30d9-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 930bcde666056ff37fa1d2b80ca75251
b4cabcd0d20f77c0120dea6135a57a9f8b3b706e
01244b4d81fe5fc3b0095bb05efa3ffbee919a1b2c5dd0d3d65c04bacc85198f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01244B4D81FE5FC3B0095BB05EFA3FFBEE919A1B2C5DD0D3D65C04BACC85198F"
Last-Modified: Wed, 16 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10343
Expires: Fri, 18 Nov 2022 01:46:08 GMT
Date: Thu, 17 Nov 2022 22:53:45 GMT
Connection: keep-alive
d.pssy.xyz/d/?resource=bundler&nada=1&widgets=1499332:4,1499333:2,1243820:1,1499368:1&isct=1668241335&rfrr=https://datawav.club/manga-giantess-pissing/&iscs=YTJhMzgxZjgyMWNkMDI1ZTI4YzViMWZhNjQ1YjI5ZTQzYzJhZTcwYTE5Njk1YTM5ZDUzMmRmYmY1YzQyNTQyZnwwfDV8MTkyLjE4Ny4xMjcuNjZ8TW96aWxsYS81LjAgKExpbnV4OyBBbmRyb2lkIDEwOyBSTVgyMDMwKSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvOTMuMC40NTc3LjgyIE1vYmlsZSBTYWZhcmkvNTM3LjM2fDI4ODE4NXwxNjY4MjQxMzM1fGliYUhSMGNITTZMeTlrWVhSaGQyRjJMbU5zZFdJdmJXRnVaMkV0WjJsaGJuUmxjM010Y0dsemMybHVaeTg9&width=620&reqc=1&ver=6dc6ced4e90c94d0.1668241335069&page=aHR0cHM6Ly9kYXRhd2F2LmNsdWIvYmlnLWJyZWFzdGVkLWRvbWluYXRyaXgv
200 OK 7.1 kB URL HTTP/1.1 d.pssy.xyz/d/?resource=bundler&nada=1&widgets=1499332:4,1499333:2,1243820:1,1499368:1&isct=1668241335&rfrr=https://datawav.club/manga-giantess-pissing/&iscs=YTJhMzgxZjgyMWNkMDI1ZTI4YzViMWZhNjQ1YjI5ZTQzYzJhZTcwYTE5Njk1YTM5ZDUzMmRmYmY1YzQyNTQyZnwwfDV8MTkyLjE4Ny4xMjcuNjZ8TW96aWxsYS81LjAgKExpbnV4OyBBbmRyb2lkIDEwOyBSTVgyMDMwKSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvOTMuMC40NTc3LjgyIE1vYmlsZSBTYWZhcmkvNTM3LjM2fDI4ODE4NXwxNjY4MjQxMzM1fGliYUhSMGNITTZMeTlrWVhSaGQyRjJMbU5zZFdJdmJXRnVaMkV0WjJsaGJuUmxjM010Y0dsemMybHVaeTg9&width=620&reqc=1&ver=6dc6ced4e90c94d0.1668241335069&page=aHR0cHM6Ly9kYXRhd2F2LmNsdWIvYmlnLWJyZWFzdGVkLWRvbWluYXRyaXgv
IP
File type JSON data\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (31188), with no line terminators
Hash ab93010eb12b5a765bd7c8c534808923
0361f5637c6003b32bda8b4059ccb1bcd5877731
96d53c6b8ba073c2b03886cf7bfd132090c429f44aa7e2af881390dbbd8ab6ec
Analyzer Verdict Alert quad9 Sinkholed
GET /d/?resource=bundler&nada=1&widgets=1499332:4,1499333:2,1243820:1,1499368:1&isct=1668241335&rfrr=https://datawav.club/manga-giantess-pissing/&iscs=YTJhMzgxZjgyMWNkMDI1ZTI4YzViMWZhNjQ1YjI5ZTQzYzJhZTcwYTE5Njk1YTM5ZDUzMmRmYmY1YzQyNTQyZnwwfDV8MTkyLjE4Ny4xMjcuNjZ8TW96aWxsYS81LjAgKExpbnV4OyBBbmRyb2lkIDEwOyBSTVgyMDMwKSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvOTMuMC40NTc3LjgyIE1vYmlsZSBTYWZhcmkvNTM3LjM2fDI4ODE4NXwxNjY4MjQxMzM1fGliYUhSMGNITTZMeTlrWVhSaGQyRjJMbU5zZFdJdmJXRnVaMkV0WjJsaGJuUmxjM010Y0dsemMybHVaeTg9&width=620&reqc=1&ver=6dc6ced4e90c94d0.1668241335069&page=aHR0cHM6Ly9kYXRhd2F2LmNsdWIvYmlnLWJyZWFzdGVkLWRvbWluYXRyaXgv HTTP/1.1
Host: d.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://datawav.club
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Nov 2022 22:53:46 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
ETag: W/"79d7-kSwK8QRzDvGLJhUOVo775d0zZy0"
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://datawav.club
Content-Encoding: gzip
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 0589ca18d30113e81b3372191642c088
288a5e417625dd6bc7cd374b50e38730bb804eb3
758dbf45ba8f8792939d82865856ae649a8a27769d7adbe8381c8d2e198d425e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "758DBF45BA8F8792939D82865856AE649A8A27769D7ADBE8381C8D2E198D425E"
Last-Modified: Tue, 15 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12811
Expires: Fri, 18 Nov 2022 02:27:17 GMT
Date: Thu, 17 Nov 2022 22:53:46 GMT
Connection: keep-alive
s.pssy.xyz/prplugs/0/1207188/240x180.jpg
200 OK 17 kB URL HTTP/2 s.pssy.xyz/prplugs/0/1207188/240x180.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 240x180, components 3\012- data
Hash a1aa410843a28e7914a130617de3426e
5c4af4c8fc666a29e5b824b9946c3e1ac8fa0df8
75009adc08f8e54aa012cf62ae380a0bcec4af0631c7744bab8566a4d6eea7f1
Analyzer Verdict Alert quad9 Sinkholed
GET /prplugs/0/1207188/240x180.jpg HTTP/1.1
Host: s.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 17 Nov 2022 22:53:46 GMT
content-type: image/jpeg
content-length: 16677
last-modified: Sat, 16 Apr 2022 08:50:24 GMT
etag: "625a8350-4125"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2333
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GhzixJVg0ACwhENsm3EZTU%2BFtV%2F93Jsyot16K7i25VdI0XcQZHZcpONaiXvPElJZF4gOtPYhNgyZjWzQNv3YZfimH5fqzgFqOMLffFcZ54zRw%2FXvygtjxBjDAYQ0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76bc0b5cfb81b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s.pssy.xyz/prplugs/0/1144692/240x180.jpg
200 OK 17 kB URL HTTP/2 s.pssy.xyz/prplugs/0/1144692/240x180.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 240x180, components 3\012- data
Hash 75db6cabdd2ff4c7176e192fc09c51e7
6410b776a15b23b18118b34b1781d98c02941ff7
5e4ad9400ee9a9264b2540cd00c28a8eac4f0404f5bd35d4cfe69ecba73576e8
Analyzer Verdict Alert quad9 Sinkholed
GET /prplugs/0/1144692/240x180.jpg HTTP/1.1
Host: s.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 17 Nov 2022 22:53:46 GMT
content-type: image/jpeg
content-length: 16750
last-modified: Tue, 27 Oct 2020 12:06:57 GMT
etag: "5f980d61-416e"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 372
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MvBxBcgGwavOsHvbIcBqzj1onZlw9lMkRYpUrbDrOCKU4grhfpyyeU8r01gqI%2F1SDg%2BuiiVqL1A%2BuyfH8kyV6PZ%2Bs1Vel6r0hJl9akaSBRW%2BPmoWTRZpMJYLLLwj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76bc0b5cfb84b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s.pssy.xyz/prplugs/0/1148300/240x180.jpg
200 OK 13 kB URL HTTP/2 s.pssy.xyz/prplugs/0/1148300/240x180.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 240x180, components 3\012- data
Hash e84b6a8f5858fb2ac0aa0c61e7aded54
fc178d4b94aa3b28d1b74a398d975f83b3a8e4f9
bfc3536230a9531990d2f266b71144ab67afa544319ca078cff04506a9dca494
Analyzer Verdict Alert quad9 Sinkholed
GET /prplugs/0/1148300/240x180.jpg HTTP/1.1
Host: s.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 17 Nov 2022 22:53:46 GMT
content-type: image/jpeg
content-length: 13392
last-modified: Sat, 12 Dec 2020 20:37:21 GMT
etag: "5fd52a01-3450"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2265
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hqW3Rge7PeukoxyRh1fabK4sAOl2yw48pSpVm2Z32P7C1HwyAoci3ntjSbftHt7Psrh6RSoaAfuT0kHoAq6LE16cW3WE81rfS%2B3rlFKD8JRuGH87Jv0eWUBrkO%2Bm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76bc0b5cfb89b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s.pssy.xyz/prplugs/0/1071736/240x180.jpg
200 OK 17 kB URL HTTP/2 s.pssy.xyz/prplugs/0/1071736/240x180.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 240x180, components 3\012- data
Hash 70c21320bb12fd1ff57f6d65f16dd8e2
2e224afa4c5e13e7ba76292a357184a3fe07c84c
0999407e5dc0abb708375a3b94f45373e938ccd563f7573ea0aae1d5488ad6ff
Analyzer Verdict Alert quad9 Sinkholed
GET /prplugs/0/1071736/240x180.jpg HTTP/1.1
Host: s.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 17 Nov 2022 22:53:46 GMT
content-type: image/jpeg
content-length: 16809
last-modified: Wed, 20 Dec 2017 14:57:51 GMT
etag: "5a3a7a6f-41a9"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 6884
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tCH5OuhRJBqdXT2NGqNDUVY2ZkqeFCOspMHHQX2Ze1LaQDtrhWX8m2RoCf4jsJXXw2wTTfuFpNcn4gLeRsnyTLNm1Q4%2B1C2RA%2FHDfHGlKEyyDPNw6eXu9I6ZBX%2Fz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76bc0b5d0b92b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s.pssy.xyz/prplugs/0/1144990/240x180.jpg
200 OK 12 kB URL HTTP/2 s.pssy.xyz/prplugs/0/1144990/240x180.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 240x180, components 3\012- data
Hash cd9b1d285f3de7933cbd1acdd7a6ff84
9be8c47d387d983d2a6e11c17e6341f2d57eceaa
b6a5bb94b61c863745d921644d1d411cc276f5587efd43807169aa29aeec7700
Analyzer Verdict Alert quad9 Sinkholed
GET /prplugs/0/1144990/240x180.jpg HTTP/1.1
Host: s.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 17 Nov 2022 22:53:46 GMT
content-type: image/jpeg
content-length: 12332
last-modified: Wed, 04 Nov 2020 14:25:09 GMT
etag: "5fa2b9c5-302c"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 5475
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cmi%2FtPhBa0AWn4O%2FMzGZGgfyRlP2nnO8oVUewYO8sfn6Hki1FBNNCwBcR8qBKmPqQ64o9%2BCRbHxD3zW170gkYqDNC7RFh7rL3aBtKZoPoxh9OMS0g6%2FX3%2B0LVBFR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76bc0b5d0b9bb4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s.w.org/images/core/emoji/14.0.0/svg/1f514.svg
200 OK 314 B URL HTTP/2 s.w.org/images/core/emoji/14.0.0/svg/1f514.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (314), with no line terminators
Hash 6201ff6add4821014e02cfc1bc82fc95
afd344621ef88b39f6e7013b7ce4765d67892315
5f70fb8150f0a1f184b40f86d012db040d229056b9b0d8c681f08987cb124e5f
GET /images/core/emoji/14.0.0/svg/1f514.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:46 GMT
content-type: image/svg+xml
content-length: 314
last-modified: Tue, 12 Apr 2022 03:50:38 GMT
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn 1
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 0589ca18d30113e81b3372191642c088
288a5e417625dd6bc7cd374b50e38730bb804eb3
758dbf45ba8f8792939d82865856ae649a8a27769d7adbe8381c8d2e198d425e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "758DBF45BA8F8792939D82865856AE649A8A27769D7ADBE8381C8D2E198D425E"
Last-Modified: Tue, 15 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12811
Expires: Fri, 18 Nov 2022 02:27:17 GMT
Date: Thu, 17 Nov 2022 22:53:46 GMT
Connection: keep-alive
d.pssy.xyz/d/n/iframe?domain=datawav.club&id=1499368
200 OK 1.7 kB URL HTTP/1.1 d.pssy.xyz/d/n/iframe?domain=datawav.club&id=1499368
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 1a14b3685888a1f5b24d1110e6def993
80d6dadf690a536abc2b6d6bad8f41bf72d44a1b
0692061ebc025ab05e3ca738ca97b166636c6b2e3d3e25a83fc6a28967f6ba49
Analyzer Verdict Alert quad9 Sinkholed
GET /d/n/iframe?domain=datawav.club&id=1499368 HTTP/1.1
Host: d.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Nov 2022 22:53:46 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
ETag: W/"147f-VB2ygA8yDFZ9sZcl65XuNxRxj5I"
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
datawav.club/uomdacwoqbvxwxj.php?sw
200 OK 11 kB URL HTTP/1.1 datawav.club/uomdacwoqbvxwxj.php?sw
IP
File type ASCII text, with very long lines (10335)
Hash 14abae8a24facdcc57f6490cec8ee3f6
1efbf03ac34f9027ab7acf347027ea6db52ce2d9
4716ecf44bceb9580e15bf0a8452a79a7b4adb11d21611c6a6711b0e5c685e1d
GET /uomdacwoqbvxwxj.php?sw HTTP/1.1
Host: datawav.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/big-breasted-dominatrix/
Cookie: a=rCI6fGJKdqbWVfJAzTQzhfNyqXeqK4XP; HstCfa3916601=1668725623442; HstCla3916601=1668725623442; HstCmu3916601=1668725623442; HstPn3916601=1; HstPt3916601=1; HstCnv3916601=1; HstCns3916601=1; token_QpUJAAAAAAAAGu98Hdz1l_lcSZ2rY60Ajjk9U1c=BAYAY3a7eQFjdrt5gAGBAsAAIO1p9heDYKiTFB8A2pOrT2piLJLdDRjAojJcgIUayqIIwQBIMEYCIQC6Pjvi17f_wSjfjhOApeS0ATzPuLGjfq64lDPMIx7stgIhAMeCTgFd_Nyp6nrlk9tcjgY2XRAtCqNbpgmXHO7EODDx; _popprepop=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Nov 2022 22:53:46 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
X-Cache-Status: HIT
d.pssy.xyz/t.php
200 OK 20 B IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer Verdict Alert quad9 Sinkholed
GET /t.php HTTP/1.1
Host: d.pssy.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 17 Nov 2022 22:53:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: guid=b2cca36f-53fe-4475-9f4b-5862c00d7865; expires=Fri, 17-Nov-2023 22:53:46 GMT; Max-Age=31536000; path=/; domain=pssy.xyz; secure; SameSite=None
Access-Control-Allow-Origin: *
Content-Encoding: gzip
gnditiklas.com/t/9/fret/meow4/1830123/brt.js
200 OK 0 B URL HTTP/2 gnditiklas.com/t/9/fret/meow4/1830123/brt.js
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /t/9/fret/meow4/1830123/brt.js HTTP/1.1
Host: gnditiklas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:53:43 GMT
content-type: application/javascript
last-modified: Tue, 15 Nov 2022 12:20:41 GMT
vary: Accept-Encoding
etag: W/"63738419-10f52"
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
c.adsco.re/
200 OK 0 B IP
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 17 Nov 2022 22:53:44 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Sun, 18 Dec 2022 22:53:44 GMT
etag: W/"11BCsVfRLqCHC9ZZvH4GUw=="
cf-cache-status: HIT
age: 2432720
vary: Accept-Encoding
server: cloudflare
cf-ray: 76bc0b502e6cb4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
js.juicyads.com/jp.php?c=446433y2r256r2x2t2f46384&u=https%3A%2F%2Ftorrsexvid.com%2Fgallery.php%23datawav
200 OK 0 B URL HTTP/2 js.juicyads.com/jp.php?c=446433y2r256r2x2t2f46384&u=https%3A%2F%2Ftorrsexvid.com%2Fgallery.php%23datawav
IP
GET /jp.php?c=446433y2r256r2x2t2f46384&u=https%3A%2F%2Ftorrsexvid.com%2Fgallery.php%23datawav HTTP/1.1
Host: js.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
cache-control: max-age=900
date: Thu, 17 Nov 2022 22:42:07 GMT
expires: Thu, 17 Nov 2022 22:57:07 GMT
pragma: cache
server: nginx
x-cache: Hit from cloudfront
via: 1.1 07f0ece9786fde9fe26b41b49e10daca.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR61-P4
x-amz-cf-id: 1TEn2xjU5ihyMWJ0ApEmCCeQ1lPdx6XkDGQnnkVffd4VhQA4xBq4sQ==
age: 696
X-Firefox-Spdy: h2
www.blockadsnot.com/native.history.min.js
200 OK 0 B URL HTTP/2 www.blockadsnot.com/native.history.min.js
IP
ASN #60068 Datacamp Limited
GET /native.history.min.js HTTP/1.1
Host: www.blockadsnot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://datawav.club
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 17 Nov 2022 22:53:43 GMT
content-type: application/x-javascript
alt-svc: quic="185.76.9.20:443"; ma=2592000; v="44,43,39"
expires: Fri, 18 Nov 2022 20:59:06 GMT
access-control-allow-origin: *
link: <https://blockadsnot.com/>;rel=preconnect,<https://c.adsco.re/>;rel=preconnect,<https://adsco.re/>;rel=preconnect
cache-control: public, max-age=604800
x-accel-expires: @1668805146
server: CDN77-Turbo
x-77-nzt: AblMCRQbFO3/3QMIAA
x-77-nzt-ray: af58563063b079cd77bb7663bf8c7a3a
x-cache: HIT
x-age: 525277
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
wankgod.com/links-en.php?&jl=9
200 OK 0 B URL HTTP/2 wankgod.com/links-en.php?&jl=9
IP
GET /links-en.php?&jl=9 HTTP/1.1
Host: wankgod.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://datawav.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 17 Nov 2022 22:53:44 GMT
content-type: application/javascript
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2pfxVp%2FC8JPug7dVJVvJWJTPfD05FqYlJLU5jVjOnTfNan5HFncnVqcL3KSpbvVr2M3ecoqODchVI8%2B3xUYDD92HZ5OUdn14OqKX9UH6BcXGXgZ8rj6lX1AcQO6BtA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76bc0b4e09cf1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
173.208.199.194
46.105.201.240
185.76.9.21
93.184.220.29
62.122.171.6
185.200.116.90
23.36.76.226
104.17.167.186
192.99.0.58