504 B IP
ASN #20940 Akamai International B.V.
Hash 9fc6673328a72199efee32208e052486
e3cd507761b95ae04da178d9b0da347fcaa5fce6
133266844822ea13f6d0ffc2eda97a79e99cea9ec4defec2812cf4a86751283a
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "133266844822EA13F6D0FFC2EDA97A79E99CEA9EC4DEFEC2812CF4A86751283A"
Last-Modified: Mon, 15 Jul 2024 20:21:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7319
Expires: Wed, 17 Jul 2024 16:45:18 GMT
Date: Wed, 17 Jul 2024 14:43:19 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 0ba28ae3ca920c46edf9c7a1f79db3ca
b96f7bd71a6b1f9e08b5a0179c66553bf42875d2
e4acaf4113d4cda75edbbae5d28e17dffb959489cd6912b854c9e87a3ab50fd2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E4ACAF4113D4CDA75EDBBAE5D28E17DFFB959489CD6912B854C9E87A3AB50FD2"
Last-Modified: Mon, 15 Jul 2024 20:21:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9617
Expires: Wed, 17 Jul 2024 17:23:36 GMT
Date: Wed, 17 Jul 2024 14:43:19 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash c827d32609521c1e56829aac4640ab87
f6721b2c6abc469be2b70d165a58c75d5637408d
a951edc9fce6d26583509aba1a0d759172986da854406dc2041f25dca4eb6798
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "A951EDC9FCE6D26583509ABA1A0D759172986DA854406DC2041F25DCA4EB6798"
Last-Modified: Mon, 15 Jul 2024 19:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9397
Expires: Wed, 17 Jul 2024 17:19:56 GMT
Date: Wed, 17 Jul 2024 14:43:19 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash d69acaa73161ea261cea420c9548c854
1f7cab04c4264ca503bb3e2d8f1d838c226f35c2
e4e3975a941c93fda56279b3918d81448b74cd06d2a2bd0280dbcf8e58712c1d
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E4E3975A941C93FDA56279B3918D81448B74CD06D2A2BD0280DBCF8E58712C1D"
Last-Modified: Mon, 15 Jul 2024 19:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8035
Expires: Wed, 17 Jul 2024 16:57:15 GMT
Date: Wed, 17 Jul 2024 14:43:20 GMT
Connection: keep-alive
GET fixedjs.jtube.top/AV4.us.jpg
200 OK 8.7 kB URL GET HTTP/3 fixedjs.jtube.top/AV4.us.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjtube.top
FingerprintB8:AD:B0:0A:D2:ED:70:84:59:D1:0C:41:87:8A:ED:D6:6A:97:15:85
ValidityWed, 10 Jul 2024 12:54:21 GMT - Tue, 08 Oct 2024 12:54:20 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 307x82, components 3
Hash edfe007a6e5b3d268b2528f564b60b43
1644c8ef97c871079e07e5079d613af5cb94052f
bf5bb657f5e788af0c02b9b437d3f15bec91e27175e5a654e3d431fb6d063390
GET /AV4.us.jpg HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:21 GMT
content-type: image/jpeg
content-length: 8741
etag: "2225-614075c7eff6b"
access-control-allow-origin: *
access-control-allow-headers: Cake
cache-control: public, max-age=360000
x-proxy-cache-re-la: MISS
xkey-re-re-la: fixedjs./AV4.us.jpg-A-fixedjs.jtube.top-fixedjs.jtube.top-myzone---yes
x-proxy-cache-ds-la: HIT
xkey-ds-la: fixedjs./AV4.us.jpg-A-fixedjs.jtube.top--my_zone
cf-cache-status: HIT
age: 338273
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6SZrsX3juupbUSzCc%2BXrt9ahbfygxBPY3u5hxgzr2oVDwrpEXFej7g3SnVSp6gaKWp2ZNIVNOC%2F6%2FnKjVDSgpy9aOptZmNvgutc%2F6W7MM3SRL9q8CIgPuSjeRCZhA4n4N0HjBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b00f97d72b512-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash a0caf115fac6ad0b62318faec84fd72d
68cb8add37acf565fb6bba81ca3cd2c7dd7332dc
e16c601165c1d087a94156b6f9d5895944a1a5e703d048fb008be974070fdde5
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E16C601165C1D087A94156B6F9D5895944A1A5E703D048FB008BE974070FDDE5"
Last-Modified: Mon, 15 Jul 2024 20:14:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8522
Expires: Wed, 17 Jul 2024 17:05:23 GMT
Date: Wed, 17 Jul 2024 14:43:21 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 24c83d2f348779cbefbb6c6bd4b8c2a8
4373c3ca7bee06c8456f6997929b0af5e349283d
f957efbbe90dee51487d910c6039fa2ac841192fd9f67efb69358b536f87b7d3
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F957EFBBE90DEE51487D910C6039FA2AC841192FD9F67EFB69358B536F87B7D3"
Last-Modified: Mon, 15 Jul 2024 19:17:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10290
Expires: Wed, 17 Jul 2024 17:34:52 GMT
Date: Wed, 17 Jul 2024 14:43:22 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 24c83d2f348779cbefbb6c6bd4b8c2a8
4373c3ca7bee06c8456f6997929b0af5e349283d
f957efbbe90dee51487d910c6039fa2ac841192fd9f67efb69358b536f87b7d3
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F957EFBBE90DEE51487D910C6039FA2AC841192FD9F67EFB69358B536F87B7D3"
Last-Modified: Mon, 15 Jul 2024 19:17:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10290
Expires: Wed, 17 Jul 2024 17:34:52 GMT
Date: Wed, 17 Jul 2024 14:43:22 GMT
Connection: keep-alive
GET jsjs.4jpg.top/index.php?js=av4&advertisement&
42 kB URL GET jsjs.4jpg.top/index.php?js=av4&advertisement&
IP
Certificate IssuerGoogle Trust Services
Subject4jpg.top
Fingerprint4B:58:1B:2D:6E:5C:08:9C:6A:B9:EC:DD:5E:F7:DE:5A:0A:7C:75:B1
ValidityWed, 03 Jul 2024 17:20:57 GMT - Tue, 01 Oct 2024 17:20:56 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (6439), with CRLF line terminators
Hash 08ee1202d794e003df3416ccf28a76a7
9532b6aa1b8108fb6e163fa30bf74805187940ab
0c823075a8ac6a3293f54bdcc19e85b579fa4bb04afd16d6c7d915f8d41e5f79
GET /index.php?js=av4&advertisement& HTTP/1.1
Host: jsjs.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:22 GMT
content-type: text/html; charset=UTF-8
imghost: 17296161209-h-jsjs4jpgtopmh--RU-rm16215822256/index.php?js=av4&advertisement&
56nloadrate: 4.43125
cache-control: public, max-age=14400, s-max-age=1800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 144
last-modified: Wed, 17 Jul 2024 14:40:58 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oQw5mncFBy3%2FR2nksayMQKSFF0nEHK7uZGHgUysxkazHS0UgZ2hF67fYTrB1h4A6m8aQsfx8%2Bq1BoXUpGMGrkC2fMMtG0gAQb5Cm1ORFEWBotyrKc7wUv1ZNog2yx4C1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b00ffee4856af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
504 B IP
ASN #20940 Akamai International B.V.
Hash 24c83d2f348779cbefbb6c6bd4b8c2a8
4373c3ca7bee06c8456f6997929b0af5e349283d
f957efbbe90dee51487d910c6039fa2ac841192fd9f67efb69358b536f87b7d3
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F957EFBBE90DEE51487D910C6039FA2AC841192FD9F67EFB69358B536F87B7D3"
Last-Modified: Mon, 15 Jul 2024 19:17:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10331
Expires: Wed, 17 Jul 2024 17:35:33 GMT
Date: Wed, 17 Jul 2024 14:43:22 GMT
Connection: keep-alive
6.1 kB URL af6149c8d9.9d2cca15e4.com/8a81db84bb6abc33d7bf44fb11fd3c7b/23782?version_name=c&domain=en.av4us.top
IP
ASN #39572 DataWeb Global Group B.V.
Hash e55d1d9e59b9e797ef695fa076244d3b
6f287b7c3b8e16eef6462d6380ffe546a9771c2c
ec725f292a39b74bc6db4be09da57a6411c6a316d9fce71fa4f98d72f91b7102
GET /8a81db84bb6abc33d7bf44fb11fd3c7b/23782?version_name=c&domain=en.av4us.top HTTP/1.1
Host: af6149c8d9.9d2cca15e4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.av4us.top
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:21 GMT
content-type: application/json
server: nginx/1.18.0
cache-control: max-age=300
expires: Wed, 17 Jul 2024 14:48:21 GMT
x-proxy-cache: MISS
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js
200 OK 4.0 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js
IP
Requested by https://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/3
Certificate IssuerLet's Encrypt
Subjectcdnjs.cloudflare.com
Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E
ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT
File type JavaScript source, ASCII text, with very long lines (10613)
Hash ea77f824de2ef57acb12e7cb6596365e
10bad0dbdf30a0471c2c786b349daeb1dd19180e
2b19d92ce83bf3b498f73103ba1240f09c84798b1f92aedf1491ccf0aa6f5e4c
GET /ajax/libs/nosleep/0.11.0/NoSleep.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 3953
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5ed16b69-29bf"
last-modified: Fri, 29 May 2020 20:07:05 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 991664
expires: Mon, 07 Jul 2025 14:43:22 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PYwmO6IiaABuXjTK9MqUuREQHc7DF%2FDcY3Qi77kvuBMzbg5w4rZ77YFAt9R4xWJUL7Rw3JbIMQXCBkB0dCOHxY7BWW9bcbHtsFoPgJrWHNnC3sj1jwOlxAHpql%2ByKB95Bauoz6iN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8a4b0101dbaa56c0-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
472 B IP
Hash 6020b7f137c07aed00cb2912f815a125
6c3f7a09fabfa64e7de72899c01fa8f5d1434451
9e3ba389aa2faeeb4667ebc83108f6375960ed86966d82f4a526821bd0442769
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 17 Jul 2024 14:43:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET fixedjs.jtube.top/?vidjs=51qxez
17 kB URL GET fixedjs.jtube.top/?vidjs=51qxez
IP
Certificate IssuerGoogle Trust Services
Subjectjtube.top
FingerprintB8:AD:B0:0A:D2:ED:70:84:59:D1:0C:41:87:8A:ED:D6:6A:97:15:85
ValidityWed, 10 Jul 2024 12:54:21 GMT - Tue, 08 Oct 2024 12:54:20 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (752), with CRLF line terminators
Hash 064a0e13d818e729180f189a921b578c
9aa08fbffcd72b3523f867a4c28c1a448b7bce5b
d7610f383fd949281b94dc52843fefc865f716bff041dbd5ead9af614e7b904d
GET /?vidjs=51qxez HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:22 GMT
content-type: text/html; charset=UTF-8
pdo-line12: host-fixedjs.jtube.top127.0.0.1-myhost-fixedjs.jtube.top127.0.0.1/?vidjs=51qxez
phost:
pdo-line55: host-fixedjs.jtube.top127.0.0.1-myhost-fixedjs.jtube.top127.0.0.1/?vidjs=51qxez
cache-control: public, max-age=172800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-re-la: EXPIRED
xkey-re-re-la: fixedjs./?vidjs=51qxez-A-fixedjs.jtube.top-fixedjs.jtube.top-myzone---yes
x-proxy-cache-ds-la: HIT
xkey-ds-la: fixedjs./?vidjs=51qxez-A-fixedjs.jtube.top--my_zone
cf-cache-status: HIT
age: 109326
last-modified: Tue, 16 Jul 2024 08:21:16 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2GnX%2FJY96EwR8hgorDOAaT%2BW5%2FhUrxoqgCk6JI3w2LC0lvWQ4bVSxL18%2FPHyPjtASuwXtt8vV6luyaI35ddYUue8hvMAye4LblatLwP0fZ1mgAxIUpcM3txGwvms1JhFI3SReg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b01018e831c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
200 OK 30 kB URL GET HTTP/3 ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP
Requested by https://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/3
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint8F:1C:80:D7:A7:FA:04:F3:EE:EF:70:FD:56:35:32:FD:55:AB:63:5F
ValidityMon, 24 Jun 2024 07:40:53 GMT - Mon, 16 Sep 2024 07:40:52 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Jul 2024 14:24:32 GMT
expires: Wed, 16 Jul 2025 14:24:32 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 87530
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=UA-620120-3
200 OK 72 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-620120-3
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
FingerprintB3:23:88:EF:34:69:5A:0C:81:CE:02:E2:E3:19:FE:95:71:75:A1:14
ValidityMon, 24 Jun 2024 06:35:05 GMT - Mon, 16 Sep 2024 06:35:04 GMT
File type JavaScript source, ASCII text, with very long lines (1826)
Hash f17e5766647556ba4553eed80f34ecaa
bae3033981531d51240a5576961741ffae02d779
102cdc6621f329b98fbd0932cee7f6e04444281299fb27fe87e70a9aef829278
GET /gtag/js?id=UA-620120-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Jul 2024 14:43:22 GMT
expires: Wed, 17 Jul 2024 14:43:22 GMT
cache-control: private, max-age=900
last-modified: Wed, 17 Jul 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72119
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js
200 OK 67 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type JavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (563)
Hash 27c704e18b32d5899262c6f26f5a4ea2
b822daeba0851570d2aa18b44c5ef01a7a88d15d
8592a2eacbe6c7382dff683742c0796af818cbf9b2805bad601a0feb532b6c5a
GET /npm/yandex-metrica-watch/watch.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.331.0
x-jsd-version-type: version
etag: W/"2a74c-uCLa66CFFXDSqhi0TF7wGnqI0V0"
content-encoding: br
accept-ranges: bytes
date: Wed, 17 Jul 2024 14:43:22 GMT
age: 25134
x-served-by: cache-fra-eddf8230153-FRA, cache-hel1410028-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 66853
X-Firefox-Spdy: h2
472 B IP
Hash 6020b7f137c07aed00cb2912f815a125
6c3f7a09fabfa64e7de72899c01fa8f5d1434451
9e3ba389aa2faeeb4667ebc83108f6375960ed86966d82f4a526821bd0442769
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 17 Jul 2024 14:43:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
471 B IP
Hash 65c966c20a252778c3ca387d069e3545
db7917f65537cb57430b6164d259928aa3f214d5
5cf69637bd5fc7e50be850a48ba99fa92af4fa2b31f638bc996cdbd8127218a2
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 17 Jul 2024 14:43:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET cdn.jsdelivr.net/hls.js/latest/hls.min.js
200 OK 60 kB URL GET HTTP/2 cdn.jsdelivr.net/hls.js/latest/hls.min.js
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type JavaScript source, ASCII text, with very long lines (31978)
Hash b55a12f998779f639f0b0dd6cc0f3be1
742ac86d0ce4833c4ebbfba944f84bd6021cd342
2c5c9f73e58c3fac08577552188e1cafba4d972e0a88d25f913915b9ac082a81
GET /hls.js/latest/hls.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
etag: W/"36a16-dCrIbQzkgzxOu/upRPhL1gIc00I"
content-encoding: br
accept-ranges: bytes
date: Wed, 17 Jul 2024 14:43:22 GMT
age: 3571709
x-served-by: cache-fra-etou8220033-FRA, cache-hel1410028-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 60268
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/videojs-contrib-hls/5.10.1/videojs-contrib-hls.js
200 OK 119 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/videojs-contrib-hls/5.10.1/videojs-contrib-hls.js
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerLet's Encrypt
Subjectcdnjs.cloudflare.com
Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E
ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT
File type JavaScript source, ASCII text, with very long lines (857)
Size 119 kB (118643 bytes)
Hash a826820d52c716fb653dfe3455ec3f11
f7f55cb9f41cfa8d367bc7b3d331f296c27e8952
deaf7b5fbf02ae8d9767f948863c57a016d040ea3a6c944ca28396382942320e
GET /ajax/libs/videojs-contrib-hls/5.10.1/videojs-contrib-hls.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 118643
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb04020-a59b4"
last-modified: Mon, 04 May 2020 16:17:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 575096
expires: Mon, 07 Jul 2025 14:43:22 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f%2FreiRvdVgHMU83xbyyfe9ndFrYjM7EimFJvuyg12iooFHST7uRgVvnoO4tp4hXVeXw8EOSUB1%2Fblo4qIWahYbh4EFslyn9PhQeDIC0hxD7DzF1zMHHjbq8vENaTBAsE21Ke4jym"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8a4b010388941c0a-OSL
alt-svc: h3=":443"; ma=86400
GET en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
200 OK 14 kB URL User Request GET HTTP/3 en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
IP
Certificate IssuerGoogle Trust Services
Subjectav4us.top
Fingerprint1A:3B:CB:C1:C0:2F:58:3D:17:56:46:58:8D:93:E6:1F:22:F4:BA:B2
ValidityThu, 04 Jul 2024 10:28:38 GMT - Wed, 02 Oct 2024 10:28:37 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (3193), with CRLF line terminators
Hash 0c26a56a0cc7fd732cb8cdf48f4f9347
6a195e1a799fe01a2ddee738a7273e195393b5be
f0fc36e9b923158e481e32ba545c4694695b40e20fd577e6cd4b7402f17d7c33
GET /v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072 HTTP/1.1
Host: en.av4us.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/v/s:/savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Cookie: cnt=0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:22 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-en.av4us.top127.0.0.1-myhost-en.av4us.top127.0.0.1/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
phost: en.av4us.top
pdojs-line356: notjp-nojp-myhost-en.av4us.top-filteron-
line1432: notjp-nojp-myhost-en.av4us.top-filteron-/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
pdo115: feedvid-, cachefileb-cacpdo4/3e/f4/10, lfm-4-6, lmd-6, lud-7, xfvlen-6844, fsize-62999, played-
pdophp-line424: -; cachetime- 3185395744.1611; ctime- 20240717234315
pdoline1549: method-1: ik-系统|||提示ik====系统提示: vidlang-cn67
pdoline1646: method-1: ik-系统|||提示系统提示: vidlang-cn67
pdoline1647: sarray-0cn
pdoline1710: notjp-nojp: fvkwcnt-67
pdoline1714: notjp-nojp: fvkwcnt-67
pdoline1732: notjp-nojp: mblenik-4: khitTop-15.5: sdeep-: scount-0: xfvcount-67: icnt-31: ikarraycnt-2系统|||提示: yhkey-
pdoline2000: $i-60$load-4.28625
cache-control: public, max-age=163665
genre: genre=
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-re-la: MISS
xkey-re-re-la: en./v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072-A-en.av4us.top-en.av4us.top-myzone---yes
x-proxy-cache-ds-la: MISS
xkey-ds-la: en./v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072-A-en.av4us.top--my_zone
cf-cache-status: MISS
last-modified: Wed, 17 Jul 2024 14:43:21 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uj2EJfV%2FKtjCrzcINEh5H9nTKQHqIpo7%2FOM4Lzle1L0439WmmD2kg12%2F1PffjSVmOxT5G7DFLWFNjcsudqs4M25ZEjqV0qMI3KXRc%2FcgtS7IpNp9CpS5rUkpszjosT4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b00fc09b50b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET cdn.sc.gl/videojs-hotkeys/latest/videojs.hotkeys.min.js
200 OK 1.8 kB URL GET HTTP/3 cdn.sc.gl/videojs-hotkeys/latest/videojs.hotkeys.min.js
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjectsc.gl
FingerprintC0:66:68:E9:6B:7B:49:EA:6A:DE:3A:5D:51:22:B2:28:16:D6:C8:3A
ValiditySun, 23 Jun 2024 08:04:32 GMT - Sat, 21 Sep 2024 08:04:31 GMT
File type JavaScript source, ASCII text, with very long lines (4505)
Hash ad8d3c443b4f0825dbc07561f0c9081e
6c05d5dd6a03c29d6b77570f888649c64f6d7425
de8b150e9593ca5d66475b276a55c3fbef2fc1e387d6db81913b410437f337f6
GET /videojs-hotkeys/latest/videojs.hotkeys.min.js HTTP/1.1
Host: cdn.sc.gl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:22 GMT
content-type: text/javascript
content-length: 1823
last-modified: Sun, 28 Aug 2022 02:39:12 GMT
etag: "1214-5e7440d63f400-gzip"
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
cache-control: public, max-age=7200
cf-cache-status: HIT
age: 5516
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CDFlshcOCnrOj1wTWf7z8qwBcsSY1GxnRiG8ptcjcxaxl61EunSARqSEuSIalf1iHVL8PZ3TjY5BjU17e%2Bw%2F5m7Lao35mYXTHZJV5gIAJaA%2Ff1fOuy1HpE3IeOQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b01049c70b4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET vjs.zencdn.net/7.8.2/video-js.css
200 OK 11 kB URL GET HTTP/2 vjs.zencdn.net/7.8.2/video-js.css
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGlobalSign nv-sa
Subjectvjs.zencdn.net
Fingerprint6B:3F:11:07:D7:05:FD:AF:4D:46:B4:BA:1C:8A:60:70:95:37:35:17
ValidityWed, 06 Mar 2024 21:50:11 GMT - Mon, 07 Apr 2025 21:50:10 GMT
File type Unicode text, UTF-8 text, with very long lines (5844)
Hash 9d2c20f32d2509c50bdcb9239fb9b62e
4af2ba5b59a7239c3efc205e3fa455d538087404
e4444f0ec2ddd0aa024154b22470afa5d065650e9c07cd4593ba3047c1480f1f
GET /7.8.2/video-js.css HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 26 May 2020 21:39:05 GMT
etag: "9d2c20f32d2509c50bdcb9239fb9b62e"
cache-control: public, max-age=31536000
content-type: text/css; charset=utf-8
content-encoding: gzip
date: Wed, 17 Jul 2024 14:43:23 GMT
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 3056
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 10723
X-Firefox-Spdy: h2
GET vjs.zencdn.net/7.8.2/video.js
200 OK 420 kB URL GET HTTP/2 vjs.zencdn.net/7.8.2/video.js
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGlobalSign nv-sa
Subjectvjs.zencdn.net
Fingerprint6B:3F:11:07:D7:05:FD:AF:4D:46:B4:BA:1C:8A:60:70:95:37:35:17
ValidityWed, 06 Mar 2024 21:50:11 GMT - Mon, 07 Apr 2025 21:50:10 GMT
File type JavaScript source, ASCII text, with very long lines (320)
Size 420 kB (419634 bytes)
Hash 52c53a33bb2cd149f293eb14fb22505d
ab93f823ff6c7fe51d78b6efa2daf0a77f8a9114
c8b0876dbf1fe7fff19cc79b46ab00e9c1f980c3a0ad1be123bcfcd41eb9d3e1
GET /7.8.2/video.js HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 26 May 2020 21:39:10 GMT
etag: "52c53a33bb2cd149f293eb14fb22505d"
cache-control: public, max-age=31536000
content-type: application/javascript; charset=utf-8
content-encoding: gzip
date: Wed, 17 Jul 2024 14:43:23 GMT
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 3222
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 419634
X-Firefox-Spdy: h2
GET comments.4jpg.top/comments/embed.js?37
20 kB URL GET comments.4jpg.top/comments/embed.js?37
IP
Requested by https://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/3
Certificate IssuerGoogle Trust Services
Subject4jpg.top
Fingerprint4B:58:1B:2D:6E:5C:08:9C:6A:B9:EC:DD:5E:F7:DE:5A:0A:7C:75:B1
ValidityWed, 03 Jul 2024 17:20:57 GMT - Tue, 01 Oct 2024 17:20:56 GMT
Hash e4414b14b060471c00fd5700621de69f
9cede465d06a6127ac374a8e87e52e25197b364e
93fcfc0d980ccdf3bc9628bfb5b125e72e25339a8e005f8729ff0803a5b20af9
GET /comments/embed.js?37 HTTP/1.1
Host: comments.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Wed, 17 Jul 2024 14:43:22 GMT
content-type: text/html
location: https://av.tub4us.top/1
x-proxy-cache-re-la: HIT
xkey-re-re-la: jcomments./comments/embed.js?37-A-comments.4jpg.top-comments.4jpg.top-myzone---no
x-proxy-cache-g-la: HIT
xkey-g-la: comments.4jpg.top/comments/embed.js?37--comments.4jpg.top--my_zone
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YQmBK8NBDeaOj3APgRqfEiGGG67PWBKJiXIBc8G3JPakOh3zJ8cBd7XqxeEn27nXP6Qp7cox2j3bNNwH4BlosH2i6V1H6PuhrL0sa1aMVM3h3wiFYcqsBjRQQ5%2B0xgAuuaXn8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01015ff156af-OSL
alt-svc: h3=":443"; ma=86400
GET mc.webvisor.org/watch/48140495/1?wmode=7&page-url=https%3A%2F%2Fen.av4us.top%2Fv%2Fs%3A%2F%2Fsavsq.com%2Fv%2F151012%2F1%2F1%2F%3Fysclid%3Dlypyc93xr8885613072&page-ref=https%3A%2F%2Fen.av4us.top%2Fv%2Fs%3A%2Fsavsq.com%2Fv%2F151012%2F1%2F1%2F%3Fysclid%3Dlypyc93xr8885613072&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A5hho8n2ksnb9h8ozg2el7jx76n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1382%3Acn%3A1%3Adp%3A0%3Als%3A479457161515%3Ahid%3A250869365%3Az%3A0%3Ai%3A20240717144322%3Aet%3A1721227403%3Ac%3A1%3Arn%3A2657739%3Arqn%3A1%3Au%3A1721227403936795374%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1116%3Ads%3A0%2C0%2C574%2C1%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1721227401567%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1721227403%3At%3A%E7%B3%BB%E7%BB%9F%E6%8F%90%E7%A4%BA&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%283441412%29fip%281%29ti%281%29&redirnss=1
200 OK 448 B URL GET HTTP/2 mc.webvisor.org/watch/48140495/1?wmode=7&page-url=https%3A%2F%2Fen.av4us.top%2Fv%2Fs%3A%2F%2Fsavsq.com%2Fv%2F151012%2F1%2F1%2F%3Fysclid%3Dlypyc93xr8885613072&page-ref=https%3A%2F%2Fen.av4us.top%2Fv%2Fs%3A%2Fsavsq.com%2Fv%2F151012%2F1%2F1%2F%3Fysclid%3Dlypyc93xr8885613072&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A5hho8n2ksnb9h8ozg2el7jx76n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1382%3Acn%3A1%3Adp%3A0%3Als%3A479457161515%3Ahid%3A250869365%3Az%3A0%3Ai%3A20240717144322%3Aet%3A1721227403%3Ac%3A1%3Arn%3A2657739%3Arqn%3A1%3Au%3A1721227403936795374%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1116%3Ads%3A0%2C0%2C574%2C1%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1721227401567%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1721227403%3At%3A%E7%B3%BB%E7%BB%9F%E6%8F%90%E7%A4%BA&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%283441412%29fip%281%29ti%281%29&redirnss=1
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGlobalSign nv-sa
Subjectmc.webvisor.com
Fingerprint2A:A0:A6:9C:1E:F9:C0:FD:36:75:E2:D3:32:B9:34:8F:EE:3B:81:11
ValidityFri, 19 Apr 2024 21:07:47 GMT - Fri, 11 Oct 2024 20:59:59 GMT
Hash 5c431bd20d6698cdc9f1599d2c0e9dc4
7bb1780e863b2784270f0faffbf942f2e7ae0a84
b28b0839f98308b3898defd1936178d715a0bce33f5696ecff7bdf1c1ec48ff5
GET /watch/48140495/1?wmode=7&page-url=https%3A%2F%2Fen.av4us.top%2Fv%2Fs%3A%2F%2Fsavsq.com%2Fv%2F151012%2F1%2F1%2F%3Fysclid%3Dlypyc93xr8885613072&page-ref=https%3A%2F%2Fen.av4us.top%2Fv%2Fs%3A%2Fsavsq.com%2Fv%2F151012%2F1%2F1%2F%3Fysclid%3Dlypyc93xr8885613072&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A5hho8n2ksnb9h8ozg2el7jx76n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1382%3Acn%3A1%3Adp%3A0%3Als%3A479457161515%3Ahid%3A250869365%3Az%3A0%3Ai%3A20240717144322%3Aet%3A1721227403%3Ac%3A1%3Arn%3A2657739%3Arqn%3A1%3Au%3A1721227403936795374%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1116%3Ads%3A0%2C0%2C574%2C1%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1721227401567%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1721227403%3At%3A%E7%B3%BB%E7%BB%9F%E6%8F%90%E7%A4%BA&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%283441412%29fip%281%29ti%281%29&redirnss=1 HTTP/1.1
Host: mc.webvisor.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.av4us.top
Referer: https://en.av4us.top/
DNT: 1
Connection: keep-alive
Cookie: yabs-sid=1367991491721227403; i=gytMXGzbMqiW9myl/nrsYMOEZXzvVt3r08Hr62ONewqp1rQUgL0YMo/rqluHc3cHVB8HocQxRtoTpmlPngZQVQPqa2E=; yandexuid=5617843831721227403; yuidss=5617843831721227403; ymex=1752763403.yrts.1721227403#1752763403.yrtsi.1721227403
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 448
pragma: no-cache
content-type: application/json; charset=utf-8
access-control-allow-origin: https://en.av4us.top
last-modified: Wed, 17-Jul-2024 14:43:23 GMT
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
date: Wed, 17 Jul 2024 14:43:23 GMT
access-control-allow-credentials: true
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
x-content-type-options: nosniff
expires: Wed, 17-Jul-2024 14:43:23 GMT
X-Firefox-Spdy: h2
GET page.phic4.top/myda.php
200 OK 505 B IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjectphic4.top
Fingerprint89:86:9C:A3:5A:03:33:EC:97:99:22:17:73:24:C6:24:73:EE:2D:EC
ValidityWed, 10 Jul 2024 16:48:17 GMT - Tue, 08 Oct 2024 16:48:16 GMT
Hash 66c6c3e63c32a8b6f61693ca3b7529d4
2c0d0f38d1dd2573497cd38252ae4be8a3a2ae7a
3d6cbc0a67d7897451808e420053d24bafe955a2966e30934c2a51b8507b76fb
GET /myda.php HTTP/1.1
Host: page.phic4.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:23 GMT
content-type: text/html; charset=utf-8
myda: myda185.54.23.193
vary: User-Agent, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1284
last-modified: Wed, 17 Jul 2024 14:21:59 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PK%2FMH3YjRXI8R6Jrz5buickXZ1UCL23E2ool%2FKibMYrQwTUvZvhBPG0GPO7ghFPJ68XcYjrG7xGWMX9dYcyza232TJBOjCHClsss7b6dX9AtjCAlRB59ZyS%2BVOjjMrc3ng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b01080a1856ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?1
200 OK 30 kB URL GET HTTP/3 ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?1
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint8F:1C:80:D7:A7:FA:04:F3:EE:EF:70:FD:56:35:32:FD:55:AB:63:5F
ValidityMon, 24 Jun 2024 07:40:53 GMT - Mon, 16 Sep 2024 07:40:52 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js?1 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Jul 2024 15:10:46 GMT
expires: Thu, 10 Jul 2025 15:10:46 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 603157
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/3
200 OK 24 kB URL GET HTTP/3 css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/3
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subject4jpg.top
Fingerprint4B:58:1B:2D:6E:5C:08:9C:6A:B9:EC:DD:5E:F7:DE:5A:0A:7C:75:B1
ValidityWed, 03 Jul 2024 17:20:57 GMT - Tue, 01 Oct 2024 17:20:56 GMT
File type HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Hash 6e0b9c656735cb481266f646c97a8587
a18cf690817fcd1d467a1ad9eef48808ec7e3a00
c1490382b5b1ec789d46b2654dfa3d4e6b34f1e2d9d7a7a5b49eb3af7784188e
GET /tagjpa.php?noself=1&url=av.av4us.top/tags/3 HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:23 GMT
content-type: text/html; charset=UTF-8
8tagproxuri: /tagjpa.php?noself=1&url=av.av4us.top/tags/3
x-frame-options: ALLOWALL
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=72000
595tagproxuri: /tagjpa.php?noself=1&url=av.av4us.top/tags/3
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 48588
last-modified: Wed, 17 Jul 2024 01:13:35 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xUNeyXCpi54YiycT5ce1V1zn0EikphrgKRb48oVYu7lZ870AMwCkkGItM5QU%2FA1IN0zfAnOr3oa8R6cflhDAHuEEjK%2FI0FeguUpbYjK0BRve%2FCicnfmLC65lmzATQ8I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b0108085256af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
200 OK 30 kB URL GET HTTP/3 ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP
Requested by https://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/3
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint8F:1C:80:D7:A7:FA:04:F3:EE:EF:70:FD:56:35:32:FD:55:AB:63:5F
ValidityMon, 24 Jun 2024 07:40:53 GMT - Mon, 16 Sep 2024 07:40:52 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://css.4jpg.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Jul 2024 14:24:32 GMT
expires: Wed, 16 Jul 2025 14:24:32 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 87532
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET av.av4us.top//fixedjs.jtube.top/AV4.us.jpg
6.3 kB URL GET av.av4us.top//fixedjs.jtube.top/AV4.us.jpg
IP
Requested by https://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/3
Certificate IssuerGoogle Trust Services
Subjectav4us.top
Fingerprint1A:3B:CB:C1:C0:2F:58:3D:17:56:46:58:8D:93:E6:1F:22:F4:BA:B2
ValidityThu, 04 Jul 2024 10:28:38 GMT - Wed, 02 Oct 2024 10:28:37 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1325), with CRLF, LF line terminators
Hash ffee8b4b4c4965405af3348796a4e8a9
255ada547b19c7a3231908471e2ca390e5be525d
8e5c5b1039de18ae49201cb0d3cb58ac89918b400613be205b8478eb722ee3bd
GET //fixedjs.jtube.top/AV4.us.jpg HTTP/1.1
Host: av.av4us.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:23 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-av.tube-dl.top127.0.0.1-myhost-av.tube-dl.top127.0.0.1//fixedjs.jtube.top/AV4.us.jpg
phost: av.tube-dl.top
pdojs-line356: notjp--myhost-av.tube-dl.top-filteron-
line1432: notjp--myhost-av.tube-dl.top-filteron-//fixedjs.jtube.top/AV4.us.jpg
line1435: notjp--myhost-av.tube-dl.top-filteron-
line1732: notjp-//fixedjs.jtube.top/AV4.us.jpg-myhost-av.tube-dl.top-filteron-
cache-control: public, max-age=834304
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-re-la: HIT
xkey-re-re-la: av//fixedjs.jtube.top/AV4.us.jpg-A-av.tube4.top-av.tube4.top-myzone---yes
x-proxy-cache-ds-la: HIT
xkey-ds-la: av.//fixedjs.jtube.top/AV4.us.jpg-A-av.av4us.top--my_zone
cf-cache-status: HIT
age: 778490
last-modified: Mon, 08 Jul 2024 14:28:33 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ja3Ly3ECeZUZ2uYGAtckqMI%2Fq4EWj8JXCy7tHWsdW6mHp5rykWWinbqSzXmOGEXKKR4WeDJWDAzF%2BsM%2BuK0Gxz5Kk29nSxwXS0YcDAnKMXXhnByA9OTIS7%2FOYiVczd0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010a08ed0b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET fixedjs.jtube.top/AV4.us.jpg
200 OK 8.7 kB URL GET HTTP/3 fixedjs.jtube.top/AV4.us.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjtube.top
FingerprintB8:AD:B0:0A:D2:ED:70:84:59:D1:0C:41:87:8A:ED:D6:6A:97:15:85
ValidityWed, 10 Jul 2024 12:54:21 GMT - Tue, 08 Oct 2024 12:54:20 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 307x82, components 3
Hash edfe007a6e5b3d268b2528f564b60b43
1644c8ef97c871079e07e5079d613af5cb94052f
bf5bb657f5e788af0c02b9b437d3f15bec91e27175e5a654e3d431fb6d063390
GET /AV4.us.jpg HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: image/jpeg
content-length: 8741
etag: "2225-614075c7eff6b"
access-control-allow-origin: *
access-control-allow-headers: Cake
cache-control: public, max-age=360000
x-proxy-cache-re-la: MISS
xkey-re-re-la: fixedjs./AV4.us.jpg-A-fixedjs.jtube.top-fixedjs.jtube.top-myzone---yes
x-proxy-cache-ds-la: HIT
xkey-ds-la: fixedjs./AV4.us.jpg-A-fixedjs.jtube.top--my_zone
cf-cache-status: HIT
age: 338276
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oC4qKWDpor%2BGbgq4AL4QvRr2%2F29YrTq5jevp86fG8ITppp7J20JzQuzan32l7jV%2BoIk9qf7YvFVyNtvIvdQC%2FbUdUqFvQiCO2QN%2B8vBjomXhJjMM2Vu5BXUxm88rQC4wRb20AA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b010c7b151c12-OSL
alt-svc: h3=":443"; ma=86400
GET naturismv.com/images/vanessa-s-first-day-at-school-naturist-freedom.jpg
200 OK 37 kB URL GET HTTP/2 naturismv.com/images/vanessa-s-first-day-at-school-naturist-freedom.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectnaturismv.com
FingerprintDC:14:4C:5B:F7:92:15:07:92:B8:64:21:8D:58:61:53:AD:92:53:42
ValidityThu, 11 Jul 2024 08:57:08 GMT - Wed, 09 Oct 2024 08:57:07 GMT
File type JPEG image data, progressive, precision 8, 400x300, components 3
Hash 8839b0762fc03e166bf610c0247e374a
66e94776a3511b3d8948f11aa32426b1b9bc090f
a0d3402337455ff313e456c7f50208d4f33b627f21ef81f403d9d6d25e641c63
GET /images/vanessa-s-first-day-at-school-naturist-freedom.jpg HTTP/1.1
Host: naturismv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: image/jpeg
content-length: 36894
last-modified: Fri, 19 May 2023 12:04:48 GMT
etag: "646765e0-901e"
expires: Tue, 15 Apr 2025 16:09:08 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 8030056
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C9QcGyMgSRpcvYKF9CguTtQElvECK48DrCLVPY2tT0wmis%2Bvr10tCPf0zb7sYBdkCcKfQpo4v2kmE%2FSwI%2FT4rJ5F7Um1CVA3MOd9T5LubLmvBCgON%2BbcEr%2FqaTTzsrII"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b010d0a5b94ed-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET naturismv.com/images/latin-limbo-party-helios-natura-1997.jpg
200 OK 35 kB URL GET HTTP/2 naturismv.com/images/latin-limbo-party-helios-natura-1997.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectnaturismv.com
FingerprintDC:14:4C:5B:F7:92:15:07:92:B8:64:21:8D:58:61:53:AD:92:53:42
ValidityThu, 11 Jul 2024 08:57:08 GMT - Wed, 09 Oct 2024 08:57:07 GMT
File type JPEG image data, progressive, precision 8, 400x300, components 3
Hash edceeabc3952a423658111ccc597d462
861017c426fe4fcd114064fe5d584a17e0277198
986481c4ccf2963f9ae7c30499e39465fe6b3afd3b368f7ebd97e388461616b5
GET /images/latin-limbo-party-helios-natura-1997.jpg HTTP/1.1
Host: naturismv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: image/jpeg
content-length: 34943
last-modified: Fri, 19 May 2023 12:04:50 GMT
etag: "646765e2-887f"
expires: Thu, 17 Apr 2025 02:17:17 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 7907167
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ufYiNHp9qKFj6zkhSieUuNDDx3h5%2BaPxGhpG5CA%2B4CO5fzZq11BrXiE%2B2zvG0rTt%2B1pAde838%2BObCBaaEqDSdiuvZffiTLjapc%2BmSAa3n1WG%2B2Iftu0WfQOa6yEHPh6m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b010d0a6294ed-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET naturismv.com/images/french-birthday-party-part-1-enature-net-russianbare-com.jpg
200 OK 45 kB URL GET HTTP/2 naturismv.com/images/french-birthday-party-part-1-enature-net-russianbare-com.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectnaturismv.com
FingerprintDC:14:4C:5B:F7:92:15:07:92:B8:64:21:8D:58:61:53:AD:92:53:42
ValidityThu, 11 Jul 2024 08:57:08 GMT - Wed, 09 Oct 2024 08:57:07 GMT
File type JPEG image data, progressive, precision 8, 400x300, components 3
Hash 8951e55606850f1c9dd06a4064ccd20a
53c8a46a9925d58d1f1e3476305eb6c5147bbef3
15f92dad414d645de0159d6a9f3250a0ad0d789ab4a3949f76d3ed54cc05dcb2
GET /images/french-birthday-party-part-1-enature-net-russianbare-com.jpg HTTP/1.1
Host: naturismv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: image/jpeg
content-length: 45171
last-modified: Fri, 19 May 2023 12:04:46 GMT
etag: "646765de-b073"
expires: Tue, 15 Apr 2025 15:45:58 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 8031446
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F2OLWwQ6ub8d3CNPsmqOkNlr6Ca3wlplandtweYgJATTE5B4I0DzJTC8%2BtxvtbvGh%2BWSoIR6nxrkPK2h0DbRvGWH5qGCtKSp4PFIkg%2BYt1pRZRIXr7ETpe2s2DoFGEMu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b010d1a6a94ed-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET naturismv.com/images/naked-may-day-in-odessa-enature-net-russianbare-com.jpg
200 OK 32 kB URL GET HTTP/2 naturismv.com/images/naked-may-day-in-odessa-enature-net-russianbare-com.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectnaturismv.com
FingerprintDC:14:4C:5B:F7:92:15:07:92:B8:64:21:8D:58:61:53:AD:92:53:42
ValidityThu, 11 Jul 2024 08:57:08 GMT - Wed, 09 Oct 2024 08:57:07 GMT
File type JPEG image data, progressive, precision 8, 400x300, components 3
Hash c686c7b9a7525fd358cb06c1374eb582
d7d9f9973a625ef36ebfbe5fc3c203323ecc6648
5e52c7ccbb075094cedb3560a31d68b9fdadc4eb761f2e4a885dcef19bb26648
GET /images/naked-may-day-in-odessa-enature-net-russianbare-com.jpg HTTP/1.1
Host: naturismv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: image/jpeg
content-length: 32466
last-modified: Fri, 19 May 2023 12:04:46 GMT
etag: "646765de-7ed2"
expires: Tue, 15 Apr 2025 15:39:32 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 8031832
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9yhnMR172djm5Ixu9mYcWL2QbMArSSFEM75QAx8tRB08NMQL4jSJFclCmGzwFXiMUpUw5GFsInvR2aPCxMLH8srIb6aK4XOjhwYsmHjtGX7uBGcYtdW7o%2Fc6UJ%2BcC6%2Bi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b010d4ac694ed-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET naturismv.com/images/junior-miss-pageant-contest-2001-7.jpg
200 OK 78 kB URL GET HTTP/2 naturismv.com/images/junior-miss-pageant-contest-2001-7.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectnaturismv.com
FingerprintDC:14:4C:5B:F7:92:15:07:92:B8:64:21:8D:58:61:53:AD:92:53:42
ValidityThu, 11 Jul 2024 08:57:08 GMT - Wed, 09 Oct 2024 08:57:07 GMT
File type JPEG image data, progressive, precision 8, 400x300, components 3
Hash 7e2cd3a487428ff19841022cde6030ca
325ca0413da6ca86bd6246e3783adc2f06fa3098
1aedeba4ee6ce68e7bd581adc44ef8522ba3bcb8326dced92e15cd703ce5252c
GET /images/junior-miss-pageant-contest-2001-7.jpg HTTP/1.1
Host: naturismv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: image/jpeg
content-length: 78542
last-modified: Fri, 19 May 2023 12:04:52 GMT
etag: "646765e4-132ce"
expires: Sat, 31 May 2025 11:47:07 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 4071376
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r%2F2TFTlhkcW1jrpyVsWRcZwPbUuQ2AlyijJ2nkwKlf71X0G7Sdmpsll6x5nCAwY96DoJaJGzd0OCoskiQTf5nOSGNdtj0Ltr%2BFSk5lMqTbdktstUesw03UACJECxeo%2Bo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b010d3aa694ed-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET naturismv.com/images/naked-in-the-cabana-eurovid-fkk-1992.jpg
200 OK 37 kB URL GET HTTP/2 naturismv.com/images/naked-in-the-cabana-eurovid-fkk-1992.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectnaturismv.com
FingerprintDC:14:4C:5B:F7:92:15:07:92:B8:64:21:8D:58:61:53:AD:92:53:42
ValidityThu, 11 Jul 2024 08:57:08 GMT - Wed, 09 Oct 2024 08:57:07 GMT
File type JPEG image data, progressive, precision 8, 400x300, components 3
Hash 5f265eea7ef2f0ba413c4da99a9c21c1
40e61e8be6e36e433b08a11bccd787e2777f3b3e
7661c5567dee9de4a35750df797443cf0c4e2f338988eb4e88213fc12d407e0a
GET /images/naked-in-the-cabana-eurovid-fkk-1992.jpg HTTP/1.1
Host: naturismv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: image/jpeg
content-length: 36839
last-modified: Fri, 19 May 2023 12:04:46 GMT
etag: "646765de-8fe7"
expires: Tue, 15 Apr 2025 15:39:32 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 8031832
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HmqBpL8zebmHL7kKkSWc435jBy7Ddc7nAanDldUJj91ru%2FCW0y5v5eSPExH1niOc39nRbMgPamf0mE9HWHEnDoz64jUGO2pzVSb5piHF2rfge%2F5O4ElVk59Kysx8mKnN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b010d8b2c94ed-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET dsx.obmenvsemfiles.net/fo/files_attachments/fa9/54c/fa954cc68c98f1958bb12e6af13a0da0.jpg
200 OK 16 kB URL GET HTTP/2 dsx.obmenvsemfiles.net/fo/files_attachments/fa9/54c/fa954cc68c98f1958bb12e6af13a0da0.jpg
IP
ASN #60781 LeaseWeb Netherlands B.V.
Certificate IssuerLet's Encrypt
Subjectds.obmenvsemfiles.net
FingerprintA5:61:8A:0A:8C:AD:83:95:BE:81:03:61:EB:1D:E0:64:3E:B9:B2:A6
ValidityWed, 10 Jul 2024 20:46:08 GMT - Tue, 08 Oct 2024 20:46:07 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x182, components 3
Hash fa954cc68c98f1958bb12e6af13a0da0
a4969f312def2072c4fe29111b061f49369c8dee
99c26f09c3602d6a0dd18a3aebb4a406faba3d723d96cacc88392da840599559
GET /fo/files_attachments/fa9/54c/fa954cc68c98f1958bb12e6af13a0da0.jpg HTTP/1.1
Host: dsx.obmenvsemfiles.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: image/jpeg
content-length: 16226
last-modified: Thu, 14 Apr 2016 03:13:43 GMT
etag: "570f0ae7-3f62"
accept-ranges: bytes
X-Firefox-Spdy: h2
GET aws-br-pic.kwai.net/kimg/EKzM1y8qmgEKAnMzEg1waG90by1vdmVyc2VhGoQBdXBpYy8yMDI0LzAxLzE1LzA0L0JNakF5TkRBeE1UVXdORE15TWpOZk1UVXdNREF4TlRVek5UQTBNamsyWHpFMU1ERXdOVEEwTWpjNU16TTRObDh5WHpNPV9vZmZuX0JjODhiOTA3ZjJiYjcwMWY4M2FhYmY2NjU4NWZkNzM2Yy53ZWJw.webp
200 OK 8.7 kB URL GET HTTP/2 aws-br-pic.kwai.net/kimg/EKzM1y8qmgEKAnMzEg1waG90by1vdmVyc2VhGoQBdXBpYy8yMDI0LzAxLzE1LzA0L0JNakF5TkRBeE1UVXdORE15TWpOZk1UVXdNREF4TlRVek5UQTBNamsyWHpFMU1ERXdOVEEwTWpjNU16TTRObDh5WHpNPV9vZmZuX0JjODhiOTA3ZjJiYjcwMWY4M2FhYmY2NjU4NWZkNzM2Yy53ZWJw.webp
IP
Certificate IssuerGlobalSign nv-sa
Subject*.kwai.net
Fingerprint7B:C2:DA:BE:BB:36:0A:9E:7B:F5:6B:31:F7:EC:77:1F:1D:42:15:D7
ValidityThu, 26 Oct 2023 00:56:04 GMT - Tue, 26 Nov 2024 00:56:03 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 322x574, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 4f7f9d83af778ecec1f76a15401c485e
87f4dd1d861789a7d57af9b08ad3773a4763af4b
e3ef08d17534601b1bab833896e13f26293613ce67581d01e62ca4faf5b8ebbf
GET /kimg/EKzM1y8qmgEKAnMzEg1waG90by1vdmVyc2VhGoQBdXBpYy8yMDI0LzAxLzE1LzA0L0JNakF5TkRBeE1UVXdORE15TWpOZk1UVXdNREF4TlRVek5UQTBNamsyWHpFMU1ERXdOVEEwTWpjNU16TTRObDh5WHpNPV9vZmZuX0JjODhiOTA3ZjJiYjcwMWY4M2FhYmY2NjU4NWZkNzM2Yy53ZWJw.webp HTTP/1.1
Host: aws-br-pic.kwai.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
content-length: 8682
date: Sat, 08 Jun 2024 06:06:49 GMT
krtid: gw69e259907b454a8bb53574557a6965d4
expires: Sun, 08 Jun 2025 06:06:49 GMT
cache-control: public, max-age=31536000
via: 1.1 bab8148a65b29113f79cf2725076287c.cloudfront.net (CloudFront), 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA50-C1, OSL50-C1
x-amz-cf-id: niS-LagEt5TTJMTi_xsrFdtubwafLtnUitvMSC9rCrxNI4101V5YyQ==
age: 3400595
timing-allow-origin: *
vary: Origin
X-Firefox-Spdy: h2
471 B IP
Hash b812a0c30475f4e250123f61caeee9dd
9a65f451be4f5e60d1a0f5edd30c4e4800ca33fa
f74fe293e554443e2c68102a4b49e3650042ec7c95f0cda6b83039bc61a4a03a
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 17 Jul 2024 14:43:25 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 17 Jul 2024 07:30:30 GMT
Expires: Wed, 24 Jul 2024 07:30:29 GMT
Etag: "9a65f451be4f5e60d1a0f5edd30c4e4800ca33fa"
Cache-Control: max-age=602955,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1230
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8a4b01114f14b50c-OSL
GET javp1.cc/upload/vod/20240218-7/72be3c102269c9dad3869ef4d87f39e1.jpg
404 Not Found 2.3 kB URL GET HTTP/3 javp1.cc/upload/vod/20240218-7/72be3c102269c9dad3869ef4d87f39e1.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 61770fce11a09cf460d45cb507670b0b
a91724b0e57f8426b0e3572cbcb226359ae6501c
1fdb617ec52b6ad2b44ef4da4abca278a8f8b3cb5cbffc7efa9aaf3a0c6eb24a
GET /upload/vod/20240218-7/72be3c102269c9dad3869ef4d87f39e1.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 167
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tF82eXFb8UNWQ4c7w4EwJo0bSXzVsM0LM0om2%2BdaKlmy%2FeRcN%2Bn2lCQQFtjQYLklTbU2H3t3KSQcvmnk%2BQGGCOrfUrkh%2Bs75tGU7vKHhtGfiqxfEgifZ37iFng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010e6ac556c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET javp1.cc/upload/vod/20240219-10/73e76e43f7c75e4edb1b3fea762f419b.jpg
404 Not Found 32 kB URL GET HTTP/2 javp1.cc/upload/vod/20240219-10/73e76e43f7c75e4edb1b3fea762f419b.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 61770fce11a09cf460d45cb507670b0b
a91724b0e57f8426b0e3572cbcb226359ae6501c
1fdb617ec52b6ad2b44ef4da4abca278a8f8b3cb5cbffc7efa9aaf3a0c6eb24a
GET /upload/vod/20240219-10/73e76e43f7c75e4edb1b3fea762f419b.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RrbHe0p6xZqXuzE9PU54%2BWKe%2BB5Th7R52sKs7Q92bjG3YIgHoWt5QQqJmd5aoptPf8Co%2Bz0HFQYf5m01ZlR4RkZzXZIb1ZPsRaC5KPEpwT989PmLzVdPaxRbOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010f2c0f56c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET javp1.cc/upload/vod/20240219-3/500e3fef2e696626fcac39692990831f.jpg
404 Not Found 2.2 kB URL GET HTTP/3 javp1.cc/upload/vod/20240219-3/500e3fef2e696626fcac39692990831f.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 61770fce11a09cf460d45cb507670b0b
a91724b0e57f8426b0e3572cbcb226359ae6501c
1fdb617ec52b6ad2b44ef4da4abca278a8f8b3cb5cbffc7efa9aaf3a0c6eb24a
GET /upload/vod/20240219-3/500e3fef2e696626fcac39692990831f.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F5Zc2ycWrlWABq7cfZKmV0YsReZsE4lf3YZHuJeDC52GORWFtDPI4Q5p6QFYRlN%2F%2FFiQrk%2BdLMScvk9O1MQAc6g7ljGz4Bs5l3ZKnp9SSNgH5r6q3HIncQNn3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010f2c1656c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET javp1.cc/upload/vod/20240221-1/b2f6ce5fb32e1440a6e2b51dfbdba85e.jpg
404 Not Found 2.2 kB URL GET HTTP/2 javp1.cc/upload/vod/20240221-1/b2f6ce5fb32e1440a6e2b51dfbdba85e.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 61770fce11a09cf460d45cb507670b0b
a91724b0e57f8426b0e3572cbcb226359ae6501c
1fdb617ec52b6ad2b44ef4da4abca278a8f8b3cb5cbffc7efa9aaf3a0c6eb24a
GET /upload/vod/20240221-1/b2f6ce5fb32e1440a6e2b51dfbdba85e.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 64
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P5ZrRaB2YjlmGT9buUq%2FWbKUt5%2BeMqToBHIuMmusjoHtrZDDgptEpmAOGVPncls7LRLhZJeNk3YpYEXGmqKE1YEtJEGgF9oRBBmM0K4C1tfhdb9hQOa%2FF63Dyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010f2c1356c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.xvidstub.com/media/thumbs/7/9/7/1/2/54410/54410-1.jpg
200 OK 7.1 kB URL GET HTTP/2 www.xvidstub.com/media/thumbs/7/9/7/1/2/54410/54410-1.jpg
IP
Certificate IssuerLet's Encrypt
Subjectxvidstub.com
Fingerprint3A:7A:19:03:DE:96:11:06:C4:E3:F3:41:B4:3C:6E:F9:8D:20:BA:93
ValiditySun, 02 Jun 2024 00:11:31 GMT - Sat, 31 Aug 2024 00:11:30 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 8x9, segment length 16, comment: "Lavc56.26.100", baseline, precision 8, 270x180, components 3
Hash eea03174c5a49394c5e3ac14f40c5abd
02b532535f6449976bd2c383fcea0e58ffc3a4b9
3d0ac62f2e01ee8fc9e2347140a0b07a417420b9cc2b04a20353c07c8afff7ac
GET /media/thumbs/7/9/7/1/2/54410/54410-1.jpg HTTP/1.1
Host: www.xvidstub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.1
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: image/jpeg
content-length: 7100
last-modified: Sat, 08 Jul 2017 00:31:45 GMT
etag: "596027f1-1bbc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET treeyork.com/450646/450646.jpg
200 OK 9.9 kB URL GET HTTP/2 treeyork.com/450646/450646.jpg
IP
Certificate IssuerLet's Encrypt
Subjecttreeyork.com
FingerprintCC:00:11:0D:1D:13:79:22:71:B4:96:9A:FB:1D:F0:52:6B:1E:C4:5F
ValidityTue, 09 Jul 2024 14:58:23 GMT - Mon, 07 Oct 2024 14:58:22 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 160x120, components 3
Hash 0bd71061c223eb88ef457325aff58c1a
f82023b997e4223c01d7e0f4f434905dd92c7a07
b9d75a43599f1814dcf8090b6ff501021c2bba75770fc85da79d25bab4ad4fb5
GET /450646/450646.jpg HTTP/1.1
Host: treeyork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 9934
cf-bgj: h2pri
etag: "0bd71061c223eb88ef457325aff58c1a"
last-modified: Mon, 15 Jan 2024 04:56:25 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6265
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jRwkWk6cEe99q3eYvfEl%2FNJMzIi6Ga1djnn58cYWMsuyLGHyvCWQsjbLouME7Ab7LnvGw%2Btp10j7psrsuqZjdkXQ%2FovQL0Z4L%2BD%2FDu%2BytynzPopNZ8KRqyRVVwTYdg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b01123d2456b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET treeyork.com/416129/416129.jpg
200 OK 17 kB URL GET HTTP/2 treeyork.com/416129/416129.jpg
IP
Certificate IssuerLet's Encrypt
Subjecttreeyork.com
FingerprintCC:00:11:0D:1D:13:79:22:71:B4:96:9A:FB:1D:F0:52:6B:1E:C4:5F
ValidityTue, 09 Jul 2024 14:58:23 GMT - Mon, 07 Oct 2024 14:58:22 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 160x120, components 3
Hash 204682259df12cd7f9dda216435b9397
5ffb81d389b0ee5a125ea30a7186170e3584b862
e363b48def02378e52d6ef8ed325c79913d76c0db5374d33f80bf8b4fbdd0e8e
GET /416129/416129.jpg HTTP/1.1
Host: treeyork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 16990
cf-bgj: h2pri
etag: "204682259df12cd7f9dda216435b9397"
last-modified: Mon, 15 Jan 2024 03:18:06 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3853
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tZPo%2F7kGsK%2Bwv9m1QiXFQAzVmYokXQlUf2UBe1IlMhQe4pNkyVyM5LGVMqTIKn6lkeW3HdrQEqQZAkp5Hp9TiZo8eN3LEWhRjd%2BMzOBDOZEInzYd2NgIpkcAi1wZmw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b01123d1456b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET treeyork.com/175117/175117.jpg
200 OK 190 kB URL GET HTTP/2 treeyork.com/175117/175117.jpg
IP
Certificate IssuerLet's Encrypt
Subjecttreeyork.com
FingerprintCC:00:11:0D:1D:13:79:22:71:B4:96:9A:FB:1D:F0:52:6B:1E:C4:5F
ValidityTue, 09 Jul 2024 14:58:23 GMT - Mon, 07 Oct 2024 14:58:22 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 960x560, components 3
Size 190 kB (189687 bytes)
Hash ea744cfcefa47050a81418d636f7b693
597c99134551ad03d3f45994bffbf6034b133c3b
bb33b4a97d7b0f4c8372e87cc567f91c784b244006b0e8f8279683f25091ec3e
GET /175117/175117.jpg HTTP/1.1
Host: treeyork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 189687
cf-bgj: h2pri
etag: "ea744cfcefa47050a81418d636f7b693"
last-modified: Sun, 14 Jan 2024 13:27:37 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5374
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PSLWWtKnPTx4u1tqBBLLxsxlJXgbGn1WhM%2BkCfbByQgq701W3Awrpt10wpt9%2B9%2Bu6c1qxw%2FN2FI%2FWwOwdyDB%2B88HJHJ%2FwWEzerwmSQwTBjG0NcsuL2lg55eTOHMw5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b01125d4756b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET treeyork.com/261626/261626.jpg
200 OK 177 kB URL GET HTTP/2 treeyork.com/261626/261626.jpg
IP
Certificate IssuerLet's Encrypt
Subjecttreeyork.com
FingerprintCC:00:11:0D:1D:13:79:22:71:B4:96:9A:FB:1D:F0:52:6B:1E:C4:5F
ValidityTue, 09 Jul 2024 14:58:23 GMT - Mon, 07 Oct 2024 14:58:22 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 960x560, components 3
Size 177 kB (176821 bytes)
Hash 3310703b8b53249edba1360bf3aef833
1f595872064f6339d83b4f0083f3def8f0a61882
7b59d175994c79a57875e4b2552b1cfdb4f8ffbfee7398d803e9889e71be1cbe
GET /261626/261626.jpg HTTP/1.1
Host: treeyork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 176821
cf-bgj: h2pri
etag: "3310703b8b53249edba1360bf3aef833"
last-modified: Sun, 14 Jan 2024 16:10:16 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1194
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tdvyuutfwK%2F4T641SbMZkXoWfetxMQw6EVzbr7nnjNL4neHJ5Kl1kuVDO1FmBA%2F3wLOUPnzjqwWzCiV1lv7b%2FI1poLUTHdTgd23dmyHvExqzW50jfkZVydWlMYE0Rg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b01123d1a56b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET treeyork.com/378079/378079.jpg
200 OK 15 kB URL GET HTTP/2 treeyork.com/378079/378079.jpg
IP
Certificate IssuerLet's Encrypt
Subjecttreeyork.com
FingerprintCC:00:11:0D:1D:13:79:22:71:B4:96:9A:FB:1D:F0:52:6B:1E:C4:5F
ValidityTue, 09 Jul 2024 14:58:23 GMT - Mon, 07 Oct 2024 14:58:22 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 160x120, components 3
Hash 88dfe135822dc6b671d6fb147ab59cb4
f35c20a1846df1c9bced7bfb0bf7db9f630166ec
f0b99ef633648bed7064e87cda76263e38d4a6f1fba628e4d8067d5ca2e97579
GET /378079/378079.jpg HTTP/1.1
Host: treeyork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 15080
cf-bgj: h2pri
etag: "88dfe135822dc6b671d6fb147ab59cb4"
last-modified: Mon, 15 Jan 2024 01:23:07 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3202
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Az6ng%2B4EhcOx%2F9v4hVBM4yeoF56z97F61VCk4INHS8rW69J7fYidtQ6R5UIe%2BRXqDhd6HC%2F1eK0ldPQUgSeYzljaepOHD5Ap8fgT19%2B7NDTGPxj%2FAq3eAPWq1L3kEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b01126d5a56b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET treeyork.com/561722/561722.jpg
200 OK 14 kB URL GET HTTP/2 treeyork.com/561722/561722.jpg
IP
Certificate IssuerLet's Encrypt
Subjecttreeyork.com
FingerprintCC:00:11:0D:1D:13:79:22:71:B4:96:9A:FB:1D:F0:52:6B:1E:C4:5F
ValidityTue, 09 Jul 2024 14:58:23 GMT - Mon, 07 Oct 2024 14:58:22 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 160x120, components 3
Hash eb55b866d5ebeef6e53fe8c4b28c171e
7adf7c5c28faaacaac504868e579c033dcc6f75d
599930ec47b54b67acecdcc7ae1480951619df26183650314a5250f12645776f
GET /561722/561722.jpg HTTP/1.1
Host: treeyork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 13902
cf-bgj: h2pri
etag: "eb55b866d5ebeef6e53fe8c4b28c171e"
last-modified: Mon, 15 Jan 2024 07:56:55 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5901
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jhsIKtk8FqDLMxcQrxilPIk31AqIusjtK5DugP%2BNdunOgg4IAm6ESMWhwz29TEmFv23DfxyYg3Q8aVATXBf09ZnuUe6humVSbU7nLPHs6kqadmLyn3FmJzblWo46sQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b01126d5d56b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET page.phic4.top/myda.php
200 OK 25 kB IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjectphic4.top
Fingerprint89:86:9C:A3:5A:03:33:EC:97:99:22:17:73:24:C6:24:73:EE:2D:EC
ValidityWed, 10 Jul 2024 16:48:17 GMT - Tue, 08 Oct 2024 16:48:16 GMT
Hash 0a54d40df5c86c8258983c3917def7a2
df275378eeff0e8ca9ad52a1ea2fd58322e5cdff
4d486ed23bf55debd1e027934258c5fcc11d17ee8312073e2a6786c82bcf506b
GET /myda.php HTTP/1.1
Host: page.phic4.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://css.4jpg.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: text/html; charset=utf-8
myda: myda185.54.23.193
vary: User-Agent, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1285
last-modified: Wed, 17 Jul 2024 14:21:59 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bz1pG%2FYMoqlaOa9hSHopBQzmOaZzesiZdqvweij7j5O82vFgd2D9JeGbYZL2FO16LM3F3n04zLouLaoog4xL%2Bg4tx330B0X%2F7LU504wO9lv5HvjgqH8pnACgBJgWe9AEHA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010c1c740b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET cdn5-thumbs.motherlessmedia.com/thumbs/065BCC1.jpg
200 OK 32 kB URL GET HTTP/1.1 cdn5-thumbs.motherlessmedia.com/thumbs/065BCC1.jpg
IP
ASN #43350 NForce Entertainment B.V.
Certificate IssuerGoGetSSL
Subject*.motherlessmedia.com
Fingerprint62:3F:F4:67:AB:20:21:21:07:CF:72:7C:30:72:D2:B1:61:3C:82:02
ValidityMon, 09 Oct 2023 00:00:00 GMT - Fri, 08 Nov 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 2000x2001, segment length 16, baseline, precision 8, 640x480, components 3
Hash b9a218caa70e30224dbe9a31251702db
c4c3f186b6f41f03eee53a83fb045e674519badf
cf0aa00f142c06391ee5a3e76120b4f7996b6daa71e20ff1d2dd0c196ee5866b
GET /thumbs/065BCC1.jpg HTTP/1.1
Host: cdn5-thumbs.motherlessmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: openresty/1.21.4.1
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 32430
last-modified: Mon, 01 Oct 2018 20:51:42 GMT
etag: "1ea870765-7eae-57730f8ee4a70"
expires: Sat, 16 Nov 2024 04:48:55 GMT
cache-control: max-age=10556015
x-cache: HIT
x-whom: cdn04
accept-ranges: bytes
GET treeyork.com/628792/628792.jpg
200 OK 14 kB URL GET HTTP/2 treeyork.com/628792/628792.jpg
IP
Certificate IssuerLet's Encrypt
Subjecttreeyork.com
FingerprintCC:00:11:0D:1D:13:79:22:71:B4:96:9A:FB:1D:F0:52:6B:1E:C4:5F
ValidityTue, 09 Jul 2024 14:58:23 GMT - Mon, 07 Oct 2024 14:58:22 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 160x120, components 3
Hash 68cbcd8c1c0d1148586583dcaeb60508
5bb1b6889fe5ca461a0a7b47e8f0566c8cc7bc6e
8912dc1f6ef1e40d4378b85fa52d91f88aa1312f272b60006a2e9127c3edddfb
GET /628792/628792.jpg HTTP/1.1
Host: treeyork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 14274
cf-bgj: h2pri
etag: "68cbcd8c1c0d1148586583dcaeb60508"
last-modified: Mon, 15 Jan 2024 10:42:19 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5794
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pgFOtv2UQ%2BstHYFZ4uNmywzfPCkiUooJrAco%2FSs%2B222HP8y%2FbulOw5e53MvlIU2Qt69NTyYxEQ%2FuaqZ56Qk3lYPNckKOT0ktuA%2BmcUc43dBsf72oWuKje7hqUgnxWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b0112de0e56b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET vidmo.pro/thumbs_320/36/3a/363a8262a2fe4552e1fe220f442d0d7d/13338074.jpg
200 OK 27 kB URL GET HTTP/2 vidmo.pro/thumbs_320/36/3a/363a8262a2fe4552e1fe220f442d0d7d/13338074.jpg
IP
ASN #49505 OOO Network of data-centers Selectel
Certificate IssuerLet's Encrypt
Subjecten.vidmo.pro
FingerprintBA:F3:53:1B:76:D1:9F:84:42:4A:CE:00:3B:1A:46:69:9D:25:5D:A5
ValidityThu, 30 May 2024 20:43:54 GMT - Wed, 28 Aug 2024 20:43:53 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 93", baseline, precision 8, 320x240, components 3
Hash 03b890aefe1c5a32c76f664e892d60b8
945a9281a4b695565a571125f04deb8ccab38a3c
b5edff0d53e4c585cabd2e98ee5d85ae2806694f2d26c471816add3667edb6aa
GET /thumbs_320/36/3a/363a8262a2fe4552e1fe220f442d0d7d/13338074.jpg HTTP/1.1
Host: vidmo.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 27178
last-modified: Mon, 21 Jun 2021 20:59:14 GMT
expires: Sat, 23 Mar 2024 21:15:59 GMT
cache-control: max-age=604800, public, no-transform
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET treeyork.com/620544/620544.jpg
200 OK 1.0 kB URL GET HTTP/2 treeyork.com/620544/620544.jpg
IP
Certificate IssuerLet's Encrypt
Subjecttreeyork.com
FingerprintCC:00:11:0D:1D:13:79:22:71:B4:96:9A:FB:1D:F0:52:6B:1E:C4:5F
ValidityTue, 09 Jul 2024 14:58:23 GMT - Mon, 07 Oct 2024 14:58:22 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 160x120, components 3
Hash 8c82002d7a6fc5aab6b4f19b62b02451
e8d4b5746b98f0d027262c85f1c6e774feb46c94
1cf8bfecae25c1cfe15be67c2d5ae2bbc1653590615cf58bd269043d86e381c0
GET /620544/620544.jpg HTTP/1.1
Host: treeyork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 1009
cf-bgj: h2pri
etag: "8c82002d7a6fc5aab6b4f19b62b02451"
last-modified: Mon, 15 Jan 2024 10:17:47 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 2633
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0NEAyXGNi%2F4DJg126kdm6B40DwJwwJHpGH44XNSYDy184vkiso179ZRR%2Bcpz7F2EP1WF5NBsqNitH2KkA%2Fh%2Fg%2BFr0JshJiJ9chTM3E9gS3tbatd9uyH7hZqTub7kcw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b0112ee2f56b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET treeyork.com/294520/294520.jpg
200 OK 254 kB URL GET HTTP/2 treeyork.com/294520/294520.jpg
IP
Certificate IssuerLet's Encrypt
Subjecttreeyork.com
FingerprintCC:00:11:0D:1D:13:79:22:71:B4:96:9A:FB:1D:F0:52:6B:1E:C4:5F
ValidityTue, 09 Jul 2024 14:58:23 GMT - Mon, 07 Oct 2024 14:58:22 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 960x560, components 3
Size 254 kB (254322 bytes)
Hash 445cdac636905c60bc2d7b236120e193
821c0ceacf0a7a7a31ac1df6653f8956dd7118e0
059faf2a71a23b44728d0f7e70d71373759dd09522d019f603d434838d3be5e3
GET /294520/294520.jpg HTTP/1.1
Host: treeyork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 254322
cf-bgj: h2pri
etag: "445cdac636905c60bc2d7b236120e193"
last-modified: Sun, 14 Jan 2024 18:41:45 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4597
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q%2B8CC230nobeNoGTCVFRx8QEhoQ5taOzdBDi%2FIrCh%2BzWBdcZ3jFIVCHxEcD4uGT%2FFbcIC1ceTSYCum7TYEVtRvk40I6ooEuC1qhEx4AQ6iwOZ9ZuPwNjnXxcnv07LQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b0112ee3556b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET img.tnastatic.com/a16:8q80w500r/thumbs/d4/12_3864245l.jpg
200 OK 12 kB URL GET HTTP/2 img.tnastatic.com/a16:8q80w500r/thumbs/d4/12_3864245l.jpg
IP
ASN #60068 Datacamp Limited
Certificate IssuerDigiCert Inc
Subject*.tnastatic.com
Fingerprint8A:25:38:6D:92:E8:89:AA:66:68:DE:5A:23:87:FC:78:1E:05:E9:57
ValidityTue, 14 Nov 2023 00:00:00 GMT - Sat, 14 Dec 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 500x250, components 3
Hash c336c8ec853ac6d9947fdb5db6d33f78
66444656cde4d301d509d4bc56aa077568d3e4b5
6d81792e19e6b170f0f42d493eb7101728942d9b15609fac7afc28aa05f7e745
GET /a16:8q80w500r/thumbs/d4/12_3864245l.jpg HTTP/1.1
Host: img.tnastatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 11888
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-77-nzt: EgwB1GY4nwH3G1WXAAwBT3/LEQH355IXAA
x-77-nzt-ray: 2b9c3f1fbafe07308dd89766b78b7010
x-accel-expires: @2025124747
x-accel-date: 1711309682
x-77-cache: HIT
x-77-age: 11462658
server: CDN77-Turbo
access-control-allow-origin: *
x-cache: HIT
x-age: 9917723
x-77-pop: frankfurtDE
accept-ranges: bytes
X-Firefox-Spdy: h2
GET img.sekesporno.net/ruxp/img/1/10705.jpg
200 OK 20 kB URL GET HTTP/2 img.sekesporno.net/ruxp/img/1/10705.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectsekesporno.net
Fingerprint20:53:00:7A:C7:4E:B0:B3:AA:CD:C7:47:6F:19:51:CA:EA:6E:7E:7D
ValidityMon, 24 Jun 2024 03:17:20 GMT - Sun, 22 Sep 2024 03:17:19 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x224, components 3
Hash 8418ebb51e08f7aacdab885567b77c54
30aab2571476634e79f2728910ed3f97e67e3ab9
36261a54b6fbc1b442b7abe79d3d385272b7a84c0d968f5c60a4cde3d278ed15
GET /ruxp/img/1/10705.jpg HTTP/1.1
Host: img.sekesporno.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 20138
last-modified: Wed, 23 Dec 2020 01:04:24 GMT
etag: "5fe29798-4eaa"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2881
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G%2FT7wCzVGqAOIPoGhsGT2xNDs7VzybkQKlm85Wjh5tgGE9Ctm7DpBVQsfGFr%2F9KyIJjogL%2Ft2NA3sat0NBlya7ov6iHHoDB7Z4J6BbKl1amKWT7KGuSRZlzN0dLyWVHuU2%2Fxras%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b0112fc4693f4-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ds2.obmenvsemfiles.net/fo/files_attachments/8c0/9bb/8c09bb852bc35c10d445749e49986ec3.jpg
200 OK 27 kB URL GET HTTP/2 ds2.obmenvsemfiles.net/fo/files_attachments/8c0/9bb/8c09bb852bc35c10d445749e49986ec3.jpg
IP
ASN #60781 LeaseWeb Netherlands B.V.
Certificate IssuerLet's Encrypt
Subjectds2.obmenvsemfiles.net
FingerprintF7:52:E9:35:9E:A4:B9:5D:35:F9:B2:A3:56:C8:77:E5:DA:DD:AF:59
ValidityTue, 09 Jul 2024 08:46:54 GMT - Mon, 07 Oct 2024 08:46:53 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x270, components 3
Hash 8c09bb852bc35c10d445749e49986ec3
83f1914102b478b3a70a730791d20e8d5953634c
4eb169215489216000af91f944b3785a98b19db4e7175f1e551fc62751f83013
GET /fo/files_attachments/8c0/9bb/8c09bb852bc35c10d445749e49986ec3.jpg HTTP/1.1
Host: ds2.obmenvsemfiles.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 26557
last-modified: Sun, 10 Apr 2016 17:56:58 GMT
etag: "570a93ea-67bd"
accept-ranges: bytes
X-Firefox-Spdy: h2
GET sorkab.com/wp-content/uploads/2023/06/0003962.jpg
200 OK 34 kB URL GET HTTP/2 sorkab.com/wp-content/uploads/2023/06/0003962.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectsorkab.com
FingerprintF8:69:17:31:55:BE:7E:3C:52:59:8F:20:5F:29:72:2E:71:B4:2B:94
ValiditySat, 13 Jul 2024 03:46:45 GMT - Fri, 11 Oct 2024 03:46:44 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x360, components 3
Hash a4db4bcd97499fcf5fc5fb29ef58d5a5
719798cc5447c636e6abbfe792e40632793b480e
911e0f0a47ec7e3f1d9dafc0f6124146fdfb97455de2f37bd42bb506bf5bdc74
GET /wp-content/uploads/2023/06/0003962.jpg HTTP/1.1
Host: sorkab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 34244
cache-control: public, max-age=31536000
expires: Sun, 29 Jun 2025 21:07:25 GMT
last-modified: Sat, 01 Jul 2023 02:50:42 GMT
vary: User-Agent,Accept-Encoding,Accept-Encoding
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000
content-security-policy: upgrade-insecure-requests
referrer-policy: no-referrer-when-downgrade
permissions-policy: geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), payment=(), fullscreen=(self)
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1447338
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IedHDaYqPzf4qBhHL9Csk7uUsEGLd6oY3Oj1LRuCIGTJef2YdnbjBMDU2yz%2F4gBfHHrTgD2hKIKF%2FEUuBHlmLaaPDP2UVFzxqbyvfnCC84rD27uOQ2C8ItUY5HhS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b01135ac071c8-LHR
X-Firefox-Spdy: h2
GET ds2.obmenvsemfiles.net/fo/files_attachments/651/ccd/651ccd537e7ef58950ebab547b4143fc.jpg
200 OK 18 kB URL GET HTTP/2 ds2.obmenvsemfiles.net/fo/files_attachments/651/ccd/651ccd537e7ef58950ebab547b4143fc.jpg
IP
ASN #60781 LeaseWeb Netherlands B.V.
Certificate IssuerLet's Encrypt
Subjectds2.obmenvsemfiles.net
FingerprintF7:52:E9:35:9E:A4:B9:5D:35:F9:B2:A3:56:C8:77:E5:DA:DD:AF:59
ValidityTue, 09 Jul 2024 08:46:54 GMT - Mon, 07 Oct 2024 08:46:53 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x259, components 3
Hash 651ccd537e7ef58950ebab547b4143fc
a9f29be01028476ced669085d4b79f03ee559a9b
dfa65ad07bc8df7b84798c735859127d5681880730108e1f77079131e7f555db
GET /fo/files_attachments/651/ccd/651ccd537e7ef58950ebab547b4143fc.jpg HTTP/1.1
Host: ds2.obmenvsemfiles.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 18124
last-modified: Sat, 16 Apr 2016 09:30:48 GMT
etag: "57120648-46cc"
accept-ranges: bytes
X-Firefox-Spdy: h2
GET pornhubthailand.com/wp-content/uploads/2018/12/a1-1.jpg
200 OK 28 kB URL GET HTTP/2 pornhubthailand.com/wp-content/uploads/2018/12/a1-1.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectpornhubthailand.com
FingerprintAD:B6:B6:3F:38:49:DD:BE:13:6E:51:12:4D:4C:AB:57:95:0F:E9:2C
ValiditySat, 22 Jun 2024 14:44:41 GMT - Fri, 20 Sep 2024 14:44:40 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 511x287, components 3
Hash 084e115de7aa83f077db977f5b779303
011f588651904b82952e7c801a4690bc819ec75a
a6c3fe6b97a780abff307e047b951f0c5c4b8d4b66077f5d485e5c08f9e2a3e1
GET /wp-content/uploads/2018/12/a1-1.jpg HTTP/1.1
Host: pornhubthailand.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 28338
last-modified: Fri, 06 Mar 2020 06:00:43 GMT
etag: "5e61e70b-6eb2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 569777
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DduqwXEpM%2FfxFPdezr1xqg5EFzu08nxF7rzzxEBHhN888UJTeR8e3ieO86rTiXTODqDjTwvwWNgADK%2FQLhcAv1qbC4Y7WOTpXv7UVn27ydqO4JseX8dM5g7%2F0%2FzKkM3VgODRkTpQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01137b5156b4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET fapdig.com/media/videos/tmb/000/028/737/1.jpg
200 OK 16 kB URL GET HTTP/2 fapdig.com/media/videos/tmb/000/028/737/1.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectfapdig.com
FingerprintF5:61:4F:8A:6D:80:1F:3B:92:80:73:29:17:49:16:9F:A6:52:AA:DB
ValidityTue, 28 May 2024 11:48:52 GMT - Mon, 26 Aug 2024 11:48:51 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.28.103", baseline, precision 8, 320x240, components 3
Hash 33381d3909bc992e32af907272662ad4
33232119d0c17886f5ef0c9ce14c82cfe2bc07f8
39c21e49a2e6e67df244eb7fcf7ddb2fd8750da54e716bc3cb7052d9f5870b9a
GET /media/videos/tmb/000/028/737/1.jpg HTTP/1.1
Host: fapdig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 15862
last-modified: Mon, 11 Jul 2016 10:56:02 GMT
cache-control: max-age=1209600
expires: Thu, 25 Jul 2024 19:46:59 GMT
cf-cache-status: HIT
age: 500186
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MCP2LmYZYoMVzoUTojEEbDXSBhyGCIeDEpXWcMfvtK6P8TbYJ%2FqLawSykcCCglzClFgdqfjdy6bTufkp0AqLSf97fpaRrOXGGK%2BN2PVF2aDQw6n052w%2Fkvl0pAbk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b011388ddb4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ak-br-pic.kwai.net/kimg/EKzM1y8qmgEKAnMzEg1waG90by1vdmVyc2VhGoQBdXBpYy8yMDI0LzAzLzI3LzE3L0JNakF5TkRBek1qY3hOekV3TVROZk1UVXdNREF4TURjNE9ERTNOalU1WHpFMU1ERXdOVFkwT1RNNU5UQXlPVjh5WHpNPV9vZmZuX0I5NDQ2NGMyNDYwNmI0ZjI5MTU0ZGQ0NmQ2MjBlMWE0OS53ZWJw.webp
200 OK 4.4 kB URL GET HTTP/2 ak-br-pic.kwai.net/kimg/EKzM1y8qmgEKAnMzEg1waG90by1vdmVyc2VhGoQBdXBpYy8yMDI0LzAzLzI3LzE3L0JNakF5TkRBek1qY3hOekV3TVROZk1UVXdNREF4TURjNE9ERTNOalU1WHpFMU1ERXdOVFkwT1RNNU5UQXlPVjh5WHpNPV9vZmZuX0I5NDQ2NGMyNDYwNmI0ZjI5MTU0ZGQ0NmQ2MjBlMWE0OS53ZWJw.webp
IP
ASN #20940 Akamai International B.V.
Certificate IssuerGlobalSign nv-sa
Subject*.kwai.net
Fingerprint64:6A:5B:A8:10:DA:31:94:FD:6C:A9:C1:39:4D:C6:B1:50:74:C5:10
ValidityTue, 09 Apr 2024 08:00:01 GMT - Sun, 11 May 2025 08:00:00 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 253x575, Scaling: [none]x[none], YUV color, decoders should clamp
Hash d529d480cd9fcac8cd33a9a4806bd520
c1d956c814b6c6a541eb1ae3f935b47128c6c03b
dc21a471c6b0167293548d3b391c6a8a035e7d3801bf986a7a52fb946dbe0dc6
GET /kimg/EKzM1y8qmgEKAnMzEg1waG90by1vdmVyc2VhGoQBdXBpYy8yMDI0LzAzLzI3LzE3L0JNakF5TkRBek1qY3hOekV3TVROZk1UVXdNREF4TURjNE9ERTNOalU1WHpFMU1ERXdOVFkwT1RNNU5UQXlPVjh5WHpNPV9vZmZuX0I5NDQ2NGMyNDYwNmI0ZjI5MTU0ZGQ0NmQ2MjBlMWE0OS53ZWJw.webp HTTP/1.1
Host: ak-br-pic.kwai.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
content-length: 4426
krtid: gwd0468b3716f54b88a556eb17032f7102
x-amz-cf-pop: FRA50-C1, HAM50-C3
x-amz-cf-id: JDdGcBSRs7N7WjYGy-x7sQ0nSfMi3CN7Q_1XnJ7aNbsQKKH0JHcerQ==
cache-control: max-age=31536000
expires: Thu, 17 Jul 2025 14:43:25 GMT
date: Wed, 17 Jul 2024 14:43:25 GMT
akamai-mon-iucid-del: 1393414
alt-svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
x-ks-request-id: 0.440b655f.1721227405.12b9027
x-ks-cache: Hit from 95.101.11.72
x-mai-cache-status: Y0-L0-0
x-ks-client-ip: 91.90.42.154
kwaisign: null
timing-allow-origin: *
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-expose-headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC
access-control-allow-headers: origin,range,hdntl,hdnts
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET 248avporn.com/wp-content/uploads/2019/02/6-4.png
200 OK 23 kB URL GET HTTP/2 248avporn.com/wp-content/uploads/2019/02/6-4.png
IP
Certificate IssuerGoogle Trust Services
Subject248avporn.com
Fingerprint62:73:BE:6B:7B:DE:D8:61:99:FF:9C:DB:B1:9A:55:70:02:DE:08:16
ValidityTue, 18 Jun 2024 11:56:35 GMT - Mon, 16 Sep 2024 11:56:34 GMT
File type PNG image data, 320 x 240, 8-bit colormap, non-interlaced
Hash d6ad01e1adb60cb577ab5b5eb4335d42
282d1ef920bb9f8f09c30dbc9118730ceb0fb26f
932c029b7dd3cd036b8dabdd0ebe1b7c895d384886365c4528f8b582203a952d
GET /wp-content/uploads/2019/02/6-4.png HTTP/1.1
Host: 248avporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/png
content-length: 22970
last-modified: Wed, 06 Mar 2019 03:46:56 GMT
etag: "5c7f42b0-59ba"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=15768000
access-control-allow-origin: *
test: /wp-content/uploads/2019/02/6-4.png
x-fc-nginx-serving-static: Yes
x-fc-nginx-reason: /wp-content/uploads/2019/02/6-4.png
x-fc-nginx-file: /var/www/248avporn.com/htdocs/wp-content/cache/all//wp-content/uploads/2019/02/6-4.png/index.html
cf-cache-status: HIT
age: 1058069
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ia%2BF64YZOQ0WHK4EQHB8zuF%2B0XD1T%2Byt76BttM2d%2FPBL2kiPTbjfitSdocXxFkRB1F7wc8fgXN1pV9xa88AY2XfY12utuIypoBzefps0sivXX6rLQgoHeFZifUvuxMgm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b0113b9615695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET pornolomka2.com/uploads/posts/2017-04/medium/1493236007_00-12-26.jpg
200 OK 93 kB URL GET HTTP/2 pornolomka2.com/uploads/posts/2017-04/medium/1493236007_00-12-26.jpg
IP
ASN #213166 UA-Hosting SIA
Certificate IssuerLet's Encrypt
Subjectpornolomka2.com
Fingerprint7D:30:5E:35:9F:E4:65:EF:49:72:8A:1A:91:86:6D:86:75:39:FD:2E
ValidityTue, 14 May 2024 22:34:28 GMT - Mon, 12 Aug 2024 22:34:27 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 450x253, components 3
Hash c577c879792653e5ab67f97336751fde
550ef87b25b6a055b2415fe7be33e3d6b9fa0dab
7b16342d4f7db528d4e4b82b0becf6d844295c06c765fa12abf83530802082c2
GET /uploads/posts/2017-04/medium/1493236007_00-12-26.jpg HTTP/1.1
Host: pornolomka2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.10.3
date: Wed, 17 Jul 2024 14:41:42 GMT
content-type: image/jpeg
content-length: 92558
last-modified: Sun, 30 Aug 2020 17:00:17 GMT
etag: "5f4bdb21-1698e"
expires: Wed, 24 Jul 2024 14:41:42 GMT
cache-control: max-age=604800
strict-transport-security: max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash 2299227499862f9d2363445ea763d810
5a509bd6bdd376f76a69fd23eebe4da61a74fb7a
ca7497a120875d72f8c0562291745e731c7851a8154e8407a786a178b2c98f85
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "CA7497A120875D72F8C0562291745E731C7851A8154E8407A786A178B2C98F85"
Last-Modified: Mon, 15 Jul 2024 20:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2132
Expires: Wed, 17 Jul 2024 15:18:57 GMT
Date: Wed, 17 Jul 2024 14:43:25 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 2299227499862f9d2363445ea763d810
5a509bd6bdd376f76a69fd23eebe4da61a74fb7a
ca7497a120875d72f8c0562291745e731c7851a8154e8407a786a178b2c98f85
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "CA7497A120875D72F8C0562291745E731C7851A8154E8407A786A178B2C98F85"
Last-Modified: Mon, 15 Jul 2024 20:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2132
Expires: Wed, 17 Jul 2024 15:18:57 GMT
Date: Wed, 17 Jul 2024 14:43:25 GMT
Connection: keep-alive
GET page.phic4.top/myda.php
200 OK 19 kB IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjectphic4.top
Fingerprint89:86:9C:A3:5A:03:33:EC:97:99:22:17:73:24:C6:24:73:EE:2D:EC
ValidityWed, 10 Jul 2024 16:48:17 GMT - Tue, 08 Oct 2024 16:48:16 GMT
Hash cd730f4a67e466a539a722d5ef48cabb
22d33cfe78cdd712f3ebb8232eb9fd9aa2803c6f
cd31c8cb1e9cde1d4123e02a77d8b1f8fbb3aa1bcbd92d00123dd4dfa358c2f8
GET /myda.php HTTP/1.1
Host: page.phic4.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://css.4jpg.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: text/html; charset=utf-8
myda: myda185.54.23.193
vary: User-Agent, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1285
last-modified: Wed, 17 Jul 2024 14:21:59 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VkJvOBy0wH0reJSnX7%2F3KkcqBALMOyENOM3S5fIWkQNlRfRmPUlXh4AqFDU%2FP%2BFDGVMfWCctEWo94ZMb5BZ0hHBdTEn%2B2F3qyqV6baII4MOq2%2FnIAoApEgrPcJFcb4GqBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010c0c6b0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
504 B IP
ASN #20940 Akamai International B.V.
Hash 8222d93a57248765b9c2cba230383c44
e732454d1d572f12344665ef129446867338605f
f59ddf00fadc0263902dff285bfd70b77aac7cc94941093e4d5e49887387cf29
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F59DDF00FADC0263902DFF285BFD70B77AAC7CC94941093E4D5E49887387CF29"
Last-Modified: Mon, 15 Jul 2024 19:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1621
Expires: Wed, 17 Jul 2024 15:10:26 GMT
Date: Wed, 17 Jul 2024 14:43:25 GMT
Connection: keep-alive
GET cdn.hotscope.tv/files/thumbnail/2g_prm0O0.jpg
200 OK 8.7 kB URL GET HTTP/1.1 cdn.hotscope.tv/files/thumbnail/2g_prm0O0.jpg
IP
Certificate IssuerLet's Encrypt
Subjecthotscope.tv
Fingerprint30:BA:89:B6:51:FD:60:DA:DA:6A:62:C2:1D:13:1E:E1:74:7C:D9:B9
ValidityWed, 10 Jul 2024 12:34:15 GMT - Tue, 08 Oct 2024 12:34:14 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 35x34, segment length 16, comment: "Lavc58.54.100", baseline, precision 8, 270x375, components 3
Hash bd111d669f2d420434eb7664233f5c2b
04de3a0ae6cccd626eb2039d8f65d77161e310bc
31db02e6c7279627a4e5ef1d9a425dda4a6550d40760dc35010f30fd89a1dd42
GET /files/thumbnail/2g_prm0O0.jpg HTTP/1.1
Host: cdn.hotscope.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 17 Jul 2024 14:43:25 GMT
Content-Type: image/jpeg
Content-Length: 8737
Last-Modified: Sat, 08 Aug 2020 12:20:49 GMT
Connection: keep-alive
ETag: "5f2e98a1-2221"
Expires: Thu, 17 Jul 2025 14:43:25 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
GET vidmo.pro/thumbs_320/93/e5/93e518ef313f8e02c21a8bf920eca81c/15636532.jpg
200 OK 9.7 kB URL GET HTTP/2 vidmo.pro/thumbs_320/93/e5/93e518ef313f8e02c21a8bf920eca81c/15636532.jpg
IP
ASN #49505 OOO Network of data-centers Selectel
Certificate IssuerLet's Encrypt
Subjecten.vidmo.pro
FingerprintBA:F3:53:1B:76:D1:9F:84:42:4A:CE:00:3B:1A:46:69:9D:25:5D:A5
ValidityThu, 30 May 2024 20:43:54 GMT - Wed, 28 Aug 2024 20:43:53 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3
Hash 551170135dcc4fb8ee99d03314f36eed
454e10ff1e29319ed2bf9611a7ca23b7c340f303
3c2f03ef6c012a854b73a670c140c52069e938fa54df400746fe85f6a0e56a79
GET /thumbs_320/93/e5/93e518ef313f8e02c21a8bf920eca81c/15636532.jpg HTTP/1.1
Host: vidmo.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 9671
last-modified: Mon, 24 Jul 2023 01:29:31 GMT
expires: Mon, 09 Oct 2023 19:16:04 GMT
cache-control: max-age=604800, public, no-transform
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET pornua.net/public/video/screens/144/1.jpg
200 OK 12 kB URL GET HTTP/1.1 pornua.net/public/video/screens/144/1.jpg
IP
Certificate IssuerLet's Encrypt
Subjectpornua.net
Fingerprint74:E9:58:45:BF:41:BC:DF:6F:15:8A:23:E4:43:E9:BB:18:40:16:5B
ValidityMon, 01 Jul 2024 02:22:11 GMT - Sun, 29 Sep 2024 02:22:10 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 350x237, components 3
Hash a5d89c0fdf8799714e5fa15a5fc8bc30
46fca2c31c3e85ff7acde86cbce424280ac91d72
f6850254017956f022449c6d3fc17aea939ca3a0a4400af7b2f97d5552a83609
GET /public/video/screens/144/1.jpg HTTP/1.1
Host: pornua.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Jul 2024 14:43:25 GMT
Content-Type: image/jpeg
Content-Length: 12368
Last-Modified: Thu, 18 Feb 2021 11:45:32 GMT
Connection: keep-alive
ETag: "602e535c-3050"
Expires: Wed, 24 Jul 2024 14:43:25 GMT
Cache-Control: max-age=604800
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
GET ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
200 OK 30 kB URL GET HTTP/3 ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP
Requested by https://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/3
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint8F:1C:80:D7:A7:FA:04:F3:EE:EF:70:FD:56:35:32:FD:55:AB:63:5F
ValidityMon, 24 Jun 2024 07:40:53 GMT - Mon, 16 Sep 2024 07:40:52 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Jul 2024 14:24:32 GMT
expires: Wed, 16 Jul 2025 14:24:32 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 87533
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
504 B IP
ASN #20940 Akamai International B.V.
Hash 6cff5dbd7bf07a3ed178eb6697343284
c637c9c6f6e61c598b1daa353d986f8bf2e4afb9
755856f998ab84955e4e576e1fd4640b0b5c0db6d789c3b2b4a1cf019123a92c
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "755856F998AB84955E4E576E1FD4640B0B5C0DB6D789C3B2B4A1CF019123A92C"
Last-Modified: Mon, 15 Jul 2024 19:25:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5063
Expires: Wed, 17 Jul 2024 16:07:48 GMT
Date: Wed, 17 Jul 2024 14:43:25 GMT
Connection: keep-alive
GET cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js
200 OK 4.0 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js
IP
Requested by https://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/3
Certificate IssuerLet's Encrypt
Subjectcdnjs.cloudflare.com
Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E
ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT
File type JavaScript source, ASCII text, with very long lines (10613)
Hash ea77f824de2ef57acb12e7cb6596365e
10bad0dbdf30a0471c2c786b349daeb1dd19180e
2b19d92ce83bf3b498f73103ba1240f09c84798b1f92aedf1491ccf0aa6f5e4c
GET /ajax/libs/nosleep/0.11.0/NoSleep.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: application/javascript; charset=utf-8
content-length: 3953
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5ed16b69-29bf"
last-modified: Fri, 29 May 2020 20:07:05 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 991667
expires: Mon, 07 Jul 2025 14:43:25 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AiyV7xsXH2SOK6IegAzNM3dgGNA1b02vQEHxchmH2rG3n3hwellESg7YZugAdluuJSBvZR%2F0LqjWxWgFmnvCO2vlUh1aO4B6ZRUzP1p6O4LotNuUuPi8%2Fadc35NsPgqU6i0kev%2Ba"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8a4b01168b7f1c0a-OSL
alt-svc: h3=":443"; ma=86400
GET cdn.hotscope.tv/files/thumbnail/capture(1450).jpg
200 OK 10 kB URL GET HTTP/1.1 cdn.hotscope.tv/files/thumbnail/capture(1450).jpg
IP
Certificate IssuerLet's Encrypt
Subjecthotscope.tv
Fingerprint30:BA:89:B6:51:FD:60:DA:DA:6A:62:C2:1D:13:1E:E1:74:7C:D9:B9
ValidityWed, 10 Jul 2024 12:34:15 GMT - Tue, 08 Oct 2024 12:34:14 GMT
File type JPEG image data, baseline, precision 8, 180x250, components 3
Hash 3a748b4ec848b47bae9cf5deb876d4d3
45891ad16e66766926804fa4eeb62d04ae320e23
d9a8353436757490ddfefc08d66f158e0a9880f6f46f457eae949fdc2407454a
GET /files/thumbnail/capture(1450).jpg HTTP/1.1
Host: cdn.hotscope.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 17 Jul 2024 14:43:25 GMT
Content-Type: image/jpeg
Content-Length: 10236
Last-Modified: Sun, 23 Apr 2017 15:03:07 GMT
Connection: keep-alive
ETag: "58fcc22b-27fc"
Expires: Thu, 17 Jul 2025 14:43:25 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
GET pornogids.net/contents/videos_screenshots/35000/35551/preview.jpg
200 OK 70 kB URL GET HTTP/2 pornogids.net/contents/videos_screenshots/35000/35551/preview.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectpornogids.net
FingerprintC9:3A:D8:48:D9:87:5C:4E:E7:93:81:AC:FE:3E:01:AB:10:3B:79:A1
ValidityFri, 12 Jul 2024 09:17:04 GMT - Thu, 10 Oct 2024 09:17:03 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1280x1281, segment length 16, comment: "Lavc56.60.100", baseline, precision 8, 854x480, components 3
Hash 4cf9e49684945c575edfb4d96dbdd0f6
1adee85c83fdda6d302a2c3fbe1629702c1f9077
8a3a0a7c5c2704da4894ccba45e21256309a6a6cd2a9bf82bc0aec1fc27c485b
GET /contents/videos_screenshots/35000/35551/preview.jpg HTTP/1.1
Host: pornogids.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 69713
cf-bgj: h2pri
etag: "5ea1d262-11051"
last-modified: Thu, 23 Apr 2020 17:37:38 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2673
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8yetF6ZThTsVP4gX9J1h6XckMUsRCR5iuPCspvbEOV79Cs27XjqzV%2FRUyojHnoLI2p1Pl0723zIkZBV1bamr3ankSddJ2IGVHcGXgoEUAWRE3uA6jgDp5CzusmlE5Qep"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01167f49770e-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET e1nn.com/vs/60900652.jpg
200 OK 45 kB IP
Certificate IssuerLet's Encrypt
Subjecte1nn.com
Fingerprint7A:F6:AF:8D:96:40:06:6A:04:B5:BC:FB:B4:7C:68:DB:3F:6E:7E:88
ValidityMon, 27 May 2024 19:42:30 GMT - Sun, 25 Aug 2024 19:42:29 GMT
File type JPEG image data, baseline, precision 8, 960x720, components 3
Hash 1987664dd0ef5eacd1543a4f75ed2a63
f1b26aa8870d9beba1570e9e3b86128061fa9665
a5044fd5ed92a6e6a6ed3eea287160101fd60479b3968d7aae6fe4fa9d018e6f
GET /vs/60900652.jpg HTTP/1.1
Host: e1nn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 44621
last-modified: Tue, 07 Jan 2020 01:54:10 GMT
etag: "5e13e4c2-ae4d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: HIT, HIT
cf-cache-status: HIT
age: 1209606
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ec26Wc6FTh1L6IyozB3vmu%2BSYAJwtFlkYj78FD07mopqLuN4EDK9EDZcVbSHV5g9OHS9RJCBk85UT%2FWnMPLoyvU0rpVeV7qTq5P939Rp4FbNFWKzTCG3Vy2HPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b0116bb2e88a7-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn5-thumbs.motherlessmedia.com/thumbs/5CD065C.jpg
200 OK 15 kB URL GET HTTP/1.1 cdn5-thumbs.motherlessmedia.com/thumbs/5CD065C.jpg
IP
ASN #43350 NForce Entertainment B.V.
Certificate IssuerGoGetSSL
Subject*.motherlessmedia.com
Fingerprint62:3F:F4:67:AB:20:21:21:07:CF:72:7C:30:72:D2:B1:61:3C:82:02
ValidityMon, 09 Oct 2023 00:00:00 GMT - Fri, 08 Nov 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x480, components 3
Hash 1d83ee0ff2fd0f859a5a8ec2b5f42369
048b6e6ace31732d62e1995503f2c3003e81e443
2393cafff6c6859c5685ef3c905cb5ebc55d822a52b11784936754b18577b275
GET /thumbs/5CD065C.jpg HTTP/1.1
Host: cdn5-thumbs.motherlessmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: openresty/1.21.4.1
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 14862
last-modified: Sat, 23 Feb 2019 16:48:18 GMT
etag: "1f75887cc-3a0e-58292797e1505"
expires: Mon, 18 Nov 2024 03:59:33 GMT
cache-control: max-age=10782556
x-cache: HIT
x-whom: cdn01
accept-ranges: bytes
GET www.clporn.com/thumbs/29/426-teen.jpg
200 OK 11 kB URL GET HTTP/2 www.clporn.com/thumbs/29/426-teen.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectclporn.com
FingerprintEF:4B:90:00:56:06:89:29:6B:68:BF:1A:BC:AE:6B:E7:EC:7D:F0:90
ValiditySun, 23 Jun 2024 10:59:28 GMT - Sat, 21 Sep 2024 10:59:27 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 312x208, components 3
Hash 3517da8b09c75e27701637c4508d859c
07b79084e5c9a1f2920f5e9fb3e3b27905f2d8ea
422b439e6f12e29ce5733218bf496bbb8b006815d9d9461f2fa4196cb8d8fe26
GET /thumbs/29/426-teen.jpg HTTP/1.1
Host: www.clporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 11341
last-modified: Mon, 20 Apr 2020 13:02:09 GMT
etag: "5e9d9d51-2c4d"
expires: Fri, 13 Jun 2025 11:26:34 GMT
cache-control: public, max-age=31536000, no-transform
x-cache-status: HIT
cf-cache-status: HIT
age: 2949411
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8cBEz%2BMjnSex%2BQDfLiwEZWBNZEKvRGpoHNVx8SUCV%2B9KYvRhbfGnZFYIjPkVtHlDX6Clvybk2TGly8M%2Bjx%2BHsTekBETLrWd0Y%2FGgpvSK%2Fc%2FShPgKnQny0iBHjvzKraqtaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01170c8fb51d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn5-thumbs.motherlessmedia.com/thumbs/3B90005.jpg
200 OK 23 kB URL GET HTTP/1.1 cdn5-thumbs.motherlessmedia.com/thumbs/3B90005.jpg
IP
ASN #43350 NForce Entertainment B.V.
Certificate IssuerGoGetSSL
Subject*.motherlessmedia.com
Fingerprint62:3F:F4:67:AB:20:21:21:07:CF:72:7C:30:72:D2:B1:61:3C:82:02
ValidityMon, 09 Oct 2023 00:00:00 GMT - Fri, 08 Nov 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 900x901, segment length 16, baseline, precision 8, 640x480, components 3
Hash e2f54f8a3b7bbcfbe75f52281c07e1af
0c20e537870e2f7d25adad0aa7357fea7caacf69
a600a5989613eb5d2ff2b290d4d8a327ce7a77258240520665d7e93536ce5137
GET /thumbs/3B90005.jpg HTTP/1.1
Host: cdn5-thumbs.motherlessmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: openresty/1.21.4.1
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 22700
last-modified: Wed, 17 Jul 2019 05:42:09 GMT
etag: "1f255c48a-58ac-58dd9f451b3e3"
expires: Sun, 17 Nov 2024 19:15:18 GMT
cache-control: max-age=10754768
x-cache: HIT
x-whom: cdn05
accept-ranges: bytes
GET vidmo.pro/thumbs_320/95/36/9536ba3756a3574f530b30cc2281f6c4/15784325.jpg
200 OK 19 kB URL GET HTTP/2 vidmo.pro/thumbs_320/95/36/9536ba3756a3574f530b30cc2281f6c4/15784325.jpg
IP
ASN #49505 OOO Network of data-centers Selectel
Certificate IssuerLet's Encrypt
Subjecten.vidmo.pro
FingerprintBA:F3:53:1B:76:D1:9F:84:42:4A:CE:00:3B:1A:46:69:9D:25:5D:A5
ValidityThu, 30 May 2024 20:43:54 GMT - Wed, 28 Aug 2024 20:43:53 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3
Hash 38acfa8dfb856c20d0d8ad3685ffbe7d
e7250b5bd3338afc5dabac7d2b095534c91c2e10
77bb169c0d1c47fa4801cba7934ebaef8f09a06d7434928bf86761364fab2a0f
GET /thumbs_320/95/36/9536ba3756a3574f530b30cc2281f6c4/15784325.jpg HTTP/1.1
Host: vidmo.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 19422
last-modified: Mon, 06 Nov 2023 21:32:09 GMT
expires: Wed, 15 Nov 2023 21:09:38 GMT
cache-control: max-age=604800, public, no-transform
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash ee2cc2a1f1a476be18cd307f074c1936
ff190dd95d02852fb6c3604b03b4c9c51311b244
d77fc1e35a901f2e864e4d03ef3ada8cf1d9453ccb8a29fa646f975796f94c28
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D77FC1E35A901F2E864E4D03EF3ADA8CF1D9453CCB8A29FA646F975796F94C28"
Last-Modified: Tue, 16 Jul 2024 08:59:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13105
Expires: Wed, 17 Jul 2024 18:21:50 GMT
Date: Wed, 17 Jul 2024 14:43:25 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash b4e63a2a82d161c8b907db60a65a12c4
8c0b40ce584d0916321c858255953d078a926b38
2ea2abd291dbde3c35610a728333b8e13343c9223458249050ad64e5e55dd2ce
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2EA2ABD291DBDE3C35610A728333B8E13343C9223458249050AD64E5E55DD2CE"
Last-Modified: Mon, 15 Jul 2024 19:26:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1526
Expires: Wed, 17 Jul 2024 15:08:51 GMT
Date: Wed, 17 Jul 2024 14:43:25 GMT
Connection: keep-alive
GET st.javvhub.com/thumbs/47/70/4770f66f81d83cf2c74bfea904f4ed96.0.jpg
200 OK 11 kB URL GET HTTP/1.1 st.javvhub.com/thumbs/47/70/4770f66f81d83cf2c74bfea904f4ed96.0.jpg
IP
ASN #8972 Host Europe GmbH
Certificate IssuerLet's Encrypt
Subjectst.javvhub.com
Fingerprint2B:C0:CE:23:9A:E4:3E:E0:D9:83:37:87:BC:5C:F3:DA:D5:3C:83:57
ValidityFri, 21 Jun 2024 16:02:55 GMT - Thu, 19 Sep 2024 16:02:54 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3
Hash 695ea1e25785a78ec8702729872f76f3
e3f7c72749a16f04afeda99580915ce7790a5780
425e20261ed5229a37c071eb9f171ea2651633f3a507b48cf78a5f0975cbac29
GET /thumbs/47/70/4770f66f81d83cf2c74bfea904f4ed96.0.jpg HTTP/1.1
Host: st.javvhub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Wed, 17 Jul 2024 14:43:25 GMT
Content-Type: image/jpeg
Content-Length: 10934
Last-Modified: Tue, 01 Dec 2020 03:20:04 GMT
Connection: keep-alive
ETag: "5fc5b664-2ab6"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
504 B IP
ASN #20940 Akamai International B.V.
Hash b34e4d57cfdcc57dad59529950920224
ff71cb63eac90c9231431bf7ba4cf2720b761f83
e9127b69402c7c6c274e65625f025bcc673e6e05b4332436bdf5450da1e3e1ab
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E9127B69402C7C6C274E65625F025BCC673E6E05B4332436BDF5450DA1E3E1AB"
Last-Modified: Mon, 15 Jul 2024 19:18:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12731
Expires: Wed, 17 Jul 2024 18:15:37 GMT
Date: Wed, 17 Jul 2024 14:43:26 GMT
Connection: keep-alive
GET rtgallery.net/tb/sea-coast_story.jpg
200 OK 52 kB URL GET HTTP/1.1 rtgallery.net/tb/sea-coast_story.jpg
IP
Certificate IssuerLet's Encrypt
Subjectrtgallery.net
FingerprintF1:0B:F4:B4:DE:D9:EA:22:97:99:B5:28:15:F3:82:CA:A9:00:3E:33
ValiditySun, 14 Jul 2024 11:29:23 GMT - Sat, 12 Oct 2024 11:29:22 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "Created with GIMP", progressive, precision 8, 480x360, components 3
Hash 1febcc36e5f39393ec5895be64041103
3396745b914f1fd06d8a70fbdad2c94e7cfcdc6f
4fb550c621b7cc1b5deec49acebab258a32196e8216b025eb3988431fc94bf9e
GET /tb/sea-coast_story.jpg HTTP/1.1
Host: rtgallery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Wed, 17 Jul 2024 13:43:05 GMT
Content-Type: image/jpeg
Content-Length: 51787
Last-Modified: Mon, 02 Oct 2017 18:18:27 GMT
Connection: keep-alive
ETag: "59d282f3-ca4b"
Accept-Ranges: bytes
504 B IP
ASN #20940 Akamai International B.V.
Hash e8089a5fc0745148d86d00ea3128f8bc
3b55b61fd9a12e6e21f6aff9f3b0c2f2a9a7849a
4bd8cb39d0eaaac68f1c61bc82d0e2d5e5c35eeee423fd1bc154221e25935d6a
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "4BD8CB39D0EAAAC68F1C61BC82D0E2D5E5C35EEEE423FD1BC154221E25935D6A"
Last-Modified: Mon, 15 Jul 2024 20:25:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2965
Expires: Wed, 17 Jul 2024 15:32:51 GMT
Date: Wed, 17 Jul 2024 14:43:26 GMT
Connection: keep-alive
GET pornogids.net/contents/videos_screenshots/109000/109076/preview.jpg
200 OK 30 kB URL GET HTTP/2 pornogids.net/contents/videos_screenshots/109000/109076/preview.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectpornogids.net
FingerprintC9:3A:D8:48:D9:87:5C:4E:E7:93:81:AC:FE:3E:01:AB:10:3B:79:A1
ValidityFri, 12 Jul 2024 09:17:04 GMT - Thu, 10 Oct 2024 09:17:03 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc58.54.100", baseline, precision 8, 646x364, components 3
Hash 3033e77124ef41781aa9e8016a57e327
e0c003e92fbc3aff7d232819810b6a9d5ea52448
b7a3737da8373e9fae50732124cb8d482b0d0fa90268d16b4e579974050bbcd0
GET /contents/videos_screenshots/109000/109076/preview.jpg HTTP/1.1
Host: pornogids.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: image/jpeg
content-length: 29817
cf-bgj: h2pri
etag: "5e970df7-7479"
last-modified: Wed, 15 Apr 2020 13:36:55 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2718
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7T5cABd%2B52qiSHv0%2Fz%2Bgyr0REN7DbYrTGDk9YRM997R9up3C%2FKIhsDPp8C%2B8VlcxtZYRQAUIWy9RVKqqfoSEIiUZ%2FkxTtkh2yMutttdtqym0vi3Th1yGmzknJt83OwQl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b0118097b770e-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET img.redwap-cdn.com/098/98255/98255_320x180.jpg
200 OK 23 kB URL GET HTTP/2 img.redwap-cdn.com/098/98255/98255_320x180.jpg
IP
Certificate IssuerLet's Encrypt
Subjectredwap-cdn.com
Fingerprint47:0A:60:DF:B7:3C:84:91:F6:37:38:1E:AB:01:88:3B:22:95:DF:6D
ValidityTue, 28 May 2024 08:45:18 GMT - Mon, 26 Aug 2024 08:45:17 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, comment: "Lavc55.18.102", baseline, precision 8, 320x180, components 3
Hash 8332388678af97f6f6da9a951f3cef91
139d2e8c45dae8f7af25a96670bd7f5c2ef0a645
ddf406b58591b84b7100ca20082b1173f5e4d47db489a9d770f93fdc3a1bcd07
GET /098/98255/98255_320x180.jpg HTTP/1.1
Host: img.redwap-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: image/jpeg
content-length: 22630
x-object-meta-mtime: 1451033035
etag: 8332388678af97f6f6da9a951f3cef91
last-modified: Wed, 03 Apr 2019 07:51:54 GMT
x-timestamp: 1554277913.94073
x-trans-id: txf4e0b24211594c5ca7396-0063c995f2
x-openstack-request-id: txf4e0b24211594c5ca7396-0063c995f2
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=31536000
expires: Fri, 19 Jul 2024 14:43:26 GMT
x-proxy-cache: HIT
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S4h8x8cE6vXN%2F85dyumCwSL7bIMypMejZb01nt470w1mrRJw%2Bw5vauVwmMWRX73r%2BeRxgK8Urk89ftlFIhGOe1%2FmfVM5HTfGLt6W1Et7NCQB7Yrcu9qTJ8HFDhC5G2LYcH%2BOp8w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b0117bbad94a5-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET emb4.teensexadd.com/x-vids/73/e5/1544916903.31911.jpg?e=4831497994&hash=HvskjnDueBTHLTH4bSuH9w
200 OK 9.3 kB URL GET HTTP/2 emb4.teensexadd.com/x-vids/73/e5/1544916903.31911.jpg?e=4831497994&hash=HvskjnDueBTHLTH4bSuH9w
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectemb4.teensexadd.com
FingerprintC9:C8:10:00:30:9F:87:6E:92:96:D2:1A:89:0F:2B:40:57:77:C7:EE
ValiditySat, 22 Jun 2024 23:13:02 GMT - Fri, 20 Sep 2024 23:13:01 GMT
File type JPEG image data, baseline, precision 8, 720x406, components 3
Hash 1242f5395c6cd7c60dcb9c4e5d8971e9
5ed1a3bac1089ef000058db33cfdd264835d7575
596ba40b08df6eebe095215f0669589eb7177cc28f2dfb604e4b443b65653f2e
GET /x-vids/73/e5/1544916903.31911.jpg?e=4831497994&hash=HvskjnDueBTHLTH4bSuH9w HTTP/1.1
Host: emb4.teensexadd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: image/jpeg
content-length: 9319
last-modified: Sat, 15 Dec 2018 23:35:09 GMT
expires: Fri, 16 Aug 2024 14:43:26 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=15768000; includeSubDomains
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
x-robots-tag: none
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash ab24dd81b46397a0def43f67864fbd7c
ca1edccdc4b85af2dcbda0e3c0a7f6bbe846b39a
db94aa0408e4c80045c3f4e786dc06d6a48ba006d6ce8238a56feca85657d98c
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DB94AA0408E4C80045C3F4E786DC06D6A48BA006D6CE8238A56FECA85657D98C"
Last-Modified: Mon, 15 Jul 2024 19:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9748
Expires: Wed, 17 Jul 2024 17:25:54 GMT
Date: Wed, 17 Jul 2024 14:43:26 GMT
Connection: keep-alive
GET icdn05.boysexclip.com/63288/3164389_8.jpg
200 OK 20 kB URL GET HTTP/2 icdn05.boysexclip.com/63288/3164389_8.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjecticdn05.boysexclip.com
Fingerprint22:93:BB:91:A2:42:FD:26:A3:28:18:EB:76:8F:2E:37:E0:58:7D:FB
ValidityWed, 03 Jul 2024 03:00:45 GMT - Tue, 01 Oct 2024 03:00:44 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 959x810, segment length 16, baseline, precision 8, 480x320, components 3
Hash e94cdc68590b61ffb09ae51daccc8b0e
17c629e0fbeb01799bca8c39b388740feea2e958
cf54d0a834859f0630f76dc681aab251c3febd2a839c1154e92f7346dd4ac5ff
GET /63288/3164389_8.jpg HTTP/1.1
Host: icdn05.boysexclip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: image/jpeg
content-length: 20374
server: nginx/1.24.0
x-object-meta-mtime: 1606149529.551100408
etag: e94cdc68590b61ffb09ae51daccc8b0e
last-modified: Tue, 13 Sep 2022 01:00:26 GMT
x-timestamp: 1663030825.00419
x-trans-id: tx1a44281ea42a4495b535e-006628254d
x-openstack-request-id: tx1a44281ea42a4495b535e-006628254d
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=2592000
expires: Fri, 16 Aug 2024 14:43:26 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET cn1.govqie.com/videos/202310/24/65377d115142f192d1f21242/cover.jpg
200 OK 1.2 kB URL GET HTTP/1.1 cn1.govqie.com/videos/202310/24/65377d115142f192d1f21242/cover.jpg
IP
Certificate IssuerLet's Encrypt
Subjectcn1.govqie.com
Fingerprint0C:38:7E:91:76:22:BC:9E:EF:DF:79:1C:53:8B:C8:D3:A5:89:D1:1E
ValidityWed, 03 Jul 2024 09:12:26 GMT - Tue, 01 Oct 2024 09:12:25 GMT
File type HTML document, ASCII text, with very long lines (426)
Hash d14db81340c25c7971e4e2a62a3d9bcf
80d3716b50700ccb6a2098ef6a420e2ec52f6937
3780216e500009a18e2500e9bcdb6c894a69abdb53cde355510f0b219145d095
GET /videos/202310/24/65377d115142f192d1f21242/cover.jpg HTTP/1.1
Host: cn1.govqie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 17 Jul 2024 14:43:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1158
X-Request-Id: aa3675ac-2526-403d-9f34-41618d223537
Cache-Control: no-store, max-age=0
Accept-Ch: sec-ch-prefers-color-scheme
Critical-Ch: sec-ch-prefers-color-scheme
Vary: sec-ch-prefers-color-scheme
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_Zb9fQuBU34lA7OSToN8b8gu3qLCOQkzUMq4O9fYV8CFqCxSJOeIi5x+X0thDTV5uBEcJG0E5UzVpm2P2ikdbpg==
Set-Cookie: parking_session=aa3675ac-2526-403d-9f34-41618d223537; expires=Wed, 17 Jul 2024 14:58:26 GMT; path=/
Connection: close
GET savsq.com/favicon.ico
200 OK 317 B IP
Certificate IssuerLet's Encrypt
Subjectsavaa.cc
Fingerprint6D:DF:DA:CF:95:D9:31:95:1B:B4:C9:DC:2A:F1:F1:34:72:85:76:A8
ValidityMon, 10 Jun 2024 16:45:04 GMT - Sun, 08 Sep 2024 16:45:03 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Hash 9faaf9ec3c64419a98f0171d30788832
7cfd0139434fc6b4405da2399e18c6dad491026d
3e5dffb92459dc10edb044ea8a7db6c29149515a9a13c392fae01108ca48464b
GET /favicon.ico HTTP/1.1
Host: savsq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: image/x-icon
content-length: 317
last-modified: Tue, 02 Jan 2024 16:25:55 GMT
etag: "65943913-13d"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET cdn4.hifimov.co/picture/original/nUE0pUZ6Yl9cYay0nJ1aYzAioF9_nF8kLwInnSSiFHcFHF9bpJEyMzS1oUDhnaOaXFfbXRucEzyAo3LhL_8cK_ukMTIzLKIfqP5dpTp5v7P/(HiFiMov.co)_sunday-morning-preview-hqdefault.jpg
200 OK 17 kB URL GET HTTP/2 cdn4.hifimov.co/picture/original/nUE0pUZ6Yl9cYay0nJ1aYzAioF9_nF8kLwInnSSiFHcFHF9bpJEyMzS1oUDhnaOaXFfbXRucEzyAo3LhL_8cK_ukMTIzLKIfqP5dpTp5v7P/(HiFiMov.co)_sunday-morning-preview-hqdefault.jpg
IP
Certificate IssuerLet's Encrypt
Subject*.hifimov.co
FingerprintD4:CC:F6:2B:BD:95:FC:BC:B7:1C:1D:CE:BC:B1:9E:21:0B:B3:4E:F9
ValiditySat, 18 May 2024 03:00:04 GMT - Fri, 16 Aug 2024 03:00:03 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 480x360, components 3
Hash 907719e81cf579888e627ce3666a980f
8ce7a1b89b9d39ad5663b7fb5ee40793a6050e6e
b3835b25a61cd7521a50b40a78c4fe598c01b68a30d3c3867266422712096db4
GET /picture/original/nUE0pUZ6Yl9cYay0nJ1aYzAioF9_nF8kLwInnSSiFHcFHF9bpJEyMzS1oUDhnaOaXFfbXRucEzyAo3LhL_8cK_ukMTIzLKIfqP5dpTp5v7P/(HiFiMov.co)_sunday-morning-preview-hqdefault.jpg HTTP/1.1
Host: cdn4.hifimov.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: image/jpeg
content-length: 16628
accept-ranges: bytes
last-modified: Wed, 17 Jul 2024 14:43:26 GMT
cache-control: max-age=8640000
expires: Fri, 25 Oct 2024 14:43:26 GMT
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
GET javp1.cc/upload/vod/20240219-4/ff7a7713323ba9009184efeec180246c.jpg
404 Not Found 2.1 kB URL GET HTTP/2 javp1.cc/upload/vod/20240219-4/ff7a7713323ba9009184efeec180246c.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 61770fce11a09cf460d45cb507670b0b
a91724b0e57f8426b0e3572cbcb226359ae6501c
1fdb617ec52b6ad2b44ef4da4abca278a8f8b3cb5cbffc7efa9aaf3a0c6eb24a
GET /upload/vod/20240219-4/ff7a7713323ba9009184efeec180246c.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=82DPDjfqLa6ONOUda5sWKRTN6PCi8TmsYvlMrobphdLs%2Fh%2BBZ2pX4yXJz9DFgkH%2BWYuwRSdGXMhuoUr%2FVuOxJdEiZnHOjsuQZqQ5kSfJrWjPC5f7dGcMETZ6lQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010e6aca56c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET thumbs.nonktube.com/_oEe_1QThAkffYbzYE-q/0x230/filters:quality(85)/CP/h8/f8xXmWjQwoHHET7TW4/Passed-Out-Teen-Gets-Taken-Advantage-Of-At-A-Party-And-Fucked-Silly.jpg
200 OK 16 kB URL GET HTTP/2 thumbs.nonktube.com/_oEe_1QThAkffYbzYE-q/0x230/filters:quality(85)/CP/h8/f8xXmWjQwoHHET7TW4/Passed-Out-Teen-Gets-Taken-Advantage-Of-At-A-Party-And-Fucked-Silly.jpg
IP
Certificate IssuerLet's Encrypt
Subjectnonktube.com
FingerprintD1:44:82:39:65:28:06:B3:9F:B7:4F:41:36:F2:6E:E4:B4:73:94:6C
ValidityTue, 16 Jul 2024 07:59:37 GMT - Mon, 14 Oct 2024 07:59:36 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 307x230, components 3
Hash 5e8928f6b4b18165c8f33d2631bb5c67
e29a192ba7c56eef4976b69275dcc3f1662569f5
ea14a4f392c9991fb37ab37e7e21c9afea33f54247a974dd8ed473557c26823d
GET /_oEe_1QThAkffYbzYE-q/0x230/filters:quality(85)/CP/h8/f8xXmWjQwoHHET7TW4/Passed-Out-Teen-Gets-Taken-Advantage-Of-At-A-Party-And-Fucked-Silly.jpg HTTP/1.1
Host: thumbs.nonktube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-disposition: inline
content-length: 15652
content-type: image/jpeg
expires: Wed, 17 Jul 2024 14:43:26 GMT
date: Wed, 17 Jul 2024 14:43:26 GMT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, OPTIONS
access-control-max-age: 604800
cache-control: public, max-age=604800
X-Firefox-Spdy: h2
GET ru.uzbum.su/files/russkoe_porno/svodnyiy_brat_trahaet_mladshuyu_sestru_v_pisku/screen.jpg
200 OK 44 kB URL GET HTTP/2 ru.uzbum.su/files/russkoe_porno/svodnyiy_brat_trahaet_mladshuyu_sestru_v_pisku/screen.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectuzbum.su
FingerprintA9:8A:50:07:40:16:7D:55:6D:40:BF:D5:46:70:98:C5:38:D2:69:81
ValidityThu, 13 Jun 2024 01:01:07 GMT - Wed, 11 Sep 2024 01:01:06 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 480x245, components 3
Hash cc7930f3f2125affb52b275dda05014f
65d7ba412eb501683a564d8e00c5029c030a2ca0
cbca8f93cab5ea357e378ab99be4c0073b649fa5f169f2f7d667fe53f451ad87
GET /files/russkoe_porno/svodnyiy_brat_trahaet_mladshuyu_sestru_v_pisku/screen.jpg HTTP/1.1
Host: ru.uzbum.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://av.tube4.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: image/jpeg
content-length: 44272
last-modified: Thu, 31 Jan 2019 19:11:53 GMT
etag: "5c534879-acf0"
cache-control: max-age=120
cf-cache-status: HIT
age: 5333
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sJGOZRVRDDMGgy76tDGOfrbp%2FkQ4E8nw4kQ84HEW%2Bg%2BUg6NCpNWWdhO1dN7fL007WO5cHYX%2FM%2FSTDSJfFUo7TaTAJFFETMJjAnOQpKqLsAihcmA74hvKZPgMXUPdZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01192a7f56a8-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET img.cdnhuo.com/nb/tmb/000/000/843/1.jpg
200 OK 6.7 kB URL GET HTTP/2 img.cdnhuo.com/nb/tmb/000/000/843/1.jpg
IP
Certificate IssuerLet's Encrypt
Subjectimg.cdnhuo.com
Fingerprint11:B8:CE:9F:AC:15:DC:9C:2F:A8:D4:67:8D:8C:3C:D6:61:33:25:51
ValidityFri, 28 Jun 2024 03:07:49 GMT - Thu, 26 Sep 2024 03:07:48 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3
Hash dfcbfcc8b0af01573ef3b705d1d20f62
d74d473d2c30b0bf11ae0b09e26db12610d1b9ac
9fdc61a89c6a031bfb3e13d0348943e3f17c7881894864c98012e9dbb250a22a
GET /nb/tmb/000/000/843/1.jpg HTTP/1.1
Host: img.cdnhuo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Jul 2024 14:43:26 GMT
etag: "1a46-6586b25e-5c3cb3;;;"
last-modified: Sat, 23 Dec 2023 10:11:42 GMT
content-type: image/jpeg
content-length: 6726
accept-ranges: bytes
date: Wed, 17 Jul 2024 14:43:26 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash ab24dd81b46397a0def43f67864fbd7c
ca1edccdc4b85af2dcbda0e3c0a7f6bbe846b39a
db94aa0408e4c80045c3f4e786dc06d6a48ba006d6ce8238a56feca85657d98c
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DB94AA0408E4C80045C3F4E786DC06D6A48BA006D6CE8238A56FECA85657D98C"
Last-Modified: Mon, 15 Jul 2024 19:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9748
Expires: Wed, 17 Jul 2024 17:25:54 GMT
Date: Wed, 17 Jul 2024 14:43:26 GMT
Connection: keep-alive
GET pizdauz.cc/files/chechenskoe_porno/chechenets_pod_prosmotra_porno_sidit_drochit/screen.jpg
27 kB URL GET pizdauz.cc/files/chechenskoe_porno/chechenets_pod_prosmotra_porno_sidit_drochit/screen.jpg
IP
ASN #207728 EUROHOSTER Ltd.
Certificate IssuerLet's Encrypt
Subjectpizdauz.cc
FingerprintA5:3D:97:7E:15:78:D3:A8:07:35:A9:8D:27:61:30:DE:28:ED:56:DB
ValidityMon, 01 Jul 2024 23:14:21 GMT - Sun, 29 Sep 2024 23:14:20 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 479x392, components 3
Hash 2a209b168ff4e1f7cb48452d94faa5ac
3720278713be6d78ef2aa7b68f79c6d7eb90213f
fb69e88d1d4ad5e94379f2d62e6f4620ce189959fa28f6d8ee895fa1b30b3057
GET /files/chechenskoe_porno/chechenets_pod_prosmotra_porno_sidit_drochit/screen.jpg HTTP/1.1
Host: pizdauz.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Jul 2024 14:43:26 GMT
Content-Type: image/jpeg
Last-Modified: Thu, 02 Jul 2020 15:49:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5efe0204-693c"
Content-Encoding: gzip
728 B URL zerossl.ocsp.sectigo.com/
IP
Hash 3581ee8d6bd9915c018de65977d6b07d
51904d2ef6e35ecd3d28c1c0d3683915859ae8b3
bc29e420b22565a2385355652b09bb9be3a47f679c30e5e5b48d64e86a0a25b2
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 17 Jul 2024 14:43:26 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Wed, 17 Jul 2024 03:26:17 GMT
Expires: Wed, 24 Jul 2024 03:26:16 GMT
Etag: "51904d2ef6e35ecd3d28c1c0d3683915859ae8b3"
Cache-Control: max-age=563820,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 8a4b0119b928b4ee-OSL
GET img.jingpinx.top/upload/vod/20231226-1/f900d24fb6e222e7debfe4145d61ddac.jpg
200 OK 246 kB URL GET HTTP/1.1 img.jingpinx.top/upload/vod/20231226-1/f900d24fb6e222e7debfe4145d61ddac.jpg
IP
Certificate IssuerLet's Encrypt
Subjectimg.jingpinx.top
Fingerprint6A:C9:59:5B:AC:31:1A:22:CD:C7:C9:34:C8:91:FB:01:8A:8B:92:9B
ValidityWed, 15 May 2024 03:00:25 GMT - Tue, 13 Aug 2024 03:00:24 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 718x404, components 3
Size 246 kB (246521 bytes)
Hash 962b8101f6e535840477e2b0fba6ad57
c20eda23a21612ff479c57be3f0363acc95b6d1e
168c99d66c2d9637129eb9a652246d4c55d71d39323e87c00b52153f65e316be
GET /upload/vod/20231226-1/f900d24fb6e222e7debfe4145d61ddac.jpg HTTP/1.1
Host: img.jingpinx.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Content-Length: 246521
Content-Type: image/jpeg
Date: Tue, 16 Jul 2024 03:33:06 GMT
Etag: "658a85b8-3c2f9"
Expires: Thu, 15 Aug 2024 03:33:06 GMT
Last-Modified: Tue, 16 Jul 2024 03:33:06 GMT
Server: openresty
X-Cache: HIT, policy, disk
GET jsjs.4jpg.top/index.php?js=av4&advertisement&
152 kB URL GET jsjs.4jpg.top/index.php?js=av4&advertisement&
IP
Certificate IssuerGoogle Trust Services
Subject4jpg.top
Fingerprint4B:58:1B:2D:6E:5C:08:9C:6A:B9:EC:DD:5E:F7:DE:5A:0A:7C:75:B1
ValidityWed, 03 Jul 2024 17:20:57 GMT - Tue, 01 Oct 2024 17:20:56 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (6439), with CRLF line terminators
Size 152 kB (152434 bytes)
Hash 08ee1202d794e003df3416ccf28a76a7
9532b6aa1b8108fb6e163fa30bf74805187940ab
0c823075a8ac6a3293f54bdcc19e85b579fa4bb04afd16d6c7d915f8d41e5f79
GET /index.php?js=av4&advertisement& HTTP/1.1
Host: jsjs.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: text/html; charset=UTF-8
imghost: 17296161209-h-jsjs4jpgtopmh--RU-rm16215822256/index.php?js=av4&advertisement&
56nloadrate: 4.43125
cache-control: public, max-age=14400, s-max-age=1800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 146
last-modified: Wed, 17 Jul 2024 14:40:58 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7q5LgKptFkVHBmIz5TTE2nIkFdmdqPWkO4geqZ5ps9vpFThyVtQTCtySbTlECJeDT6T7bm%2FnPtzaIc4yJ9IFC06SShTFmfj5mJlrq%2BzbEhkhlVso2g20MMZ1dATpz5HK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010c7da556af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
504 B IP
ASN #20940 Akamai International B.V.
Hash 4e3596131d25b51ca80c1aed173d10dc
7a15a950abbec11b6513f9315f014e02d2d974f4
368c7ddaf7cd0737cd310f8cfcbf23fa6dd129e69bc96865a5d6bb948286c164
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "368C7DDAF7CD0737CD310F8CFCBF23FA6DD129E69BC96865A5D6BB948286C164"
Last-Modified: Mon, 15 Jul 2024 20:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15326
Expires: Wed, 17 Jul 2024 18:58:52 GMT
Date: Wed, 17 Jul 2024 14:43:26 GMT
Connection: keep-alive
GET pizdauz.cc/files/kirgizskoe_porno/krasivoe_porno_kirgizki_i_ee_molodogo_lyubovnika/screen.jpg
11 kB URL GET pizdauz.cc/files/kirgizskoe_porno/krasivoe_porno_kirgizki_i_ee_molodogo_lyubovnika/screen.jpg
IP
ASN #207728 EUROHOSTER Ltd.
Certificate IssuerLet's Encrypt
Subjectpizdauz.cc
FingerprintA5:3D:97:7E:15:78:D3:A8:07:35:A9:8D:27:61:30:DE:28:ED:56:DB
ValidityMon, 01 Jul 2024 23:14:21 GMT - Sun, 29 Sep 2024 23:14:20 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 273x200, components 3
Hash 8c953e7203dde1106025e77370976a0b
188cac7ee409c6600223a4f70572ca6962c6a68b
38b050cbe1e41c513f0fe119e411f2af89a5178fcffe918f02bf4581eb88dbd5
GET /files/kirgizskoe_porno/krasivoe_porno_kirgizki_i_ee_molodogo_lyubovnika/screen.jpg HTTP/1.1
Host: pizdauz.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Jul 2024 14:43:26 GMT
Content-Type: image/jpeg
Last-Modified: Thu, 02 Jul 2020 15:22:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5efdfbc0-2a9f"
Content-Encoding: gzip
GET img.jingpinx.top/upload/vod/20240108-1/2550bb28ef4f45e9e9efdde9a4fa64c3.jpg
200 OK 106 kB URL GET HTTP/1.1 img.jingpinx.top/upload/vod/20240108-1/2550bb28ef4f45e9e9efdde9a4fa64c3.jpg
IP
Certificate IssuerLet's Encrypt
Subjectimg.jingpinx.top
Fingerprint6A:C9:59:5B:AC:31:1A:22:CD:C7:C9:34:C8:91:FB:01:8A:8B:92:9B
ValidityWed, 15 May 2024 03:00:25 GMT - Tue, 13 Aug 2024 03:00:24 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.4 (Macintosh), datetime=2023:09:05 16:03:35], progressive, precision 8, 718x404, components 3
Size 106 kB (105876 bytes)
Hash 4a79ef31b399ddd0c5cfe1fc3f830a25
930cf4a3cd84e67e83f2b3c3a31c780df7e95a9b
503054cf4528894305d5d4ca85f581f876ffdc3c28da248988a0b7973c9888d0
GET /upload/vod/20240108-1/2550bb28ef4f45e9e9efdde9a4fa64c3.jpg HTTP/1.1
Host: img.jingpinx.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Content-Length: 105876
Content-Type: image/jpeg
Date: Tue, 16 Jul 2024 03:33:07 GMT
Etag: "659b8fdc-19d94"
Expires: Thu, 15 Aug 2024 03:33:07 GMT
Last-Modified: Tue, 16 Jul 2024 03:33:07 GMT
Server: openresty
X-Cache: HIT, policy, disk
GET img.jingpinx.top/upload/vod/20240113-1/4b2325fa88383087fe1efc69386c819a.jpg
200 OK 139 kB URL GET HTTP/1.1 img.jingpinx.top/upload/vod/20240113-1/4b2325fa88383087fe1efc69386c819a.jpg
IP
Certificate IssuerLet's Encrypt
Subjectimg.jingpinx.top
Fingerprint6A:C9:59:5B:AC:31:1A:22:CD:C7:C9:34:C8:91:FB:01:8A:8B:92:9B
ValidityWed, 15 May 2024 03:00:25 GMT - Tue, 13 Aug 2024 03:00:24 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.4 (Macintosh), datetime=2023:03:03 12:32:27], progressive, precision 8, 718x404, components 3
Size 139 kB (138819 bytes)
Hash c641f9e9473b3434f5f64a81b5eabfe4
baeecd18cb157f14f5e6cf2836c3fed610aa544d
4b36c2312fc434f5766f3b1751c1fd944f587edd32068d46dac224544540fef2
GET /upload/vod/20240113-1/4b2325fa88383087fe1efc69386c819a.jpg HTTP/1.1
Host: img.jingpinx.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Content-Length: 138819
Content-Type: image/jpeg
Date: Tue, 16 Jul 2024 03:33:12 GMT
Etag: "65a223e6-21e43"
Expires: Thu, 15 Aug 2024 03:33:12 GMT
Last-Modified: Tue, 16 Jul 2024 03:33:12 GMT
Server: openresty
X-Cache: HIT, policy, disk
GET www.w3schools.com/w3css/4/w3.css
200 OK 5.3 kB URL GET HTTP/2 www.w3schools.com/w3css/4/w3.css
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerDigiCert Inc
Subject*.w3schools.com
Fingerprint20:AF:FF:E1:FC:DB:58:C8:05:B7:D2:97:1F:8F:A1:C6:AD:ED:59:3A
ValidityWed, 03 Apr 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
File type Unicode text, UTF-8 (with BOM) text
Hash ba0537e9574725096af97c27d7e54f76
bd46b47d74d344f435b5805114559d45979762d5
4a7611bc677873a0f87fe21727bc3a2a43f57a5ded3b10ce33a0f371a2e6030f
GET /w3css/4/w3.css HTTP/1.1
Host: www.w3schools.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
age: 1047316
cache-control: public,max-age=31536000,public
content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com;
content-type: text/css
date: Wed, 17 Jul 2024 14:43:26 GMT
etag: "0a2eb1cc3ceda1:0+gzip"
last-modified: Fri, 05 Jul 2024 10:07:16 GMT
server: ECS (ska/F716)
vary: Accept-Encoding
x-cache: HIT
x-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com;
x-powered-by: ASP.NET
content-length: 5256
X-Firefox-Spdy: h2
GET pict.nesaporn.com/imgr/a/b/d/h/q/sneaky_daughter_fucker-4_tmb.jpg
200 OK 16 kB URL GET HTTP/1.1 pict.nesaporn.com/imgr/a/b/d/h/q/sneaky_daughter_fucker-4_tmb.jpg
IP
ASN #208046 ColocationX Ltd.
Certificate IssuerZeroSSL
Subjectpict.nesaporn.com
Fingerprint5E:6B:CE:0F:90:40:DE:59:D3:11:6D:18:64:D2:7A:09:A5:49:3A:62
ValiditySat, 18 May 2024 00:00:00 GMT - Fri, 16 Aug 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 320x240, components 3
Hash 45e81d76706c6a83192c0371b0bb6817
b180ec0ef3eda35fb938eab5ed57bf8b0fb7a04f
7445352774b3d89f48776d5058d0f7e5d1cfe15cad32ce19e6845112896083a2
GET /imgr/a/b/d/h/q/sneaky_daughter_fucker-4_tmb.jpg HTTP/1.1
Host: pict.nesaporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 17 Jul 2024 14:43:26 GMT
Content-Type: image/jpeg
Content-Length: 15593
Last-Modified: Sat, 25 Apr 2015 11:00:21 GMT
Connection: keep-alive
ETag: "553b73c5-3ce9"
Expires: Fri, 16 Aug 2024 14:43:26 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
GET javp1.cc/upload/vod/20240219-3/750e4cda365342772b7ee4f1cbd3f9ef.jpg
404 Not Found 1.9 kB URL GET HTTP/2 javp1.cc/upload/vod/20240219-3/750e4cda365342772b7ee4f1cbd3f9ef.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 61770fce11a09cf460d45cb507670b0b
a91724b0e57f8426b0e3572cbcb226359ae6501c
1fdb617ec52b6ad2b44ef4da4abca278a8f8b3cb5cbffc7efa9aaf3a0c6eb24a
GET /upload/vod/20240219-3/750e4cda365342772b7ee4f1cbd3f9ef.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SJ27znhGrMPPQ%2F8SKj10HZ9Q6w1QuzBRmoA9JOoKVbxHVEztlW%2B1JqoE0qhF3iTCA5uZiymmy3bUU6qhq3w2uO6DzRVxAAomdQvSvN2IbZTldWO8dB1haTNoYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010e6ac856c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 2porno.online/uploads/posts/2022-05/1652171897_1543514997_658566436457645.jpeg
200 OK 41 kB URL GET HTTP/1.1 2porno.online/uploads/posts/2022-05/1652171897_1543514997_658566436457645.jpeg
IP
ASN #207728 EUROHOSTER Ltd.
Certificate IssuerLet's Encrypt
Subject2porno.online
Fingerprint6C:1E:6E:71:7C:1E:B6:3D:05:D0:68:5E:BC:D4:1F:69:CB:D2:8C:D3
ValidityThu, 13 Jun 2024 23:06:12 GMT - Wed, 11 Sep 2024 23:06:11 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 540x318, components 3
Hash 2b4b1290e68d18618b619780b2e8e987
a069bb882b5d76a9423e55b01500536463b29c29
97426dca823ae19abedb2bfa2981daefde342b0c7f0a259f2b77491e65ed5add
GET /uploads/posts/2022-05/1652171897_1543514997_658566436457645.jpeg HTTP/1.1
Host: 2porno.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Jul 2024 14:43:26 GMT
Content-Type: image/jpeg
Content-Length: 40803
Last-Modified: Wed, 10 Aug 2022 09:18:46 GMT
Connection: keep-alive
ETag: "62f377f6-9f63"
Expires: Thu, 18 Jul 2024 14:43:26 GMT
Cache-Control: max-age=86400
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
GET javp1.cc/upload/vod/20240219-3/0b3f5fd85a7d5c9facf2796224ebdf74.jpg
404 Not Found 21 kB URL GET HTTP/2 javp1.cc/upload/vod/20240219-3/0b3f5fd85a7d5c9facf2796224ebdf74.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 61770fce11a09cf460d45cb507670b0b
a91724b0e57f8426b0e3572cbcb226359ae6501c
1fdb617ec52b6ad2b44ef4da4abca278a8f8b3cb5cbffc7efa9aaf3a0c6eb24a
GET /upload/vod/20240219-3/0b3f5fd85a7d5c9facf2796224ebdf74.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pz1BWaUCK78c6xr2bi8cZiYlknUKIZU%2Be%2FPpfBvyh2fVusznoAGTTsD5RfB54N8Zi%2BawrcDvI3CNR2hNB3EufZKH0rSodNGbUcNAjyfDPGeNQ9LKBnk1ciXPpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010f4c5756c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.bilibili.com/favicon.ico
200 OK 4.3 kB URL GET HTTP/2 www.bilibili.com/favicon.ico
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGlobalSign nv-sa
Subject*.bilibili.com
FingerprintEF:28:1C:22:A3:07:B0:B8:DB:B1:8E:91:B1:A0:A9:04:6C:0E:14:3D
ValidityWed, 18 Oct 2023 11:06:08 GMT - Mon, 18 Nov 2024 11:06:07 GMT
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Hash f2d2896c488493e18c1b112cdd9bb1d9
9566a02d9d66bbeaea16df206ea4d9add214826f
2681561eb24e7435fea1acf26f3af95e4efc9f7d451587b58bef62f030f337e9
GET /favicon.ico HTTP/1.1
Host: www.bilibili.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: image/vnd.microsoft.icon
content-length: 4286
cache-control: max-age=604800
cross-origin-resource-policy: cross-origin
etag: f2d2896c488493e18c1b112cdd9bb1d9
expires: Wed, 24 Jul 2024 14:43:26 GMT
last-modified: Fri, 10 May 2024 08:26:53 GMT
server: KDwwIBBbXkIOUxRfAgAARTgyKm8mPT1FG14QWQ==
x-amz-request-id: 83f5bdc504665d37
x-amz-version-id: v1.0.0
vary: Origin, Origin,Accept-Encoding
x-cache-webcdn: HIT from blzone02
x-cache-time: 604800
x-origin-time: max-age=31536000
x-save-date: Mon, 03 Jun 2024 03:25:22 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET www.xnxx.com/favicon.ico
200 OK 7.4 kB IP
ASN #46652 SERVERSTACK-ASN
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerSectigo Limited
Subject*.xnxx.com
Fingerprint7E:44:61:5A:21:A9:68:53:D8:7D:0C:05:4F:5C:13:A3:BB:64:E6:01
ValidityTue, 14 Nov 2023 00:00:00 GMT - Sat, 14 Dec 2024 23:59:59 GMT
File type MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel
Hash 725f5c58ca003ab6820842bf8c5243d0
a91c1501ad4056281ea6be0185fffec77531e338
5754fa14d00b25cb051bdd748dd4ba5b1ac3c2cc7f36931f5deb316bc0a725ee
GET /favicon.ico HTTP/1.1
Host: www.xnxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 17 Jul 2024 14:43:27 GMT
Content-Type: image/x-icon
Content-Length: 7406
Last-Modified: Mon, 09 Oct 2023 14:43:32 GMT
ETag: "65241194-1cee"
Expires: Wed, 24 Jul 2024 14:43:27 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
Server: nginx
GET fixedjs.jtube.top/?vidjs=51qxez
27 kB URL GET fixedjs.jtube.top/?vidjs=51qxez
IP
Certificate IssuerGoogle Trust Services
Subjectjtube.top
FingerprintB8:AD:B0:0A:D2:ED:70:84:59:D1:0C:41:87:8A:ED:D6:6A:97:15:85
ValidityWed, 10 Jul 2024 12:54:21 GMT - Tue, 08 Oct 2024 12:54:20 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (752), with CRLF line terminators
Hash 064a0e13d818e729180f189a921b578c
9aa08fbffcd72b3523f867a4c28c1a448b7bce5b
d7610f383fd949281b94dc52843fefc865f716bff041dbd5ead9af614e7b904d
GET /?vidjs=51qxez HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: text/html; charset=UTF-8
pdo-line12: host-fixedjs.jtube.top127.0.0.1-myhost-fixedjs.jtube.top127.0.0.1/?vidjs=51qxez
phost:
pdo-line55: host-fixedjs.jtube.top127.0.0.1-myhost-fixedjs.jtube.top127.0.0.1/?vidjs=51qxez
cache-control: public, max-age=172800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-re-la: EXPIRED
xkey-re-re-la: fixedjs./?vidjs=51qxez-A-fixedjs.jtube.top-fixedjs.jtube.top-myzone---yes
x-proxy-cache-ds-la: HIT
xkey-ds-la: fixedjs./?vidjs=51qxez-A-fixedjs.jtube.top--my_zone
cf-cache-status: HIT
age: 109329
last-modified: Tue, 16 Jul 2024 08:21:16 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ef4Z4r9Te0GBlT0VIcdwKwbR1cWPQtUH1apeM%2FrI2%2FCShG5V3NnzWds%2Fwr754rW%2BuSky1etZeEQ7BFgDE3mK%2B1ChTfX7TgvmBSLL8gJcvUUaxEUuEcVDyWPxPaoXOw3vJi6rmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b01168ed41c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET cdn5-static.motherlessmedia.com/images/no_image.jpg
200 OK 20 kB URL GET HTTP/2 cdn5-static.motherlessmedia.com/images/no_image.jpg
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjectmotherlessmedia.com
Fingerprint02:8E:B4:66:47:1D:01:A2:2A:06:84:FF:80:9C:2B:5A:A8:ED:27:1F
ValidityThu, 20 Jun 2024 09:01:52 GMT - Wed, 18 Sep 2024 09:01:51 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 150x150, components 3
Hash 138da7bd71a4ac24cb796615b49907b8
097a9d62b8774383e2a34ea2894be5ec35a74c20
7b06941157e843ea2e2b80f132110af09f72b143d65a78c44c36556174d91b89
GET /images/no_image.jpg HTTP/1.1
Host: cdn5-static.motherlessmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en.av4us.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:27 GMT
content-type: image/jpeg
content-length: 20198
last-modified: Thu, 20 Apr 2023 06:59:04 GMT
etag: "6440e2b8-4ee6"
expires: Fri, 26 Jul 2024 22:26:48 GMT
cache-control: max-age=1209600
x-server-w: web803
x-server-l: lb01
cf-cache-status: HIT
age: 404199
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CaJ8%2FokvR52ScAOd4TEMc3shvy6f%2Bw1wVKkyEO0783LoU8xitvSsI%2FRP5EM3Djqu%2FsZLTkHJHlosNMpWOd3uRSCcXSHgT3WrExAbf1XCiGP4TtaPrEA4SAHR%2BbDsNwwAb8JyrUyaxoV7uvGLIV1TMtbN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01217d9b48cd-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET savsq.com/template/appj/img/slogo1.png
200 OK 2.7 kB URL GET HTTP/2 savsq.com/template/appj/img/slogo1.png
IP
Requested by moz-nullprincipal:{e408f497-c7f4-4a43-9c3c-f51147ae6d25}?https://savsq.com
Certificate IssuerLet's Encrypt
Subjectsavaa.cc
Fingerprint6D:DF:DA:CF:95:D9:31:95:1B:B4:C9:DC:2A:F1:F1:34:72:85:76:A8
ValidityMon, 10 Jun 2024 16:45:04 GMT - Sun, 08 Sep 2024 16:45:03 GMT
File type PNG image data, 162 x 60, 8-bit/color RGBA, non-interlaced
Hash 3ea243ef1cea3e8769f30d2079db66df
56741203d4811ee613cbd9ae6daed924324a7c9a
7c775e4ef63fb98e9bc6e54dce3d2e5dd0ac1ef0daa1c2bdcd6f7a220eaa47c2
GET /template/appj/img/slogo1.png HTTP/1.1
Host: savsq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:27 GMT
content-type: image/png
content-length: 2697
last-modified: Sat, 16 Sep 2023 22:45:23 GMT
etag: "65063003-a89"
expires: Fri, 16 Aug 2024 14:43:27 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET savsq.com/template/appj/images/qd.png
200 OK 3.6 kB URL GET HTTP/2 savsq.com/template/appj/images/qd.png
IP
Requested by moz-nullprincipal:{e408f497-c7f4-4a43-9c3c-f51147ae6d25}?https://savsq.com
Certificate IssuerLet's Encrypt
Subjectsavaa.cc
Fingerprint6D:DF:DA:CF:95:D9:31:95:1B:B4:C9:DC:2A:F1:F1:34:72:85:76:A8
ValidityMon, 10 Jun 2024 16:45:04 GMT - Sun, 08 Sep 2024 16:45:03 GMT
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Hash 1c016e8624c89ec07460b3135328894f
cebbf78caf6b7689e8c73b360423cfba23b263b2
da9244fe2d7d3c835bfc78f341e1142287e3dfa5ec03a0497da6af666a80d0c8
GET /template/appj/images/qd.png HTTP/1.1
Host: savsq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:27 GMT
content-type: image/png
content-length: 3639
last-modified: Tue, 16 Jan 2024 14:59:16 GMT
etag: "65a699c4-e37"
expires: Fri, 16 Aug 2024 14:43:27 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET savsq.com/template/appj/img/user-d.png?v=1721227406
200 OK 4.0 kB URL GET HTTP/2 savsq.com/template/appj/img/user-d.png?v=1721227406
IP
Requested by moz-nullprincipal:{e408f497-c7f4-4a43-9c3c-f51147ae6d25}?https://savsq.com
Certificate IssuerLet's Encrypt
Subjectsavaa.cc
Fingerprint6D:DF:DA:CF:95:D9:31:95:1B:B4:C9:DC:2A:F1:F1:34:72:85:76:A8
ValidityMon, 10 Jun 2024 16:45:04 GMT - Sun, 08 Sep 2024 16:45:03 GMT
File type PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced
Hash f2859c95dd78fcbe57b493a26962b63a
f00d1a9042203440d8452128f4f353169c9fc35d
8e157ae86cb40c0e340d76b02651c2a79af420698d29bc201202620031713083
GET /template/appj/img/user-d.png?v=1721227406 HTTP/1.1
Host: savsq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:27 GMT
content-type: image/png
content-length: 4019
last-modified: Sat, 16 Sep 2023 22:48:53 GMT
etag: "650630d5-fb3"
expires: Fri, 16 Aug 2024 14:43:27 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET savsq.com/template/appj/css/layer.css
200 OK 34 kB URL GET HTTP/2 savsq.com/template/appj/css/layer.css
IP
Requested by moz-nullprincipal:{e408f497-c7f4-4a43-9c3c-f51147ae6d25}?https://savsq.com
Certificate IssuerLet's Encrypt
Subjectsavaa.cc
Fingerprint6D:DF:DA:CF:95:D9:31:95:1B:B4:C9:DC:2A:F1:F1:34:72:85:76:A8
ValidityMon, 10 Jun 2024 16:45:04 GMT - Sun, 08 Sep 2024 16:45:03 GMT
File type JavaScript source, ASCII text, with very long lines (51084)
Hash 43d5563f2ee6cb3992230d05972b4a79
4c891e950d096735c9a65c23f90f9c8199d8fcdb
3123008cb321cee6a49bb2e7d50d3dfae2525693a7d62b1df4da451c03636df9
GET /template/appj/css/layer.css HTTP/1.1
Host: savsq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:27 GMT
content-type: text/css
last-modified: Thu, 31 Aug 2023 18:37:20 GMT
vary: Accept-Encoding
etag: W/"64f0dde0-381f"
expires: Thu, 18 Jul 2024 02:43:27 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET savsq.com/template/appj/img/no-login.png
200 OK 11 kB URL GET HTTP/2 savsq.com/template/appj/img/no-login.png
IP
Requested by moz-nullprincipal:{e408f497-c7f4-4a43-9c3c-f51147ae6d25}?https://savsq.com
Certificate IssuerLet's Encrypt
Subjectsavaa.cc
Fingerprint6D:DF:DA:CF:95:D9:31:95:1B:B4:C9:DC:2A:F1:F1:34:72:85:76:A8
ValidityMon, 10 Jun 2024 16:45:04 GMT - Sun, 08 Sep 2024 16:45:03 GMT
File type PNG image data, 800 x 600, 8-bit/color RGBA, non-interlaced
Hash c000e8fc45ac4fda9431a4cb2ce35460
76006047d29b640d85c9372b97b60a325e605b00
82706dc19a5ff70d09caac251403f3e524410f2a1b930e5aea0ed0c3a40e92cd
GET /template/appj/img/no-login.png HTTP/1.1
Host: savsq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:27 GMT
content-type: image/png
content-length: 11432
last-modified: Sat, 06 Aug 2022 04:28:22 GMT
etag: "62edede6-2ca8"
expires: Fri, 16 Aug 2024 14:43:27 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET savsq.com/template/appj/img/user-d.png
200 OK 4.0 kB URL GET HTTP/2 savsq.com/template/appj/img/user-d.png
IP
Requested by moz-nullprincipal:{e408f497-c7f4-4a43-9c3c-f51147ae6d25}?https://savsq.com
Certificate IssuerLet's Encrypt
Subjectsavaa.cc
Fingerprint6D:DF:DA:CF:95:D9:31:95:1B:B4:C9:DC:2A:F1:F1:34:72:85:76:A8
ValidityMon, 10 Jun 2024 16:45:04 GMT - Sun, 08 Sep 2024 16:45:03 GMT
File type PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced
Hash f2859c95dd78fcbe57b493a26962b63a
f00d1a9042203440d8452128f4f353169c9fc35d
8e157ae86cb40c0e340d76b02651c2a79af420698d29bc201202620031713083
GET /template/appj/img/user-d.png HTTP/1.1
Host: savsq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:27 GMT
content-type: image/png
content-length: 4019
last-modified: Sat, 16 Sep 2023 22:48:53 GMT
etag: "650630d5-fb3"
expires: Fri, 16 Aug 2024 14:43:27 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET n.sinaimg.cn/front/20170503/IpfC-fyeuirh0638041.jpg
200 OK 18 kB URL GET HTTP/2 n.sinaimg.cn/front/20170503/IpfC-fyeuirh0638041.jpg
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Certificate IssuerDigiCert Inc
Subject*.weibo.cn
FingerprintA8:7A:A5:C5:D5:00:D5:37:49:86:82:51:4F:D2:2E:60:CF:50:35:4A
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x360, components 3
Hash ea3014e874438e227ebe85c03d78efc6
11d5e4548a05eb08a432678be3600fcd55e39013
0adb73eae6988ffbb4b2176b5ea8a47106657ca9127a81071e91c354e5ede215
GET /front/20170503/IpfC-fyeuirh0638041.jpg HTTP/1.1
Host: n.sinaimg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/jpeg
content-length: 17736
date: Wed, 29 May 2024 05:45:09 GMT
x-requestid: ed2c75b2-2405-2511-4621-047bcb4b7614
x-requester: GRPS000000ANONYMOUSE
x-filesize: 17736
x-amz-meta-crc32: 1F6EBFB5
cache-control: max-age=31536000
access-control-allow-headers: Origin, Content-Type, Accept, Range, Content-Length
access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS, HEAD
access-control-max-age: 31536000
access-control-allow-origin: *
edge-copy-time: 1716608781940
via: http/1.1 cnc.guangzhou.union.24 (ApacheTrafficServer/6.2.1 [cHs f ]), cache17.l2st3-1[27,27,304-0,M], cache26.l2st3-1[28,0], cache14.l2hk2[0,0,200-0,H], cache28.l2hk2[1,0], cache27.l2us1[0,0,200-0,H], cache27.l2us1[1,0], ens-cache7.se2[0,0,200-0,H], ens-cache8.se2[0,0]
x-via-cdn: f=aliyun,s=ens-cache8.se2,c=91.90.42.154;f=sinaedge,s=cmcc.guangzhou.union.42.nb.sinaedge.com,c=113.96.59.39;f=Edge,s=cnc.guangzhou.union.24,c=172.16.174.42
x-via-edge: 1716961509927273b60712aae10ac1e4efc11
last-modified: Wed, 03 May 2017 11:05:42 GMT
etag: "ea3014e874438e227ebe85c03d78efc6"
age: 4265898
ali-swift-global-savetime: 1716961509
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Tue, 25 Jun 2024 02:04:25 GMT
x-swift-cachetime: 29216444
timing-allow-origin: *
eagleid: 2ff62c9c17212274078112860e
X-Firefox-Spdy: h2
GET savsq.com/template/appj/css/iconfont.woff2
200 OK 21 kB URL GET HTTP/2 savsq.com/template/appj/css/iconfont.woff2
IP
Requested by moz-nullprincipal:{e408f497-c7f4-4a43-9c3c-f51147ae6d25}?https://savsq.com
Certificate IssuerLet's Encrypt
Subjectsavaa.cc
Fingerprint6D:DF:DA:CF:95:D9:31:95:1B:B4:C9:DC:2A:F1:F1:34:72:85:76:A8
ValidityMon, 10 Jun 2024 16:45:04 GMT - Sun, 08 Sep 2024 16:45:03 GMT
File type Web Open Font Format (Version 2), TrueType, length 20952, version 1.0
Hash 98acade38a67a962d490d67e7631a5a4
851b12c32dbe71c41ecc9c95e9964a029354988d
f44b9b267347c19b9252f61103a2e46f5e5805bc076c9eed9ede08d36eb5c6e3
GET /template/appj/css/iconfont.woff2 HTTP/1.1
Host: savsq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: null
DNT: 1
Connection: keep-alive
Referer: https://savsq.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:27 GMT
content-type: font/woff2
content-length: 20952
last-modified: Fri, 05 Aug 2022 03:09:56 GMT
etag: "62ec8a04-51d8"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET vodpic.hotlinkprotect.com/upload/2021-12/306027.jpg
403 Forbidden 2.0 kB URL GET HTTP/3 vodpic.hotlinkprotect.com/upload/2021-12/306027.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjecthotlinkprotect.com
Fingerprint2A:45:2C:E5:85:5D:DA:9C:46:1F:1D:05:9C:E9:FA:47:9D:BF:64:5F
ValidityThu, 23 May 2024 22:55:07 GMT - Wed, 21 Aug 2024 22:55:06 GMT
File type HTML document, ASCII text, with very long lines (394)
Hash 90279cce2b0b6de4b523597e804da58e
940b23a1c03fcda9ab40f6de190c4e6cfafeef4b
f0d61966aa553bdd9ec25a6e2f6748366394dfd276f09b10164f6c7ea097de6e
GET /upload/2021-12/306027.jpg HTTP/1.1
Host: vodpic.hotlinkprotect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: max-age=15
expires: Wed, 17 Jul 2024 14:43:41 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rE3y7IU4D8%2BKllbai82xK0mlIuuT64uUP8RqpAm%2BOhItoMCZsBGbolRMZIR4x2TDP3yxtORfPaEpWIatPU%2BFO%2BNWwmRaSZsbakppy1D8eq10Wwr9De6jTw9e%2FiT%2F8tuTDzZxvdyeCNBRDpxf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8a4b011d8b33b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET img.caoliuzywimg.com:188/20240308/U4Dzr4Bh/1.jpg
200 OK 65 kB URL GET HTTP/2 img.caoliuzywimg.com:188/20240308/U4Dzr4Bh/1.jpg
IP
Certificate IssuerSectigo Limited
Subjectimg.caoliuzywimg.com
Fingerprint17:02:B6:F3:10:14:39:A5:82:93:48:F9:AA:EC:BD:A5:DA:70:00:06
ValidityFri, 07 Jun 2024 00:00:00 GMT - Sat, 07 Jun 2025 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 1280x720, components 3
Hash 3b9a237a5047ec84c3993901a09d54d4
2f5ad85a492ef7cdddf20fa6bb8d8e97cdfe3aba
0394255f4455cdfe35c03e9a31b25c78909bcc5be8b7958bdf9013f121625800
GET /20240308/U4Dzr4Bh/1.jpg HTTP/1.1
Host: img.caoliuzywimg.com:188
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:44:18 GMT
content-type: image/jpeg
content-length: 65280
last-modified: Sat, 09 Mar 2024 00:56:44 GMT
etag: "65ebb3cc-ff00"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET savsq.com/template/appj/css/iconfont.woff
200 OK 25 kB URL GET HTTP/2 savsq.com/template/appj/css/iconfont.woff
IP
Requested by moz-nullprincipal:{e408f497-c7f4-4a43-9c3c-f51147ae6d25}?https://savsq.com
Certificate IssuerLet's Encrypt
Subjectsavaa.cc
Fingerprint6D:DF:DA:CF:95:D9:31:95:1B:B4:C9:DC:2A:F1:F1:34:72:85:76:A8
ValidityMon, 10 Jun 2024 16:45:04 GMT - Sun, 08 Sep 2024 16:45:03 GMT
File type Web Open Font Format, TrueType, length 24556, version 1.0
Hash cb86268b73a16f3e5890723b9f9dd364
ba44d789230144cae6fc99a4189ebb0fee5b28e4
36eec0a24f06c55e2a07b0c020665eb0c72eec287f007e3bce9ea3c7273ddc2f
GET /template/appj/css/iconfont.woff HTTP/1.1
Host: savsq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: null
DNT: 1
Connection: keep-alive
Referer: https://savsq.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: font/woff
content-length: 24556
last-modified: Fri, 05 Aug 2022 03:09:56 GMT
etag: "62ec8a04-5fec"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET savsq.com/template/appj/css/iconfont.css
200 OK 2.1 kB URL GET HTTP/2 savsq.com/template/appj/css/iconfont.css
IP
Requested by moz-nullprincipal:{e408f497-c7f4-4a43-9c3c-f51147ae6d25}?https://savsq.com
Certificate IssuerLet's Encrypt
Subjectsavaa.cc
Fingerprint6D:DF:DA:CF:95:D9:31:95:1B:B4:C9:DC:2A:F1:F1:34:72:85:76:A8
ValidityMon, 10 Jun 2024 16:45:04 GMT - Sun, 08 Sep 2024 16:45:03 GMT
File type gzip compressed data, from Unix
Hash 53ae72f7a390b2aa9a821c08505ac310
4da3ec4b9de3ea38c6f3c130c55223623b71c40a
b65dd9d3540605c86be7065b6ce289e26fcf64cdc009d9de22925d3a684f1316
GET /template/appj/css/iconfont.css HTTP/1.1
Host: savsq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:27 GMT
content-type: text/css
last-modified: Mon, 06 Feb 2023 20:57:14 GMT
vary: Accept-Encoding
etag: W/"63e169aa-1d54"
expires: Thu, 18 Jul 2024 02:43:27 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
472 B IP
Hash 68cbeb97362cb1fd193bcaff349ec599
6e5ced18d57cda5f43a5122f211e7b474b918a26
086654872a2fb046f370443097a824463ff74d51cc27f5e6ab740c7c50d3d03c
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 17 Jul 2024 14:43:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET v.qq.com/favicon.ico
200 OK 4.3 kB IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGlobalSign nv-sa
Subject*.v.qq.com
Fingerprint74:42:F3:3B:F7:0D:6A:21:8A:3B:55:E9:1E:95:63:0E:AC:ED:64:F5
ValidityThu, 07 Dec 2023 09:01:03 GMT - Tue, 07 Jan 2025 09:01:02 GMT
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Hash 6f1693a16c62920ab9a623f9409582b0
752df6dab9b600dfddd037f88484fe3221f658f7
2f96726424fa3c378105289868902ebd091e5597c59e65ae36d09ef6a04aabd1
GET /favicon.ico HTTP/1.1
Host: v.qq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: image/x-icon
content-length: 4286
server: NWS_UGC_HY
cache-control: max-age=604800
expires: Wed, 24 Jul 2024 14:43:27 GMT
last-modified: Thu, 28 Sep 2023 10:22:10 GMT
x-nws-log-uuid: 4018c52e-ae54-4aa9-a616-3775320e527f
access-control-expose-headers: X-Client-Ip, X-Server-Ip, X-Upstream-Ip, Date
x-client-ip: 91.90.42.154
x-server-ip: 203.205.137.236
x-ua-compatible: IE=Edge
x-cache-lookup: Hit From Disktank3
accept-ranges: bytes
X-Firefox-Spdy: h2
GET tv.sohu.com/favicon.ico
200 OK 5.4 kB IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerDigiCert Inc
Subjectwww.sohu.com
Fingerprint1B:C0:0F:9F:B3:3C:54:59:EB:82:01:CD:5D:11:B9:B4:E6:7E:61:AD
ValidityThu, 10 Aug 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Hash 72750e5edca884f6a44709df8756161b
14a8d68291b70829a43cbf6df329a17a8d658f60
9b6d88b622ad1f62c0fdbd9ddd1687d416d97328995fd1ed1126c626ae2d58ac
GET /favicon.ico HTTP/1.1
Host: tv.sohu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 5430
date: Wed, 17 Jul 2024 14:41:00 GMT
server: SWS
cache-control: max-age=120
expires: Wed, 17 Jul 2024 14:43:00 GMT
last-modified: Tue, 08 May 2012 08:42:45 GMT
fss-src-cache: HIT from 3849430.5946592.4942070
fss-cache: EXPIRED from 6428242.10950236.7674263, HIT from 4346926.4609080.7762994
accept-ranges: bytes
fss-proxy: Powered by 4740148.5395518.8156222
X-Firefox-Spdy: h2
GET javfan.com/favicon.ico
594 B IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjectjavfan.com
FingerprintB1:C0:9D:DE:52:57:0B:59:DB:2E:5F:80:F8:9F:95:BC:7C:16:BA:70
ValidityMon, 08 Jul 2024 11:46:59 GMT - Sun, 06 Oct 2024 11:46:58 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Hash 551c1c8e510c27eac94a6d5c8b8192ec
81831cca725affcd3b45b4506de32cfb6eaa6532
40052cc1c553afb0428f93abc59e6683f70ef5a1dd2d3dbc7db1ffe95726d17e
GET /favicon.ico HTTP/1.1
Host: javfan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:27 GMT
content-type: image/x-icon
etag: W/"5ff3c89a-47e"
last-modified: Mon, 08 Jul 2024 10:29:00 GMT
x-cache: HIT, policy, disk
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bm%2F2jwX%2BB%2FNedXsOZKzU37yRnPq6ZUCe4Um%2Bk7rgroSl4FJFrjV3B1FTm5QYbVGpdEGQhQpCqxpmbcdfpvYdCnVE1ePIOqZNDBaPIxBm8RYG6uzwYlWvpyrLlDbv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b011dcfee56c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.le.com/favicon.ico
200 OK 4.3 kB IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerTrustAsia Technologies, Inc.
Subjectle.com
Fingerprint99:7B:7B:58:3D:C5:2F:7D:1D:04:02:39:23:C1:1B:FC:55:B3:97:D8
ValidityFri, 01 Mar 2024 00:00:00 GMT - Wed, 26 Mar 2025 23:59:59 GMT
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Hash f9b2ac37c01f8a1c86b3d791647f3303
09bbfe1e75e924d375778b73882b3a6382e30620
9ff2639ffb5ea67131098fff21b5ca8ae5865080da6f6b9841ac1b920a96a7ff
GET /favicon.ico HTTP/1.1
Host: www.le.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: image/x-icon
content-length: 4286
expires: Wed, 17 Jul 2024 14:45:26 GMT
server: openresty
accept-ranges: bytes
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
cache-control: max-age=300
last-modified: Tue, 13 Mar 2018 06:33:39 GMT
le_status: TCP_HIT
leeco: 0.015-SLBMTAuMTI0LjEzMC40MQo=-ID200122.64.80:80, 10.122.64.81:80-502, 200
x-lecloud-ver: LeCloud/31.3.17
x-m-log: QNM:lf209;SRCPROXY:lf203;SRC:12;SRCPROXY:12;QNM3:18
x-m-reqid: OaMAADn9Q9jXMMIX
x-ng-host: LECDN-TJ-TN-DUOX-CTC-1-28
x-qnm-cache: Validate,MissValidate
x-ser: BC144_dx-lt-yd-jiangsu-yancheng-8-cache-16, BC234_dx-anhui-hefei-1-cache-2
x-cache: HIT from BC234_dx-anhui-hefei-1-cache-2(cloudsvr)
X-Firefox-Spdy: h2
GET img.youtube.com/vi/65tokTZxerw/hq3.jpg
200 OK 16 kB URL GET HTTP/2 img.youtube.com/vi/65tokTZxerw/hq3.jpg
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint0B:28:0E:1B:FF:FC:C8:1B:AF:D7:4E:50:F3:EE:75:59:BB:D5:46:24
ValidityMon, 24 Jun 2024 06:35:44 GMT - Mon, 16 Sep 2024 06:35:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Hash d9efaddb1033dd0eabdba98a06cd2c56
a24d6e91754744c9481cded04888a00f916ad31c
08fe285af82be62eb605cf761eeba9e0b20ec06167cb0443649fb90e98795d19
GET /vi/65tokTZxerw/hq3.jpg HTTP/1.1
Host: img.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 16314
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 17 Jul 2024 14:43:28 GMT
expires: Wed, 17 Jul 2024 16:43:28 GMT
cache-control: public, max-age=7200
etag: "0"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
472 B IP
Hash 68cbeb97362cb1fd193bcaff349ec599
6e5ced18d57cda5f43a5122f211e7b474b918a26
086654872a2fb046f370443097a824463ff74d51cc27f5e6ab740c7c50d3d03c
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 17 Jul 2024 14:43:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
472 B IP
Hash 68cbeb97362cb1fd193bcaff349ec599
6e5ced18d57cda5f43a5122f211e7b474b918a26
086654872a2fb046f370443097a824463ff74d51cc27f5e6ab740c7c50d3d03c
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 17 Jul 2024 14:43:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET javp1.cc/upload/vod/20240219-4/37a2ecda5510c0840cc6d16060353cc5.jpg
404 Not Found 40 kB URL GET HTTP/3 javp1.cc/upload/vod/20240219-4/37a2ecda5510c0840cc6d16060353cc5.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 61770fce11a09cf460d45cb507670b0b
a91724b0e57f8426b0e3572cbcb226359ae6501c
1fdb617ec52b6ad2b44ef4da4abca278a8f8b3cb5cbffc7efa9aaf3a0c6eb24a
GET /upload/vod/20240219-4/37a2ecda5510c0840cc6d16060353cc5.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=loqVg6vg%2Bwn%2B88OHM8UWQZSSlPC%2BGl92ycbhBxfkUysqUYiFVj%2BWyvzTuVvs%2B4u3fcy9fdZNhFDCHexs4n6el%2BQ1agmL5bOppJItc5YrcL0FLNSmvklZC4EgZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b011d8fe07129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET img.youtube.com/vi/65tokTZxerw/hq1.jpg
200 OK 8.1 kB URL GET HTTP/2 img.youtube.com/vi/65tokTZxerw/hq1.jpg
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint0B:28:0E:1B:FF:FC:C8:1B:AF:D7:4E:50:F3:EE:75:59:BB:D5:46:24
ValidityMon, 24 Jun 2024 06:35:44 GMT - Mon, 16 Sep 2024 06:35:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Hash 6166093e7be002f54d6f266ac9810094
1d8f9e6fdefb73900165fd4fe1cd042b711c5355
f714e4279095f3a8a5b2d273210f80c05df8af5e86e5e44c390820e31fab87dd
GET /vi/65tokTZxerw/hq1.jpg HTTP/1.1
Host: img.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 8062
date: Wed, 17 Jul 2024 14:43:28 GMT
expires: Wed, 17 Jul 2024 16:43:28 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET comments.4jpg.top/comments/embed.js?37
307 B URL GET comments.4jpg.top/comments/embed.js?37
IP
Requested by https://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/3
Certificate IssuerGoogle Trust Services
Subject4jpg.top
Fingerprint4B:58:1B:2D:6E:5C:08:9C:6A:B9:EC:DD:5E:F7:DE:5A:0A:7C:75:B1
ValidityWed, 03 Jul 2024 17:20:57 GMT - Tue, 01 Oct 2024 17:20:56 GMT
Hash d6e0150ff2a3119e9e1bd734972177ba
a947481baace26ec764a8df76ecd725abcfb0ed6
1bc2bc310e9738df762c5c265d4d388cbe417bae1a620dcf634433cfec7c9dd3
GET /comments/embed.js?37 HTTP/1.1
Host: comments.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html
location: https://av.tub4us.top/1
x-proxy-cache-re-la: HIT
xkey-re-re-la: jcomments./comments/embed.js?37-A-comments.4jpg.top-comments.4jpg.top-myzone---no
x-proxy-cache-g-la: HIT
xkey-g-la: comments.4jpg.top/comments/embed.js?37--comments.4jpg.top--my_zone
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tsIN18kxaEwtSVD4ZfEMA3qwMzhLBOKM88LczDb9lgNDYKL0XBK9LiYK7%2BeyeZ%2BD5LBjbE8coPExGBckVOnl8IaLM2VRc3Aug9rohhfkTLbaxycCZxVCz1wXMD5dPh%2FuxER8pw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01167a1856af-OSL
alt-svc: h3=":443"; ma=86400
GET javp1.cc/upload/vod/20240219-10/73e76e43f7c75e4edb1b3fea762f419b.jpg
404 Not Found 9.5 kB URL GET HTTP/2 javp1.cc/upload/vod/20240219-10/73e76e43f7c75e4edb1b3fea762f419b.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 61770fce11a09cf460d45cb507670b0b
a91724b0e57f8426b0e3572cbcb226359ae6501c
1fdb617ec52b6ad2b44ef4da4abca278a8f8b3cb5cbffc7efa9aaf3a0c6eb24a
GET /upload/vod/20240219-10/73e76e43f7c75e4edb1b3fea762f419b.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8FSImwa%2BsE5Niz1bmTgA6joCUdTilWsh8tP5Bru%2FLKbncO50anuHi2RYkakG1blo%2BZNtgzvu99Y0JtQSYnqZJ18VUvox0PLY%2FezNf1bDlvsIiedS8B0gRJ9%2Fnw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b011d0f527129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
472 B IP
Hash 68cbeb97362cb1fd193bcaff349ec599
6e5ced18d57cda5f43a5122f211e7b474b918a26
086654872a2fb046f370443097a824463ff74d51cc27f5e6ab740c7c50d3d03c
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 17 Jul 2024 14:43:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET www.instagram.com/favicon.ico
200 OK 77 kB URL GET HTTP/2 www.instagram.com/favicon.ico
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerDigiCert Inc
Subject*.www.instagram.com
Fingerprint71:97:2A:E5:16:79:FC:0D:E8:A5:72:D9:60:CB:D4:36:D3:16:51:A6
ValidityThu, 25 Apr 2024 00:00:00 GMT - Wed, 24 Jul 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash 2bd6618b8a1e887699c45395e89c14a5
d62a2b402b7a22cea2ec9c8cd3b8304ac6e5f2b8
021329202383e5b14dee56cfd8d6f24682a7cac93c0da74c8338ea2f83b7953a
GET /favicon.ico HTTP/1.1
Host: www.instagram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
set-cookie: csrftoken=iwlWt8iLObeWvZrW2EBRde; expires=Wed, 16-Jul-2025 14:43:28 GMT; Max-Age=31449600; path=/; domain=.instagram.com; secure; SameSite=None
accept-ch-lifetime: 4838400
accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;script-src *.instagram.com static.cdninstagram.com *.facebook.com *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' *.fbcdn.net *.facebook.com;connect-src *.instagram.com wss://edge-chat.instagram.com connect.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* blob: *.cdninstagram.com wss://*.instagram.com:* 'self';font-src *.instagram.com static.cdninstagram.com data: *.fbcdn.net *.intern.facebook.com *.facebook.com;img-src *.instagram.com *.facebook.com *.fbcdn.net data: *.cdninstagram.com *.whatsapp.net blob: *.fbsbx.com android-webview-video-poster: *.oculuscdn.com;media-src *.facebook.com *.fbcdn.net *.instagram.com *.cdninstagram.com cdn.fbsbx.com data: blob:;frame-src *.instagram.com *.facebook.com *.fbsbx.com fbsbx.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
content-security-policy: default-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;script-src *.instagram.com static.cdninstagram.com *.facebook.com *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' *.fbcdn.net *.facebook.com;connect-src *.instagram.com wss://edge-chat.instagram.com connect.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* blob: *.cdninstagram.com wss://*.instagram.com:* 'self';font-src *.instagram.com static.cdninstagram.com data: *.fbcdn.net *.intern.facebook.com *.facebook.com;img-src *.instagram.com *.facebook.com *.fbcdn.net data: *.cdninstagram.com *.whatsapp.net blob: *.fbsbx.com android-webview-video-poster: *.oculuscdn.com;media-src *.facebook.com *.fbcdn.net *.instagram.com *.cdninstagram.com cdn.fbsbx.com data: blob:;frame-src *.instagram.com *.facebook.com *.fbsbx.com fbsbx.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.instagram.com/error/ig_web_error_reports/?device_level=unknown"
report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.instagram.com\/error\/ig_web_error_reports\/?device_level=unknown"}]}
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-stack: www
content-type: text/html; charset="utf-8"
x-fb-debug: 4PFf2c0Hu9tM+cDlcrwPd0uczJGxw3qzTiacj5dG6e85cM0xZ7i14R7Q3nfnCP/9bZe2pRPGI4q4y1ooruvweg==
date: Wed, 17 Jul 2024 14:43:28 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET pizdauz.cc/favicon.ico
200 OK 1.2 kB IP
ASN #207728 EUROHOSTER Ltd.
Certificate IssuerLet's Encrypt
Subjectpizdauz.cc
FingerprintA5:3D:97:7E:15:78:D3:A8:07:35:A9:8D:27:61:30:DE:28:ED:56:DB
ValidityMon, 01 Jul 2024 23:14:21 GMT - Sun, 29 Sep 2024 23:14:20 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Hash 0177fe6e0018eb853a8c8dc0613fcbb1
a0cf2ed70318f4dec7eb983782dd7e5dfe382b9c
d873fcd96aba0179c8773f6211afb165635a69b81ea5a3c801599ef192dbc7b5
GET /favicon.ico HTTP/1.1
Host: pizdauz.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Jul 2024 14:43:29 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 1150
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Thu, 02 Jul 2020 15:02:35 GMT
ETag: "47e-5a976b2dd6000"
Accept-Ranges: bytes
Cache-Control: max-age=29030400, public
Expires: Wed, 18 Jun 2025 14:43:29 GMT
GET pdocac.tube-dl.top/v/s://huotuisp.com/vodplay/113403-1-1.html/title/myhash/3
200 OK 1 B URL GET HTTP/2 pdocac.tube-dl.top/v/s://huotuisp.com/vodplay/113403-1-1.html/title/myhash/3
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint56:EF:69:95:CA:9C:11:40:53:18:AA:5F:28:B9:1D:DE:6D:68:F4:A8
ValidityTue, 09 Jul 2024 18:56:35 GMT - Mon, 07 Oct 2024 18:56:34 GMT
File type very short file (no magic)
Hash eccbc87e4b5ce2fe28308fd9f2a7baf3
77de68daecd823babbb58edb1c8e14d7106e83bb
4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce
GET /v/s://huotuisp.com/vodplay/113403-1-1.html/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.av4us.top
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top96.161.209-myhost-58.222.184/v/s://huotuisp.com/vodplay/113403-1-1.html/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://huotuisp.com/vodplay/113403-1-1.html/title/myhash/3
pdo115: feedvid-, cachefileb-cacpdo2/b0/a2/383940, lfm-1-15470, lmd-15470, lud-2182611, xfvlen-662769, fsize-540853, played-10
cache-control: public, max-age=720000
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: MISS
last-modified: Wed, 17 Jul 2024 14:43:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OjBDWJcdcGcnUqimSq6MmQkwNJ9%2Bh1MdRqZgqEq0V0h6sf9gPYpBPJ2u%2B%2BG%2BF7W9nB38C15IIkF5q%2B774GFwKtdXcxbnmOL2VUDh7smu1vYnrrnZz6slCTwyqmVtx1t%2FgUJ6h04%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b0125a8075695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.youhu.com/img/videos_screenshots/27000/27910/preview.jpg
200 OK 32 kB URL GET HTTP/2 www.youhu.com/img/videos_screenshots/27000/27910/preview.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectyouhu.com
Fingerprint27:F5:99:93:18:97:7D:B8:AA:0F:97:32:8D:DA:FB:57:4B:96:D2:63
ValidityTue, 28 May 2024 20:06:50 GMT - Mon, 26 Aug 2024 20:06:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.31.102", baseline, precision 8, 478x720, components 3
Hash 4a8cd5bf0c9de54339c86e1d915d59da
564e633c74c0e8567c4bab57b0cdfd867be243fc
85e1367db252f074d9a5630d2a9fa198abf561ea5353e3d26737441c4c28300c
GET /img/videos_screenshots/27000/27910/preview.jpg HTTP/1.1
Host: www.youhu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
etag: W/"65f00ce1-73d0"
last-modified: Tue, 12 Mar 2024 08:05:53 GMT
strict-transport-security: max-age=31536000
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1194
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Irz3Qpj%2FXKoQKFzztnynPWk2Vcj2RpNDPnIho%2BTXxsRshtR7s3D2wLTCt5E%2FzKaZozp6vGn90KcMg2bfapOvAv5X4gR6o4hclR5f%2BAQq%2BJUVfPHGIusOHeF3uIH4ixU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b0112ef3db512-OSL
X-Firefox-Spdy: h2
GET www.clporn.com/favicon.ico
200 OK 1.2 kB URL GET HTTP/3 www.clporn.com/favicon.ico
IP
Certificate IssuerGoogle Trust Services
Subjectclporn.com
FingerprintEF:4B:90:00:56:06:89:29:6B:68:BF:1A:BC:AE:6B:E7:EC:7D:F0:90
ValiditySun, 23 Jun 2024 10:59:28 GMT - Sat, 21 Sep 2024 10:59:27 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Hash 7bce878d4d59681219dd7ee7b31d501f
8078782a63dd8997b9537de46f1c19c0b60737ce
19658bac1ca076be044dc8e1289ae869efd6847cc8d61405f1f6aeea11904dcf
GET /favicon.ico HTTP/1.1
Host: www.clporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: image/x-icon
content-length: 1150
last-modified: Sun, 21 May 2023 03:45:32 GMT
etag: "646993dc-47e"
expires: Fri, 13 Jun 2025 10:59:16 GMT
cache-control: public, max-age=31536000, no-transform
x-cache-status: HIT
cf-cache-status: HIT
age: 2951053
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vi8KKD%2FwAXnAbTOxAD2aWDlFNX%2B9x43Jk8JiTjE%2FhkDYOTneMfiHZfMED3qo1MCnXmqAmaTOmTmQi%2BW2FAPK1A1iiVqP9yB95wh7xF8AN%2FGAycPFW0dUB5WF2QkSjLerSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b012dff09b51b-OSL
alt-svc: h3=":443"; ma=86400
GET vidmo.pro/favicon.ico
200 OK 5.4 kB IP
ASN #49505 OOO Network of data-centers Selectel
Certificate IssuerLet's Encrypt
Subjecten.vidmo.pro
FingerprintBA:F3:53:1B:76:D1:9F:84:42:4A:CE:00:3B:1A:46:69:9D:25:5D:A5
ValidityThu, 30 May 2024 20:43:54 GMT - Wed, 28 Aug 2024 20:43:53 GMT
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Hash 6b6734885d5e4ff9dbb7d82ba6023598
3c454d68a346b375ed7b59a131699061e7393b1f
0f8e5edd4348eaa11881bf6150baf7b3182b1c3e29c6378e0e921afce7d91819
GET /favicon.ico HTTP/1.1
Host: vidmo.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: image/x-icon
content-length: 5430
last-modified: Sun, 14 Oct 2012 21:41:38 GMT
etag: "507b3192-1536"
cache-control: public, no-transform
accept-ranges: bytes
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://savsq.com/v/151010/1/1/?ysclid=ly1lmh7vod668344977/title/myhash/3
200 OK 318 B URL GET HTTP/2 pdocac.tube-dl.top/v/s://savsq.com/v/151010/1/1/?ysclid=ly1lmh7vod668344977/title/myhash/3
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint56:EF:69:95:CA:9C:11:40:53:18:AA:5F:28:B9:1D:DE:6D:68:F4:A8
ValidityTue, 09 Jul 2024 18:56:35 GMT - Mon, 07 Oct 2024 18:56:34 GMT
Hash 6215c5f36efbb30b88ca8df04a7f47f0
c2f62d088944999feae7d7b360d91c2fdb9959b2
75ad1532988193d5961402729d0da572e5f076d1b74b48b118450d67caf1e879
GET /v/s://savsq.com/v/151010/1/1/?ysclid=ly1lmh7vod668344977/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.av4us.top
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top96.161.209-myhost-58.222.129/v/s://savsq.com/v/151010/1/1/?ysclid=ly1lmh7vod668344977/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://savsq.com/v/151010/1/1/?ysclid=ly1lmh7vod668344977/title/myhash/3
pdo115: feedvid-, cachefileb-cacpdo6/92/4c/9c, lfm-4-170853, lmd-170853, lud-1472541, xfvlen-87856, fsize-61235, played-
cache-control: public, max-age=720000
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: MISS
last-modified: Wed, 17 Jul 2024 14:43:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=km4QUPsSbwyUOC8w%2BZSvP1lTx7F5t0s2DtUJCUfuB0pWd0cRJ%2FkjkWU3aN6jhKmIpTR1agJkT4nYvF1kxJJBWFX5yk2dIqhsnEoAbbZaODz0IskD0EF2bVOoMkiDkO%2BuLL%2F%2FXns%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b0125a8115695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET javp1.cc/upload/vod/20240219-3/66b5679b705c9afa51eadc3f090e47eb.jpg
404 Not Found 3.7 kB URL GET HTTP/3 javp1.cc/upload/vod/20240219-3/66b5679b705c9afa51eadc3f090e47eb.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 61770fce11a09cf460d45cb507670b0b
a91724b0e57f8426b0e3572cbcb226359ae6501c
1fdb617ec52b6ad2b44ef4da4abca278a8f8b3cb5cbffc7efa9aaf3a0c6eb24a
GET /upload/vod/20240219-3/66b5679b705c9afa51eadc3f090e47eb.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0QNe%2BpbM9pj5to17yZCOxGemB7L8IlRAc7uf0LCch6Uxj91IT4ectUYnxccvbmwHLcnpfHleE3izJ7tyldukRyJAgAcXjdXel2KIm6TJ2H97cUqunUbo4mzI0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010e6ac456c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.thisav.com/favicon.ico
167 B URL GET www.thisav.com/favicon.ico
IP
Certificate IssuerGoogle Trust Services
Subjectthisav.com
FingerprintAF:31:90:0D:A7:E1:CB:01:B0:58:8D:C2:B4:9B:66:96:FA:82:FC:92
ValidityMon, 08 Jul 2024 12:11:56 GMT - Sun, 06 Oct 2024 12:11:55 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 0104c301c5e02bd6148b8703d19b3a73
7436e0b4b1f8c222c38069890b75fa2baf9ca620
446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /favicon.ico HTTP/1.1
Host: www.thisav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: text/html
content-length: 167
location: https://thisav.com/favicon.ico
cache-control: max-age=3600
expires: Wed, 17 Jul 2024 15:43:29 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2uDuAvgmE%2FD7rvUqMP03ySp1Z6iKXnB83PkbVoKLZpvZrGuTvdjlPJyMXt9%2FM%2B7iivPVHe8IYHjLPiqgUxYYHSHaXZyw%2Bd601j1gWXZ4fTKrq3ivrZmEiMuV%2FIOnT9Et"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b012ecbc0b50b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://www.instagram.com/tei_0207/reel/C5A3L-3rTWG/?locale=%E6%8C%AA%E5%A8%81%E6%B3%A8%E5%86%8C%E8%AF%81%E4%B9%A6%E5%A4%9A%E5%B0%91%E9%92%B1%E8%81%94%E7%B3%BB{%E5%A8%81%E4%BF%A1+TG/%E9%A3%9E%E6%9C%BA:@buth2788}SCgAe??????%D1%A7??%C6%BE7b5Z3/title/myhash/3
200 OK 168 B URL GET HTTP/2 pdocac.tube-dl.top/v/s://www.instagram.com/tei_0207/reel/C5A3L-3rTWG/?locale=%E6%8C%AA%E5%A8%81%E6%B3%A8%E5%86%8C%E8%AF%81%E4%B9%A6%E5%A4%9A%E5%B0%91%E9%92%B1%E8%81%94%E7%B3%BB{%E5%A8%81%E4%BF%A1+TG/%E9%A3%9E%E6%9C%BA:@buth2788}SCgAe??????%D1%A7??%C6%BE7b5Z3/title/myhash/3
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint56:EF:69:95:CA:9C:11:40:53:18:AA:5F:28:B9:1D:DE:6D:68:F4:A8
ValidityTue, 09 Jul 2024 18:56:35 GMT - Mon, 07 Oct 2024 18:56:34 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash d4deabd7f2504c7e7fea6a11788980db
90a61df5dcf1dc44609804333807e0f6a11ced49
a5d0d55de1b4ada45f7e9d85af749a78ae670d9fbc31c3b15dd8bd6a22b4177e
GET /v/s://www.instagram.com/tei_0207/reel/C5A3L-3rTWG/?locale=%E6%8C%AA%E5%A8%81%E6%B3%A8%E5%86%8C%E8%AF%81%E4%B9%A6%E5%A4%9A%E5%B0%91%E9%92%B1%E8%81%94%E7%B3%BB{%E5%A8%81%E4%BF%A1+TG/%E9%A3%9E%E6%9C%BA:@buth2788}SCgAe??????%D1%A7??%C6%BE7b5Z3/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.av4us.top
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top96.161.209-myhost-58.222.177/v/s://www.instagram.com/tei_0207/reel/C5A3L-3rTWG/?locale=%E6%8C%AA%E5%A8%81%E6%B3%A8%E5%86%8C%E8%AF%81%E4%B9%A6%E5%A4%9A%E5%B0%91%E9%92%B1%E8%81%94%E7%B3%BB{%E5%A8%81%E4%BF%A1+TG/%E9%A3%9E%E6%9C%BA:@buth2788}SCgAe??????%D1%A7??%C6%BE7b5Z3/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://www.instagram.com/tei_0207/reel/C5A3L-3rTWG/?locale=%E6%8C%AA%E5%A8%81%E6%B3%A8%E5%86%8C%E8%AF%81%E4%B9%A6%E5%A4%9A%E5%B0%91%E9%92%B1%E8%81%94%E7%B3%BB{%E5%A8%81%E4%BF%A1+TG/%E9%A3%9E%E6%9C%BA:@buth2788}SCgAe??????%D1%A7??%C6%BE7b5Z3/title/myhash/3
pdo115: feedvid-, cachefileb-cacpdo2/fd/af/3a, lfm-3-8917, lmd-8917, lud-63833, xfvlen-65297, fsize-135170, played-
cache-control: public, max-age=720000
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: MISS
last-modified: Wed, 17 Jul 2024 14:43:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UsxunOJRmP87ze9Abw%2Ft2qtDcnCLxlblFMOai8gd2sgkQ0SwZAcLBYD3F2NGOxlAI84F03Vu3PkPOGTeM9r7uNdI1zF%2Bk2DRBdqGf8cqTi6w%2FXH3IO3xqNN7rPCyW6VnJthurOQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b012598015695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET javp1.cc/upload/vod/20240218-2/dc55c732d7399d46a6b0de5d9befcff9.jpg
404 Not Found 2.1 kB URL GET HTTP/2 javp1.cc/upload/vod/20240218-2/dc55c732d7399d46a6b0de5d9befcff9.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 61770fce11a09cf460d45cb507670b0b
a91724b0e57f8426b0e3572cbcb226359ae6501c
1fdb617ec52b6ad2b44ef4da4abca278a8f8b3cb5cbffc7efa9aaf3a0c6eb24a
GET /upload/vod/20240218-2/dc55c732d7399d46a6b0de5d9befcff9.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 175
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6rSOr9ufqSKZ9PELinZJ4AAKIWRiYaU8y6mSiYLiXyngOntnHrg%2F5rFH3pu6R26YQNQaYeGOZtq2M2iqIjm63yTJk%2Fy8PWb7NDD%2FySqgpZhY9EgxnJOL0FPnaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b011d0f557129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET motherless.com/favicon.ico
2.8 kB URL GET motherless.com/favicon.ico
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services LLC
Subjectmotherless.com
FingerprintC4:25:4E:9C:5A:9E:1F:CB:E2:C0:39:78:BE:16:5E:E1:17:F5:40:C5
ValidityWed, 29 May 2024 08:51:19 GMT - Tue, 27 Aug 2024 08:51:18 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Hash 71fed71dccb91a13bdf68a6444f25ce4
38da7202842147ecda5521d50f094a54d1381f2c
18f6675d329e6cb3bb7d7d1e546a1c68c5cc599f1b3ae98c2abbd21a53dc42c2
GET /favicon.ico HTTP/1.1
Host: motherless.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: image/x-icon
last-modified: Thu, 20 Apr 2023 06:59:04 GMT
etag: W/"6440e2b8-47e"
x-server-w: web805
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-status: HIT
cf-cache-status: HIT
age: 1058306
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FTexgAs1q2HTKg0SisVXEUiKidX5%2F3FYSDD%2FrWRjlIDuigByKEUrq8dXug32pA73n%2BLCDPN8Oo1c4okIIG2Q%2FFo%2FV4j3d7OPFgES0fQly1pFOyCkXa1prRlFD%2BpyjjGSdA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b012d3e5556b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET javp1.cc/upload/vod/20240219-3/e50deda76b43189dd436706fb0b57041.jpg
404 Not Found 3.7 kB URL GET HTTP/3 javp1.cc/upload/vod/20240219-3/e50deda76b43189dd436706fb0b57041.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 61770fce11a09cf460d45cb507670b0b
a91724b0e57f8426b0e3572cbcb226359ae6501c
1fdb617ec52b6ad2b44ef4da4abca278a8f8b3cb5cbffc7efa9aaf3a0c6eb24a
GET /upload/vod/20240219-3/e50deda76b43189dd436706fb0b57041.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 40
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JOB0L2BGEbbdNp51N5Ph5ueWWkULfVowV3yM0Yo3Pe7dfAbbicDfHQMKFOJebPOqJ%2BpHu50zX9Zu9zY1lTqZWeBQ5HauVF2mRzW2AXlIAtJMAjaxh8UQe5EDLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b011d4f9e7129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET javp1.cc/https://img.caoliuzywimg.com:188/20230220/ngGDxNsj/1.jpg
404 Not Found 1.9 kB URL GET HTTP/2 javp1.cc/https://img.caoliuzywimg.com:188/20230220/ngGDxNsj/1.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 8b84299af6ecfda46caeec465e583926
0c754ab8a0ab65b10030e7b7d5a67495ad6adc99
3890dbe7bb19792178e8f1fe940d43831ac81925f5e9276b687d7faa2e8a3c8d
GET /https://img.caoliuzywimg.com:188/20230220/ngGDxNsj/1.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=guiyV6t4kI90W4bkkXLkCw2wvReMiSj2gQaDJDz3wYjrwi1LohBKBD8Nb9ovNxJdmhJhohzCLUu4UEB2LEN8AOUnBA6RWw1L38I1tlMYwHWQ2lJATiF4mC3xMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b011cdf077129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET hsp103.com/favicon.ico
403 Forbidden 563 B IP
ASN #133618 Trellian Pty. Limited
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerLet's Encrypt
Subjectbcknews.com
Fingerprint91:E1:9A:D8:0E:78:11:EA:82:7C:DC:C0:57:73:63:52:C5:6E:F3:EB
ValidityWed, 05 Jun 2024 22:07:43 GMT - Tue, 03 Sep 2024 22:07:42 GMT
Hash 4ecd51d78a0a6b32f3c66f7eaaa57501
d46064c0d6f997e669292f32b81927a86d1c5666
b4b38a6f1fd7443da7502c9e5e15c8aa8431c12d7885a7a519de2738dd48bced
GET /favicon.ico HTTP/1.1
Host: hsp103.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 403 Forbidden
cache-control: no-cache
content-type: text/html
GET 2porno.online/favicon.ico
200 OK 68 kB URL GET HTTP/1.1 2porno.online/favicon.ico
IP
ASN #207728 EUROHOSTER Ltd.
Certificate IssuerLet's Encrypt
Subject2porno.online
Fingerprint6C:1E:6E:71:7C:1E:B6:3D:05:D0:68:5E:BC:D4:1F:69:CB:D2:8C:D3
ValidityThu, 13 Jun 2024 23:06:12 GMT - Wed, 11 Sep 2024 23:06:11 GMT
File type MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel
Hash 79f9de37328163334905ea7039b1125a
872e735bda517f3c02d42e3e1223680253a275f2
44b1de7a4c127c9b13a1fbc6b0bfaf95818ccf56925639d3b44c36076f3d7774
GET /favicon.ico HTTP/1.1
Host: 2porno.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Jul 2024 14:43:29 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 67646
Connection: keep-alive
Last-Modified: Thu, 15 Dec 2022 11:06:34 GMT
ETag: "1083e-5efdbd897ca9a"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000;
GET javp1.cc/https://img.caoliuzywimg.com:188/20230220/ngGDxNsj/1.jpg
404 Not Found 7.5 kB URL GET HTTP/2 javp1.cc/https://img.caoliuzywimg.com:188/20230220/ngGDxNsj/1.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 8b84299af6ecfda46caeec465e583926
0c754ab8a0ab65b10030e7b7d5a67495ad6adc99
3890dbe7bb19792178e8f1fe940d43831ac81925f5e9276b687d7faa2e8a3c8d
GET /https://img.caoliuzywimg.com:188/20230220/ngGDxNsj/1.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vJSlF%2BCIDBO9dRG4SBLEKzGfEE%2B42CCU2RQWeaCs0W9Z1vC7pOEOnrf1PIbIkcyIzhayKRPaJ%2F5enkmLAQTmdcJZe34YZidrUvk4n4Ktl67TmYjnC%2BM56tZ9iw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010e5ab956c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET jav.re//uploads/20210528/1370905e070287a482d7c27b27b2d707.jpg
73 kB URL GET jav.re//uploads/20210528/1370905e070287a482d7c27b27b2d707.jpg
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjectjav.re
FingerprintFE:9D:91:E0:AF:F8:91:B9:23:DB:0E:C5:47:16:B1:E5:49:1F:A8:71
ValidityMon, 08 Jul 2024 10:58:44 GMT - Sun, 06 Oct 2024 10:58:43 GMT
File type gzip compressed data, from Unix
Hash 290e7c0c9b713f61281230c4ce62940a
016f5b59b759823c875724a5a1429e83422c537c
7c8732f3800848b4084884ad2073d7a7b8494070955eb4515a17dcc53f200f50
GET //uploads/20210528/1370905e070287a482d7c27b27b2d707.jpg HTTP/1.1
Host: jav.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: image/jpeg
cache-control: max-age=2592000
content-encoding: gzip
etag: W/"60b0d07f-10fcd"
expires: Wed, 07 Aug 2024 05:24:56 GMT
last-modified: Mon, 08 Jul 2024 05:24:56 GMT
vary: Accept-Encoding
x-cache: HIT, policy, disk
cf-cache-status: HIT
age: 535103
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tDfQmKRGqX%2BYGB5lPtJVvxJKKn2QxI1HcP4l7r6D5VNmwrJmjCYj83cnLmLj07z9f2OfuM%2FiSqdfiDak%2BEMLjNcuQj5O7R7c63nFwCC9Nmh%2BGITME7Z9QgY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b012fdb2a5693-OSL
alt-svc: h3=":443"; ma=86400
GET www.kwai.com/favicon.ico
200 OK 17 kB IP
ASN #20940 Akamai International B.V.
Certificate IssuerGlobalSign nv-sa
Subject*.kwai.com
Fingerprint60:3E:C8:14:CC:B3:8A:0C:00:A9:2D:02:5E:CA:51:3D:C1:84:9F:B3
ValidityThu, 10 Aug 2023 02:51:17 GMT - Tue, 10 Sep 2024 02:51:16 GMT
File type MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel
Hash 321813c75370556d33e64ec8c26dea6d
73c6f171c693e0005e2f7aae020d9a6f7652d375
5a5b31e72fbb8a672841e5511ffd511fb571cae9028a5395fd00196da7cf6c4c
GET /favicon.ico HTTP/1.1
Host: www.kwai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/x-icon
content-length: 16958
last-modified: Wed, 17 Jul 2024 09:14:25 GMT
etag: "66978b71-423e"
content-security-policy-report-only: default-src 'self' 'unsafe-inline' 'unsafe-eval' *.mythad.com https://*.kwai-pro.com http://*.kwai-pro.com http://*.kwai.net https://*.kwai.net *.kwai.com *.snackvideo.in *.kwai.me *.kwai.app *.kwimgs.com *.yximgs.com *.cloudfront.net *.kuaishou.com https://*.gifshow.com http://*.gifshow.com https://log-sdk.ksapisrv.com https://www.googletagmanager.com https://gifshow-static.download.ks-cdn.com https://static3.avast.com https://translate.google.com https://www.gstatic.com https://fonts.gstatic.com https://connect.facebook.net www.google-analytics.com hm.baidu.com m.snackvideo.com http://*.ap4r.com https://*.ap4r.com https://*.typekit.net http://*.typekit.net ak-sgp-pic.snackvideo.in tx-sgp-pic.snackvideo.in ws-sgp-pic.snackvideo.in g-us-kampic.golden49.net g-us-kamcdn.golden49.net m.kwai.com sentry.kuaishou.com https://cdn.jsdelivr.net https://at.alicdn.com https://www.facebook.com https://snap.licdn.com https://px.ads.linkedin.com https://cdn.linkedin.oribi.io https://www.linkedin.com https://*.google.com https://*.google-analytics.com https://*.doubleclick.net asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;img-src http: https: asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;connect-src http: https: asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;report-uri https://csplog.kwai-pro.com/log/kwai/wwwkwai
accept-ranges: bytes
date: Wed, 17 Jul 2024 14:43:30 GMT
alt-svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
X-Firefox-Spdy: h2
GET m.thisav.com/favicon.ico
10 kB IP
Certificate IssuerGoogle Trust Services
Subjectthisav.com
FingerprintAF:31:90:0D:A7:E1:CB:01:B0:58:8D:C2:B4:9B:66:96:FA:82:FC:92
ValidityMon, 08 Jul 2024 12:11:56 GMT - Sun, 06 Oct 2024 12:11:55 GMT
File type gzip compressed data, from Unix
Hash 9ac8717f3f7d888efb448a70bad41f12
445781638a01f98a951af64b037736d260df7443
276e018fa9294b8b102fcca887ac15ccc846a213a41e38c4b247b877cabde238
GET /favicon.ico HTTP/1.1
Host: m.thisav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: image/x-icon
last-modified: Sun, 08 Oct 2023 22:31:46 GMT
vary: Accept-Encoding
etag: W/"65232dd2-3c2e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
cache-control: max-age=7200
cf-cache-status: HIT
age: 3819
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DYBH5no5keopAC7JzMlxh5%2BCeTSvAg7nVdnURjvh%2F%2FPx7MV6eT62Yi6E3yNo%2B4WVuftf4EqM4ZANNi70f%2BQ%2Fwejniz4N9XNZ6C3ItVK2%2FuQsg8H%2F9Trz%2F1U5s%2BgH7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b012e5b1db50b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash 423738a0e421345b228281c9cdeecdcf
545d0c89fee8024c5841274b7a688805a4ca39a3
0289de899c1ed28670f8b27ebd3e43b6642ac2e5c9f1fb9611650630d5ec24af
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "0289DE899C1ED28670F8B27EBD3E43B6642AC2E5C9F1FB9611650630D5EC24AF"
Last-Modified: Mon, 15 Jul 2024 20:23:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9992
Expires: Wed, 17 Jul 2024 17:30:02 GMT
Date: Wed, 17 Jul 2024 14:43:30 GMT
Connection: keep-alive
GET www.javvhub.com/favicon.ico
404 Not Found 169 B URL GET HTTP/1.1 www.javvhub.com/favicon.ico
IP
Certificate IssuerLet's Encrypt
Subjectjavvhub.com
Fingerprint1D:A9:36:DF:09:4F:11:D3:D8:79:80:E1:0E:AC:8F:F6:F0:48:FC:AB
ValidityFri, 05 Jul 2024 03:34:36 GMT - Thu, 03 Oct 2024 03:34:35 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 75498ccdf6d1ca96d29735566023829a
2951272e362fdf3d79488531406a383f96cf6332
dd2943d2f8c69925d2c6248e82f232d5c75efca81b0b16d580773e2d890133b6
GET /favicon.ico HTTP/1.1
Host: www.javvhub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.10.3
Date: Wed, 17 Jul 2024 14:43:30 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 169
Connection: keep-alive
GET javp1.cc/upload/vod/20240219-1/5a1df92e3b1d0cc537431b9dffd2602a.jpg
404 Not Found 6.0 kB URL GET HTTP/3 javp1.cc/upload/vod/20240219-1/5a1df92e3b1d0cc537431b9dffd2602a.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 61770fce11a09cf460d45cb507670b0b
a91724b0e57f8426b0e3572cbcb226359ae6501c
1fdb617ec52b6ad2b44ef4da4abca278a8f8b3cb5cbffc7efa9aaf3a0c6eb24a
GET /upload/vod/20240219-1/5a1df92e3b1d0cc537431b9dffd2602a.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 141
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PX8LRHzw41myBl%2BdfxZoOqTa8WNknucBB%2BSaXilHY52vwsJNlE3C6krhyL%2B73%2Bpzca9wJROqpq1kZMEMZc4sT%2BB8f0Tplw4NJEbgiju0X%2BunXK9N7DyNOaW3WQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b011d8fe27129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET www.twi-dl.net/favicon.ico
3.4 kB URL GET www.twi-dl.net/favicon.ico
IP
Certificate IssuerGoogle Trust Services
Subjecttwi-dl.net
Fingerprint2D:39:F0:73:96:00:E7:B3:5F:66:BD:E9:B7:F1:74:38:1D:B3:0C:1A
ValiditySat, 13 Jul 2024 14:06:00 GMT - Fri, 11 Oct 2024 14:05:59 GMT
File type MS Windows icon resource - 1 icon, 48x42, 32 bits/pixel
Hash 15cb7752b698d4e7a9bc373f7e0778ae
58eb4b1ad83d0b2178a5abe5c6771e7d5df28476
1e99eb690e8e97e4e22bcfad8185db29a2ca8570051585496fb18f4d4acf66ca
GET /favicon.ico HTTP/1.1
Host: www.twi-dl.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: image/vnd.microsoft.icon
last-modified: Sun, 04 Jul 2021 15:15:26 GMT
etag: W/"210e-5c64da88abf80"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2796
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FEH41Fq%2BfHPWAopRF2w%2FhjU7JrAD7HMYozuT9vg8kS19B54ukF1acNFlR5WcxfMIWBF%2BIF4ew2vXSwt7eB0JPQ28z0WDTCxTsEQ5SbdKXB4hzXmd%2FQ%2BSRCIWmpJp1%2BgTpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b0132fa50b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash b9e07cd60b85f301f94ce6f1fb5ac825
351aeeda6e44d0c1e4dd0aa352557422080f1707
af34f7b00334a8c2ebd081d6afe4b1b0d7e4ef578b5db9ac1839bee8f7d9d563
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "AF34F7B00334A8C2EBD081D6AFE4B1B0D7E4EF578B5DB9AC1839BEE8F7D9D563"
Last-Modified: Mon, 15 Jul 2024 19:24:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14580
Expires: Wed, 17 Jul 2024 18:46:30 GMT
Date: Wed, 17 Jul 2024 14:43:30 GMT
Connection: keep-alive
GET qieav.cc/favicon.ico
200 OK 1.0 kB IP
Certificate IssuerLet's Encrypt
Subjectqieav.cc
Fingerprint40:C4:90:F4:0F:DF:80:73:F3:C2:BD:1D:23:C9:F4:FC:E4:B1:36:4B
ValidityWed, 03 Jul 2024 09:12:16 GMT - Tue, 01 Oct 2024 09:12:15 GMT
File type HTML document, ASCII text, with very long lines (310)
Hash 01043f60b8c89e655fb4c96b859d1864
ff0f1ee7f84608e2180a1f02a2fa86c72038659d
865d8a24f2a3403fd7de525f9f825638ca4a409782d6e802e49b563a74fc2e7f
GET /favicon.ico HTTP/1.1
Host: qieav.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 17 Jul 2024 14:43:29 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1042
X-Request-Id: a1042aea-bdb2-4062-8f4c-42870ee24b5f
Cache-Control: no-store, max-age=0
Accept-Ch: sec-ch-prefers-color-scheme
Critical-Ch: sec-ch-prefers-color-scheme
Vary: sec-ch-prefers-color-scheme
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_iEDeMjQDPHcLwT9YXqNvVCBis55UW9Qm54vQNty9sEaMI7MoGeliY2xWE512/BrTuBjwiSX7P9BUi9JbKI5MTw==
Set-Cookie: parking_session=a1042aea-bdb2-4062-8f4c-42870ee24b5f; expires=Wed, 17 Jul 2024 14:58:30 GMT; path=/
Connection: close
727 B URL zerossl.ocsp.sectigo.com/
IP
Hash 032a3d3b95d04417f36e9cae7733bc11
c02f200ff526c6a3d4fafcea611536119eee0325
64e80c60fdde81ef465fa5ee64c2f1a018559f0037f886739a2b0f8a89388a13
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 17 Jul 2024 14:43:30 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 15 Jul 2024 20:12:26 GMT
Expires: Mon, 22 Jul 2024 20:12:25 GMT
Etag: "c02f200ff526c6a3d4fafcea611536119eee0325"
Cache-Control: max-age=452501,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 8a4b01338a2cb4ee-OSL
504 B IP
ASN #20940 Akamai International B.V.
Hash 63ca4ff4e51eddfa057025ade3fa4b0f
044fc463ceed76420451280b38c6a2f04cdcd9be
8e19fa270a19f440e791354026765373f1c191288219c88690d6506a09e41cfa
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8E19FA270A19F440E791354026765373F1C191288219C88690D6506A09E41CFA"
Last-Modified: Mon, 15 Jul 2024 20:24:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16016
Expires: Wed, 17 Jul 2024 19:10:26 GMT
Date: Wed, 17 Jul 2024 14:43:30 GMT
Connection: keep-alive
GET pornolomka.com/favicon.ico
301 Moved Permanently 167 B URL GET HTTP/2 pornolomka.com/favicon.ico
IP
Certificate IssuerGoogle Trust Services LLC
Subjectpornolomka.com
Fingerprint68:31:96:DC:F2:39:09:AC:BA:55:8F:F2:33:D2:CB:87:C2:4F:A9:A4
ValidityWed, 29 May 2024 01:14:32 GMT - Tue, 27 Aug 2024 01:14:31 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 0104c301c5e02bd6148b8703d19b3a73
7436e0b4b1f8c222c38069890b75fa2baf9ca620
446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /favicon.ico HTTP/1.1
Host: pornolomka.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: text/html
content-length: 167
location: http://pornolomka.com/favicon.ico
cache-control: max-age=3600
expires: Wed, 17 Jul 2024 15:43:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EgEsKV4wmI8SrHrsGk2gvSjaKcKiiHIVXEpTGpz04GSDBIABCcp%2FP3Jo2A0FPtRIy2YZCxGnBVwR%2Bfy1tIIdZO%2BJYp1LJDgd1hPQDCwyYf08A2o7MWMFg%2BGcvDTLLlDTvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b0133f8686364-LHR
X-Firefox-Spdy: h2
GET huotuisp.com/favicon.ico
404 Not Found 1.9 kB IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecthuotuisp.com
FingerprintA3:31:19:70:75:64:EB:9E:32:D9:CA:96:82:39:C7:04:D3:B9:64:9D
ValidityWed, 10 Jul 2024 18:06:33 GMT - Tue, 08 Oct 2024 18:06:32 GMT
File type HTML document, Unicode text, UTF-8 text
Hash f79bee19e552841d64cc73c5636ecba3
d9b3a06d8e2cd4167dba20e3dd518c9b7510b8d4
934657ec29c974f9f153c1b344fa2ade345955d5c4622fe326214aa5ea2c0c36
GET /favicon.ico HTTP/1.1
Host: huotuisp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 17 Jul 2024 14:43:27 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QGM6jQtukovgtzTdNsO78C7piTjW3Ra6KdGQMvbPlzeF93%2F6tzGa5C1SnmRysEDgzORsvokP5mAdWUkpnivJO%2FXS2PMzlYOUvCKkeQ78KgaWWaC0GSI7sYum7fU2Izk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b011dbfdd5688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET hifimov.co/favicon.ico
200 OK 1.2 kB IP
Certificate IssuerLet's Encrypt
Subject*.hifimov.co
FingerprintD4:CC:F6:2B:BD:95:FC:BC:B7:1C:1D:CE:BC:B1:9E:21:0B:B3:4E:F9
ValiditySat, 18 May 2024 03:00:04 GMT - Fri, 16 Aug 2024 03:00:03 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Hash b4f251d3904c06d03eca94cd26d2c03f
957b9afa61b7c9caf7f9ac8917c0ff042b353f1b
840e212b5e59880e5e710d8b6ce75538fb221036710d6736bd61e292db4d26c7
GET /favicon.ico HTTP/1.1
Host: hifimov.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: image/x-icon
content-length: 1150
last-modified: Sun, 19 Mar 2023 17:34:51 GMT
expires: Wed, 24 Jul 2024 14:43:30 GMT
cache-control: max-age=604800
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
accept-ranges: bytes
X-Firefox-Spdy: h2
GET nesaporn.com/favicon.ico
200 OK 1.2 kB IP
ASN #208046 ColocationX Ltd.
Certificate IssuerZeroSSL
Subjectnesaporn.com
FingerprintB7:D4:37:5F:17:E2:1E:21:E6:0E:64:5B:1A:FB:51:14:B3:ED:B5:B7
ValiditySat, 18 May 2024 00:00:00 GMT - Fri, 16 Aug 2024 23:59:59 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Hash 393aa049e181e7ae8b83cf3db4ab564f
1e5906290f2e3f6e03b16d8b78e3058f7a3b2732
39d8226fc9b8e7b3d823b23d265d20bb7c23c4cd180da21fed74bef4088b6ba9
GET /favicon.ico HTTP/1.1
Host: nesaporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 17 Jul 2024 14:43:30 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Thu, 01 Feb 2024 21:45:55 GMT
Connection: keep-alive
ETag: "65bc1113-47e"
Expires: Thu, 18 Jul 2024 14:43:30 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
504 B IP
ASN #20940 Akamai International B.V.
Hash 6541e95f5c169001d44cc911e5129e6b
7d9526f062fab2c96c7662241cb577af90207a34
dd54566a9199558d1d19a57527e8ebf08e3f981e8f8cfbb7c9f323b6f26d7b59
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DD54566A9199558D1D19A57527E8EBF08E3F981E8F8CFBB7C9F323B6F26D7B59"
Last-Modified: Mon, 15 Jul 2024 20:22:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18534
Expires: Wed, 17 Jul 2024 19:52:24 GMT
Date: Wed, 17 Jul 2024 14:43:30 GMT
Connection: keep-alive
GET javp1.cc/upload/vod/20240219-3/750e4cda365342772b7ee4f1cbd3f9ef.jpg
404 Not Found 2.2 kB URL GET HTTP/2 javp1.cc/upload/vod/20240219-3/750e4cda365342772b7ee4f1cbd3f9ef.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 61770fce11a09cf460d45cb507670b0b
a91724b0e57f8426b0e3572cbcb226359ae6501c
1fdb617ec52b6ad2b44ef4da4abca278a8f8b3cb5cbffc7efa9aaf3a0c6eb24a
GET /upload/vod/20240219-3/750e4cda365342772b7ee4f1cbd3f9ef.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KuYAA25CAXMqhaZrsAdAsWsReaelgJSfBU4VyH24uNrekVXKn3tQTX%2BIOYSgXFmsSWwhFrinv5UzkBqKoyNt0b0zpwppYp2buCPEUike09lSpIsitTpbih27ng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b011d8fdd7129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET pornolomka.com/favicon.ico
301 Moved Permanently 167 B URL GET HTTP/2 pornolomka.com/favicon.ico
IP
Certificate IssuerGoogle Trust Services LLC
Subjectpornolomka.com
Fingerprint68:31:96:DC:F2:39:09:AC:BA:55:8F:F2:33:D2:CB:87:C2:4F:A9:A4
ValidityWed, 29 May 2024 01:14:32 GMT - Tue, 27 Aug 2024 01:14:31 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 0104c301c5e02bd6148b8703d19b3a73
7436e0b4b1f8c222c38069890b75fa2baf9ca620
446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /favicon.ico HTTP/1.1
Host: pornolomka.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: text/html
content-length: 167
location: http://pornolomka.com/favicon.ico
cache-control: max-age=3600
expires: Wed, 17 Jul 2024 15:43:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ND6PuiTzPQZupOBFP%2Ba0elvBtBhdamZZFgZIRsKinwqPs6VXsgq9sXHc26Xq98OwHhz4zTncmqVKPfokksqz7s%2BzmK0S3OMV6ODBfhDCOL9E0TkQKYdZJJT1X79a7n0aDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01358a796364-LHR
X-Firefox-Spdy: h2
GET pornogids.net/favicon.ico
927 B URL GET pornogids.net/favicon.ico
IP
Certificate IssuerGoogle Trust Services
Subjectpornogids.net
FingerprintC9:3A:D8:48:D9:87:5C:4E:E7:93:81:AC:FE:3E:01:AB:10:3B:79:A1
ValidityFri, 12 Jul 2024 09:17:04 GMT - Thu, 10 Oct 2024 09:17:03 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Hash 1d602d8d667d4645f25af3f661f3587b
a45fbd015b4e6229fd97bf41e8a83fca1c668681
c97d12d28c2ef046673f7db4529fe637c2e3880718b16f2a137bbd074c034382
GET /favicon.ico HTTP/1.1
Host: pornogids.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: image/x-icon
last-modified: Sun, 21 Jul 2019 07:09:41 GMT
etag: W/"5d340fb5-47e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 334
priority: u=4,i
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oaCJq6xoZI0b3J30vJetsop6j9XBVQsuQP%2F%2FtELQGmGqWiWbf0KLrME5Rd97Lbc7mdTDRJsASYLyMbQ8vqyfSYWxY6jvs98JdW27%2Fnrjnd3FSZZWEONsL0tHZVKQSeIW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b012dbbd9945a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET pornolomka.com/favicon.ico
301 Moved Permanently 167 B URL GET HTTP/2 pornolomka.com/favicon.ico
IP
Certificate IssuerGoogle Trust Services LLC
Subjectpornolomka.com
Fingerprint68:31:96:DC:F2:39:09:AC:BA:55:8F:F2:33:D2:CB:87:C2:4F:A9:A4
ValidityWed, 29 May 2024 01:14:32 GMT - Tue, 27 Aug 2024 01:14:31 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 0104c301c5e02bd6148b8703d19b3a73
7436e0b4b1f8c222c38069890b75fa2baf9ca620
446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /favicon.ico HTTP/1.1
Host: pornolomka.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: text/html
content-length: 167
location: http://pornolomka.com/favicon.ico
cache-control: max-age=3600
expires: Wed, 17 Jul 2024 15:43:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4OUsHVkLGYXOjui9%2FWgEYfbsqhWDjTTJNq67Bm47PfMokbPvJ5iPA0CLM2hAEyRELzBOwjmXo98pS%2FEJ%2FRWejus3hsv6SRtuVuS75909wv1ZOZhv2f6ml0jbTWxVD8upAw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b0135cabd6364-LHR
X-Firefox-Spdy: h2
GET pornolomka.com/favicon.ico
301 Moved Permanently 167 B URL GET HTTP/2 pornolomka.com/favicon.ico
IP
Certificate IssuerGoogle Trust Services LLC
Subjectpornolomka.com
Fingerprint68:31:96:DC:F2:39:09:AC:BA:55:8F:F2:33:D2:CB:87:C2:4F:A9:A4
ValidityWed, 29 May 2024 01:14:32 GMT - Tue, 27 Aug 2024 01:14:31 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 0104c301c5e02bd6148b8703d19b3a73
7436e0b4b1f8c222c38069890b75fa2baf9ca620
446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /favicon.ico HTTP/1.1
Host: pornolomka.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: text/html
content-length: 167
location: http://pornolomka.com/favicon.ico
cache-control: max-age=3600
expires: Wed, 17 Jul 2024 15:43:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Grkqzf%2FSxHBpoDJuQcPpTnT%2B8f8%2BTvgg5nEIlib3xl3TigBgKKgaln9ADncOGiV77ZDmd0BTcZVuhXMgM4WTXQQv5ii%2FBmt2SpbtV2y8pNH19k27vK2Y4EISsCvpsBf8Cw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01360b0d6364-LHR
X-Firefox-Spdy: h2
GET pornolomka.com/favicon.ico
301 Moved Permanently 167 B URL GET HTTP/2 pornolomka.com/favicon.ico
IP
Certificate IssuerGoogle Trust Services LLC
Subjectpornolomka.com
Fingerprint68:31:96:DC:F2:39:09:AC:BA:55:8F:F2:33:D2:CB:87:C2:4F:A9:A4
ValidityWed, 29 May 2024 01:14:32 GMT - Tue, 27 Aug 2024 01:14:31 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 0104c301c5e02bd6148b8703d19b3a73
7436e0b4b1f8c222c38069890b75fa2baf9ca620
446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /favicon.ico HTTP/1.1
Host: pornolomka.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: text/html
content-length: 167
location: http://pornolomka.com/favicon.ico
cache-control: max-age=3600
expires: Wed, 17 Jul 2024 15:43:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nt455NTM4NvvJF4d1bJ828f9a91Xh3s9QJu9ICZwFf4gfSps9rSiYY%2BwrgqvicJcx32bbWg8iHogV08AhG09j%2BdyBG8d7jOIdZpS8QTPfkIQjTRohBXjLCyntk2o%2FXwE9g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01363b5c6364-LHR
X-Firefox-Spdy: h2
GET javp1.cc/upload/vod/20240218-7/72be3c102269c9dad3869ef4d87f39e1.jpg
404 Not Found 2.4 kB URL GET HTTP/3 javp1.cc/upload/vod/20240218-7/72be3c102269c9dad3869ef4d87f39e1.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 61770fce11a09cf460d45cb507670b0b
a91724b0e57f8426b0e3572cbcb226359ae6501c
1fdb617ec52b6ad2b44ef4da4abca278a8f8b3cb5cbffc7efa9aaf3a0c6eb24a
GET /upload/vod/20240218-7/72be3c102269c9dad3869ef4d87f39e1.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 169
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eZs8eOpSJbVVgkKJM0AC%2FH8oadWr3OPg%2BDOkXHt%2B6GsxqOG2%2FPL68OrWcbBXzm9vhkqCl6wi1LQwAJ5IYRlogPeNiWfO8cJLjbVMiBBOeRSGhYkhYHGnPTaD8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b011d4f9c7129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET pornolomka.com/favicon.ico
301 Moved Permanently 167 B URL GET HTTP/2 pornolomka.com/favicon.ico
IP
Certificate IssuerGoogle Trust Services LLC
Subjectpornolomka.com
Fingerprint68:31:96:DC:F2:39:09:AC:BA:55:8F:F2:33:D2:CB:87:C2:4F:A9:A4
ValidityWed, 29 May 2024 01:14:32 GMT - Tue, 27 Aug 2024 01:14:31 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 0104c301c5e02bd6148b8703d19b3a73
7436e0b4b1f8c222c38069890b75fa2baf9ca620
446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /favicon.ico HTTP/1.1
Host: pornolomka.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Wed, 17 Jul 2024 14:43:31 GMT
content-type: text/html
content-length: 167
location: http://pornolomka.com/favicon.ico
cache-control: max-age=3600
expires: Wed, 17 Jul 2024 15:43:31 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DjonkIR2TRcvYLKSWJHDL0dSubo5iEQto0ux3HHI%2FSTMBNVJECzHc%2BvXycapw417ZYkV0LEmsxS15ym3CnsUrG%2Bh3V80iLkHQz85K7CtGtRt22nYsaCxGN%2BfFIpfVUS9sw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01370c776364-LHR
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://javfan.com/watch/Ai2/title/myhash/3
200 OK 16 kB URL GET HTTP/2 pdocac.tube-dl.top/v/s://javfan.com/watch/Ai2/title/myhash/3
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint56:EF:69:95:CA:9C:11:40:53:18:AA:5F:28:B9:1D:DE:6D:68:F4:A8
ValidityTue, 09 Jul 2024 18:56:35 GMT - Mon, 07 Oct 2024 18:56:34 GMT
File type ASCII text, with no line terminators
Hash 567d2902445a113b9ecf72f54d56daab
bad2067a42358ef70f0759c42a4f9254bf0a88d5
e236c20765aa017cff230a0c818fe90f433fed0c6047e8b77f4cd8f3e23dbecc
GET /v/s://javfan.com/watch/Ai2/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.av4us.top
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top96.161.209-myhost-.158.223.5/v/s://javfan.com/watch/Ai2/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://javfan.com/watch/Ai2/title/myhash/3
pdo115: feedvid-, cachefileb-cacpdo6/84/68/102024, lfm-1-15875, lmd-15875, lud-3932329, xfvlen-1076117, fsize-613401, played-13
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
last-modified: Wed, 17 Jul 2024 14:43:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fkf4T616ulB5joeYxrZp2nDZHYUaVtVjKgifu2V6zgbGfIJ2jY5xmk8s8qR7M%2Fu08b%2BwV2vJx%2BS0qJblLFcS3xEZqhDlTnMlj4RGZCNHyrBvkWA8%2BMhgRE19q4rbOG0N4KWr23U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b01259ffd5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET pornolomka.com/favicon.ico
301 Moved Permanently 167 B URL GET HTTP/2 pornolomka.com/favicon.ico
IP
Certificate IssuerGoogle Trust Services LLC
Subjectpornolomka.com
Fingerprint68:31:96:DC:F2:39:09:AC:BA:55:8F:F2:33:D2:CB:87:C2:4F:A9:A4
ValidityWed, 29 May 2024 01:14:32 GMT - Tue, 27 Aug 2024 01:14:31 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 0104c301c5e02bd6148b8703d19b3a73
7436e0b4b1f8c222c38069890b75fa2baf9ca620
446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /favicon.ico HTTP/1.1
Host: pornolomka.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Wed, 17 Jul 2024 14:43:31 GMT
content-type: text/html
content-length: 167
location: http://pornolomka.com/favicon.ico
cache-control: max-age=3600
expires: Wed, 17 Jul 2024 15:43:31 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x1H%2FC5d7MjAixFnuU%2F2DRUv9FcpPkU%2FFzIdF8DgLIhdcv476wT9llg8AweUuVHA5HgdFHiXZSA5fmYXzpEj3jMP7SA6hhAa8fn195g%2Ffc%2Bcykg3qK1I4klPxRuXL1AYD6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01373cb76364-LHR
X-Firefox-Spdy: h2
GET pornolomka.com/favicon.ico
301 Moved Permanently 167 B URL GET HTTP/2 pornolomka.com/favicon.ico
IP
Certificate IssuerGoogle Trust Services LLC
Subjectpornolomka.com
Fingerprint68:31:96:DC:F2:39:09:AC:BA:55:8F:F2:33:D2:CB:87:C2:4F:A9:A4
ValidityWed, 29 May 2024 01:14:32 GMT - Tue, 27 Aug 2024 01:14:31 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 0104c301c5e02bd6148b8703d19b3a73
7436e0b4b1f8c222c38069890b75fa2baf9ca620
446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /favicon.ico HTTP/1.1
Host: pornolomka.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Wed, 17 Jul 2024 14:43:31 GMT
content-type: text/html
content-length: 167
location: http://pornolomka.com/favicon.ico
cache-control: max-age=3600
expires: Wed, 17 Jul 2024 15:43:31 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F9sZCGNE0LDoxr50eYOP6QKd6WZqJu%2FTh3k7rNo60NAdHdX6aFfbKEC92S40QZLamH1UiG%2BZe0cGmS2Th7mQqrDlfPS1t4NU5SCoKd23hd9m1FyyIGzPJDT6FdpQF5XK%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01377cff6364-LHR
X-Firefox-Spdy: h2
GET www.dmm.co.jp/favicon.ico
301 Moved Permanently 198 B URL GET HTTP/2 www.dmm.co.jp/favicon.ico
IP
Certificate IssuerGlobalSign nv-sa
Subject*.dmm.co.jp
FingerprintB1:0E:AD:F0:EB:D5:0A:3D:C7:79:46:31:19:FC:5F:40:4B:7E:2D:0E
ValidityThu, 28 Mar 2024 09:06:02 GMT - Tue, 29 Apr 2025 09:06:01 GMT
File type HTML document, ASCII text
Hash 8d78df0f8392b3beb3a3044e2048755a
ad289da3eb2278129c072c15b39801c75d80d85b
3ec173d60c812c29256bca273297b6238070366be04fb0caa67fb19ff45cc8a0
GET /favicon.ico HTTP/1.1
Host: www.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
content-type: text/html; charset=iso-8859-1
content-length: 198
location: https://p.dmm.co.jp/p/favicon.ico
date: Wed, 17 Jul 2024 14:43:31 GMT
server: Apache
vary: Accept-Encoding
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: H7XWGEeIn7xgCc9elFMebufJbcoa52imaUABhZc1BkyL24ghYqPbbg==
X-Firefox-Spdy: h2
GET p.dmm.co.jp/p/favicon.ico
200 OK 15 kB URL GET HTTP/2 p.dmm.co.jp/p/favicon.ico
IP
Certificate IssuerAmazon
Subjectp.dmm.co.jp
FingerprintD8:00:98:F8:E6:84:47:F9:58:E4:8A:84:09:E8:E5:9D:43:02:3B:39
ValiditySun, 04 Feb 2024 00:00:00 GMT - Wed, 05 Mar 2025 23:59:59 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Hash 585b7660a8d46df20f3a0f838b58e11a
c4b5148fad8e310257812bf99be815a8dd145af5
9cb6d660bbc93c9ff4b0b2a0e0253b5b5c5e102d35cbd8644e4690a3c6b00f69
GET /p/favicon.ico HTTP/1.1
Host: p.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
content-length: 15086
server: openresty
date: Wed, 17 Jul 2024 14:43:32 GMT
last-modified: Tue, 31 Jul 2018 10:18:36 GMT
etag: "5b60377c-3aee"
x-cache-status: HIT
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Eh8zmqMk8BhFTU_044KW9xpbuO0U_Vre1yEtW9RZLkJ7OeY_7JnOiQ==
X-Firefox-Spdy: h2
GET naturismv.com/favicon.ico
20 kB URL GET naturismv.com/favicon.ico
IP
Certificate IssuerGoogle Trust Services
Subjectnaturismv.com
FingerprintDC:14:4C:5B:F7:92:15:07:92:B8:64:21:8D:58:61:53:AD:92:53:42
ValidityThu, 11 Jul 2024 08:57:08 GMT - Wed, 09 Oct 2024 08:57:07 GMT
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Hash 297c16b0acfcf2b65e2a7c98bc4f73b4
5c73be9088bce1a10797c417eea7434102d6ae2d
aff9828513cf3000fc5e141e962e0a7b61b81411615db4157342d1a6a3f2381a
GET /favicon.ico HTTP/1.1
Host: naturismv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: image/vnd.microsoft.icon
x-content-type-options: nosniff
last-modified: Thu, 13 Jun 2019 11:00:14 GMT
etag: W/"3aee-58b326f362b80"
cache-control: max-age=14400, must-revalidate
expires: Tue, 15 Oct 2024 14:43:29 GMT
strict-transport-security: max-age=31536000;
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8PH8%2FiM5ePzG2FXLWik%2B8smNhJa3eGjn3p1Q7DaIcvvGfUXPJQ%2FvnXdfyRhRM6eCgNKDMQwtVYUUyFzFL0BU5TB9T6nBYl%2FMbe3izteRXntqPgGhsou%2FvYWdGFGYU2FS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b012d3edcbec3-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET img.jingpinx.top/upload/vod/20240212-1/b4cd6afadd75711da0ab475a687674df.jpg
404 Not Found 150 B URL GET HTTP/1.1 img.jingpinx.top/upload/vod/20240212-1/b4cd6afadd75711da0ab475a687674df.jpg
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerLet's Encrypt
Subjectimg.jingpinx.top
Fingerprint6A:C9:59:5B:AC:31:1A:22:CD:C7:C9:34:C8:91:FB:01:8A:8B:92:9B
ValidityWed, 15 May 2024 03:00:25 GMT - Tue, 13 Aug 2024 03:00:24 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 597ba0d4396e9c906225140ce907092c
28ae2ba65ccdb583d79f85b8cc9509fae697493b
ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6
GET /upload/vod/20240212-1/b4cd6afadd75711da0ab475a687674df.jpg HTTP/1.1
Host: img.jingpinx.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Content-Length: 150
Content-Type: text/html
Date: Wed, 17 Jul 2024 14:43:34 GMT
Server: openresty
X-Cache: BYPASS, Status: 404
GET pdocac.tube-dl.top/v/s://airav.cc/cn/playon.aspx?hid=194786/title/myhash/3
200 OK 69 kB URL GET HTTP/2 pdocac.tube-dl.top/v/s://airav.cc/cn/playon.aspx?hid=194786/title/myhash/3
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint56:EF:69:95:CA:9C:11:40:53:18:AA:5F:28:B9:1D:DE:6D:68:F4:A8
ValidityTue, 09 Jul 2024 18:56:35 GMT - Mon, 07 Oct 2024 18:56:34 GMT
Hash 22ee5fb054e25c3778956c9701ea6e72
14114e53a46a26f5e7b46d1600f8323a33b9c626
bd929d6930ad1992bc2f6ca222e2dae7caddb45a6f8a9a17fc829cdee37a5b1a
GET /v/s://airav.cc/cn/playon.aspx?hid=194786/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.av4us.top
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top96.161.209-myhost-158.222.96/v/s://airav.cc/cn/playon.aspx?hid=194786/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://airav.cc/cn/playon.aspx?hid=194786/title/myhash/3
pdo115: feedvid-, cachefileb-cacpdo9/65/46/67, lfm-4-35636, lmd-35636, lud-4341612, xfvlen-1125720, fsize-267522, played-
cache-control: public, max-age=720000
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: MISS
last-modified: Wed, 17 Jul 2024 14:43:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nrjLAw6E8x0DQK8V9%2BrLgLGMOGgHsGjAhrwhdDk5EyLn8DiFXd7JIKSD2UuTplx2wTH1Sn19TauexTX91XPl%2B%2F%2BpBFUYy6IoQpooT%2BCAHQCsv34qtn9lnWxRDyxhCwggw61rhSg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b012628ae5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
200 OK 83 kB URL GET HTTP/3 cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&aqxg
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type JavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (674)
Hash 37472edf83f6af76af6cceb18ca8f4ff
e393c4f13aa63da0dbe2558a80f40b481e6e095d
f0942c9b111b72993afa5371ba474842f38d54f935a95bdfe5cd3a679ea9b6ac
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 82564
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.331.0
x-jsd-version-type: version
etag: W/"35b04-45PE8TqmPaDb4lWKgPQLSB5uCV0"
content-encoding: br
accept-ranges: bytes
date: Wed, 17 Jul 2024 14:43:40 GMT
age: 27393
x-served-by: cache-fra-eddf8230100-FRA, cache-hel1410027-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET mc.webvisor.org/watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%26aqxg&page-ref=https%3A%2F%2Fen.av4us.top%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3Abyif4b2t06iipg89gn11z5uwnz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1382%3Acn%3A1%3Adp%3A0%3Als%3A446169180316%3Ahid%3A836850170%3Aphid%3A250869365%3Az%3A0%3Ai%3A20240717144343%3Aet%3A1721227423%3Ac%3A1%3Arn%3A686509506%3Arqn%3A1%3Au%3A1721227420101331780%3Aw%3A620x280%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C324%2C4%2C604%2C604%2C0%2C344%3Aco%3A0%3Acpf%3A1%3Ans%3A1721227419700%3Aadb%3A1%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1721227423%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(21037568)fip(1)ti(1)
459 B URL GET mc.webvisor.org/watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%26aqxg&page-ref=https%3A%2F%2Fen.av4us.top%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3Abyif4b2t06iipg89gn11z5uwnz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1382%3Acn%3A1%3Adp%3A0%3Als%3A446169180316%3Ahid%3A836850170%3Aphid%3A250869365%3Az%3A0%3Ai%3A20240717144343%3Aet%3A1721227423%3Ac%3A1%3Arn%3A686509506%3Arqn%3A1%3Au%3A1721227420101331780%3Aw%3A620x280%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C324%2C4%2C604%2C604%2C0%2C344%3Aco%3A0%3Acpf%3A1%3Ans%3A1721227419700%3Aadb%3A1%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1721227423%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(21037568)fip(1)ti(1)
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&aqxg
Certificate IssuerGlobalSign nv-sa
Subjectmc.webvisor.com
Fingerprint2A:A0:A6:9C:1E:F9:C0:FD:36:75:E2:D3:32:B9:34:8F:EE:3B:81:11
ValidityFri, 19 Apr 2024 21:07:47 GMT - Fri, 11 Oct 2024 20:59:59 GMT
Hash 1d994d1480b19b4ff31bf1d6e8c5361d
8b1ec85630a7b7feae6cd5897b246246c9eb2a7c
62307383a929ce69c0e7a38b9aeff955e583ee71fad14f2b6a6b474cacecb7c3
GET /watch/50322544?wmode=7&page-url=https%3A%2F%2Ffixedjs.jtube.top%2F%3Fvidjs%3Dgetad%26aqxg&page-ref=https%3A%2F%2Fen.av4us.top%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3Abyif4b2t06iipg89gn11z5uwnz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1382%3Acn%3A1%3Adp%3A0%3Als%3A446169180316%3Ahid%3A836850170%3Aphid%3A250869365%3Az%3A0%3Ai%3A20240717144343%3Aet%3A1721227423%3Ac%3A1%3Arn%3A686509506%3Arqn%3A1%3Au%3A1721227420101331780%3Aw%3A620x280%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C324%2C4%2C604%2C604%2C0%2C344%3Aco%3A0%3Acpf%3A1%3Ans%3A1721227419700%3Aadb%3A1%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1721227423%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(21037568)fip(1)ti(1) HTTP/1.1
Host: mc.webvisor.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fixedjs.jtube.top
DNT: 1
Connection: keep-alive
Cookie: yabs-sid=1367991491721227403; i=gytMXGzbMqiW9myl/nrsYMOEZXzvVt3r08Hr62ONewqp1rQUgL0YMo/rqluHc3cHVB8HocQxRtoTpmlPngZQVQPqa2E=; yandexuid=5617843831721227403; yuidss=5617843831721227403; ymex=1752763403.yrts.1721227403#1752763403.yrtsi.1721227403
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 459
pragma: no-cache
date: Wed, 17 Jul 2024 14:43:43 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://fixedjs.jtube.top
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-content-type-options: nosniff
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
expires: Wed, 17-Jul-2024 14:43:43 GMT
x-xss-protection: 1; mode=block
last-modified: Wed, 17-Jul-2024 14:43:43 GMT
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://javfan.com/watch/Ai1/title/myhash/3
200 OK 7.2 kB URL GET HTTP/2 pdocac.tube-dl.top/v/s://javfan.com/watch/Ai1/title/myhash/3
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint56:EF:69:95:CA:9C:11:40:53:18:AA:5F:28:B9:1D:DE:6D:68:F4:A8
ValidityTue, 09 Jul 2024 18:56:35 GMT - Mon, 07 Oct 2024 18:56:34 GMT
File type ASCII text, with no line terminators
Hash 8be0d4365af2eaf90227880d09c87f61
d1e112bc08b1f51414ed47eb37ab60eca2b42348
72310cdf75595bcf87f762bdbc40dcc47323d2249d5ccfce6f4d4e1dac756fdf
GET /v/s://javfan.com/watch/Ai1/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.av4us.top
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top96.161.209-myhost-58.222.254/v/s://javfan.com/watch/Ai1/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://javfan.com/watch/Ai1/title/myhash/3
pdo115: feedvid-, cachefileb-cacpdo9/5d/4e/532d24, lfm-1-28088, lmd-28088, lud-4615108, xfvlen-838035, fsize-303607, played-8
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
last-modified: Wed, 17 Jul 2024 14:43:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oL7C2cc%2F6iBjW5Mjx6%2BVgiMjVfg6HIRaKvtcc8LWZwRL1p1d3l2ucT3p75cXrzwHcWVeWYDMyR9x3nre0tybjjMqsIOvb%2FrdDwsnkwt1i%2F4pu%2FyuPgmNL%2BBV6gERcAO%2BKG7GCjA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b0125a8025695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.javwind.com/contents/videos_screenshots/34000/34103/preview.jpg
0 B URL GET www.javwind.com/contents/videos_screenshots/34000/34103/preview.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavwind.com
FingerprintB0:2B:6A:90:FE:C0:1C:E4:19:10:A8:84:24:65:36:62:37:5E:4A:AE
ValidityMon, 08 Jul 2024 11:36:25 GMT - Sun, 06 Oct 2024 11:36:24 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /contents/videos_screenshots/34000/34103/preview.jpg HTTP/1.1
Host: www.javwind.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range
cache-control: max-age=2592000
content-encoding: gzip
etag: W/"62e5835b-f582"
expires: Mon, 12 Aug 2024 11:36:49 GMT
last-modified: Wed, 12 Jun 2024 18:29:03 GMT
vary: Accept-Encoding
x-cache: HIT, policy, disk
cf-cache-status: HIT
age: 334849
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3HvgyzH%2BHypLJPrjbjxiFwAJbFqpijLA2%2BZB6tJQ8WkFHwkjG31EczfRNjCx0hHOoc6d9aAqon85CS8kanN0nR1QG39DyCCcaFDSd8EECrFCyDx2vJcSuFhF7yPjWb9E8bw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b0116195e5691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET img.uubaobei.top/video/other/2023-10-04/148106231182.jpg
0 B URL GET img.uubaobei.top/video/other/2023-10-04/148106231182.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /video/other/2023-10-04/148106231182.jpg HTTP/1.1
Host: img.uubaobei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET www.ssnovel.top/template/YS007/images/avhubCode.png
0 B URL GET www.ssnovel.top/template/YS007/images/avhubCode.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /template/YS007/images/avhubCode.png HTTP/1.1
Host: www.ssnovel.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET static.thisav.com/images/videothumbs/182599-1.jpg
0 B URL GET static.thisav.com/images/videothumbs/182599-1.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videothumbs/182599-1.jpg HTTP/1.1
Host: static.thisav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET pdocac.tube-dl.top/v/s://savsq.com/v/140072/1/1//title/myhash/3
200 OK 227 B URL GET HTTP/2 pdocac.tube-dl.top/v/s://savsq.com/v/140072/1/1//title/myhash/3
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint56:EF:69:95:CA:9C:11:40:53:18:AA:5F:28:B9:1D:DE:6D:68:F4:A8
ValidityTue, 09 Jul 2024 18:56:35 GMT - Mon, 07 Oct 2024 18:56:34 GMT
File type ASCII text, with no line terminators
Hash a691176fd3d702b4bc43b741f0ab2102
9f992bbe1e12ef637c1a022bd3d496a3e6dfe9c4
849609b4f2a562db6a14ea43e740560ed8e3a4be5d0b30ea3432c3ca2ce937eb
GET /v/s://savsq.com/v/140072/1/1//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.av4us.top
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top96.161.209-myhost-158.222.26/v/s://savsq.com/v/140072/1/1//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://savsq.com/v/140072/1/1//title/myhash/3
pdo115: feedvid-, cachefileb-cacpdo6/9e/ba/a6ed27, lfm-1-17, lmd-17, lud-5004615, xfvlen-657149, fsize-328189, played-1266
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
last-modified: Wed, 17 Jul 2024 14:43:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OULxTcNVULNC7DWySX77nYGd0mNKI%2BjFS%2Bpm6IAEEa4sf9yM6xtuQ%2BZPsEvLGb25SZ%2Bb688DAUfwW14bvkOPA3j8MAWbVwP%2Bld5oHEwc9DBykdQFnGmr1x77pWxCRtyXQiHcpyY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b012608725695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.redwap.me/favicon.ico
0 B URL GET www.redwap.me/favicon.ico
IP
Certificate IssuerGoogle Trust Services
Subjectredwap.me
Fingerprint07:B6:77:FA:B2:11:BA:13:C1:B9:12:90:87:4E:6A:E1:A8:01:FD:D6
ValidityWed, 12 Jun 2024 07:50:10 GMT - Tue, 10 Sep 2024 07:50:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.redwap.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: image/x-icon
last-modified: Fri, 09 Jul 2021 20:41:32 GMT
etag: W/"60e8b47c-57e"
expires: Sat, 20 Jul 2024 08:51:37 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 21113
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0ks85zn44PFF1vdujxH2OfZB9TOhlRRM7ip%2BJnGHlXr6QveLD3AAAdpiJhHii1jOJQsl9UCQbbe34%2FTbrVjIM5%2BC6OGfS1vJ2V4hA%2F0LNGyJZPJDWsHur3fcwo0cm9h%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01315f5c56bb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET css.4jpg.top/mycss/av4.css?3
200 OK 3.8 kB URL GET HTTP/3 css.4jpg.top/mycss/av4.css?3
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subject4jpg.top
Fingerprint4B:58:1B:2D:6E:5C:08:9C:6A:B9:EC:DD:5E:F7:DE:5A:0A:7C:75:B1
ValidityWed, 03 Jul 2024 17:20:57 GMT - Tue, 01 Oct 2024 17:20:56 GMT
File type Unicode text, UTF-8 text, with very long lines (4145), with no line terminators
Hash a928ba9e06485f9128efca88a1b2a811
5fce91720740f3af317e503a407853ad8868565a
40660147d6975c96d26e27ff96216f7c77394562e3c7ca7de35ea9c30320b8ee
GET /mycss/av4.css?3 HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:22 GMT
content-type: text/css
etag: W/"ef8-61c1b717d5d80"
access-control-allow-origin: *
access-control-allow-headers: Cake
cache-control: public, max-age=360000
cf-cache-status: HIT
age: 338284
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vCiMVIDO2hhTDQ2JDG5levbqNJZRqntZlc%2Fw7MCypoPkSlMOhDiFtPfHJFL%2FBMi175hbR6EE48RuJs1H3jJ2qKc15PNiaIt%2BhRBs1HT8FBQ8Lzx2gbeFvLDCOIKSEmA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b0101983056af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET javp1.cc/upload/vod/20240219-3/07eeb22202f93f61e2970c0aeb0995c4.jpg
404 Not Found 0 B URL GET HTTP/3 javp1.cc/upload/vod/20240219-3/07eeb22202f93f61e2970c0aeb0995c4.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upload/vod/20240219-3/07eeb22202f93f61e2970c0aeb0995c4.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 66
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AmIWd9luFM1wtwp59XheNicq3D5YGn%2BFwFrLBymmPc0YQSCVxMD4qh2Ii2u%2Fzv3iMLSu7sCmzAFUNVCL1jRez8mI2y1Cs0v50XQK%2FXcGkUgeGPUxchfVH%2FU0QQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b011d0f547129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET www.pornoanswers.com/favicon.ico
404 Not Found 0 B URL GET HTTP/2 www.pornoanswers.com/favicon.ico
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectpornoanswers.com
Fingerprint50:5D:50:A1:E0:E3:EA:7C:D8:B1:0E:E5:58:AB:80:B1:1E:C4:CF:80
ValiditySun, 09 Jun 2024 05:42:09 GMT - Sat, 07 Sep 2024 05:42:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.pornoanswers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: openresty
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: text/html
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
GET jsjs.4jpg.top/index.php?js=very
200 OK 0 B URL GET HTTP/3 jsjs.4jpg.top/index.php?js=very
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subject4jpg.top
Fingerprint4B:58:1B:2D:6E:5C:08:9C:6A:B9:EC:DD:5E:F7:DE:5A:0A:7C:75:B1
ValidityWed, 03 Jul 2024 17:20:57 GMT - Tue, 01 Oct 2024 17:20:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?js=very HTTP/1.1
Host: jsjs.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:22 GMT
content-type: text/html; charset=UTF-8
imghost: 17296161209-h-jsjs4jpgtopmh--NO-rm162158222116/index.php?js=very
56nloadrate: 4.28625
cache-control: max-age=360000, private
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AYLztXsbXioOZdLwA48dR6SfHLC3fQmifSiHQDnUSu8fnjNlGaTCkjKap75gDi1CX3tpWDy0X2z%2B3rdZjpSUqdzEZtWdIG%2FwSNwPxdwf1R3rRPCntrxHSTb%2FxBj%2BTyk6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b00ffee4556af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
404 Not Found 16 kB URL GET HTTP/2 savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerLet's Encrypt
Subjectsavaa.cc
Fingerprint6D:DF:DA:CF:95:D9:31:95:1B:B4:C9:DC:2A:F1:F1:34:72:85:76:A8
ValidityMon, 10 Jun 2024 16:45:04 GMT - Sun, 08 Sep 2024 16:45:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v/151012/1/1/?ysclid=lypyc93xr8885613072 HTTP/1.1
Host: savsq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
GET s8.jshumeng.com/xwupload/video/thumb/c593ae3f7fc544e5151f4474064f2421.jpg
0 B URL GET s8.jshumeng.com/xwupload/video/thumb/c593ae3f7fc544e5151f4474064f2421.jpg
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xwupload/video/thumb/c593ae3f7fc544e5151f4474064f2421.jpg HTTP/1.1
Host: s8.jshumeng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET css.4jpg.top/tvjw/swfobject.js
200 OK 6.6 kB URL GET HTTP/3 css.4jpg.top/tvjw/swfobject.js
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subject4jpg.top
Fingerprint4B:58:1B:2D:6E:5C:08:9C:6A:B9:EC:DD:5E:F7:DE:5A:0A:7C:75:B1
ValidityWed, 03 Jul 2024 17:20:57 GMT - Tue, 01 Oct 2024 17:20:56 GMT
File type ASCII text, with very long lines (6935), with no line terminators
Hash 82ae541f2b2cb6836dfbc304a98f576c
2fa076c54037c048ef8b19c437b6b50b68f6e045
c53de8121c9ab1f0c7a57378e24d31697afc437bf303767e3c3a1c8838c5fe53
GET /tvjw/swfobject.js HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:22 GMT
content-type: application/javascript
etag: W/"19f2-545fa156a93c0"
access-control-allow-origin: *
access-control-allow-headers: Cake
cache-control: public, max-age=360000
cf-cache-status: HIT
age: 338226
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sito%2BzFtgISMUmPFDUltH56M1AHZpTGSPMhmn0WSOKb4RSQsFP0MRbObEHPDOzed8zd7kpz%2Bp%2FD3cMLmt1w8LXm4RH2TxjxKmZxBDAeiXj5fPcK4Qt%2BCUuHhjhKIooo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01038a8556af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET jsjs.4jpg.top/index.php?js=very
200 OK 0 B URL GET HTTP/3 jsjs.4jpg.top/index.php?js=very
IP
Certificate IssuerGoogle Trust Services
Subject4jpg.top
Fingerprint4B:58:1B:2D:6E:5C:08:9C:6A:B9:EC:DD:5E:F7:DE:5A:0A:7C:75:B1
ValidityWed, 03 Jul 2024 17:20:57 GMT - Tue, 01 Oct 2024 17:20:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?js=very HTTP/1.1
Host: jsjs.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: text/html; charset=UTF-8
imghost: 17296161209-h-jsjs4jpgtopmh--NO-rm162158222116/index.php?js=very
56nloadrate: 4.28625
cache-control: max-age=360000, private
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EV1bUc1MKSzPJYs8y5yxQUtiVEj%2FaPv5aSkDV847Q5xjGA68AxNxnstrmgz3d1zX1GU37SZAdfcxqPF6r7j4tSfJXEb9BEmTm1551Cq6rcWFUYLEVD8yzubZhtd%2FSuM3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010c7d9d56af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET pdocac.tube-dl.top/v/s://hsp103.com/video/?1173460-0-0.html/title/myhash/3
200 OK 0 B URL GET HTTP/2 pdocac.tube-dl.top/v/s://hsp103.com/video/?1173460-0-0.html/title/myhash/3
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint56:EF:69:95:CA:9C:11:40:53:18:AA:5F:28:B9:1D:DE:6D:68:F4:A8
ValidityTue, 09 Jul 2024 18:56:35 GMT - Mon, 07 Oct 2024 18:56:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v/s://hsp103.com/video/?1173460-0-0.html/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.av4us.top
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top96.161.209-myhost-158.222.72/v/s://hsp103.com/video/?1173460-0-0.html/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://hsp103.com/video/?1173460-0-0.html/title/myhash/3
pdo115: feedvid-, cachefileb-cacpdo4/12/12/8c, lfm-3-140, lmd-140, lud-2896446, xfvlen-724396, fsize-280857, played-
cache-control: public, max-age=720000
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: MISS
last-modified: Wed, 17 Jul 2024 14:43:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bmjNt7Erp3h%2BOPa6ePXCNASIdhsju5DaqIqhtT52t8rFG5yP7vpx%2FnvjFfxPuf0tW3DJ7t9RqP%2BW2ZroNW7DhJ6b0TwqUgbFUWvUEgWojfbn0Xqg5%2BkWqxrl5b9bNhFKGdABixM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b0125c8295695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET img.fulibao3.xyz/video/thumb/954e2ad53eb2bb6b334c7e4da30d9a48.jpg
0 B URL GET img.fulibao3.xyz/video/thumb/954e2ad53eb2bb6b334c7e4da30d9a48.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /video/thumb/954e2ad53eb2bb6b334c7e4da30d9a48.jpg HTTP/1.1
Host: img.fulibao3.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET savsq.com/template/appj/css/iconfont.ttf
200 OK 38 kB URL GET HTTP/2 savsq.com/template/appj/css/iconfont.ttf
IP
Requested by moz-nullprincipal:{e408f497-c7f4-4a43-9c3c-f51147ae6d25}?https://savsq.com
Certificate IssuerLet's Encrypt
Subjectsavaa.cc
Fingerprint6D:DF:DA:CF:95:D9:31:95:1B:B4:C9:DC:2A:F1:F1:34:72:85:76:A8
ValidityMon, 10 Jun 2024 16:45:04 GMT - Sun, 08 Sep 2024 16:45:03 GMT
File type TrueType Font data, 11 tables, 1st "GSUB", 18 names, Macintosh, Created by iconfonticonfontRegulariconfonticonfontVersion 1.0iconfontGenerated by svg2ttf from F
Hash eebdc942d9ab3ab37f2986bdb8e3d41e
d3523d3d8177bf97c638a5085ae450e57baae286
2bd461e0a490c75624530b2e88c88d4dcc46dddc1785d3ad127350982560a267
GET /template/appj/css/iconfont.ttf HTTP/1.1
Host: savsq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Referer: https://savsq.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: application/octet-stream
content-length: 38276
last-modified: Fri, 05 Aug 2022 03:09:56 GMT
etag: "62ec8a04-9584"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET cdne-pics.youjizz.com/3/2/6/32670e5ec20b2777c0c9e514956a6a951614348895-1080-1920-2637-h264.mp4-9.jpg
200 OK 20 kB URL GET HTTP/2 cdne-pics.youjizz.com/3/2/6/32670e5ec20b2777c0c9e514956a6a951614348895-1080-1920-2637-h264.mp4-9.jpg
IP
Certificate IssuerSectigo Limited
Subject*.youjizz.com
Fingerprint27:54:6C:0C:5B:70:1D:77:94:86:37:FF:6C:FB:F2:18:15:90:4B:CC
ValidityMon, 25 Dec 2023 00:00:00 GMT - Mon, 06 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 308x232, components 3
Hash a408b2986a0258182fb8762cd845222a
301105c4ca7c8d3357d51d6c206a916c1348b6b5
150f6c4d0d4e65b2b3eccc04a2f5a9b51d832fc03f7cebf4b9b888b198bce238
GET /3/2/6/32670e5ec20b2777c0c9e514956a6a951614348895-1080-1920-2637-h264.mp4-9.jpg HTTP/1.1
Host: cdne-pics.youjizz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: image/jpeg
content-length: 19458
last-modified: Fri, 26 Feb 2021 14:18:06 GMT
etag: "4c02-5bc3defd83a22"
expires: Mon, 29 Jan 2024 07:09:07 GMT
cache-control: max-age=10602156
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
timing-allow-origin: *
access-control-expose-headers: Content-Length
accept-ranges: bytes
x-cdn-diag: ams5-6139-2-1664255-h-0-0---;6141-27-2580608----0-0-2
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/://www.le.com/ptv/vplay/20578643.html?ch=by_bing/title/myhash/3
200 OK 0 B URL GET HTTP/2 pdocac.tube-dl.top/v/://www.le.com/ptv/vplay/20578643.html?ch=by_bing/title/myhash/3
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint56:EF:69:95:CA:9C:11:40:53:18:AA:5F:28:B9:1D:DE:6D:68:F4:A8
ValidityTue, 09 Jul 2024 18:56:35 GMT - Mon, 07 Oct 2024 18:56:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v/://www.le.com/ptv/vplay/20578643.html?ch=by_bing/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.av4us.top
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top96.161.209-myhost-158.222.78/v/://www.le.com/ptv/vplay/20578643.html?ch=by_bing/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/://www.le.com/ptv/vplay/20578643.html?ch=by_bing/title/myhash/3
pdo115: feedvid-, cachefileb-cacpdo3/dd/c7/a54d48, lfm-1-24848, lmd-24848, lud-3835112, xfvlen-550166, fsize-145437, played-
cache-control: public, max-age=720000
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: MISS
last-modified: Wed, 17 Jul 2024 14:43:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KfWcH1tmmYGaTWjOC%2Bg8qaAi32EZe7eTaqXdDss3bqs%2FknZuDaZTtTqDxyj7Gcgss2PSP%2F1EL9yowcLZL%2F4eENjQcsB0XKL1%2BNSP5ayPheSzEHUIzSGudG7Qwxb2F9bwnu9JbX8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b0125a8035695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET unpkg.com/videojs-flash@2.2.1/dist/videojs-flash.js
200 OK 39 kB URL GET HTTP/2 unpkg.com/videojs-flash@2.2.1/dist/videojs-flash.js
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint1E:BD:61:21:20:80:6D:7A:38:A4:15:7A:FB:C2:B0:50:AF:1F:F6:31
ValidityThu, 30 May 2024 03:44:12 GMT - Wed, 28 Aug 2024 03:44:11 GMT
File type JavaScript source, ASCII text
Hash b671db9a73a06770313c1a05bcdc0b58
12280acce4192448e93e3b2ef9e1adf6c6eba94a
9162832cc3ed9507d8f869dd0d4fd0dacde05a078172d82a98b05e0aef1f1a34
GET /videojs-flash@2.2.1/dist/videojs-flash.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en.av4us.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:23 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "99ef-EigKzOQZJEjpPjsu+eGt9sbrqUo"
via: 1.1 fly.io
fly-request-id: 01J214ZZTDBDCZWPCMD9VGFC36-arn
cf-cache-status: HIT
age: 1054203
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8a4b0105bf805693-OSL
X-Firefox-Spdy: h2
GET javp1.cc/favicon.ico
0 B IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: image/x-icon
content-length: 332
last-modified: Mon, 01 Jul 2024 05:57:21 GMT
etag: "10be-61c294548ceac-gzip"
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 5700
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9nuR96zDtUsjC66Mlh8uqw%2BPRi2Js5oIgLF3%2BY13cLYaELn2batvkINXK8P5RBYCTDuuTdzEL42mwJbPzutY%2FVjp%2FHO1qyJqnIP9p6UGrBVAFHPHaHQNFQeeMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b012d79f87129-OSL
alt-svc: h3=":443"; ma=86400
GET www.javwind.com/favicon.ico
0 B URL GET www.javwind.com/favicon.ico
IP
Certificate IssuerGoogle Trust Services
Subjectjavwind.com
FingerprintB0:2B:6A:90:FE:C0:1C:E4:19:10:A8:84:24:65:36:62:37:5E:4A:AE
ValidityMon, 08 Jul 2024 11:36:25 GMT - Sun, 06 Oct 2024 11:36:24 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.javwind.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: image/x-icon
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range
etag: W/"62f9d6a3-423e"
last-modified: Mon, 08 Jul 2024 14:31:39 GMT
x-cache: HIT, policy, disk
cache-control: max-age=14400
cf-cache-status: HIT
age: 2579
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D3%2BfaKZcpR89%2Fj%2ByItT4Pl8CRIm8ajXcsH%2FIRLUvLhp95onzWvE%2F%2FVzM9rYOklXrtAf6yDmH83KgSbQDoVFfIrZY3feFYs%2F6%2Be0ROMGh5uo6FSMeM%2BaT7su7qFPqntkCPNE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b012dbe845689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET cacrz.4jpg.top/AV4.us.jpg
200 OK 8.7 kB URL GET HTTP/3 cacrz.4jpg.top/AV4.us.jpg
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subject4jpg.top
Fingerprint4B:58:1B:2D:6E:5C:08:9C:6A:B9:EC:DD:5E:F7:DE:5A:0A:7C:75:B1
ValidityWed, 03 Jul 2024 17:20:57 GMT - Tue, 01 Oct 2024 17:20:56 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 307x82, components 3
Hash edfe007a6e5b3d268b2528f564b60b43
1644c8ef97c871079e07e5079d613af5cb94052f
bf5bb657f5e788af0c02b9b437d3f15bec91e27175e5a654e3d431fb6d063390
GET /AV4.us.jpg HTTP/1.1
Host: cacrz.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:27 GMT
content-type: image/jpeg
content-length: 8741
etag: "2225-5499bcea176c0"
access-control-allow-origin: *
access-control-allow-headers: Cake
ahost: RZ
cache-control: public, max-age=3600000
cf-cache-status: HIT
age: 2962603
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0N70NoZfRMUoBZdGLjgV0DXScVutSjdxkh1wEP%2BGh%2BzmOV0ft5DDeuwVzcE2vjuUXgfoKDPdVnfOojiGMYzXf9ecvUFi5tOujl3oLdnGqKrRnjCPo4x1Z2d1ybog4iMg4A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01208fcb712f-OSL
alt-svc: h3=":443"; ma=86400
GET vidmo.org/favicon.ico
200 OK 5.4 kB IP
ASN #49505 OOO Network of data-centers Selectel
Certificate IssuerZeroSSL
Subjectvidmo.org
Fingerprint73:1F:28:80:07:CE:E6:87:78:3E:51:7D:AE:DB:98:09:FB:82:7E:7C
ValidityMon, 06 May 2024 00:00:00 GMT - Sun, 04 Aug 2024 23:59:59 GMT
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Hash 6b6734885d5e4ff9dbb7d82ba6023598
3c454d68a346b375ed7b59a131699061e7393b1f
0f8e5edd4348eaa11881bf6150baf7b3182b1c3e29c6378e0e921afce7d91819
GET /favicon.ico HTTP/1.1
Host: vidmo.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: image/x-icon
content-length: 5430
last-modified: Sun, 14 Oct 2012 21:41:38 GMT
etag: "507b3192-1536"
cache-control: public, no-transform
accept-ranges: bytes
X-Firefox-Spdy: h2
GET av.tube4.top/621b15f2949f0c7b86d57106379b09df
0 B URL GET av.tube4.top/621b15f2949f0c7b86d57106379b09df
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecttube4.top
Fingerprint2F:81:2B:75:18:70:F0:9E:EF:67:74:3E:F2:D6:4E:33:3D:59:5B:6E
ValidityWed, 10 Jul 2024 21:13:09 GMT - Tue, 08 Oct 2024 21:13:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /621b15f2949f0c7b86d57106379b09df HTTP/1.1
Host: av.tube4.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:36 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-av.tube2.top127.0.0.1-myhost-av.tube2.top127.0.0.1/621b15f2949f0c7b86d57106379b09df
phost: av.tube2.top
pdojs-line356: notjp--myhost-av.tube2.top-filteron-
line1432: notjp--myhost-av.tube2.top-filteron-/621b15f2949f0c7b86d57106379b09df
line1435: notjp--myhost-av.tube2.top-filteron-
line1735: notjp-/621b15f2949f0c7b86d57106379b09df-myhost-av.tube2.top-filteron-
cache-control: public, max-age=909171
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-re-la: HIT
xkey-re-re-la: av/621b15f2949f0c7b86d57106379b09df-A-av.tube4.top-av.tube4.top-myzone---yes
x-proxy-cache-ds-la: MISS
xkey-ds-la: av./621b15f2949f0c7b86d57106379b09df-A-av.tube4.top--my_zone
cf-cache-status: MISS
last-modified: Wed, 17 Jul 2024 14:43:36 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VloznSjaG6V2lAITj51JA71%2FDKplegidZWGM1nhSEmjQ9l52yY%2FJGLS4szlV%2FNZwZQXB7JqREcxUlwvf6DU54M96dTRyNoz5ipkQHPgJrm5dFYXtQ61RWNu%2BSixQle8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b014bca571bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET img.fulibao3.xyz/video/thumb/05425cbdc0869b25dca85888d48722ff.jpg
0 B URL GET img.fulibao3.xyz/video/thumb/05425cbdc0869b25dca85888d48722ff.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /video/thumb/05425cbdc0869b25dca85888d48722ff.jpg HTTP/1.1
Host: img.fulibao3.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET javp1.cc/upload/vod/20240219-4/af7302d666fd2f8f4475c5ef6736f853.jpg
404 Not Found 0 B URL GET HTTP/3 javp1.cc/upload/vod/20240219-4/af7302d666fd2f8f4475c5ef6736f853.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upload/vod/20240219-4/af7302d666fd2f8f4475c5ef6736f853.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N4bqKT8HqKaAwUwciYh%2FJ9IZg9GlWdWPIRQn1cVHGqy61By9TF%2Fr3nkWBk83iwkdHs8szm%2B1ubFvr%2F%2FWHKgNeQ8CAwHDBHF%2FqT%2Bo3pO3hPNwmb8HZO36Cubjxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b011d4f9d7129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET www.yasetube.com/favicon.ico
0 B URL GET www.yasetube.com/favicon.ico
IP
Certificate IssuerGoogle Trust Services
Subjectyasetube.com
Fingerprint07:0D:D5:95:96:ED:DC:4A:27:9E:C4:CE:9D:63:04:07:48:6B:E2:8C
ValidityThu, 27 Jun 2024 06:48:03 GMT - Wed, 25 Sep 2024 06:48:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.yasetube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: image/x-icon
cache-control: public, max-age=604800
expires: Thu, 18 Jul 2024 23:37:17 GMT
etag: W/"47e-656ade70-36325f;br"
last-modified: Sat, 02 Dec 2023 07:36:16 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 140764
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tJ%2FgCzXpBpGyD4gEteqSlylpMDN%2B8XV1F6w439omt0HglA3sofUU9sigPm69FUyhXJN6Eyvurk1x5mR2cyzOcaJrtFuHjEu2frQIcUT4XvUTBXh0q8ilVAdt9TyPWpdKnPCu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b0131ead1b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET jav.re//media/thumb/320x180/139501.jpg
0 B URL GET jav.re//media/thumb/320x180/139501.jpg
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjectjav.re
FingerprintFE:9D:91:E0:AF:F8:91:B9:23:DB:0E:C5:47:16:B1:E5:49:1F:A8:71
ValidityMon, 08 Jul 2024 10:58:44 GMT - Sun, 06 Oct 2024 10:58:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET //media/thumb/320x180/139501.jpg HTTP/1.1
Host: jav.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:34 GMT
content-type: image/jpeg
cache-control: max-age=2592000
content-encoding: gzip
etag: W/"61ffb478-7f91"
expires: Sat, 03 Aug 2024 23:30:25 GMT
last-modified: Thu, 04 Jul 2024 23:30:25 GMT
vary: Accept-Encoding
x-cache: HIT, policy, disk
cf-cache-status: HIT
age: 1053186
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uihfp2A3kHxjZv1wtpqNLckiBbVUqLTptha8tchdrnQnRYzvXZlF7fG4LmCoA%2BqmUYWTS9gBeTUNWQ8gADAEkBjjbikc3JsfenPGlUzAAwhMiYuypC4X7Dc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b014bad105693-OSL
alt-svc: h3=":443"; ma=86400
GET img.fulibao3.xyz/video/thumb/05425cbdc0869b25dca85888d48722ff.jpg
0 B URL GET img.fulibao3.xyz/video/thumb/05425cbdc0869b25dca85888d48722ff.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /video/thumb/05425cbdc0869b25dca85888d48722ff.jpg HTTP/1.1
Host: img.fulibao3.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET img.youtube.com/vi/65tokTZxerw/hq2.jpg
200 OK 7.8 kB URL GET HTTP/2 img.youtube.com/vi/65tokTZxerw/hq2.jpg
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint0B:28:0E:1B:FF:FC:C8:1B:AF:D7:4E:50:F3:EE:75:59:BB:D5:46:24
ValidityMon, 24 Jun 2024 06:35:44 GMT - Mon, 16 Sep 2024 06:35:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Hash 51b7f49a35b154be1118d05a6be83978
e30c5cca72d15d821f5200e49ff91d8aa01161ee
90aef849d2fd218cbfa17caec1cf8c3a5e27f08be825dec59584ec1166f82c55
GET /vi/65tokTZxerw/hq2.jpg HTTP/1.1
Host: img.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 7765
date: Wed, 17 Jul 2024 14:43:28 GMT
expires: Wed, 17 Jul 2024 16:43:28 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET javp1.cc/upload/vod/20240218-8/5bc6102878b24776047856f00386bdc6.jpg
404 Not Found 0 B URL GET HTTP/2 javp1.cc/upload/vod/20240218-8/5bc6102878b24776047856f00386bdc6.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upload/vod/20240218-8/5bc6102878b24776047856f00386bdc6.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 110
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kds7yPvCZ0pAI9w1eaQFBQX51wyLMMHgWffM98h2xljy%2BM8CNROszOfp5ZnbTG5yHp4%2BsRnJaqGJ%2BqOxlDovS986FsA3NdYi3d7CfsNJbCRZofI2QzWmMYORwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010e6ac356c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.youjizz.com/favicon.ico
200 OK 4.3 kB URL GET HTTP/2 www.youjizz.com/favicon.ico
IP
Certificate IssuerSectigo Limited
Subject*.youjizz.com
Fingerprint27:54:6C:0C:5B:70:1D:77:94:86:37:FF:6C:FB:F2:18:15:90:4B:CC
ValidityMon, 25 Dec 2023 00:00:00 GMT - Mon, 06 Jan 2025 23:59:59 GMT
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Hash cd65da5df2a2cfd472a198524ec61296
e51ea1800eec5985026a37498f4aa7044c757d04
321ac040acb1c782abf632960125319b8925361510e13b1a9dfd904a9e733515
GET /favicon.ico HTTP/1.1
Host: www.youjizz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: image/x-icon
content-length: 4286
last-modified: Tue, 25 Feb 2020 06:57:19 GMT
etag: "5e54c54f-10be"
accept-ranges: bytes
set-cookie: RNLBSERVERID=ded6583; path=/
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
GET pornua.net/favicon.ico
200 OK 2.1 kB IP
Certificate IssuerLet's Encrypt
Subjectpornua.net
Fingerprint74:E9:58:45:BF:41:BC:DF:6F:15:8A:23:E4:43:E9:BB:18:40:16:5B
ValidityMon, 01 Jul 2024 02:22:11 GMT - Sun, 29 Sep 2024 02:22:10 GMT
File type MS Windows icon resource - 1 icon, 24x20, 32 bits/pixel
Hash e079eea12de5818e5f36f4a30ee60779
f62ccd81dc3fd2fdf8a1d23113da7e174948e4f8
5935f352b6aad11842e672bee55f5f6c14fcdc21d5785568df5397c4257a13de
GET /favicon.ico HTTP/1.1
Host: pornua.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Jul 2024 14:43:29 GMT
Content-Type: image/x-icon
Content-Length: 2062
Last-Modified: Fri, 02 Oct 2020 22:10:52 GMT
Connection: keep-alive
ETag: "5f77a56c-80e"
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
GET www.248avporn.com/favicon.ico
404 Not Found 0 B URL GET HTTP/2 www.248avporn.com/favicon.ico
IP
Certificate IssuerGoogle Trust Services
Subject248avporn.com
Fingerprint62:73:BE:6B:7B:DE:D8:61:99:FF:9C:DB:B1:9A:55:70:02:DE:08:16
ValidityTue, 18 Jun 2024 11:56:35 GMT - Mon, 16 Sep 2024 11:56:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.248avporn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 56
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VIyGZ7m8tBuFvsiwMw5N7oZi1jnmNE8hlO4opMqIRRw4Yhh2DUnQWwKXC7zKLh2PDEPfV98R4zH68plQVd5WErGUrNxOZxWi3Jzmx7St4Af9GGlYcd6vaWEJ3%2BEBS90jAn3AIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b0131bf55569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.boysexclip.com/favicon.ico
0 B URL GET www.boysexclip.com/favicon.ico
IP
Certificate IssuerGoogle Trust Services
Subjectboysexclip.com
Fingerprint7A:0A:FE:66:A7:77:C2:4E:CD:D2:E4:9F:05:98:7F:7D:4F:84:C0:38
ValidityFri, 21 Jun 2024 23:53:28 GMT - Thu, 19 Sep 2024 23:53:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.boysexclip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: image/x-icon
last-modified: Wed, 27 Dec 2023 18:32:16 GMT
etag: W/"658c6db0-47e"
x-server: tube2-vm2
cf-cache-status: HIT
age: 5703
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wOlKJT4VyillNURJizXi11Ml5LNVuTZ8SP5ZAYRwauS1SrNvCJQPudROgoDxdRKyv6wnbtY5rbjBqYnTuz%2BJ2jTgsytLFRxfQBDQj7DNRoo6V4hysT%2Fys82vlHQzqP3g7I9NKW8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b0131b910b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cacrz.4jpg.top/AV4.us.jpg
200 OK 8.7 kB URL GET HTTP/3 cacrz.4jpg.top/AV4.us.jpg
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subject4jpg.top
Fingerprint4B:58:1B:2D:6E:5C:08:9C:6A:B9:EC:DD:5E:F7:DE:5A:0A:7C:75:B1
ValidityWed, 03 Jul 2024 17:20:57 GMT - Tue, 01 Oct 2024 17:20:56 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 307x82, components 3
Hash edfe007a6e5b3d268b2528f564b60b43
1644c8ef97c871079e07e5079d613af5cb94052f
bf5bb657f5e788af0c02b9b437d3f15bec91e27175e5a654e3d431fb6d063390
GET /AV4.us.jpg HTTP/1.1
Host: cacrz.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:23 GMT
content-type: image/jpeg
content-length: 8741
etag: "2225-5499bcea176c0"
access-control-allow-origin: *
access-control-allow-headers: Cake
ahost: RZ
cache-control: public, max-age=3600000
cf-cache-status: HIT
age: 2962599
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7GkOq8kqwtAlS7iz5%2B7Ss6sgFy6uhrS0HU4B2zXO1c3yf3rO1i2J8CgkxmEei7IB0Ghjh6BgdGj5ocsWr2%2BCl5BU1V2yPHmwyvBeHASCyAERTppf58fkyuZn9suoQbl3QA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b0109aa1456af-OSL
alt-svc: h3=":443"; ma=86400
GET javp1.cc/upload/vod/20240218-8/5bc6102878b24776047856f00386bdc6.jpg
404 Not Found 0 B URL GET HTTP/3 javp1.cc/upload/vod/20240218-8/5bc6102878b24776047856f00386bdc6.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upload/vod/20240218-8/5bc6102878b24776047856f00386bdc6.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 112
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M7FI5rzUf%2FF9CPSmEZ2QsgA6AXZD8rl%2BiPqH0rz0WMRVQOkFDrdQTpUjnVAX8mGaW9qWdxpihaHatj56je2SsaPoBvWhxdnxLSZm%2B%2FIn7%2F6UmSVb5BjOLdVjbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b011d1f6f7129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET www.youtube.com/favicon.ico
0 B URL GET www.youtube.com/favicon.ico
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint0B:28:0E:1B:FF:FC:C8:1B:AF:D7:4E:50:F3:EE:75:59:BB:D5:46:24
ValidityMon, 24 Jun 2024 06:35:44 GMT - Mon, 16 Sep 2024 06:35:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube-marketing"
report-to: {"group":"youtube-marketing","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube-marketing"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 12 Jul 2024 08:26:09 GMT
expires: Sat, 12 Jul 2025 08:26:09 GMT
cache-control: public, max-age=31536000
age: 454639
last-modified: Sun, 25 Jun 2023 02:58:00 GMT
content-type: image/x-icon
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.ttsp.tv/favicon.ico
0 B IP
Certificate IssuerGoogle Trust Services
Subjectttsp.tv
Fingerprint83:1A:34:10:CB:B8:6F:C0:0F:DD:CA:CC:3B:F0:7A:65:22:90:32:89
ValidityFri, 12 Jul 2024 17:02:27 GMT - Thu, 10 Oct 2024 17:02:26 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.ttsp.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: image/x-icon
last-modified: Wed, 01 Mar 2023 05:44:39 GMT
etag: W/"63fee647-1083e"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nj%2BdUFHwLNW3NbgkxIu0zdQVKZu6fgoHuBLdIjD7cxSvg5O1PY7Na2zelHtvVZam%2FHeGvaoOKeWgTls8PX8pPmj0MUxGeduhIGJgJxkedEvFp95Pi9AAkw3f%2B7Fd7w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b012f181f56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET jav.re//uploads/20201223/23cc161692a201f1a89e5b73602acafd.jpg
0 B URL GET jav.re//uploads/20201223/23cc161692a201f1a89e5b73602acafd.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjav.re
FingerprintFE:9D:91:E0:AF:F8:91:B9:23:DB:0E:C5:47:16:B1:E5:49:1F:A8:71
ValidityMon, 08 Jul 2024 10:58:44 GMT - Sun, 06 Oct 2024 10:58:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET //uploads/20201223/23cc161692a201f1a89e5b73602acafd.jpg HTTP/1.1
Host: jav.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: image/jpeg
cache-control: max-age=2592000
content-encoding: gzip
etag: W/"5fe2ff0d-7bb3"
expires: Sat, 03 Aug 2024 20:35:31 GMT
last-modified: Thu, 04 Jul 2024 20:35:31 GMT
vary: Accept-Encoding
x-cache: HIT, policy, disk
cf-cache-status: HIT
age: 1058151
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FgHdKLKq4wCL7ryT29u%2F1FfXi3n1iGjn%2BXp%2BzSVy0MfZ%2BvmLCeGnVcf9JzR3eIvCyMbIr2XLZFmGIVYqUwjyfX371kMyXZo7wY%2FemmxYuXw6It5NK0rGelI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b01190f91b517-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://javfan.com/watch/vQJ/title/myhash/3
200 OK 294 B URL GET HTTP/2 pdocac.tube-dl.top/v/s://javfan.com/watch/vQJ/title/myhash/3
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint56:EF:69:95:CA:9C:11:40:53:18:AA:5F:28:B9:1D:DE:6D:68:F4:A8
ValidityTue, 09 Jul 2024 18:56:35 GMT - Mon, 07 Oct 2024 18:56:34 GMT
File type ASCII text, with no line terminators
Hash b245eef4afbbc7bbf940cb41ed65fb17
3b45029c8817926a6e6ea7686e50bd94a55cc180
4ebdbcc5805cc5b1cc77d3adc57b0d5cacd88a27ffc9f05f40eeca0a46bbf2e0
GET /v/s://javfan.com/watch/vQJ/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.av4us.top
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top96.161.209-myhost-158.222.79/v/s://javfan.com/watch/vQJ/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://javfan.com/watch/vQJ/title/myhash/3
pdo115: feedvid-, cachefileb-cacpdo2/b9/69/827f24, lfm-1-30842, lmd-30842, lud-1340944, xfvlen-526033, fsize-133939, played-11
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
last-modified: Wed, 17 Jul 2024 14:43:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BLUyjN6g93yyYrtgYyvy%2FTxthpcuvWwA0%2FPJlXu%2FAcfFzLVqtehqt6kCnEypgfg4dlBNh444eMFHIhK%2BmFUqLklhTObqxKSwZXK0uJrmTUQ%2FXkPtUQnHG2T9rkJgTP0XRk4Jzmg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b01259ff95695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET css.4jpg.top/mycss/av4.css?3
200 OK 3.8 kB URL GET HTTP/3 css.4jpg.top/mycss/av4.css?3
IP
Certificate IssuerGoogle Trust Services
Subject4jpg.top
Fingerprint4B:58:1B:2D:6E:5C:08:9C:6A:B9:EC:DD:5E:F7:DE:5A:0A:7C:75:B1
ValidityWed, 03 Jul 2024 17:20:57 GMT - Tue, 01 Oct 2024 17:20:56 GMT
File type Unicode text, UTF-8 text, with very long lines (4145), with no line terminators
Hash a928ba9e06485f9128efca88a1b2a811
5fce91720740f3af317e503a407853ad8868565a
40660147d6975c96d26e27ff96216f7c77394562e3c7ca7de35ea9c30320b8ee
GET /mycss/av4.css?3 HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: text/css
etag: W/"ef8-61c1b717d5d80"
access-control-allow-origin: *
access-control-allow-headers: Cake
cache-control: public, max-age=360000
cf-cache-status: HIT
age: 338287
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SVff857Y13W9vUK%2FoVZ6pj1K4r%2F6K0yNvDAXR5Gz39l3lcDzx6l0iIKy4p1p%2B3mnW8hz2BZlsprrAa5KhXQu34LE9HqijCOnVIXeR3Ec3TD1qGZwl6JXKbz9k9%2BbmDM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01168a2256af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET static.thisav.com/images/videothumbs/577595-1.jpg
0 B URL GET static.thisav.com/images/videothumbs/577595-1.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videothumbs/577595-1.jpg HTTP/1.1
Host: static.thisav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET thisav.com/favicon.ico
0 B IP
Certificate IssuerGoogle Trust Services
Subjectthisav.com
FingerprintAF:31:90:0D:A7:E1:CB:01:B0:58:8D:C2:B4:9B:66:96:FA:82:FC:92
ValidityMon, 08 Jul 2024 12:11:56 GMT - Sun, 06 Oct 2024 12:11:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: thisav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: image/x-icon
last-modified: Sun, 08 Oct 2023 22:32:32 GMT
vary: Accept-Encoding
etag: W/"65232e00-3c2e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
cache-control: max-age=7200
cf-cache-status: HIT
age: 4684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uQCmiezrLrV6Z2TCyMTc3knAyTCPTD6bJVszi%2BY5vYJWzgIpIQDP0NzIfAQKGFVih%2F9JIkzxS76ZgBoXeRdCCKj5rK3mQKAse5M8sSSEf0ncsWk60ydCDWG%2FNH0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b0130cee7b50b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET fapdig.com/favicon.ico
301 Moved Permanently 0 B IP
Certificate IssuerGoogle Trust Services LLC
Subjectfapdig.com
FingerprintF5:61:4F:8A:6D:80:1F:3B:92:80:73:29:17:49:16:9F:A6:52:AA:DB
ValidityTue, 28 May 2024 11:48:52 GMT - Mon, 26 Aug 2024 11:48:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: fapdig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 301 Moved Permanently
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: text/html; charset=UTF-8
location: https://fapdig.com/faviconico/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding,User-Agent
cf-cache-status: BYPASS
set-cookie: ASPro_1382933ca042bef776e8100bd5eb8ac5=fmc4jut8mnn18h7konk4hfued5; path=/
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=siDCPorxf%2FXRK2fNDng8EcudS5poCqw9aK58S2xTM6uMrXbMG%2FKqp7F5vvZxAoKBk43on7ngh%2FOnYVsaPWGadwUNlZa%2B1STsuG0O290XGCnNPyYjz2%2BQBzCdNqDj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b012d9b3cb518-OSL
alt-svc: h3=":443"; ma=86400
GET www.savsq.com/favicon.ico
200 OK 317 B URL GET HTTP/2 www.savsq.com/favicon.ico
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerLet's Encrypt
Subjectsavaa.cc
Fingerprint6D:DF:DA:CF:95:D9:31:95:1B:B4:C9:DC:2A:F1:F1:34:72:85:76:A8
ValidityMon, 10 Jun 2024 16:45:04 GMT - Sun, 08 Sep 2024 16:45:03 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Hash 9faaf9ec3c64419a98f0171d30788832
7cfd0139434fc6b4405da2399e18c6dad491026d
3e5dffb92459dc10edb044ea8a7db6c29149515a9a13c392fae01108ca48464b
GET /favicon.ico HTTP/1.1
Host: www.savsq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: image/x-icon
content-length: 317
last-modified: Tue, 02 Jan 2024 16:25:55 GMT
etag: "65943913-13d"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET hotscope.tv/favicon.ico
0 B IP
Certificate IssuerLet's Encrypt
Subjecthotscope.tv
Fingerprint30:BA:89:B6:51:FD:60:DA:DA:6A:62:C2:1D:13:1E:E1:74:7C:D9:B9
ValidityWed, 10 Jul 2024 12:34:15 GMT - Tue, 08 Oct 2024 12:34:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: hotscope.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 17 Jul 2024 14:43:29 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Strict-Transport-Security: max-age=63072000
X-Frame-Options: sameorigin
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Thu, 10 Jun 2021 13:28:52 GMT
ETag: W/"47e-179f61c7bd7"
Vary: Accept-Encoding
Content-Encoding: gzip
GET www.brasilsex.to/favicon.ico
404 Not Found 0 B URL GET HTTP/2 www.brasilsex.to/favicon.ico
IP
Certificate IssuerLet's Encrypt
Subjectbrasilsex.to
FingerprintD7:AF:C5:4F:09:3E:0C:20:22:D8:0A:AE:D6:07:75:0E:EA:1B:EA:E5
ValidityMon, 08 Jul 2024 11:01:24 GMT - Sun, 06 Oct 2024 11:01:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.brasilsex.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://av.tube4.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx/1.16.1
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: text/html; charset: utf-8;charset=UTF-8
x-powered-by: PHP/5.6.36
set-cookie: PHPSESSID=7araj5ia2b44hn4097dichdge0; path=/
X-Firefox-Spdy: h2
GET e3f49eaa46b57.cdn.sohucs.com/c_pad,w_160,h_90,blur_80//group2/M08/EB/EF/MTAuMTAuODguODE=/6_1599a09fb76g104SysCutcloud_86237109_17_5b.jpg
200 OK 3.4 kB URL GET HTTP/2 e3f49eaa46b57.cdn.sohucs.com/c_pad,w_160,h_90,blur_80//group2/M08/EB/EF/MTAuMTAuODguODE=/6_1599a09fb76g104SysCutcloud_86237109_17_5b.jpg
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerDigiCert Inc
Subjectbjctc.img.sohucs.com
Fingerprint81:52:F3:0C:CC:04:79:44:7A:39:69:4B:79:27:A4:CD:FF:B9:3A:88
ValidityThu, 28 Dec 2023 00:00:00 GMT - Fri, 24 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "Lavc56.1.100", baseline, precision 8, 160x90, components 3
Hash 4753cd26c5d32bb8c8768f752f2db530
d127f36b071ffa3e0981daae72fb3d7bea7c5546
beeb53e01e35e2cc02f7433458d390351cc23e69cd4f6fadc6e9706acdd3c788
GET /c_pad,w_160,h_90,blur_80//group2/M08/EB/EF/MTAuMTAuODguODE=/6_1599a09fb76g104SysCutcloud_86237109_17_5b.jpg HTTP/1.1
Host: e3f49eaa46b57.cdn.sohucs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 15 Oct 2019 12:48:55 GMT
etag: "4753cd26c5d32bb8c8768f752f2db530"
content-type: image/jpeg
server: SCSImageServer
date: Thu, 18 Apr 2024 17:57:19 GMT
access-control-allow-origin: *
fss-cache: MISS from 9311358.16782472.10491632, MISS from 2757913.3609891.4003622
fss-proxy: Powered by 7935593.13964915.9181637
cache-control: max-age=7776000
content-length: 3431
accept-ranges: bytes
x-nws-log-uuid: 2810505672991480524
x-cache-lookup: Cache Hit
timing-allow-origin: *
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://www.xnxx.com/video-i68bt71//title/myhash/3
200 OK 0 B URL GET HTTP/2 pdocac.tube-dl.top/v/s://www.xnxx.com/video-i68bt71//title/myhash/3
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint56:EF:69:95:CA:9C:11:40:53:18:AA:5F:28:B9:1D:DE:6D:68:F4:A8
ValidityTue, 09 Jul 2024 18:56:35 GMT - Mon, 07 Oct 2024 18:56:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v/s://www.xnxx.com/video-i68bt71//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.av4us.top
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top96.161.209-myhost-158.222.53/v/s://www.xnxx.com/video-i68bt71//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://www.xnxx.com/video-i68bt71//title/myhash/3
pdo115: feedvid-, cachefileb-cacpdo6/74/37/482831, lfm-1-15531, lmd-15531, lud-8043311, xfvlen-717709, fsize-392121, played-
cache-control: public, max-age=720000
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: MISS
last-modified: Wed, 17 Jul 2024 14:43:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=smJRKxksCRr3h9o7iN6bndfB%2Fw%2Fx4TA2M3jnQNDqySQg4Y8dLPor84qdzYDUo2msEUTmHUAiFGhDrdY6IAMuAIdfgU4dvBI2reP0lJ7tHVaMJQ2mT7FPC8smfXc6x653U1FBW38%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b01259ffa5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.youhu.com/favicon.ico
0 B URL GET www.youhu.com/favicon.ico
IP
Certificate IssuerGoogle Trust Services LLC
Subjectyouhu.com
Fingerprint27:F5:99:93:18:97:7D:B8:AA:0F:97:32:8D:DA:FB:57:4B:96:D2:63
ValidityTue, 28 May 2024 20:06:50 GMT - Mon, 26 Aug 2024 20:06:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.youhu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: image/x-icon
last-modified: Wed, 29 Nov 2023 06:06:08 GMT
etag: W/"6566d4d0-3c2e"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: HIT
age: 2917
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z0Yp2thfjVo%2FVLJXH2PXS57meZZEU77dScNiwqGp1fom1TxH17GY6surQlPNQiVpMuVCKFFzZQdBV9DQL%2FtyZZpTZt20g7H56fiUDZdrS%2BuHMMGqYxB%2FHfKL8vymacc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b012d8b2bb512-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET xn---jifanggecom-1j5sq16de9mhl3fn9p.xn--9kq80g37uthu.com/favicon.ico
403 Forbidden 0 B URL GET HTTP/2 xn---jifanggecom-1j5sq16de9mhl3fn9p.xn--9kq80g37uthu.com/favicon.ico
IP
Certificate IssuerCloudflare, Inc.
Subjectxn--9kq80g37uthu.com
Fingerprint4E:83:2D:14:75:B5:4A:5D:4B:51:75:6E:BA:42:D9:6C:3A:55:17:C7
ValidityMon, 29 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: xn---jifanggecom-1j5sq16de9mhl3fn9p.xn--9kq80g37uthu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: max-age=15
expires: Wed, 17 Jul 2024 14:43:44 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jnLNh8hRmYvImHj2ZviVOIIfL%2Fl8J4pVsJzbrKpZkCUq3aK%2F6hGDgBVbJAEhgkcAIzZv3WvJHxE7yShO80c84FOkOpF850sMMQWFsN0SL4qRszZmDF%2BwHdFAogrIfOHDj%2F%2BoukgV7kjd0s61ss%2Bz62h4mMjwR3ezppFh3pzTF5KrAmmPxRaSX%2BOvVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8a4b01307df8b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET uzbum.su/files/russkoe_porno/svodnyiy_brat_trahaet_mladshuyu_sestru_v_pisku/screen.jpg
301 Moved Permanently 44 kB URL GET HTTP/2 uzbum.su/files/russkoe_porno/svodnyiy_brat_trahaet_mladshuyu_sestru_v_pisku/screen.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectuzbum.su
FingerprintA9:8A:50:07:40:16:7D:55:6D:40:BF:D5:46:70:98:C5:38:D2:69:81
ValidityThu, 13 Jun 2024 01:01:07 GMT - Wed, 11 Sep 2024 01:01:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /files/russkoe_porno/svodnyiy_brat_trahaet_mladshuyu_sestru_v_pisku/screen.jpg HTTP/1.1
Host: uzbum.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: text/html; charset=iso-8859-1
location: https://ru.uzbum.su/files/russkoe_porno/svodnyiy_brat_trahaet_mladshuyu_sestru_v_pisku/screen.jpg
cache-control: max-age=120
cf-cache-status: HIT
age: 1082
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sW1K50uh7imkiUaJQQ8uh6wCByv1dNXEQRLDhVLRy643gZbPYtxhoZcBpZqKEBuYJAzGkIfAXExKiIKpiZm2KwrIcKRbGGJs65u2EBLCIJuZq7p63A7Ygo6HaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b0113aae256a8-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET jav.re//media/thumb/320x180/139502.jpg
0 B URL GET jav.re//media/thumb/320x180/139502.jpg
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjectjav.re
FingerprintFE:9D:91:E0:AF:F8:91:B9:23:DB:0E:C5:47:16:B1:E5:49:1F:A8:71
ValidityMon, 08 Jul 2024 10:58:44 GMT - Sun, 06 Oct 2024 10:58:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET //media/thumb/320x180/139502.jpg HTTP/1.1
Host: jav.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:32 GMT
content-type: image/jpeg
cache-control: max-age=2592000
content-encoding: gzip
etag: W/"61ffb44d-86dd"
expires: Thu, 08 Aug 2024 05:15:31 GMT
last-modified: Wed, 12 Jun 2024 10:58:22 GMT
vary: Accept-Encoding
x-cache: HIT, policy, disk
cf-cache-status: HIT
age: 311609
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xfjy8aZ5MaIzZxf8n8b4mfQ%2FHyU4epm9a6wwn%2BZBVBlq%2FBDSHKeVJeF1wHNmgX%2FpEupHkGBFJr5lSBcae0nG8S6h%2BDpB%2BWIyLJX9VHYD5iZaBtsFRFu4uco%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b013faec05693-OSL
alt-svc: h3=":443"; ma=86400
GET cdn5-thumbs.motherlessmedia.com/thumbs/908F77E.jpg
302 Moved Temporarily 20 kB URL GET HTTP/1.1 cdn5-thumbs.motherlessmedia.com/thumbs/908F77E.jpg
IP
ASN #43350 NForce Entertainment B.V.
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoGetSSL
Subject*.motherlessmedia.com
Fingerprint62:3F:F4:67:AB:20:21:21:07:CF:72:7C:30:72:D2:B1:61:3C:82:02
ValidityMon, 09 Oct 2023 00:00:00 GMT - Fri, 08 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbs/908F77E.jpg HTTP/1.1
Host: cdn5-thumbs.motherlessmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
server: openresty/1.21.4.1
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html
content-length: 151
location: https://cdn5-static.motherlessmedia.com/images/no_image.jpg
x-cache: MISS
GET thisav.com/favicon.ico
0 B IP
Certificate IssuerGoogle Trust Services
Subjectthisav.com
FingerprintAF:31:90:0D:A7:E1:CB:01:B0:58:8D:C2:B4:9B:66:96:FA:82:FC:92
ValidityMon, 08 Jul 2024 12:11:56 GMT - Sun, 06 Oct 2024 12:11:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: thisav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: image/x-icon
last-modified: Sun, 08 Oct 2023 22:32:32 GMT
vary: Accept-Encoding
etag: W/"65232e00-3c2e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
cache-control: max-age=7200
cf-cache-status: HIT
age: 4683
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vHMvsd0B2ZCnyCA04ijO7CTpNlvdzAYr8TB1irWGv%2Bpq%2FpOe8WLjWaUCPt4spNLlrNgEkUoMpIHQNSSOwOS%2FzNYcINPhyP7lLVEwyfE3eUD%2FqZcZHSf9fq9a31Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b012fdd6db50b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://jp-gay.xvideos65.com/video29022411/160501_dimepiece_-_of_by_/title/myhash/3
200 OK 218 B URL GET HTTP/2 pdocac.tube-dl.top/v/s://jp-gay.xvideos65.com/video29022411/160501_dimepiece_-_of_by_/title/myhash/3
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint56:EF:69:95:CA:9C:11:40:53:18:AA:5F:28:B9:1D:DE:6D:68:F4:A8
ValidityTue, 09 Jul 2024 18:56:35 GMT - Mon, 07 Oct 2024 18:56:34 GMT
File type ASCII text, with no line terminators
Hash 155d8942623306b4bcb546987f388c00
15bd58d0a996cbc7a65a2a030f2b0bbba33063cf
9bf35bc229b90ea3605e1bbb7b095c4353426894162d2438ca533013f22ab190
GET /v/s://jp-gay.xvideos65.com/video29022411/160501_dimepiece_-_of_by_/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.av4us.top
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top96.161.209-myhost-.158.222.8/v/s://jp-gay.xvideos65.com/video29022411/160501_dimepiece_-_of_by_/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://jp-gay.xvideos65.com/video29022411/160501_dimepiece_-_of_by_/title/myhash/3
pdo115: feedvid-, cachefileb-cacpdo3/ed/fd/27fa64, lfm-1-48117, lmd-48117, lud-8074457, xfvlen-880108, fsize-246174, played-2
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
last-modified: Wed, 17 Jul 2024 14:43:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7zH6PhX3x7aXDVB4bm0PugesloR2Pdkazj5h1zyfLmsDKxRu%2BKf6CiYk2dmZ13xBX2pLTHU20B4GTKPL6ZN9DGarYcwrdbsqspFfZ0rxVLB3kWYzrp5mDltj494haXRg%2F5ITZnU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b0125e8485695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.nonktube.com/favicon.ico
0 B URL GET www.nonktube.com/favicon.ico
IP
Certificate IssuerGoogle Trust Services LLC
Subjectnonktube.com
FingerprintA7:AF:FF:F8:9C:70:BA:9C:C0:E0:89:C7:96:34:FC:6A:7B:DE:74:87
ValiditySat, 01 Jun 2024 09:56:09 GMT - Fri, 30 Aug 2024 09:56:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.nonktube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: text/html; charset=UTF-8
location: https://www.nonktube.com/?s=favicon
x-powered-by: PHP/8.3.6
x-wp-cf-super-cache: disabled
x-redirect-by: WordPress
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AsMVlfzcWcvVO9%2F%2FiBaAZzZ9g%2BoXSVlEtwokyxQvQTkEuXArSxpK%2FlKh7t0gtXpa9J3I%2FfWmW3Y%2F6Lw5LI%2Fa%2F3fkWVVFxAcNRTSZeclFi2rWKuUao3Msvaw6v9co7Jh5ezwZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01307b3a56ba-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.nonktube.com/?s=favicon
0 B URL GET www.nonktube.com/?s=favicon
IP
Certificate IssuerGoogle Trust Services LLC
Subjectnonktube.com
FingerprintA7:AF:FF:F8:9C:70:BA:9C:C0:E0:89:C7:96:34:FC:6A:7B:DE:74:87
ValiditySat, 01 Jun 2024 09:56:09 GMT - Fri, 30 Aug 2024 09:56:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?s=favicon HTTP/1.1
Host: www.nonktube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:31 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.3.6
link: <https://www.nonktube.com/wp-json/>; rel="https://api.w.org/"
x-wp-cf-super-cache: disabled
x-wp-cf-super-cache-cache-control: no-store, no-cache, must-revalidate, max-age=0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ygTNVpGfJ3194cw9THishwVdOUwBqpPscFxaaVV2W7pWuFhA2wFtG%2FrGC4fCteM4tCpn%2FNVTeKDbv4892mriTDsCIIQ%2F26k6mX0rzWlT6J260WLtPiqiKh8XhLJTjn82Chk6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b0134a84556ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET airav.cc/favicon.ico
0 B IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services LLC
Subjectairav.cc
Fingerprint3D:B6:CA:6E:AE:64:3C:E7:E2:FE:C7:E4:CC:E1:B0:A1:9A:26:5A:A4
ValidityWed, 05 Jun 2024 02:29:27 GMT - Tue, 03 Sep 2024 02:29:26 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: airav.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: image/x-icon
last-modified: Fri, 15 Dec 2023 07:03:30 GMT
etag: W/"657bfa42-57e"
cache-control: max-age=691200
cf-cache-status: HIT
age: 3209
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W7zUBIo0ikpr%2BJDx0CCOXPCndisx5IbyPJc%2B%2FV0LXG7UJEdjHq%2Fs3MQb2Q6jf6D7BdxOtDplwfaWdDVNvGzRNvTkKBYKj%2FVDWzgjFxNe8X%2FpLo2UHF6dQND0gg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b011c5e4a5688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET mc.webvisor.org/watch/48140495?wmode=7&page-url=https%3A%2F%2Fen.av4us.top%2Fv%2Fs%3A%2F%2Fsavsq.com%2Fv%2F151012%2F1%2F1%2F%3Fysclid%3Dlypyc93xr8885613072&page-ref=https%3A%2F%2Fen.av4us.top%2Fv%2Fs%3A%2Fsavsq.com%2Fv%2F151012%2F1%2F1%2F%3Fysclid%3Dlypyc93xr8885613072&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A5hho8n2ksnb9h8ozg2el7jx76n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1382%3Acn%3A1%3Adp%3A0%3Als%3A479457161515%3Ahid%3A250869365%3Az%3A0%3Ai%3A20240717144322%3Aet%3A1721227403%3Ac%3A1%3Arn%3A2657739%3Arqn%3A1%3Au%3A1721227403936795374%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1116%3Ads%3A0%2C0%2C574%2C1%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1721227401567%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1721227403%3At%3A%E7%B3%BB%E7%BB%9F%E6%8F%90%E7%A4%BA&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(3441412)fip(1)ti(1)
302 Found 448 B URL GET HTTP/2 mc.webvisor.org/watch/48140495?wmode=7&page-url=https%3A%2F%2Fen.av4us.top%2Fv%2Fs%3A%2F%2Fsavsq.com%2Fv%2F151012%2F1%2F1%2F%3Fysclid%3Dlypyc93xr8885613072&page-ref=https%3A%2F%2Fen.av4us.top%2Fv%2Fs%3A%2Fsavsq.com%2Fv%2F151012%2F1%2F1%2F%3Fysclid%3Dlypyc93xr8885613072&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A5hho8n2ksnb9h8ozg2el7jx76n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1382%3Acn%3A1%3Adp%3A0%3Als%3A479457161515%3Ahid%3A250869365%3Az%3A0%3Ai%3A20240717144322%3Aet%3A1721227403%3Ac%3A1%3Arn%3A2657739%3Arqn%3A1%3Au%3A1721227403936795374%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1116%3Ads%3A0%2C0%2C574%2C1%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1721227401567%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1721227403%3At%3A%E7%B3%BB%E7%BB%9F%E6%8F%90%E7%A4%BA&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(3441412)fip(1)ti(1)
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGlobalSign nv-sa
Subjectmc.webvisor.com
Fingerprint2A:A0:A6:9C:1E:F9:C0:FD:36:75:E2:D3:32:B9:34:8F:EE:3B:81:11
ValidityFri, 19 Apr 2024 21:07:47 GMT - Fri, 11 Oct 2024 20:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch/48140495?wmode=7&page-url=https%3A%2F%2Fen.av4us.top%2Fv%2Fs%3A%2F%2Fsavsq.com%2Fv%2F151012%2F1%2F1%2F%3Fysclid%3Dlypyc93xr8885613072&page-ref=https%3A%2F%2Fen.av4us.top%2Fv%2Fs%3A%2Fsavsq.com%2Fv%2F151012%2F1%2F1%2F%3Fysclid%3Dlypyc93xr8885613072&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A5hho8n2ksnb9h8ozg2el7jx76n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1382%3Acn%3A1%3Adp%3A0%3Als%3A479457161515%3Ahid%3A250869365%3Az%3A0%3Ai%3A20240717144322%3Aet%3A1721227403%3Ac%3A1%3Arn%3A2657739%3Arqn%3A1%3Au%3A1721227403936795374%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1116%3Ads%3A0%2C0%2C574%2C1%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1721227401567%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1721227403%3At%3A%E7%B3%BB%E7%BB%9F%E6%8F%90%E7%A4%BA&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(3441412)fip(1)ti(1) HTTP/1.1
Host: mc.webvisor.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en.av4us.top/
Origin: https://en.av4us.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: /watch/48140495/1?wmode=7&page-url=https%3A%2F%2Fen.av4us.top%2Fv%2Fs%3A%2F%2Fsavsq.com%2Fv%2F151012%2F1%2F1%2F%3Fysclid%3Dlypyc93xr8885613072&page-ref=https%3A%2F%2Fen.av4us.top%2Fv%2Fs%3A%2Fsavsq.com%2Fv%2F151012%2F1%2F1%2F%3Fysclid%3Dlypyc93xr8885613072&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A5hho8n2ksnb9h8ozg2el7jx76n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1382%3Acn%3A1%3Adp%3A0%3Als%3A479457161515%3Ahid%3A250869365%3Az%3A0%3Ai%3A20240717144322%3Aet%3A1721227403%3Ac%3A1%3Arn%3A2657739%3Arqn%3A1%3Au%3A1721227403936795374%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1116%3Ads%3A0%2C0%2C574%2C1%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1721227401567%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1721227403%3At%3A%E7%B3%BB%E7%BB%9F%E6%8F%90%E7%A4%BA&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%283441412%29fip%281%29ti%281%29&redirnss=1
pragma: no-cache
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000
last-modified: Wed, 17-Jul-2024 14:43:23 GMT
access-control-allow-credentials: true
expires: Wed, 17-Jul-2024 14:43:23 GMT
set-cookie: yabs-sid=1367991491721227403; Path=/; SameSite=None; Secure
i=gytMXGzbMqiW9myl/nrsYMOEZXzvVt3r08Hr62ONewqp1rQUgL0YMo/rqluHc3cHVB8HocQxRtoTpmlPngZQVQPqa2E=; Expires=Sat, 15-Jul-2034 14:43:16 GMT; Domain=.webvisor.org; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=5617843831721227403; Expires=Sat, 15-Jul-2034 14:43:16 GMT; Domain=.webvisor.org; Path=/; Secure; SameSite=None
yuidss=5617843831721227403; Expires=Thu, 17-Jul-2025 14:43:23 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure
ymex=1752763403.yrts.1721227403#1752763403.yrtsi.1721227403; Expires=Thu, 17-Jul-2025 14:43:23 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
access-control-allow-origin: https://en.av4us.top
date: Wed, 17 Jul 2024 14:43:23 GMT
X-Firefox-Spdy: h2
GET static.thisav.com/images/videothumbs/455328-1.jpg
0 B URL GET static.thisav.com/images/videothumbs/455328-1.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videothumbs/455328-1.jpg HTTP/1.1
Host: static.thisav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET img.qianju.cc/upload/vod/20220821-1/f03ed6c2a6e6e109016d41545f57ae4e.jpg
0 B URL GET img.qianju.cc/upload/vod/20220821-1/f03ed6c2a6e6e109016d41545f57ae4e.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upload/vod/20220821-1/f03ed6c2a6e6e109016d41545f57ae4e.jpg HTTP/1.1
Host: img.qianju.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET savsq.com/template/appj/css/t.css
200 OK 2.7 kB URL GET HTTP/2 savsq.com/template/appj/css/t.css
IP
Requested by moz-nullprincipal:{e408f497-c7f4-4a43-9c3c-f51147ae6d25}?https://savsq.com
Certificate IssuerLet's Encrypt
Subjectsavaa.cc
Fingerprint6D:DF:DA:CF:95:D9:31:95:1B:B4:C9:DC:2A:F1:F1:34:72:85:76:A8
ValidityMon, 10 Jun 2024 16:45:04 GMT - Sun, 08 Sep 2024 16:45:03 GMT
File type Unicode text, UTF-8 text, with very long lines (2782), with no line terminators
Hash 7863113bbad66aeed42e51e671860b02
179502f4854ab49c87ccfddcbeb8bd464dd59598
faf0b7c3e1d3d794abc88ff5c21697b2585e37122c8a4725abd2be54d2413648
GET /template/appj/css/t.css HTTP/1.1
Host: savsq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:27 GMT
content-type: text/css
last-modified: Fri, 24 Nov 2023 20:18:43 GMT
vary: Accept-Encoding
etag: W/"65610523-a83"
expires: Thu, 18 Jul 2024 02:43:27 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET savsq.com/template/appj/css/swiper-4.2.2.min.css
200 OK 14 kB URL GET HTTP/2 savsq.com/template/appj/css/swiper-4.2.2.min.css
IP
Requested by moz-nullprincipal:{e408f497-c7f4-4a43-9c3c-f51147ae6d25}?https://savsq.com
Certificate IssuerLet's Encrypt
Subjectsavaa.cc
Fingerprint6D:DF:DA:CF:95:D9:31:95:1B:B4:C9:DC:2A:F1:F1:34:72:85:76:A8
ValidityMon, 10 Jun 2024 16:45:04 GMT - Sun, 08 Sep 2024 16:45:03 GMT
File type ASCII text, with very long lines (13323)
Hash 49987899aea0fa4e6b05faea64696463
db8337bbd1b781238f7a688d3bd5bcea79c510e6
bc484818b007f01dd03d2702eb569039ee8c32d813352fe949c95175706c8473
GET /template/appj/css/swiper-4.2.2.min.css HTTP/1.1
Host: savsq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:27 GMT
content-type: text/css
last-modified: Thu, 04 Aug 2022 11:48:34 GMT
vary: Accept-Encoding
etag: W/"62ebb212-350c"
expires: Thu, 18 Jul 2024 02:43:27 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET v.sina.cn/favicon.ico
0 B IP
Certificate IssuerDigiCert Inc
Subjectsina.com
FingerprintBF:FD:31:A1:5B:1E:27:ED:CB:CB:84:B8:04:24:C1:13:49:49:A7:5F
ValidityWed, 29 Nov 2023 00:00:00 GMT - Sun, 29 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: v.sina.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:31 GMT
content-type: image/x-icon
vary: Accept-Encoding
last-modified: Sun, 05 May 2024 03:40:27 GMT
etag: W/"6636ffab-1536"
backend: cms-front-page-wq-online-5f8f7675b8-k6msk
content-encoding: gzip
x-via-ssl: ssl.79.sinag1.hyds.lb.sinanode.com
X-Firefox-Spdy: h2
GET www.dgderong.com/favicon.ico
403 Forbidden 0 B URL GET HTTP/1.0 www.dgderong.com/favicon.ico
IP
ASN #133618 Trellian Pty. Limited
Certificate IssuerLet's Encrypt
Subjectimageart.com.au
Fingerprint63:E9:D3:3F:A6:9C:BB:A6:4E:3D:13:99:DC:CF:18:21:30:34:F4:F6
ValidityThu, 04 Jul 2024 19:48:52 GMT - Wed, 02 Oct 2024 19:48:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.dgderong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 403 Forbidden
cache-control: no-cache
content-type: text/html
GET treeyork.com/157611/157611.jpg
200 OK 192 kB URL GET HTTP/2 treeyork.com/157611/157611.jpg
IP
Certificate IssuerLet's Encrypt
Subjecttreeyork.com
FingerprintCC:00:11:0D:1D:13:79:22:71:B4:96:9A:FB:1D:F0:52:6B:1E:C4:5F
ValidityTue, 09 Jul 2024 14:58:23 GMT - Mon, 07 Oct 2024 14:58:22 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 960x560, components 3
Size 192 kB (191701 bytes)
Hash 269a5da8188a9fed8ba76a7aec8dd2f5
3e14e1570561b2ca92b4501e38474bbdc7f78ad4
00510814751fd20a823d2029937e628ae5d87c07b8989cd152992713353c9de2
GET /157611/157611.jpg HTTP/1.1
Host: treeyork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 191701
cf-bgj: h2pri
etag: "269a5da8188a9fed8ba76a7aec8dd2f5"
last-modified: Sun, 14 Jan 2024 13:11:16 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 4705
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LQaDWCe7R0DJK40zXNaCVDYqrGBF7k%2Bx0%2F4k0eQ7UXXZQN7EHXD4J%2Fp7cFll6EhBp0x0rFoZW9BZjMwPEDxm4hkb4UYgEypNeM15o4lXTJ%2FfRMRHWVNQCLaqtXpRhg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b01123d2056b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET css.4jpg.top/mycss/av4.css?3
200 OK 3.8 kB URL GET HTTP/3 css.4jpg.top/mycss/av4.css?3
IP
Requested by https://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/3
Certificate IssuerGoogle Trust Services
Subject4jpg.top
Fingerprint4B:58:1B:2D:6E:5C:08:9C:6A:B9:EC:DD:5E:F7:DE:5A:0A:7C:75:B1
ValidityWed, 03 Jul 2024 17:20:57 GMT - Tue, 01 Oct 2024 17:20:56 GMT
File type Unicode text, UTF-8 text, with very long lines (4145), with no line terminators
Hash a928ba9e06485f9128efca88a1b2a811
5fce91720740f3af317e503a407853ad8868565a
40660147d6975c96d26e27ff96216f7c77394562e3c7ca7de35ea9c30320b8ee
GET /mycss/av4.css?3 HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: text/css
etag: W/"ef8-61c1b717d5d80"
access-control-allow-origin: *
access-control-allow-headers: Cake
cache-control: public, max-age=360000
cf-cache-status: HIT
age: 338286
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pxdvhCfRPmAypeyg3P0j6tVK74k7JG10nt6hPvFnk10m7voX2pr1tbHxfqQz2B0d3Q6WVETBquChkJsdTD74CwV%2B5DxzN5QRH2VIx8t49vjP0KSQ1CIPxBpTw8NHWmg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b010b4c1956af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET javp1.cc/upload/vod/20240219-4/99d1a902adc0f3a41510a74772dcb4db.jpg
404 Not Found 0 B URL GET HTTP/2 javp1.cc/upload/vod/20240219-4/99d1a902adc0f3a41510a74772dcb4db.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upload/vod/20240219-4/99d1a902adc0f3a41510a74772dcb4db.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 150
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2rDzNQYCPNGGsFacYP%2FtN5QTsVwlb%2FcZ9N%2FwRoR%2FLpAb6MeH%2Fr01hBvIBAIIr88b8RcNx3PX1rgUWj8pt6KJs1B%2FHdAtyY24sVRYM7KLZxR6cZHTFLQZMie0nA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010e6ac156c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET av.tube4.top/3
200 OK 97 kB IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecttube4.top
Fingerprint2F:81:2B:75:18:70:F0:9E:EF:67:74:3E:F2:D6:4E:33:3D:59:5B:6E
ValidityWed, 10 Jul 2024 21:13:09 GMT - Tue, 08 Oct 2024 21:13:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /3 HTTP/1.1
Host: av.tube4.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:23 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-av.tubebay.net127.0.0.1-myhost-av.tubebay.net127.0.0.1/3
phost: av.tubebay.net
pdojs-line356: notjp--myhost-av.tubebay.net-filteron-
line1432: notjp--myhost-av.tubebay.net-filteron-/3
line1435: notjp--myhost-av.tubebay.net-filteron-
line1735: notjp-/3-myhost-av.tubebay.net-filteron-
line1859:
line1894: -
xline: 1951host-133853
pdojs-line1965: ibig--chname--filteron--txtlang-Array
cache-control: public, max-age=14400
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-re-la: EXPIRED
xkey-re-re-la: av/3-A-av.tubebay.net-av.tubebay.net-myzone---yes
x-proxy-cache-ds-la: HIT
xkey-ds-la: av./3-A-av.tube4.top--my_zone
cf-cache-status: EXPIRED
last-modified: Wed, 17 Jul 2024 13:19:27 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zuy6fw3hmnEk24aG9nPnQzl3Zp%2BRS%2F7ZgxzNWGeAUs%2F7eWf%2FFhNjCOFXWEPkO6F%2B238QNnPN8asx6%2BrZFrLgfnJ1Eu%2FhCq3cWAr18V2eB7ulQg5cMndvTJCDBoSN6wY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010798e05691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET thisav.com/favicon.ico
0 B IP
Certificate IssuerGoogle Trust Services
Subjectthisav.com
FingerprintAF:31:90:0D:A7:E1:CB:01:B0:58:8D:C2:B4:9B:66:96:FA:82:FC:92
ValidityMon, 08 Jul 2024 12:11:56 GMT - Sun, 06 Oct 2024 12:11:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: thisav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: image/x-icon
last-modified: Sun, 08 Oct 2023 22:32:32 GMT
vary: Accept-Encoding
etag: W/"65232e00-3c2e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
cache-control: max-age=7200
cf-cache-status: HIT
age: 4683
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F1h42feBHdj5fyffY4TxJVgTUELKCx8d7uzvJamMvUVWWYwMoFHW0q%2FxRBVidWkweQMqT8CjLSvKsBTmTkQH%2FttrWsre%2BvpfJQ%2BK8CUfDnSkeEp9yUS%2Fz7oPuZ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b012ebb94b50b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET javp1.cc/upload/vod/20240218-2/0394ba2753882bce486df058f9fa0972.jpg
404 Not Found 0 B URL GET HTTP/3 javp1.cc/upload/vod/20240218-2/0394ba2753882bce486df058f9fa0972.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upload/vod/20240218-2/0394ba2753882bce486df058f9fa0972.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qm6tj9OtFn%2BPAbxhOPDc5njBdcNtcPhDgebhUKdTalzrvI%2Fv1mcKsVegWfWtfaQbb2XYroESvBEr3GhJ1W450e5yFFmC5NKUhOEK1U%2F7iQUm9p7sc3S8tvGCLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b011cdefd7129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET javp1.cc/upload/vod/20240219-4/99d1a902adc0f3a41510a74772dcb4db.jpg
404 Not Found 0 B URL GET HTTP/3 javp1.cc/upload/vod/20240219-4/99d1a902adc0f3a41510a74772dcb4db.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upload/vod/20240219-4/99d1a902adc0f3a41510a74772dcb4db.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 152
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9CrmR4qsWkaXLOQNmpVkvhk168r%2F8Zc1Q1PbbiEUiGSeRwOv%2B3naMi4iF95%2BeNI56ceqkVy3wF7HWh%2F5RIuAwJkcAWiV9ZLvST9MAZUgAKbu1vGyw3r6FL7%2FPg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b011d1f6d7129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET rapefilms.net/favicon.ico
0 B URL GET rapefilms.net/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: rapefilms.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET javp1.cc/upload/vod/20240219-4/9771997a1607cbb7cde8829d1a601a62.jpg
404 Not Found 0 B URL GET HTTP/2 javp1.cc/upload/vod/20240219-4/9771997a1607cbb7cde8829d1a601a62.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upload/vod/20240219-4/9771997a1607cbb7cde8829d1a601a62.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gkQAvfcH4pXrDnoCiAIJogiSzpn96NdNi%2BZqF5pthFN2%2FFX4LEp8pHh2VtexsBfeTiTzvzxFxuFXno1Ggooa7gm4Z%2BZIcNMkRF%2FpRg%2FpENOxyUplsExDf1cQyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010e6abf56c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET jsjs.4jpg.top/index.php?js=very
200 OK 0 B URL GET HTTP/3 jsjs.4jpg.top/index.php?js=very
IP
Requested by https://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/3
Certificate IssuerGoogle Trust Services
Subject4jpg.top
Fingerprint4B:58:1B:2D:6E:5C:08:9C:6A:B9:EC:DD:5E:F7:DE:5A:0A:7C:75:B1
ValidityWed, 03 Jul 2024 17:20:57 GMT - Tue, 01 Oct 2024 17:20:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?js=very HTTP/1.1
Host: jsjs.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://css.4jpg.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:23 GMT
content-type: text/html; charset=UTF-8
imghost: 17296161209-h-jsjs4jpgtopmh--NO-rm162158222116/index.php?js=very
56nloadrate: 4.28625
cache-control: max-age=360000, private
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pprt6voYCnGSQCCAi2vBLkCRogmh8lQcy6NNm%2F1yGC71VSDo853RhyqaQQhTpn4CCp8h1yXceqlc5b8m%2BKTUiFne9s%2FaZruAJd03IgF4s6GrYxf83GGTdVSDgt5peuwe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b01099a0756af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET teensexadd.com/favicon.ico
404 Not Found 0 B URL GET HTTP/2 teensexadd.com/favicon.ico
IP
Certificate IssuerLet's Encrypt
Subjectteensexadd.com
Fingerprint50:14:A5:28:3F:2C:0B:04:70:60:9F:5A:D7:C9:0C:7D:2C:89:F2:41
ValiditySat, 06 Jul 2024 23:03:46 GMT - Fri, 04 Oct 2024 23:03:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: teensexadd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: openresty
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: text/html; charset=utf-8
content-length: 150
X-Firefox-Spdy: h2
GET css.4jpg.top/jw6.1/jwplayer.js
200 OK 77 kB URL GET HTTP/3 css.4jpg.top/jw6.1/jwplayer.js
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subject4jpg.top
Fingerprint4B:58:1B:2D:6E:5C:08:9C:6A:B9:EC:DD:5E:F7:DE:5A:0A:7C:75:B1
ValidityWed, 03 Jul 2024 17:20:57 GMT - Tue, 01 Oct 2024 17:20:56 GMT
File type JavaScript source, ASCII text, with very long lines (4039)
Hash 6358736fcd0426bb7ab26c2fe9dd17eb
43a6b88a415525a952448eb295659d1e32313d4c
018cb2c6383dcb6f723422e23909c4a5d238ffc5d5c084622a89579173f8967a
GET /jw6.1/jwplayer.js HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:22 GMT
content-type: application/javascript
etag: W/"12d8b-54eda8e40c600"
access-control-allow-origin: *
access-control-allow-headers: Cake
cache-control: public, max-age=360000
cf-cache-status: HIT
age: 338226
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2kest7dLM2f%2Frt7OW%2FvOqUf0EHcXhvzb3%2F57sHifYqH%2BYkrSuZiO50bnTCjdTiyq6v%2BBJraBG25FPKi3GpCIDQrEm8WfP%2BRBtir9ZmdgYFg1wFASyoFZddikDTQHAjE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01038a8656af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
404 Not Found 16 kB URL GET HTTP/2 savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerLet's Encrypt
Subjectsavaa.cc
Fingerprint6D:DF:DA:CF:95:D9:31:95:1B:B4:C9:DC:2A:F1:F1:34:72:85:76:A8
ValidityMon, 10 Jun 2024 16:45:04 GMT - Sun, 08 Sep 2024 16:45:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v/151012/1/1/?ysclid=lypyc93xr8885613072 HTTP/1.1
Host: savsq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
GET savsq.com/template/appj/css/style.css
200 OK 81 kB URL GET HTTP/2 savsq.com/template/appj/css/style.css
IP
Requested by moz-nullprincipal:{e408f497-c7f4-4a43-9c3c-f51147ae6d25}?https://savsq.com
Certificate IssuerLet's Encrypt
Subjectsavaa.cc
Fingerprint6D:DF:DA:CF:95:D9:31:95:1B:B4:C9:DC:2A:F1:F1:34:72:85:76:A8
ValidityMon, 10 Jun 2024 16:45:04 GMT - Sun, 08 Sep 2024 16:45:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /template/appj/css/style.css HTTP/1.1
Host: savsq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:27 GMT
content-type: text/css
last-modified: Sat, 27 Apr 2024 22:49:06 GMT
vary: Accept-Encoding
etag: W/"662d80e2-13d30"
expires: Thu, 18 Jul 2024 02:43:27 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET av.tub4us.top/1
0 B IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecttub4us.top
FingerprintB8:AA:A3:AB:E2:E7:69:AE:B2:66:9E:59:EE:7F:A0:7C:CB:61:0E:51
ValidityWed, 10 Jul 2024 20:43:09 GMT - Tue, 08 Oct 2024 20:43:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1 HTTP/1.1
Host: av.tub4us.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://en.av4us.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:23 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-av.tub4us.top127.0.0.1-myhost-av.tub4us.top127.0.0.1/1
phost: av.tub4us.top
pdojs-line356: notjp--myhost-av.tub4us.top-filteron-
line1432: notjp--myhost-av.tub4us.top-filteron-/1
line1435: notjp--myhost-av.tub4us.top-filteron-
line1735: notjp-/1-myhost-av.tub4us.top-filteron-
line1859:
line1894: -
xline: 1951host-101202
pdojs-line1965: ibig--chname--filteron--txtlang-Array
cache-control: public, max-age=14400
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-re-la: EXPIRED
xkey-re-re-la: av./1-A-av.tub4us.top-av.tub4us.top-myzone---yes
x-proxy-cache-ds-la: HIT
xkey-ds-la: av./1-A-av.tub4us.top--my_zone
cf-cache-status: HIT
age: 60
last-modified: Wed, 17 Jul 2024 14:42:23 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1B3lNfEvL4X%2B9FBkr%2FVl%2BpgQPotVxKdsFonrjSkcOzlUtiRi5n9CIyfHxW2jGvEf%2FPBmSZqtqUNLfcnIZ5rAyZMLvH3PW6re%2F%2FWTOVEkckK688MY11jEyl87tHYFJN2P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b0105edfbb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.782o1.xyz/favicon.ico
0 B URL GET www.782o1.xyz/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.782o1.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET sorkab.com/favicon.ico
404 Not Found 0 B IP
Certificate IssuerGoogle Trust Services
Subjectsorkab.com
FingerprintF8:69:17:31:55:BE:7E:3C:52:59:8F:20:5F:29:72:2E:71:B4:2B:94
ValiditySat, 13 Jul 2024 03:46:45 GMT - Fri, 11 Oct 2024 03:46:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: sorkab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
vary: User-Agent,Accept-Encoding,Accept-Encoding
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000
content-security-policy: upgrade-insecure-requests
referrer-policy: no-referrer-when-downgrade
permissions-policy: geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), payment=(), fullscreen=(self)
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NlnRb%2FjBcCcjZ6QSqpCB2VtH6Iv3IdYam67Y%2FNWhILIkwPbtviFov1CEptdcFgDZDTxTNBGwJojRObZU46RSF1fakTORU%2B8tO%2Bs%2FucE%2FE3dcveL6w4xWPJFTmUjJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b012d9f458891-LHR
content-encoding: br
GET av.tub4us.top/1
0 B IP
Certificate IssuerGoogle Trust Services
Subjecttub4us.top
FingerprintB8:AA:A3:AB:E2:E7:69:AE:B2:66:9E:59:EE:7F:A0:7C:CB:61:0E:51
ValidityWed, 10 Jul 2024 20:43:09 GMT - Tue, 08 Oct 2024 20:43:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1 HTTP/1.1
Host: av.tub4us.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://av.tube4.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:27 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-av.tub4us.top127.0.0.1-myhost-av.tub4us.top127.0.0.1/1
phost: av.tub4us.top
pdojs-line356: notjp--myhost-av.tub4us.top-filteron-
line1432: notjp--myhost-av.tub4us.top-filteron-/1
line1435: notjp--myhost-av.tub4us.top-filteron-
line1735: notjp-/1-myhost-av.tub4us.top-filteron-
line1859:
line1894: -
xline: 1954host-79185
pdojs-line1965: ibig--chname--filteron--txtlang-Array
cache-control: public, max-age=14400
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-re-la: EXPIRED
xkey-re-re-la: av./1-A-av.tub4us.top-av.tub4us.top-myzone---yes
x-proxy-cache-ds-la: HIT
xkey-ds-la: av./1-A-av.tub4us.top--my_zone
cf-cache-status: HIT
age: 2
last-modified: Wed, 17 Jul 2024 14:43:25 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ozJKfZX9tBPJ6KF3rz%2B7DTQ%2BYb0pfVnwWdDllvmt%2FeMO8OWIHku3TnDDSyr6VwRBvUGHkwNVj1oCt0oaSyKDcOGv2A2nSnNRg8EdLpaBsnmP%2Fp6YQ5e%2B3p068VjCmQAf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b011e1b3856c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET pdocac.tube-dl.top/v/s://www.winzxin.com/play-zxin/431243226576.html/title/myhash/3
200 OK 220 B URL GET HTTP/2 pdocac.tube-dl.top/v/s://www.winzxin.com/play-zxin/431243226576.html/title/myhash/3
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint56:EF:69:95:CA:9C:11:40:53:18:AA:5F:28:B9:1D:DE:6D:68:F4:A8
ValidityTue, 09 Jul 2024 18:56:35 GMT - Mon, 07 Oct 2024 18:56:34 GMT
File type ASCII text, with no line terminators
Hash 3b64e1f19c98fcbe48dd10c9e555a014
b4fb09932c0256f55197bfecf965a49527cc5108
a32da10ba655fc733cbdadeb2deda8a67eee717f2d5ab6db45d74cd4ec0f7a55
GET /v/s://www.winzxin.com/play-zxin/431243226576.html/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.av4us.top
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top96.161.209-myhost-.158.222.9/v/s://www.winzxin.com/play-zxin/431243226576.html/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://www.winzxin.com/play-zxin/431243226576.html/title/myhash/3
pdo115: feedvid-, cachefileb-cacpdo3/ef/de/32, lfm-1-11587, lmd-11587, lud-8614390, xfvlen-1004243, fsize-182146, played-
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
last-modified: Wed, 17 Jul 2024 14:43:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NgqJAQku5BIqgTd2NI7JH%2FfgrWZg1sJPdIby8GQhuSRnLP0v%2B1Mr62UQEU84sLyxZ%2F4S9QCeEPSr3B2rp9RpAJpvXr2sTZOFGjX5j7NvEJcXlQyacfgd%2FOfKRUksAfiruuDrop0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b01259ffe5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ru.uzbum.su/favicon.ico
0 B IP
Certificate IssuerGoogle Trust Services
Subjectuzbum.su
FingerprintA9:8A:50:07:40:16:7D:55:6D:40:BF:D5:46:70:98:C5:38:D2:69:81
ValidityThu, 13 Jun 2024 01:01:07 GMT - Wed, 11 Sep 2024 01:01:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: ru.uzbum.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: image/vnd.microsoft.icon
last-modified: Wed, 19 Dec 2018 21:26:36 GMT
etag: W/"1ef-57d66ab33fb00"
cache-control: max-age=31536000
expires: Sat, 05 Jul 2025 08:48:08 GMT
cf-cache-status: HIT
age: 1058121
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I6sCrnXuipx78baQWOSPnelBI6QPuJOozSgNcayZ1%2BWDcqTIAtbK5GD9%2B%2Bhw76NiqiWOq4GzIE0F3KEcMV83g1ZTrgKXBh7r8ICb5CiFjTyVJNZ2cFp%2Ff9%2BOHISWvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b012ea8300afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET pornhubthailand.com/favicon.ico
404 Not Found 0 B URL GET HTTP/3 pornhubthailand.com/favicon.ico
IP
Certificate IssuerGoogle Trust Services
Subjectpornhubthailand.com
FingerprintAD:B6:B6:3F:38:49:DD:BE:13:6E:51:12:4D:4C:AB:57:95:0F:E9:2C
ValiditySat, 22 Jun 2024 14:44:41 GMT - Fri, 20 Sep 2024 14:44:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: pornhubthailand.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: max-age=31536000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rBh7WcRvBzukeAozaj4h4LreSiJzNoEpdiXE6dbGenQr6icmYaEmsqV1rO%2BrA%2FVsOGIGSI8RSPd%2FF0gun0vWnARe9QUqbTThArUjrtHiB5I7BAHSjBLNZcZhY%2FwoB99aRC6E6TdO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b012d98f956c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET javp1.cc/upload/vod/20240219-3/07eeb22202f93f61e2970c0aeb0995c4.jpg
404 Not Found 0 B URL GET HTTP/2 javp1.cc/upload/vod/20240219-3/07eeb22202f93f61e2970c0aeb0995c4.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upload/vod/20240219-3/07eeb22202f93f61e2970c0aeb0995c4.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 64
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ka1tQczpM3b3QYcWYKoo%2B5e04zMpJhIotXMOfp1gw1PXVkb62KcnfavjgnDVZS2h91LOiZ7mK4P1D6lbwq%2FjopQpjVrmbmKBq9EUx1QmFXWfZk7oEypR%2BYOb%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010e6abc56c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.winzxin.com/favicon.ico
0 B URL GET www.winzxin.com/favicon.ico
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.winzxin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET pdocac.tube-dl.top/v/s://savsq.com/v/157316/1/1//title/myhash/3
200 OK 0 B URL GET HTTP/2 pdocac.tube-dl.top/v/s://savsq.com/v/157316/1/1//title/myhash/3
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint56:EF:69:95:CA:9C:11:40:53:18:AA:5F:28:B9:1D:DE:6D:68:F4:A8
ValidityTue, 09 Jul 2024 18:56:35 GMT - Mon, 07 Oct 2024 18:56:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v/s://savsq.com/v/157316/1/1//title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.av4us.top
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top96.161.209-myhost-58.222.107/v/s://savsq.com/v/157316/1/1//title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://savsq.com/v/157316/1/1//title/myhash/3
pdo115: feedvid-, cachefileb-cacpdo3/ca/4b/c7, lfm-2-143, lmd-143, lud-2238918, xfvlen-328618, fsize-93141, played-
cache-control: public, max-age=720000
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: MISS
last-modified: Wed, 17 Jul 2024 14:43:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KI4TKhYTd9%2F39oZRL68BCP52jlnISvt5sjYL%2B3c360ltE4Sl4kbjxgswwdOhom4bp22vzhU%2BxMnBGPgaA5lyHF5Fss6%2BviSPqhtRmGsMRX%2BDt2EBiRVifuXJ0cHS%2BgewQnb%2Bfkk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b0125a80a5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET jav.tf/favicon.ico
0 B IP
Certificate IssuerGoogle Trust Services
Subjectjav.tf
Fingerprint55:BE:AE:28:16:23:8C:17:35:E4:63:66:67:2B:CA:CF:2D:24:9F:83
ValidityMon, 08 Jul 2024 12:45:35 GMT - Sun, 06 Oct 2024 12:45:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: jav.tf
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: image/x-icon
etag: W/"5ff3c89a-47e"
last-modified: Sun, 07 Jul 2024 22:10:39 GMT
x-cache: HIT, policy, disk
cache-control: max-age=14400
cf-cache-status: HIT
age: 4183
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w47pTiap8sKG4eVKoxDKDD15v1u4vbv%2FbznNhhtpqKLzYq76Tc6d9UENwprL7%2BTT8G6gLIEu0R%2FH0JDsSOEMmGcjdaaKMjGHShagocb%2FENvTwW1lvVtKZ7A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b0131e9b556c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET pornovrach.com/contents/videos_screenshots/1000/1219/preview.jpg
0 B URL GET pornovrach.com/contents/videos_screenshots/1000/1219/preview.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /contents/videos_screenshots/1000/1219/preview.jpg HTTP/1.1
Host: pornovrach.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET cacrz.4jpg.top/AV4.us.jpg
200 OK 8.7 kB URL GET HTTP/3 cacrz.4jpg.top/AV4.us.jpg
IP
Certificate IssuerGoogle Trust Services
Subject4jpg.top
Fingerprint4B:58:1B:2D:6E:5C:08:9C:6A:B9:EC:DD:5E:F7:DE:5A:0A:7C:75:B1
ValidityWed, 03 Jul 2024 17:20:57 GMT - Tue, 01 Oct 2024 17:20:56 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 307x82, components 3
Hash edfe007a6e5b3d268b2528f564b60b43
1644c8ef97c871079e07e5079d613af5cb94052f
bf5bb657f5e788af0c02b9b437d3f15bec91e27175e5a654e3d431fb6d063390
GET /AV4.us.jpg HTTP/1.1
Host: cacrz.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: image/jpeg
content-length: 8741
etag: "2225-5499bcea176c0"
access-control-allow-origin: *
access-control-allow-headers: Cake
ahost: RZ
cache-control: public, max-age=3600000
cf-cache-status: HIT
age: 2962606
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=81rY1tWtR47wsduK7gVfEupO3HD5HUwcrm5e0cKf%2F79J%2BtRaDtDtHLiXRsszbSelN%2B73OjYTutqfCfsvK5S8gFdv05870V7ZnIHknmvX7MdTlSlMxO11ELKvihO9SaG9eg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b0130ebda712f-OSL
alt-svc: h3=":443"; ma=86400
GET avhub.me/favicon.ico
200 OK 15 kB IP
ASN #64050 BGPNET Global ASN
Certificate IssuerLet's Encrypt
Subjectsesenovel.com
FingerprintEA:2B:7B:83:B3:5F:44:D3:EE:9F:EE:E7:E1:19:DC:6E:01:66:DE:16
ValidityTue, 02 Jul 2024 10:07:43 GMT - Mon, 30 Sep 2024 10:07:42 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Hash dda4a5b6d635541c99e9e5c0daa6decd
5b391494a8b7a8b9ac1ae667f87d22a489ff640e
0b6afcc3e0fe2b523ee0182567237a5b43d8e9fbb1c8f6114a6a023a0faa0403
GET /favicon.ico HTTP/1.1
Host: avhub.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: image/x-icon
content-length: 15406
last-modified: Sun, 14 Jul 2024 18:59:58 GMT
etag: "6694202e-3c2e"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET javp1.cc/upload/vod/20240219-4/b4c7e5393b36790bde08efea86a5119b.jpg
404 Not Found 0 B URL GET HTTP/3 javp1.cc/upload/vod/20240219-4/b4c7e5393b36790bde08efea86a5119b.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upload/vod/20240219-4/b4c7e5393b36790bde08efea86a5119b.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 112
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YafEhhFwUbLOpolTpaWKcqsYD9xczLoqkEfMnTpXXSCmsmGExa%2B5%2FSNsSNYBbvUW587DU6xXqt12%2BrV2fZxn2scNPTRjdw93O711vqRKkHhjrurEZXWtRqobsg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b011d1f6e7129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET css.4jpg.top/ckplayer/ckplayer.js
200 OK 50 kB URL GET HTTP/3 css.4jpg.top/ckplayer/ckplayer.js
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subject4jpg.top
Fingerprint4B:58:1B:2D:6E:5C:08:9C:6A:B9:EC:DD:5E:F7:DE:5A:0A:7C:75:B1
ValidityWed, 03 Jul 2024 17:20:57 GMT - Tue, 01 Oct 2024 17:20:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ckplayer/ckplayer.js HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:22 GMT
content-type: application/javascript
etag: W/"c192-545fa14e13f80"
access-control-allow-origin: *
access-control-allow-headers: Cake
cache-control: public, max-age=360000
cf-cache-status: HIT
age: 338226
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u9wE2XEeblqPSg9qa6jtLphuhLJS25hF00p6CXRjdGRkNVuwoNic1J%2FScuIn57y1E56MPtlYar3a4L2QM6oidvT8ZIRz8%2BUYUuS%2B1j0hSzAHpsRbp4h0vnIgr28bLZc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b01038a9456af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET fixedjs.jtube.top/?vidjs=getad&aqxg
200 OK 2.7 kB URL GET HTTP/3 fixedjs.jtube.top/?vidjs=getad&aqxg
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjectjtube.top
FingerprintB8:AD:B0:0A:D2:ED:70:84:59:D1:0C:41:87:8A:ED:D6:6A:97:15:85
ValidityWed, 10 Jul 2024 12:54:21 GMT - Tue, 08 Oct 2024 12:54:20 GMT
File type JavaScript source, ASCII text, with very long lines (2926), with no line terminators
Hash 6f3a7c8d6f8a7da02953fbd392020868
d8ffe21aeacce34d9686ad5a9c9255a5b92bb4d5
c60d388ffd4878a4281cc7b137b954389865efe80e81cfe6365e3e58fd53bcca
GET /?vidjs=getad&aqxg HTTP/1.1
Host: fixedjs.jtube.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:39 GMT
content-type: text/html; charset=UTF-8
pdo-line12: host-fixedjs.jtube.top127.0.0.1-myhost-fixedjs.jtube.top127.0.0.1/?vidjs=getad&aqxg
phost:
pdo-line55: host-fixedjs.jtube.top127.0.0.1-myhost-fixedjs.jtube.top127.0.0.1/?vidjs=getad&aqxg
cache-control: public, max-age=172800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-re-la: EXPIRED
xkey-re-re-la: fixedjs./?vidjs=getad&aqxg-A-fixedjs.jtube.top-fixedjs.jtube.top-myzone---yes
x-proxy-cache-ds-la: HIT
xkey-ds-la: fixedjs./?vidjs=getad&aqxg-A-fixedjs.jtube.top--my_zone
cf-cache-status: HIT
age: 21340
last-modified: Wed, 17 Jul 2024 08:47:59 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G0c9XfqqZGTlhKys8PMMvtg%2BItedkCWimC%2FFu6qZdPGYUnmmr2KhIaYmPqtbUrlxg1mzUwHWXDzqLTbh14T%2FM37UCe5NUMaMjzLjNPhMyg1xueba8AXKeEVwI5W2olIzfLZs2Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b016d3bf51c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET img.qianju.cc/upload/vod/20220821-1/cddede42ec3ebb46c237cc947c14e4ae.jpg
0 B URL GET img.qianju.cc/upload/vod/20220821-1/cddede42ec3ebb46c237cc947c14e4ae.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upload/vod/20220821-1/cddede42ec3ebb46c237cc947c14e4ae.jpg HTTP/1.1
Host: img.qianju.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET savdz.cc/favicon.ico
200 OK 317 B IP
Certificate IssuerLet's Encrypt
Subjectsavaa.cc
Fingerprint6D:DF:DA:CF:95:D9:31:95:1B:B4:C9:DC:2A:F1:F1:34:72:85:76:A8
ValidityMon, 10 Jun 2024 16:45:04 GMT - Sun, 08 Sep 2024 16:45:03 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Hash 9faaf9ec3c64419a98f0171d30788832
7cfd0139434fc6b4405da2399e18c6dad491026d
3e5dffb92459dc10edb044ea8a7db6c29149515a9a13c392fae01108ca48464b
GET /favicon.ico HTTP/1.1
Host: savdz.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: image/x-icon
content-length: 317
last-modified: Tue, 02 Jan 2024 16:25:55 GMT
etag: "65943913-13d"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET sasisa.ru/favicon.ico
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: sasisa.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET img.jingpinx.top/upload/vod/20231224-1/093c09fef6604dcee60b3ea7d2e97226.jpg
200 OK 111 kB URL GET HTTP/1.1 img.jingpinx.top/upload/vod/20231224-1/093c09fef6604dcee60b3ea7d2e97226.jpg
IP
Certificate IssuerLet's Encrypt
Subjectimg.jingpinx.top
Fingerprint6A:C9:59:5B:AC:31:1A:22:CD:C7:C9:34:C8:91:FB:01:8A:8B:92:9B
ValidityWed, 15 May 2024 03:00:25 GMT - Tue, 13 Aug 2024 03:00:24 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x607, components 3
Size 111 kB (110695 bytes)
Hash 287badff22b2334fe13009bbc615f0f2
d3d22630ba098b78e5e5060e1d0f07e53813d3b6
09bfef6574d8d6990f3322342b164cf1a60c8b8c0a3167f58930816e9efdf8ac
GET /upload/vod/20231224-1/093c09fef6604dcee60b3ea7d2e97226.jpg HTTP/1.1
Host: img.jingpinx.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Content-Length: 110695
Content-Type: image/jpeg
Date: Tue, 16 Jul 2024 03:33:10 GMT
Etag: "65889de4-1b067"
Expires: Thu, 15 Aug 2024 03:33:10 GMT
Last-Modified: Tue, 16 Jul 2024 03:33:10 GMT
Server: openresty
X-Cache: HIT, policy, disk
GET javp1.cc/upload/vod/20240219-4/9771997a1607cbb7cde8829d1a601a62.jpg
404 Not Found 0 B URL GET HTTP/3 javp1.cc/upload/vod/20240219-4/9771997a1607cbb7cde8829d1a601a62.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upload/vod/20240219-4/9771997a1607cbb7cde8829d1a601a62.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T3NP7SfjBkNejY3BtxhsOd5GWmEkniBzuBYgJDb4cvZp6DZf7dktIb6dxtxEu8CX7%2Fo7BgVuFgTNeQHybGHSU14rZcD6PMlRHC2BpInhcRwdv7me7lx6W2mwEA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b011d1f6b7129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET www.ssnovel.top/template/YS007/images/avhubCode.png
0 B URL GET www.ssnovel.top/template/YS007/images/avhubCode.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /template/YS007/images/avhubCode.png HTTP/1.1
Host: www.ssnovel.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET css.4jpg.top/index.php?js=very
200 OK 0 B URL GET HTTP/3 css.4jpg.top/index.php?js=very
IP
Requested by https://fixedjs.jtube.top/?vidjs=getad&aqxg
Certificate IssuerGoogle Trust Services
Subject4jpg.top
Fingerprint4B:58:1B:2D:6E:5C:08:9C:6A:B9:EC:DD:5E:F7:DE:5A:0A:7C:75:B1
ValidityWed, 03 Jul 2024 17:20:57 GMT - Tue, 01 Oct 2024 17:20:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index.php?js=very HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:40 GMT
content-type: text/html; charset=UTF-8
imghost: 17296161209-h-css4jpgtopmh--NO-rm16215822225/index.php?js=very
56nloadrate: 3.7225
cache-control: max-age=360000, private
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BkVE3bxxA0XIYSC6lHV31vXEvZp0mmwTR3jCDRo%2FU932zjwmH6rSF1EjQYwcYGjpV%2Fnnqs9SUcPdTJIxGCVX48JJq8CIe%2FZTzKbRxnK4LT9yQtmoS4xVBcMpYY2Td3I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b016dd9b1712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET javp1.cc/upload/vod/20240218-2/0394ba2753882bce486df058f9fa0972.jpg
404 Not Found 0 B URL GET HTTP/2 javp1.cc/upload/vod/20240218-2/0394ba2753882bce486df058f9fa0972.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upload/vod/20240218-2/0394ba2753882bce486df058f9fa0972.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jnco8E2%2FhctQQT%2BvmUIRuYmfit8kZEd0LHpICziyeAGO5BLKc3wwAicGjCqifHQ9kDMCepHgJP4K88rnLx3vuR41AhAr16qvjWPFREFddLAuORJmJ5J3G9jEFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010f4c5556c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET img.fulibao3.xyz/video/thumb/954e2ad53eb2bb6b334c7e4da30d9a48.jpg
0 B URL GET img.fulibao3.xyz/video/thumb/954e2ad53eb2bb6b334c7e4da30d9a48.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /video/thumb/954e2ad53eb2bb6b334c7e4da30d9a48.jpg HTTP/1.1
Host: img.fulibao3.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET javp1.cc/upload/vod/20240219-4/b4c7e5393b36790bde08efea86a5119b.jpg
404 Not Found 0 B URL GET HTTP/2 javp1.cc/upload/vod/20240219-4/b4c7e5393b36790bde08efea86a5119b.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upload/vod/20240219-4/b4c7e5393b36790bde08efea86a5119b.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 17 Jul 2024 14:43:24 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 110
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sQDK3CvAkDeWBQuMM360u94CM2BKWuj1Mh7VjbrsbXkUa7OxzhoJ7r6XCIxt8KGp2gkXBwZ945A8A8bkUFPpsVOC5AgUwkzLgRJGzD9yZDTke5GqdjzLNPV2gw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010e6ac256c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET av.tub4us.top/1
0 B IP
Requested by https://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/3
Certificate IssuerGoogle Trust Services
Subjecttub4us.top
FingerprintB8:AA:A3:AB:E2:E7:69:AE:B2:66:9E:59:EE:7F:A0:7C:CB:61:0E:51
ValidityWed, 10 Jul 2024 20:43:09 GMT - Tue, 08 Oct 2024 20:43:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1 HTTP/1.1
Host: av.tub4us.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://css.4jpg.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-av.tub4us.top127.0.0.1-myhost-av.tub4us.top127.0.0.1/1
phost: av.tub4us.top
pdojs-line356: notjp--myhost-av.tub4us.top-filteron-
line1432: notjp--myhost-av.tub4us.top-filteron-/1
line1435: notjp--myhost-av.tub4us.top-filteron-
line1735: notjp-/1-myhost-av.tub4us.top-filteron-
line1859:
line1894: -
xline: 1954host-79185
pdojs-line1965: ibig--chname--filteron--txtlang-Array
cache-control: public, max-age=14400
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-re-la: EXPIRED
xkey-re-re-la: av./1-A-av.tub4us.top-av.tub4us.top-myzone---yes
x-proxy-cache-ds-la: HIT
xkey-ds-la: av./1-A-av.tub4us.top--my_zone
cf-cache-status: EXPIRED
last-modified: Wed, 17 Jul 2024 14:42:23 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=917fUAPD%2BRBFiA9nwA8A5B3IOvlcYO0KEu3HuHLp2IxG7%2BefXR0hnwBlmC1mSOKt0WTvHXwTYh3zGcV%2BFjSR4bqqtSMM9eEEyKOR0c%2BeTXPZ%2BGZV9Ub9VyQe%2BprSdlmq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b0112dd4656c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET sekesporno.net/favicon.ico
0 B URL GET sekesporno.net/favicon.ico
IP
Certificate IssuerGoogle Trust Services
Subjectsekesporno.net
Fingerprint20:53:00:7A:C7:4E:B0:B3:AA:CD:C7:47:6F:19:51:CA:EA:6E:7E:7D
ValidityMon, 24 Jun 2024 03:17:20 GMT - Sun, 22 Sep 2024 03:17:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: sekesporno.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: image/vnd.microsoft.icon
last-modified: Wed, 23 Dec 2020 01:44:28 GMT
etag: W/"3c2e-5b717d4f1ff63"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2511
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5ReUB0P78VUHKHzDWboAq8QnW93Qd4Eb3UpSZRvVZpgf9kN4WoeQJ8oYdAQNkSUzmU4S8pJsZGp4aPvwolHTb0XV7EOYprraudvK4bKheuPsc8X2C%2Fwe5EvBrfM7IpuoCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b012e3d63634d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET img.qianju.cc/upload/vod/20220821-1/f03ed6c2a6e6e109016d41545f57ae4e.jpg
0 B URL GET img.qianju.cc/upload/vod/20220821-1/f03ed6c2a6e6e109016d41545f57ae4e.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upload/vod/20220821-1/f03ed6c2a6e6e109016d41545f57ae4e.jpg HTTP/1.1
Host: img.qianju.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET fapdig.com/faviconico/
404 Not Found 0 B IP
Certificate IssuerGoogle Trust Services LLC
Subjectfapdig.com
FingerprintF5:61:4F:8A:6D:80:1F:3B:92:80:73:29:17:49:16:9F:A6:52:AA:DB
ValidityTue, 28 May 2024 11:48:52 GMT - Mon, 26 Aug 2024 11:48:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /faviconico/ HTTP/1.1
Host: fapdig.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: ASPro_1382933ca042bef776e8100bd5eb8ac5=p4c4mpfhj24mbq4dn7clk461hd; path=/
vary: Accept-Encoding,User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lW59ZvQ49UUNNKmLi4QKLFCJLd%2BaVFDeadfNR10roQdYXG7HT5KdJpsP3B5Uc9enjXWBsU2jN1fX6gigcBIZeH%2BlZKmPCxN3Nw99NVR4iW6PTHbltXb1zHxKgLoi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b012fde24b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET javp1.cc/upload/vod/20240219-4/af7302d666fd2f8f4475c5ef6736f853.jpg
404 Not Found 0 B URL GET HTTP/2 javp1.cc/upload/vod/20240219-4/af7302d666fd2f8f4475c5ef6736f853.jpg
IP
Certificate IssuerGoogle Trust Services
Subjectjavp1.cc
Fingerprint2A:95:F3:62:2D:22:20:C8:29:7C:65:A8:4C:E8:46:FF:CC:8F:7A:98
ValiditySun, 30 Jun 2024 01:32:39 GMT - Sat, 28 Sep 2024 01:32:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upload/vod/20240219-4/af7302d666fd2f8f4475c5ef6736f853.jpg HTTP/1.1
Host: javp1.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hSRzb4lyT%2BY8PCPUXKt58oJkuGM3wYRfgzzfnFKMFFUUy4EIUKN8j8yeKy2EpQ1Vb2l6oZb5lznB0X6QLm1quXnd4YJpy9KlmpSaTnz5H88WSmx2u2GQ5p9kRw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b010e6ac656c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET js.4jpg.top/tagjpa.php?url=www.thisav.com/player/video-js-thumbnail/thumbnail.css
200 OK 5.6 kB URL GET HTTP/3 js.4jpg.top/tagjpa.php?url=www.thisav.com/player/video-js-thumbnail/thumbnail.css
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subject4jpg.top
Fingerprint4B:58:1B:2D:6E:5C:08:9C:6A:B9:EC:DD:5E:F7:DE:5A:0A:7C:75:B1
ValidityWed, 03 Jul 2024 17:20:57 GMT - Tue, 01 Oct 2024 17:20:56 GMT
File type HTML document, ASCII text, with very long lines (5786), with no line terminators
Hash 4d9f0d3ed145c225e66d4697bf6e93e8
82de08438980b93a58ab6734ef276ab413f90860
012eb0f2c41693e5433f0bbf56c74c8384e9654ac6bc337ab03c753b87655b16
GET /tagjpa.php?url=www.thisav.com/player/video-js-thumbnail/thumbnail.css HTTP/1.1
Host: js.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Jul 2024 14:43:22 GMT
content-type: text/css;charset=UTF-8
8tagproxuri: /tagjpa.php?url=www.thisav.com/player/video-js-thumbnail/thumbnail.css
x-frame-options: ALLOWALL
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=72000
595tagproxuri: /tagjpa.php?url=www.thisav.com/player/video-js-thumbnail/thumbnail.css
621httpcode: 403
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-re-la: HIT
xkey-re-re-la: jjs./tagjpa.php?url=www.thisav.com/player/video-js-thumbnail/thumbnail.css-A-js.4jpg.top-js.4jpg.top-myzone---no
x-proxy-cache-g-la: MISS
xkey-g-la: js.4jpg.top/tagjpa.php?url=www.thisav.com/player/video-js-thumbnail/thumbnail.css--js.4jpg.top--my_zone
cf-cache-status: HIT
age: 50099
last-modified: Wed, 17 Jul 2024 00:48:23 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LADeTlZPyDa71ssT1D1S33Lcxqzs4vZgddhOORE178SAb91K3zXO95uSvWuiTXkhi%2FXlRPTrS0cLHPm4gnnVRSRsQNvNQfmQhlwBzHytcH6W9F0kdW7uX4jeQKM3Gg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b0103babc56af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET static.thisav.com/images/videothumbs/352143-1.jpg
0 B URL GET static.thisav.com/images/videothumbs/352143-1.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videothumbs/352143-1.jpg HTTP/1.1
Host: static.thisav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET pornovrach.com/favicon.ico
0 B URL GET pornovrach.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: pornovrach.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET img.qianju.cc/upload/vod/20220821-1/cddede42ec3ebb46c237cc947c14e4ae.jpg
0 B URL GET img.qianju.cc/upload/vod/20220821-1/cddede42ec3ebb46c237cc947c14e4ae.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upload/vod/20220821-1/cddede42ec3ebb46c237cc947c14e4ae.jpg HTTP/1.1
Host: img.qianju.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET unpkg.com/videojs-flash/dist/videojs-flash.js
302 Found 39 kB URL GET HTTP/2 unpkg.com/videojs-flash/dist/videojs-flash.js
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint1E:BD:61:21:20:80:6D:7A:38:A4:15:7A:FB:C2:B0:50:AF:1F:F6:31
ValidityThu, 30 May 2024 03:44:12 GMT - Wed, 28 Aug 2024 03:44:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /videojs-flash/dist/videojs-flash.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 17 Jul 2024 14:43:22 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /videojs-flash@2.2.1/dist/videojs-flash.js
vary: Accept, Accept-Encoding
content-encoding: br
via: 1.1 fly.io
fly-request-id: 01J30J28SFCVK2STR8QPKQM13B-arn
cf-cache-status: HIT
age: 310
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8a4b01049e3d5693-OSL
X-Firefox-Spdy: h2
GET m.tnaflix.com/favicon.ico
404 Not Found 0 B URL GET HTTP/2 m.tnaflix.com/favicon.ico
IP
ASN #63023 AS-GLOBALTELEHOST
Certificate IssuerDigiCert Inc
Subject*.tnaflix.com
Fingerprint6C:BC:6C:F4:2C:3E:E3:13:DA:74:CC:1D:B7:E2:C2:B0:36:93:77:A0
ValidityTue, 14 Nov 2023 00:00:00 GMT - Sat, 14 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: m.tnaflix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Wed, 17 Jul 2024 14:43:30 GMT
content-type: text/html
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://tv.sohu.com/v/dXMvMjQ0MjQ5MzYyLzg2MjM3MTA5LnNodG1s.html/title/myhash/3
200 OK 224 B URL GET HTTP/2 pdocac.tube-dl.top/v/s://tv.sohu.com/v/dXMvMjQ0MjQ5MzYyLzg2MjM3MTA5LnNodG1s.html/title/myhash/3
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint56:EF:69:95:CA:9C:11:40:53:18:AA:5F:28:B9:1D:DE:6D:68:F4:A8
ValidityTue, 09 Jul 2024 18:56:35 GMT - Mon, 07 Oct 2024 18:56:34 GMT
File type ASCII text, with no line terminators
Hash 07cfabfb3a92a0f32f2bb3fa51966a35
1401ffbdcf8d4ed116ff1dffe9a86546c28173a0
f2166d226af1be78d97e85c62811589044edf4be3f8f7579d9809175581306d0
GET /v/s://tv.sohu.com/v/dXMvMjQ0MjQ5MzYyLzg2MjM3MTA5LnNodG1s.html/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.av4us.top
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top96.161.209-myhost-58.222.143/v/s://tv.sohu.com/v/dXMvMjQ0MjQ5MzYyLzg2MjM3MTA5LnNodG1s.html/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://tv.sohu.com/v/dXMvMjQ0MjQ5MzYyLzg2MjM3MTA5LnNodG1s.html/title/myhash/3
pdo115: feedvid-, cachefileb-cacpdo2/b3/b3/4cb859, lfm-1-3894, lmd-3895, lud-10087315, xfvlen-729544, fsize-330104, played-
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
last-modified: Wed, 17 Jul 2024 14:43:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mrowzsQ14UYmmulb49402ALNAitatrDBxXfjPWs4i%2BaMmEiYsT8aP4nKCjMeLim%2Fq8NcfUQYC8OlFARRllHX58MTprt9yE7c%2Bs%2BFdHtljzTqj2ueHdcYjO4Xk%2FlLPmV5NVvfkuk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b012638c75695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET pdocac.tube-dl.top/v/s://www.savsq.com/v/151008/1/1/?ysclid=ly709haobn727969928/title/myhash/3
200 OK 0 B URL GET HTTP/2 pdocac.tube-dl.top/v/s://www.savsq.com/v/151008/1/1/?ysclid=ly709haobn727969928/title/myhash/3
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjecttube-dl.top
Fingerprint56:EF:69:95:CA:9C:11:40:53:18:AA:5F:28:B9:1D:DE:6D:68:F4:A8
ValidityTue, 09 Jul 2024 18:56:35 GMT - Mon, 07 Oct 2024 18:56:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v/s://www.savsq.com/v/151008/1/1/?ysclid=ly709haobn727969928/title/myhash/3 HTTP/1.1
Host: pdocac.tube-dl.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://en.av4us.top
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:28 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-pdocac.tube-dl.top96.161.209-myhost-158.222.95/v/s://www.savsq.com/v/151008/1/1/?ysclid=ly709haobn727969928/title/myhash/3
phost: pdocac.tube-dl.top
pdojs-line356: notjp-nojp-myhost--filteron-
line1432: notjp-nojp-myhost--filteron-/v/s://www.savsq.com/v/151008/1/1/?ysclid=ly709haobn727969928/title/myhash/3
pdo115: feedvid-, cachefileb-cacpdo4/28/45/99, lfm-2-170866, lmd-170866, lud-1145656, xfvlen-121657, fsize-34134, played-
cache-control: public, max-age=720000
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: MISS
last-modified: Wed, 17 Jul 2024 14:43:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bIhAM7Q3gmXiuT4aZ33samd%2F%2FirYeYrPYt8SBOvm574RtRjE%2FIgU7WKG7UZ%2BVSIysNIUMdcWpxulcq8Lm6z9QCeZzSYH9I7chLSD4NeXA8UlD1%2FJCUR%2B0BUMHXaa1Ztp%2F1Jp80E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a4b0125a80c5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.twi-videos.net/favicon.ico
0 B URL GET www.twi-videos.net/favicon.ico
IP
Certificate IssuerGoogle Trust Services
Subjecttwi-videos.net
Fingerprint01:65:2C:7D:43:B6:66:1F:49:5B:9A:E3:7F:60:94:E2:33:61:C4:23
ValidityMon, 01 Jul 2024 06:59:51 GMT - Sun, 29 Sep 2024 06:59:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.twi-videos.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: text/html
content-length: 167
location: https://www.twi-dl.net/favicon.ico
cache-control: max-age=3600
expires: Wed, 17 Jul 2024 15:43:29 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f5UYdxCPOdaDwBtn9itYi44XaCudMhfwnvCWEb7RZLyCbHqFKRD8k1UNR%2Fp2LsnbJU9PGTQ08sc2T6taKj7fFsdCx318FheOSz2J4kY0CmCaQnKK7qPHqSwlPcp%2FM9FQdnHKjm4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b012ed8cf569c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.xvidstub.com/favicon.ico
301 Moved Permanently 0 B URL GET HTTP/2 www.xvidstub.com/favicon.ico
IP
Certificate IssuerLet's Encrypt
Subjectxvidstub.com
Fingerprint3A:7A:19:03:DE:96:11:06:C4:E3:F3:41:B4:3C:6E:F9:8D:20:BA:93
ValiditySun, 02 Jun 2024 00:11:31 GMT - Sat, 31 Aug 2024 00:11:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.xvidstub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx/1.16.1
date: Wed, 17 Jul 2024 14:43:29 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://www.brasilsex.to/favicon.ico
x-powered-by: PHP/5.6.36
X-Firefox-Spdy: h2
GET jp-gay.xvideos65.com/favicon.ico
0 B URL GET jp-gay.xvideos65.com/favicon.ico
IP
Requested by https://en.av4us.top/v/s://savsq.com/v/151012/1/1/?ysclid=lypyc93xr8885613072
Certificate IssuerGoogle Trust Services
Subjectxvideos65.com
Fingerprint66:CB:96:F6:39:32:D4:16:28:3F:42:48:E2:CA:4E:3B:CC:2A:99:6A
ValidityThu, 13 Jun 2024 12:38:59 GMT - Wed, 11 Sep 2024 12:38:58 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: jp-gay.xvideos65.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en.av4us.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Jul 2024 14:43:26 GMT
content-type: image/x-icon
last-modified: Tue, 21 Sep 2021 05:38:04 GMT
etag: W/"61496fbc-1cee"
cache-control: max-age=86400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y7mqrSun%2B0Vw%2BCe%2Ft3sVIT8XmdHYnoEN9ZrB%2B9FBmcmqB3nHeB4mR%2B2nIodwvcb4W6ARxDoQSXF9trQ46HLwJoOwx21aZgpQSlRw9lnqJWKNH7ulbbKT3NnXcxc1BNNd0h%2FJ%2FJWNsg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a4b011c1a0156ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn5-thumbs.motherlessmedia.com/thumbs/1B48054.jpg
200 OK 25 kB URL GET HTTP/1.1 cdn5-thumbs.motherlessmedia.com/thumbs/1B48054.jpg
IP
ASN #43350 NForce Entertainment B.V.
Certificate IssuerGoGetSSL
Subject*.motherlessmedia.com
Fingerprint62:3F:F4:67:AB:20:21:21:07:CF:72:7C:30:72:D2:B1:61:3C:82:02
ValidityMon, 09 Oct 2023 00:00:00 GMT - Fri, 08 Nov 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x480, components 3
Hash c765c9cb922e7e7ab4215417be0e3bc3
94fe058a531285c0a892d63045e33682db40e2b8
11609c96e3ba762ab376ddf2c2677882ddbb4a4a21c90a8c4f973a3a72b0c8c8
GET /thumbs/1B48054.jpg HTTP/1.1
Host: cdn5-thumbs.motherlessmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: openresty/1.21.4.1
date: Wed, 17 Jul 2024 14:43:25 GMT
content-type: image/jpeg
content-length: 24609
last-modified: Tue, 02 Oct 2018 13:52:53 GMT
etag: "1f448b03f-6021-5773f3d0133df"
expires: Wed, 13 Nov 2024 07:10:55 GMT
cache-control: max-age=10510757
x-cache: HIT
x-whom: cdn05
accept-ranges: bytes
GET www.winzxin.com/favicon.ico
0 B URL GET www.winzxin.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.winzxin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET pics.dmm.co.jp/digital/video/h_283pym00174/h_283pym00174ps.jpg
200 OK 19 kB URL GET HTTP/2 pics.dmm.co.jp/digital/video/h_283pym00174/h_283pym00174ps.jpg
IP
Certificate IssuerAmazon
Subjectp.dmm.co.jp
FingerprintD8:00:98:F8:E6:84:47:F9:58:E4:8A:84:09:E8:E5:9D:43:02:3B:39
ValiditySun, 04 Feb 2024 00:00:00 GMT - Wed, 05 Mar 2025 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 147x200, components 3
Hash e2f243b7b2fda5929c4fba00bfc08b86
615b285691cefda03a6c820ed5f1c24576084f6a
4c665bee2f80764690090372eb7a38570ba0fd7d21ec5045149af9fcba7ea8ee
GET /digital/video/h_283pym00174/h_283pym00174ps.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube4.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 19000
server: openresty
date: Wed, 17 Jul 2024 14:43:25 GMT
last-modified: Mon, 09 Nov 2015 07:25:07 GMT
x-cache-status: HIT
via: 1.1 16a35f2b2822aee977100c01186bf17c.cloudfront.net (CloudFront), 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-pics-origin: imgsrc
x-cache: Miss from cloudfront
x-amz-cf-pop: NRT12-C5, OSL50-P1
x-amz-cf-id: Qj1PFOW7gvROr1rMV_M4gfIsz5ZWNz26rWN0e45Qv5QkvYnLeOUKaw==
age: 563617
X-Firefox-Spdy: h2
GET savsq.com/template/appj/css/ui.min.css
200 OK 25 kB URL GET HTTP/2 savsq.com/template/appj/css/ui.min.css
IP
Requested by moz-nullprincipal:{e408f497-c7f4-4a43-9c3c-f51147ae6d25}?https://savsq.com
Certificate IssuerLet's Encrypt
Subjectsavaa.cc
Fingerprint6D:DF:DA:CF:95:D9:31:95:1B:B4:C9:DC:2A:F1:F1:34:72:85:76:A8
ValidityMon, 10 Jun 2024 16:45:04 GMT - Sun, 08 Sep 2024 16:45:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /template/appj/css/ui.min.css HTTP/1.1
Host: savsq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Jul 2024 14:43:27 GMT
content-type: text/css
last-modified: Tue, 16 Jan 2024 12:43:39 GMT
vary: Accept-Encoding
etag: W/"65a679fb-60a2"
expires: Thu, 18 Jul 2024 02:43:27 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
104.21.13.171
91.194.110.16
103.224.182.242
173.214.250.4
185.107.92.224
91.121.219.34
45.129.230.71
95.101.11.72
223.247.108.236
203.205.137.236
47.246.44.199
193.108.119.37
89.248.193.244
5.63.144.85
51.83.238.19