r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5eb7c9bc996a0ff420e58af45526f053
8c2614832b8efe1c9da0bbd465d6f3f172d95a9e
c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12074
Expires: Sun, 29 Jan 2023 19:54:11 GMT
Date: Sun, 29 Jan 2023 16:32:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3eb88dea4fe00db1182370e72683c3ab
ca520abf1e91bfd2aef40c6a1270a911071e8922
d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14301
Expires: Sun, 29 Jan 2023 20:31:18 GMT
Date: Sun, 29 Jan 2023 16:32:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 302c7548412192add063ad6c8b99cf3b
e5d178931a27db036ce8daae302594d3ff7050b8
fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16033
Expires: Sun, 29 Jan 2023 21:00:10 GMT
Date: Sun, 29 Jan 2023 16:32:57 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 29 Jan 2023 15:35:38 GMT
content-type: application/json
age: 3439
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: KKRRWp9Sg90VwWPappzCePU3tC1SPxCeEH2Nk6JCUfgrOBgTCaofso/o0xCB95Coy+/vK7USRow=
x-amz-request-id: GH1B9V5AZJCSXPQH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 29 Jan 2023 15:50:22 GMT
age: 2555
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
hamjav.cc/
200 OK 16 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (41344), with CRLF line terminators
Hash 6987278ff0346618a4bbfb216b85d95b
c7afc5d9f6150d32ba50dd640238860993fd41d7
d537988dadd9743b5f483e4147ef020835754fc3907941286574b2222822cf00
GET / HTTP/1.1
Host: hamjav.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 16:32:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Sun, 29 Jan 2023 16:32:57 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TzFQivn5wNFeRTqORlyzovQNpMMyUnq33f4GFRzmYhXbUCMdgSGJkxSYU%2BIsXJ9L01lddwQP3%2Fo40yAYsVedUTeFhNT929hJYDLywGBNrnNqbCDa24WZC3mjZ3A%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79135de5e82db517-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 16:32:57 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
hamjav.cc/js/jquery-1.9.1.js
200 OK 80 kB URL HTTP/1.1 hamjav.cc/js/jquery-1.9.1.js
IP
Hash 0178d94e41c1a94418815619297df3da
df736e083233d176428777d264696fe090f2d25b
9b14f96ce7cd80e5614580a36728c5c8a8746274e5d9c7fa686b0a03f3f62f04
GET /js/jquery-1.9.1.js HTTP/1.1
Host: hamjav.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hamjav.cc/
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 16:32:57 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 09 Oct 2017 02:56:34 GMT
Vary: Accept-Encoding
ETag: W/"59dae562-4185d"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7B25PkOe8xywaWBmri2OwZXVp4Sn6kxC35I6c6jvw3zNOcGWwPSFwP05nuLR2h0QzKaDyH44dRLMW7OU7kiCwXIEm%2BEi%2FLU0gt3pEIeDWmEwxvEaC7NDpV453Js%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79135de7cb07b517-OSL
alt-svc: h2=":443"; ma=60
hamjav.cc/css/h2media.css
200 OK 13 kB URL HTTP/1.1 hamjav.cc/css/h2media.css
IP
File type ASCII text, with CRLF line terminators
Hash 270bcb0a1ddefe6151e5b6feac4e7cc1
b8b56e5d0d15760bcffdb070289d82e33cf584d7
81883e1fd71766ad0d0f76221f60d6380d8eee7e6e86bd330e512e5076324ade
GET /css/h2media.css HTTP/1.1
Host: hamjav.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hamjav.cc/
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 16:32:57 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 27 Dec 2018 10:48:08 GMT
Vary: Accept-Encoding
ETag: W/"5c24ade8-19456"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=azWSo%2BSDk27BBaS75ByFmY4saKzB7um4xe88rHq2fvY5Pa%2BXsLiZ8NZp5ORdqBNEhULJBRLG6zGJj8t%2F9DcQX1J%2B0nyH41m1tC1vQwc%2BGsJsuygUYO6XZ%2F7i6vs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79135de7d904b506-OSL
alt-svc: h2=":443"; ma=60
hamjav.cc/css/social-likes_flat.css
200 OK 6.6 kB URL HTTP/1.1 hamjav.cc/css/social-likes_flat.css
IP
File type ASCII text, with very long lines (12909), with CRLF line terminators
Hash f6e97cee3722a3fa13f54c5298a889f5
06b7806c065db8829af8b92341d51ca9ceee8236
af6b95d26fbc366426ff6bc791380d3e1ec37c3ec025d984793c6602652ef443
GET /css/social-likes_flat.css HTTP/1.1
Host: hamjav.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hamjav.cc/
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 16:32:57 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 07 Oct 2017 05:16:00 GMT
Vary: Accept-Encoding
ETag: W/"59d86310-32d3"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QLK%2FMrK6POUNu8A9wClLUF1Qqwu4wDbGDcsf%2FOAbic34mujIaTdn3I42xP1cDf7F%2FEmGsD8FcFmSC6ju3Q6zUnuq5VlEs2O72AyVhHuso1Y8YawR5lnwDnC7%2BNU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79135de7de62b4fa-OSL
alt-svc: h2=":443"; ma=60
hamjav.cc/css/bootstrap.min.css
200 OK 19 kB URL HTTP/1.1 hamjav.cc/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (62326), with CRLF line terminators
Hash ea384eb08a35ef65e5d89c30ef9ea46d
11f9801b33bcb9fd8aef521f051d0d08629b5220
c858ba85bc11b2ee6cbff818742eaa6da76f1a414c5c7f257059595441ad859b
GET /css/bootstrap.min.css HTTP/1.1
Host: hamjav.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hamjav.cc/
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 16:32:57 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 07 Oct 2017 05:16:00 GMT
Vary: Accept-Encoding
ETag: W/"59d86310-1e905"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V2uguaI59jU9NdoLbdhWe8ofHYBo00h4l%2FIv1nvEdaoQ4kf%2FEiHz5%2FzuddyQiXID4UY4qYiIpCVUhTHPOvl7A7gMAfHVRhhD%2BE986ZYbl%2B9BSrKjrC4xzXJQRw8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79135de7dc0fb509-OSL
alt-svc: h2=":443"; ma=60
hamjav.cc/js/bootstrap.min.js
200 OK 9.5 kB URL HTTP/1.1 hamjav.cc/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (32025)
Hash 46db140aa127a99176efa695c3e39318
7531758c6cf2c12818b27086e4fbbc0b00636686
c7fbb553bcff297e1f177e2b8ece2d7f001c74d421da32f39c10c6b1c070bb10
GET /js/bootstrap.min.js HTTP/1.1
Host: hamjav.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hamjav.cc/
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 16:32:57 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 09 Oct 2017 02:56:40 GMT
Vary: Accept-Encoding
ETag: W/"59dae568-8c6f"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BIZPLmvarNrae3Ukt7PhECXjFS3WSgnuUlyIF%2FLoQCAgjOeMqyZ7KutHhbNn48GZdg%2FDdFyVGg0r2dxNuarD4J1cOwAOOcekJCjoHLMX6HGGMk7S%2BZgig8skBvw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79135de7d8120b69-OSL
alt-svc: h2=":443"; ma=60
hamjav.cc/js/jquery-ui.min.js
200 OK 61 kB URL HTTP/1.1 hamjav.cc/js/jquery-ui.min.js
IP
File type ASCII text, with very long lines (32389)
Hash 81aed4cd445734bb434b859fd0de1249
273779c52c0389a9e8ecd30e620d42ea1b0f0d60
babceec622259e5309e04f5fbaebe8295ca02b66942aead1bbe35b06f1a5725b
GET /js/jquery-ui.min.js HTTP/1.1
Host: hamjav.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hamjav.cc/
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 16:32:57 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 09 Oct 2017 02:56:45 GMT
Vary: Accept-Encoding
ETag: W/"59dae56d-37aee"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=98zoZOkS0djeGmzDtkBLcxphdWBxCqW220HpFybU9J6dILoWoYhhGWYuLtIWm4TSb9B1MlycgLd40Gq1jkPrrE573eFyxfdvp673fMA2MgEsalD8WPFFaXUtzHA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79135de84bf7b517-OSL
alt-svc: h2=":443"; ma=60
syndication.realsrv.com/splash.php?idzone=4744046&capping=5
200 OK 3.7 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?idzone=4744046&capping=5
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document, ASCII text, with very long lines (3154)
Hash 4fbe1fc91edf0261e1fb11aee5cd2ead
fb72b95d4c9809eda9854edc8b98afc58eb28b6b
d09c9d8775d3975680c7d5e67ee55f242c53734e52aaa962c10b22ee554a4300
GET /splash.php?idzone=4744046&capping=5 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Jan 2023 16:32:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263d69fb9a2b676.207855322300425884%22%3B%7D; expires=Tue, 28 Jan 2025 16:32:57 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4744046%7C77846648%7C0%7C300x100%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Chamjav.cc%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 30 Jan 2023 16:32:57 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 279 B IP
Hash a98402767cebfc516d75b913ae3a6752
d7efbb7b030863d6375c4a94ac05d5cb334208db
fa53a4ddca103402c841b5a0124925eea8d6eb754497c9bf22666b181fc74a50
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 181
Cache-Control: max-age=153417
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 16:32:57 GMT
Etag: "63d6534d-117"
Expires: Tue, 31 Jan 2023 11:09:54 GMT
Last-Modified: Sun, 29 Jan 2023 11:06:53 GMT
Server: ECS (amb/6B8D)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash a98402767cebfc516d75b913ae3a6752
d7efbb7b030863d6375c4a94ac05d5cb334208db
fa53a4ddca103402c841b5a0124925eea8d6eb754497c9bf22666b181fc74a50
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 181
Cache-Control: max-age=153417
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 16:32:57 GMT
Etag: "63d6534d-117"
Expires: Tue, 31 Jan 2023 11:09:54 GMT
Last-Modified: Sun, 29 Jan 2023 11:06:53 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
hamjav.cc/css/font.css
404 Not Found 12 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (41344), with CRLF line terminators
Hash 232be6751ba1d6c945e4d7e7fbc72d10
b6b08c44fe93353a29bd065c859b1dee4f617f98
bf39625765d55bb6ac3604e9a72999888431b19913d14a0c3e53ce5872aeb34e
GET /css/font.css HTTP/1.1
Host: hamjav.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hamjav.cc/css/default.css
HTTP/1.1 404 Not Found
Date: Sun, 29 Jan 2023 16:32:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kFeEpVnSaC%2FVQ1i30WpyvSgOqz7w1jSjhrdCVFdztBe5%2FacJsr1ypFkEif6iCmRUTpfPNvrpLB3IdhvJz5hmHDFMzPgr%2FCFBmWy0tT%2Bef7p%2BPB2RtGxBgFmNJPM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79135de86c95b509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 29 Jan 2023 15:49:04 GMT
age: 2633
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
syndication.realsrv.com/splash.php?native-settings=1&idzone=4744254&cookieconsent=true&&p=http%3A%2F%2Fhamjav.cc%2F
200 OK 4.6 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?native-settings=1&idzone=4744254&cookieconsent=true&&p=http%3A%2F%2Fhamjav.cc%2F
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (8696), with no line terminators
Hash 00b06eebce55f596675b98ac90c4f4b7
f1a4aed314be85acef1fa73a3d4cd47a1ba3b37c
66604758c720ecf487956efa1ac673514034d2cd9752400cbd6eafc0712491a8
GET /splash.php?native-settings=1&idzone=4744254&cookieconsent=true&&p=http%3A%2F%2Fhamjav.cc%2F HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://hamjav.cc
Connection: keep-alive
Referer: http://hamjav.cc/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263d69fb9a2b676.207855322300425884%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4744046%7C77846648%7C0%7C300x100%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Chamjav.cc%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Jan 2023 16:32:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: http://hamjav.cc
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263d69fb9a2b676.207855322300425884%22%3B%7D; expires=Tue, 28 Jan 2025 16:32:57 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
impressions=oslmrxbrnxgxamcbcceecgeicxbmsbcenxgxamclarlmmgeimmccrbebnxgxamcbexxbmgeioslmrxbmnxgxamclarlmmgeicxbmsbocnxgxamclbraeegeimmccrlaonxgxamccxobsegeimmccrlacnxgxamcmlarclgeicxbmsboenxgxamreellmbgeioslmrxlrnxgxamslescrogeimmccrbxenxgxamclarlmmgeislsaroornxgxamccolacbgeioslmroemnxgxamclrbcrogeioslmrxlsnxgxamclrbcelgeicmmsxrbonxgxamsoeamlmgeimmccrlaenxgxamcberosogeimmccrbeanxgxamcssabxegeicaocmrmanxgxamolcrcergeimcclsxronxgxamsscrmclgeimcclsxmenxgxamclrbcelgeialbserebnxgxamccrrssogeimcclsxaonxgxamsxsxllxgeicxbmsbxcnxgxamclrbcrogeimrblxebenxgxamselmborgeimcclsxconxgxamsbremaegeirbabxabbnxgxamcbexxbmgeimcclsxacnxgxamsscrmclgeicmmsxaeenxgxamcmrmsrmgeialbsereanxgxamsoeabscgeicaxsscmbnxgxamsosomemgeimcclosconxgxamcxbemmxgeimcclsoeonxgxamcbcebxbgeimcclsxlcnxgxamcobecclgeimcclossbnxgxamcscxaesgeimcclsxscnxgxamsmoooeegeimcclsxlenxgxamcbrorxbgeimaecseaenxgxamsmoooeegeimaecsxcbnxgxamsmoooeegeimcclsxoanxgxamclrbcelgeimcclsxlbnxgxamcrbalrageimccloscanxgxamclrbcrogeiclsmrbsonxgxamsmmrbmbgeiclsmarsenxgxamsmmrbmbgeiccmmllebnxgxamclarlmmgeimcclsxsbnxgxamclrbcxbgeiclsmrbxonxgxamsbebceegeiclsmrbxcnxgxamsbebceegeiclsmarscnxgxamsbebceegeiccmmlmlcnxgxamsbebceegeiclsmarrenxgxamsbebceegeicaormbaonxgxamsbxxbsrgeicaormlrenxgxamcememscgeimcclsxlonxgxamcsmlmxcgeimrblelronxgxamsbremaegeimaecsxobnxgxamsbremaegeiclsmrbrcnxgxamsbroemmgeiclsmrraanxgxamclsslaegeiclsmrmxbnxgxamsbroemmgeimccloscenxgxamsbmrxregeimcclsxxonxgxamslescrogeimrblelxbnxgxamslescrogeimcclsoeenxgxamclrbcelgeimrblelmonxgxamcxcrasxgeimrbleloenxgxamcxcrasxgeiclsmrrmanxgxamcxabcxbgeiclsmrbeonxgxamcxabcxbgeiclsmrrcenxgxamcxabcxbgeiclsmrmxanxgxamcxabcxbgeiclsmrbxenxgxamcxabcxbgeiclsmaroonxgxamcxabcxbgeialbserxenxgxamcosraregeimcclsxsenxgxamclxcsocgeimcclsxlanxgxamcblrlbcgeiccmmlleanxgxamccrrssogeicaormlabnxgxamcrllsmageicaormlconxgxamcrllsmageimbsblroanxogxamclorbregxcceimaslbmccnxgxamclsslaegxcceiclsmarsonxgxamclsslaegeiclsmrmlbnxgxamclsslaegeiclsmrmocnxgxamclsslaegeiccmmllecnxgxamclsslaegeimxeemblencgxamclsreamgxcceimaooblebnsgxamclsaaamgxcceimbssrrlensgxamclsamoogxcceimboslabcnxgxamclsamoogxcceimsacexoonxgxamclsamosgxcceimmbcaacbnrgxamclsamrogxcceimbeslssenxgxamclsmomagxcceimrxccosanxgxamclsmomagxcceimrxccosonxgxamclsmomagxcceimrxccoscnxgxamclsmomagxcceixaoosscrnxgxamclsmomagxcceimeelacloncgxamclsmomagxcceimbclracbncgxamclsmomagxcceimeelaclcncgxamclsmomagxcceimxxerrxenxgxamclsmomagxcceimbxacsacnxgxamclsmomagxcceimbscxmocnxgxamclsmomagxcceimexexabbnxgxamclsmomagxcceimxlbalscnogxamclsbboogxcceimromobabnxgxamclsblcmgxcceimbbcemobnsgxamclcelrlgxcceimxlbmosanrgxamclcasocgxcceimxlbmoconogxamclcasocgxcceicmarxbbonsgxamclcboecgxcceimclsaoxbncgxamclcbamegxcceimbbcemoancgxamclcbllogxcceimmraexoenxgxamclrexlegxcceimmraexxanxgxamclrexlegxcceimmraexsenxgxamclrexlegxcceimaooloranxgxamclrexlmgxcceimrsbrelonxgxamclrreosgxcceimabcabaonxgxamclrreosgxcceimsleoaronxgxamclrreosgxcceiceecmorsnxgxamclrassmgxcceimcclsxcanxgxamclrbcelgeimrblelcenxgxamclrbcelgeimaecsxrcnxgxamclrbcelgeimxlbalcensgxamclrbcxbgxcceimxlbmxbbnsgxamclarlmmgxcceialbserxonxgxamclarlmmgeimcssmlronsgxamclarlmbgxcceimxlbalsbnxgxamclarlmbgxcceimrmaobxanxgxamclamoelgxcceimromobmenxgxamclamoxlgxcceimxlbmoobnogxamclabecmgxcceimaoolslanxgxamclabblogxcceimbmlselenxgxamclmmlcxgxcceimbamerlbnxgxamclmmlcxgxcceimexxlrbenxgxamclbsslxgxcceimbmlselonxgxamclbsbbcgxcceimbmlsebbnxgxamclbsbbcgxcceimbrsslsansgxamclbslcegxcceimrmbbobcnxgxamclbrralgxcceimxlbmoscnogxamclbraeegxcceiaaxcambbnxgxamclbraeegxcceimxxrecsanxgxamclbraeogxcceimxlbmosenogxamcllxaobgxcceimbclraronxgxamcllxaobgxcceixaoossalnxgxamreerlargxcceimxeemlxcnxgxamreerlargxcceimbmmcllonxgxamreebbcogxcceimoobcomanxgxamreebbcogxcceimoobcobenxgxamreebbcogxcceimxxerrecnxgxamreellmbgxcce; expires=Mon, 30 Jan 2023 16:32:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4744254%7C74337952%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C63d69fb9a2b676.207855322300425884%7Ca94ec2281a3b94e2da028d1e91dd6ade%7C0%7Chamjav.cc%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 30 Jan 2023 16:32:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4744254%7C71987230%7C100644%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C63d69fb9a2b676.207855322300425884%7Ca94ec2281a3b94e2da028d1e91dd6ade%7C0%7Chamjav.cc%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 30 Jan 2023 16:32:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4744254%7C78389526%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C63d69fb9a2b676.207855322300425884%7Ca94ec2281a3b94e2da028d1e91dd6ade%7C0%7Chamjav.cc%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 30 Jan 2023 16:32:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4744254%7C41873820%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C63d69fb9a2b676.207855322300425884%7Ca94ec2281a3b94e2da028d1e91dd6ade%7C0%7Chamjav.cc%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 30 Jan 2023 16:32:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4744254%7C71105504%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C63d69fb9a2b676.207855322300425884%7Ca94ec2281a3b94e2da028d1e91dd6ade%7C0%7Chamjav.cc%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 30 Jan 2023 16:32:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
a.realsrv.com/popunder1000.js
200 OK 37 kB URL HTTP/1.1 a.realsrv.com/popunder1000.js
IP
ASN #60068 Datacamp Limited
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 74ce1b410d26ffd8a3a573c1311ab15b
8e33ee474760f4f5319db81bf9fcfeb2cdfd7d45
4fe63971fab06c4269031fdca7b71291a6282bdcf35803063e8eeb14747f1af8
GET /popunder1000.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hamjav.cc/
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 16:32:58 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
etag: W/"d866557387aa14b697929065b92"
Expires: Tue, 24 Jan 2023 13:18:57 GMT
Cache-Control: max-age=10800
Access-Control-Allow-Origin: *
X-Cache-OP: HIT
X-Accel-Expires: @1675020027
Server: CDN77-Turbo
X-77-NZT: AblMCQ3OfM7/7wIAAA
X-77-NZT-Ray: c0a4cc28fa3e5a3aba9fd663a6276507
X-Cache: HIT
X-Age: 751
X-77-POP: stockholmSE
X-77-Cache: HIT
Content-Encoding: gzip
syndication.realsrv.com/cimp.php?t=imp&data=H4sIAAAAAAAAA02OS24EIQxEr5ILNCob28CsM9tEmmgOQAOtKFKyHPXChw/dUj7Uwg+EnovBcQEtXJ6ILpEvmrxQKAjCgVT85fXmQr5/7Xvo4+HCBi2uMSrDi4kmuCQRiLkiT85aonlKWcxkPsCjY4Y1ihwUgERZYcwCs1h8Ou5vz36935wCsujvEI/AToDT2eXQyWTsh7IWGY05U43rRO4VnDuNQr1b7eP46O/186M+Qmtni3P/FDv/XGcWOsc88D/6HztV4pKPJk5bMuMVQ1Fzs95Wsa2S0dgarOVv3+rDfVgBAAA=&d=inst
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=imp&data=H4sIAAAAAAAAA02OS24EIQxEr5ILNCob28CsM9tEmmgOQAOtKFKyHPXChw/dUj7Uwg+EnovBcQEtXJ6ILpEvmrxQKAjCgVT85fXmQr5/7Xvo4+HCBi2uMSrDi4kmuCQRiLkiT85aonlKWcxkPsCjY4Y1ihwUgERZYcwCs1h8Ou5vz36935wCsujvEI/AToDT2eXQyWTsh7IWGY05U43rRO4VnDuNQr1b7eP46O/186M+Qmtni3P/FDv/XGcWOsc88D/6HztV4pKPJk5bMuMVQ1Fzs95Wsa2S0dgarOVv3+rDfVgBAAA=&d=inst
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=imp&data=H4sIAAAAAAAAA02OS24EIQxEr5ILNCob28CsM9tEmmgOQAOtKFKyHPXChw/dUj7Uwg+EnovBcQEtXJ6ILpEvmrxQKAjCgVT85fXmQr5/7Xvo4+HCBi2uMSrDi4kmuCQRiLkiT85aonlKWcxkPsCjY4Y1ihwUgERZYcwCs1h8Ou5vz36935wCsujvEI/AToDT2eXQyWTsh7IWGY05U43rRO4VnDuNQr1b7eP46O/186M+Qmtni3P/FDv/XGcWOsc88D/6HztV4pKPJk5bMuMVQ1Fzs95Wsa2S0dgarOVv3+rDfVgBAAA=&d=inst HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://hamjav.cc
Connection: keep-alive
Referer: http://hamjav.cc/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263d69fb9a2b676.207855322300425884%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4744046%7C77846648%7C0%7C300x100%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Chamjav.cc%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Jan 2023 16:32:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: http://hamjav.cc
Access-Control-Allow-Credentials: true
Set-Cookie: impressions=oslmrxbrnxgxamcbcceecgeicxbmsbcenxgxamclarlmmgeimmccrbebnxgxamcbexxbmgeioslmrxbmnxgxamclarlmmgeicxbmsbocnxgxamclbraeegeimmccrlaonxgxamccxobsegeimmccrlacnxgxamcmlarclgeicxbmsboenxgxamclrbcelgeioslmrxlrnxgxamslescrogeimmccrbxenxgxamclarlmmgeislsaroornxgxamccolacbgeioslmroemnxgxamclrbcrogeioslmrxlsnxgxamclrbcelgeicmmsxrbonxgxamsoeamlmgeimmccrlaenxgxamcberosogeimmccrbeanxgxamcssabxegeicaocmrmanxgxamolcrcergeimcclsxronxgxamsscrmclgeimcclsxmenxgxamclrbcelgeialbserebnxgxamccrrssogeimcclsxaonxgxamsxsxllxgeicxbmsbxcnxgxamclrbcrogeimrblxebenxgxamselmborgeimcclsxconxgxamsbremaegeirbabxabbnxgxamcbexxbmgeimcclsxacnxgxamsscrmclgeicmmsxaeenxgxamcmrmsrmgeialbsereanxgxamsoeabscgeicaxsscmbnxgxamsosomemgeimcclosconxgxamcxbemmxgeimcclsoeonxgxamcbcebxbgeimcclsxlcnxgxamcobecclgeimcclossbnxgxamcscxaesgeimcclsxscnxgxamsmoooeegeimcclsxlenxgxamcbrorxbgeimaecseaenxgxamsmoooeegeimaecsxcbnxgxamsmoooeegeimcclsxoanxgxamclrbcelgeimcclsxlbnxgxamcrbalrageimccloscanxgxamclrbcrogeiclsmrbsonxgxamsmmrbmbgeiclsmarsenxgxamsmmrbmbgeiccmmllebnxgxamclarlmmgeimcclsxsbnxgxamclrbcxbgeiclsmrbxonxgxamsbebceegeiclsmrbxcnxgxamsbebceegeiclsmarscnxgxamsbebceegeiccmmlmlcnxgxamsbebceegeiclsmarrenxgxamsbebceegeicaormbaonxgxamsbxxbsrgeicaormlrenxgxamcememscgeimcclsxlonxgxamcsmlmxcgeimrblelronxgxamsbremaegeimaecsxobnxgxamsbremaegeiclsmrbrcnxgxamsbroemmgeiclsmrraanxgxamclsslaegeiclsmrmxbnxgxamsbroemmgeimccloscenxgxamsbmrxregeimcclsxxonxgxamslescrogeimrblelxbnxgxamslescrogeimcclsoeenxgxamclrbcelgeimrblelmonxgxamcxcrasxgeimrbleloenxgxamcxcrasxgeiclsmrrmanxgxamcxabcxbgeiclsmrbeonxgxamcxabcxbgeiclsmrrcenxgxamcxabcxbgeiclsmrmxanxgxamcxabcxbgeiclsmrbxenxgxamcxabcxbgeiclsmaroonxgxamcxabcxbgeialbserxenxgxamcosraregeimcclsxsenxgxamclxcsocgeimcclsxlanxgxamcblrlbcgeiccmmlleanxgxamccrrssogeicaormlabnxgxamcrllsmageicaormlconxgxamcrllsmageimbsblroanxxgxamclorbregxcceimaslbmccnxgxamclsslaegxcceiclsmarsonxgxamclsslaegeiclsmrmlbnxgxamclsslaegeiclsmrmocnxgxamclsslaegeiccmmllecnxgxamclsslaegeimxeemblencgxamclsreamgxcceimaooblebnsgxamclsaaamgxcceimbssrrlensgxamclsamoogxcceimboslabcnxgxamclsamoogxcceimsacexoonxgxamclsamosgxcceimmbcaacbnagxamclsamrogxcceimbeslssenxgxamclsmomagxcceimrxccosanxgxamclsmomagxcceimrxccosonxgxamclsmomagxcceimrxccoscnxgxamclsmomagxcceixaoosscrnxgxamclsmomagxcceimeelacloncgxamclsmomagxcceimbclracbncgxamclsmomagxcceimeelaclcncgxamclsmomagxcceimxxerrxenxgxamclsmomagxcceimbxacsacnxgxamclsmomagxcceimbscxmocnxgxamclsmomagxcceimexexabbnxgxamclsmomagxcceimxlbalscnogxamclsbboogxcceimromobabnxgxamclsblcmgxcceimbbcemobnsgxamclcelrlgxcceimxlbmosanrgxamclcasocgxcceimxlbmoconogxamclcasocgxcceicmarxbbonsgxamclcboecgxcceimclsaoxbncgxamclcbamegxcceimbbcemoancgxamclcbllogxcceimmraexoenxgxamclrexlegxcceimmraexxanxgxamclrexlegxcceimmraexsenxgxamclrexlegxcceimaooloranxgxamclrexlmgxcceimrsbrelonxgxamclrreosgxcceimabcabaonxgxamclrreosgxcceimsleoaronxgxamclrreosgxcceiceecmorsnxgxamclrassmgxcceimcclsxcanxgxamclrbcelgeimrblelcenxgxamclrbcelgeimaecsxrcnxgxamclrbcelgeimxlbalcensgxamclrbcxbgxcceimxlbmxbbnsgxamclarlmmgxcceialbserxonxgxamclarlmmgeimcssmlronogxamclarlmbgxcceimxlbalsbnxgxamclarlmbgxcceimrmaobxanxgxamclamoelgxcceimromobmenxgxamclamoxlgxcceimxlbmoobnogxamclabecmgxcceimaoolslanxgxamclabblogxcceimbmlselenxgxamclmmlcxgxcceimbamerlbnxgxamclmmlcxgxcceimexxlrbenxgxamclbsslxgxcceimbmlselonxgxamclbsbbcgxcceimbmlsebbnxgxamclbsbbcgxcceimbrsslsansgxamclbslcegxcceimrmbbobcnxgxamclbrralgxcceimxlbmoscnogxamclbraeegxcceiaaxcambbnxgxamclbraeegxcceimxxrecsanxgxamclbraeogxcceimxlbmosenxgxamcllxaobgxcceimbclraronxgxamcllxaobgxcceixaoossalnxgxamreerlargxcceimxeemlxcnxgxamreerlargxcceimbmmcllonxgxamreebbcogxcceimoobcomanxgxamreebbcogxcceimoobcobenxgxamreebbcogxcce; expires=Mon, 30 Jan 2023 16:32:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
__upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D; expires=Tue, 28 Jan 2025 16:32:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/d8/ed/5f/d8ed5fd9a19f3658f19d99918b277c92/d8ed5fd9a19f3658f19d99918b277c92.12.jpg
200 OK 17 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/d8/ed/5f/d8ed5fd9a19f3658f19d99918b277c92/d8ed5fd9a19f3658f19d99918b277c92.12.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash f3b5ce1c9b3c0d0cd6ef181e0bde9c1f
636b1054ff6b6a6a93f4ed0d0fab8fc9823b8304
b7ea2e003a445fbff041b336422b1cd64d46d12aed21671f774e9b282a6972ce
GET /videos/thumbs169ll/d8/ed/5f/d8ed5fd9a19f3658f19d99918b277c92/d8ed5fd9a19f3658f19d99918b277c92.12.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 16840
x-frame-options: sameorigin
last-modified: Thu, 26 Jan 2023 13:26:51 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1685236319
x-77-nzt: A8O1pg0lo7D/bI0BANRmOAGySZP/75sAAI/0Ot13i6uh
x-77-nzt-ray: ffffffffa2283e05ba9fd663b43a6a09
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 39919, 101740
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash a5c593767860b5bfd48481ada63233b8
c5e6b47acd443f9b59013fd2fa4f8d8adfdcecab
c00dcf5a1b234eb9859ecc4d635b0a4db9f0693a9c043c60bb993b5cc9b3c476
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3974
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 16:32:58 GMT
Last-Modified: Sun, 29 Jan 2023 15:26:44 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
s3t3d2y8.afcdn.net/images/close-icon-circle.png
200 OK 405 B URL HTTP/1.1 s3t3d2y8.afcdn.net/images/close-icon-circle.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash bc8bf5d1633e548e9a178bf29be30b7b
bd290b6eabd73d2c95db053620797503e9178484
94f575abdb5c45476f9c2b62bbe06fbfacce9d25e95796ffcd07680bd7c6c0bb
GET /images/close-icon-circle.png HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hamjav.cc/
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 16:32:58 GMT
Content-Type: image/png
Content-Length: 405
Connection: keep-alive
Last-Modified: Wed, 29 Jun 2022 13:13:10 GMT
ETag: "62bc4fe6-195"
Expires: Fri, 30 Jun 2023 18:46:41 GMT
Cache-Control: max-age=31536000
Access-Control-Allow-Origin: *
X-Cache-OP: HIT
X-Accel-Expires: @1688195204
Server: CDN77-Turbo
X-Robots-Tag: noindex, follow
X-77-NZT: AblMCRTcJaz/tgIYAQ
X-77-NZT-Ray: af585630030e598eba9fd663b70f9409
X-Cache: HIT
X-Age: 18350774
X-77-POP: stockholmSE
X-77-Cache: HIT
Accept-Ranges: bytes
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/4c/b9/c7/4cb9c7ddbbe8ab7b192985adf7c9c8d7/4cb9c7ddbbe8ab7b192985adf7c9c8d7.29.jpg
200 OK 14 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/4c/b9/c7/4cb9c7ddbbe8ab7b192985adf7c9c8d7/4cb9c7ddbbe8ab7b192985adf7c9c8d7.29.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash a02f260363f0f0aa171dd6f99a9bc84c
36e216d4a1ccd8f2359b1474810e4cd2b0e91f21
dfdb67b4810257e53a81fbb19fdd5e467b4231ee2a61037997207787093ed6dc
GET /videos/thumbs169ll/4c/b9/c7/4cb9c7ddbbe8ab7b192985adf7c9c8d7/4cb9c7ddbbe8ab7b192985adf7c9c8d7.29.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 14498
x-frame-options: sameorigin
last-modified: Tue, 24 Jan 2023 10:58:01 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1684927835
x-77-nzt: A8O1pg21Oob/RpIGAJySISN1fID/GUwAAI/0Otj2UB+h
x-77-nzt-ray: ffffffffa2283e05ba9fd663eb7d7309
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 19481, 430662
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash a5c593767860b5bfd48481ada63233b8
c5e6b47acd443f9b59013fd2fa4f8d8adfdcecab
c00dcf5a1b234eb9859ecc4d635b0a4db9f0693a9c043c60bb993b5cc9b3c476
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3974
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 16:32:58 GMT
Last-Modified: Sun, 29 Jan 2023 15:26:44 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/ae/42/12/ae42122089a3ead0a7cf3ebc99fd7e10/ae42122089a3ead0a7cf3ebc99fd7e10.21.jpg
200 OK 14 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/ae/42/12/ae42122089a3ead0a7cf3ebc99fd7e10/ae42122089a3ead0a7cf3ebc99fd7e10.21.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash b8c3b5ebe0a9054c5aa0133a7149f49b
3cdbdb894e9aa32057d20fe23c56f2a50fb6e518
e595895f2dc8786d58579d812eeaec9bcbcbc4b0fa7777ef5a2554660390a6e1
GET /videos/thumbs169ll/ae/42/12/ae42122089a3ead0a7cf3ebc99fd7e10/ae42122089a3ead0a7cf3ebc99fd7e10.21.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 13761
x-frame-options: sameorigin
last-modified: Thu, 26 Jan 2023 06:37:29 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1685152933
x-77-nzt: A8O1pg1RYWn/WCoDAJySIR/8+hP/vUQAAI/0Ot0gWk2h
x-77-nzt-ray: ffffffffa2283e05ba9fd663d8217909
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 17597, 207448
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169ll/4d/ef/b9/4defb933a1a1e18b64ea945da1f613ba/4defb933a1a1e18b64ea945da1f613ba.15.jpg
200 OK 9.5 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169ll/4d/ef/b9/4defb933a1a1e18b64ea945da1f613ba/4defb933a1a1e18b64ea945da1f613ba.15.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash fd418a73d2d766c847c2f7dd04be2f49
d71faa0e0036d46bd9fd3526c49f00962da5a2e0
857ab7f5652f09869bedff91ee8df3fe89bc051b4e52bb064f82bd4492abeb27
GET /videos/thumbs169ll/4d/ef/b9/4defb933a1a1e18b64ea945da1f613ba/4defb933a1a1e18b64ea945da1f613ba.15.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 9524
cf-ray: 79135debcea2b506-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 9225960
cache-control: public, max-age=10368000
expires: Mon, 29 May 2023 16:32:58 GMT
last-modified: Mon, 21 Mar 2022 10:46:54 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12893
Expires: Sun, 29 Jan 2023 20:07:51 GMT
Date: Sun, 29 Jan 2023 16:32:58 GMT
Connection: keep-alive
img-cf.xvideos-cdn.com/videos/thumbs169ll/de/2d/f8/de2df84445b4e44a7dabf15e9b3c4a18/de2df84445b4e44a7dabf15e9b3c4a18.20.jpg
200 OK 13 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169ll/de/2d/f8/de2df84445b4e44a7dabf15e9b3c4a18/de2df84445b4e44a7dabf15e9b3c4a18.20.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 3ebcfaf3adf54e75b88e93e616f928d3
3027bee0cdd857db627c88cb489407840398f370
1a4db61098ad4ec7e34f6b501a48eb09f485a42bcb2e761ddb253c0abd039389
GET /videos/thumbs169ll/de/2d/f8/de2df84445b4e44a7dabf15e9b3c4a18/de2df84445b4e44a7dabf15e9b3c4a18.20.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 12966
cf-ray: 79135debcea6b506-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 969732
cache-control: public, max-age=10368000
expires: Mon, 29 May 2023 16:32:58 GMT
last-modified: Tue, 04 Jan 2022 12:24:44 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169ll/c1/a9/4b/c1a94b465b948c2ba8812a11ee357fda/c1a94b465b948c2ba8812a11ee357fda.14.jpg
200 OK 14 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169ll/c1/a9/4b/c1a94b465b948c2ba8812a11ee357fda/c1a94b465b948c2ba8812a11ee357fda.14.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash cff7a861579fbca089a1be131e014ded
acccb9c9618ff9fa3a9a40d51dac129ff5a70632
5e4f8f5a2b033dfdb55864a3bdb822ae12353e7c586874f4c961943617dafd0d
GET /videos/thumbs169ll/c1/a9/4b/c1a94b465b948c2ba8812a11ee357fda/c1a94b465b948c2ba8812a11ee357fda.14.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 13528
cf-ray: 79135debcea4b506-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 855874
cache-control: public, max-age=10368000
expires: Mon, 29 May 2023 16:32:58 GMT
last-modified: Fri, 13 Jan 2023 11:44:44 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169ll/44/1c/39/441c3913775f9eaf6cd1bad55f4cef42/441c3913775f9eaf6cd1bad55f4cef42.23.jpg
200 OK 13 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169ll/44/1c/39/441c3913775f9eaf6cd1bad55f4cef42/441c3913775f9eaf6cd1bad55f4cef42.23.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 7ce0b2f4fcaff13a58734ae4312cdaea
eedc5391b29e1858a2fc8e5796f036fe90435ba4
388f44c0162b8a2557837658e0a17298b347ab8017f095238baf628ecc1afa52
GET /videos/thumbs169ll/44/1c/39/441c3913775f9eaf6cd1bad55f4cef42/441c3913775f9eaf6cd1bad55f4cef42.23.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 12704
cf-ray: 79135debce9db506-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 816255
cache-control: public, max-age=10368000
expires: Mon, 29 May 2023 16:32:58 GMT
last-modified: Tue, 17 Jan 2023 06:03:33 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169ll/dd/ba/25/ddba25e6e2b89d06c0686f2fad45fab4/ddba25e6e2b89d06c0686f2fad45fab4.29.jpg
200 OK 13 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169ll/dd/ba/25/ddba25e6e2b89d06c0686f2fad45fab4/ddba25e6e2b89d06c0686f2fad45fab4.29.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 352x198, components 3\012- data
Hash 662081364ba1ce61867c61cd6bbbdc68
af713e58df9dc98321aeb7dae79844560b6df467
3941bfe776ed66af13c5dfcd336d72297c76547a34973923861ee60067e86e2a
GET /videos/thumbs169ll/dd/ba/25/ddba25e6e2b89d06c0686f2fad45fab4/ddba25e6e2b89d06c0686f2fad45fab4.29.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 12716
cf-ray: 79135debce9eb506-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 4944202
cache-control: public, max-age=10368000
expires: Mon, 29 May 2023 16:32:58 GMT
last-modified: Fri, 24 Jul 2020 21:40:00 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-polished: origSize=13329, status=webp_bigger
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
79xmz3lmss.com/lv/esnk/1923165/code.js
200 OK 43 kB URL HTTP/1.1 79xmz3lmss.com/lv/esnk/1923165/code.js
IP
File type ASCII text, with very long lines (65530)
Hash 51b3b7b6a971062bd48c8985b27a8525
d8dd8fecdeb3fdb253d8b9af41dbe75a17539001
348355d8f38b5fe57c495b84f2ecb7eb9b85bec8d8452c4b8e0f3dd7c45cc5d6
Analyzer Verdict Alert quad9 Sinkholed
GET /lv/esnk/1923165/code.js HTTP/1.1
Host: 79xmz3lmss.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hamjav.cc/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Jan 2023 16:32:58 GMT
Content-Type: application/javascript
Last-Modified: Thu, 26 Jan 2023 13:21:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63d27e45-1a2c5"
X-JS-AB1: current
Timing-Allow-Origin: *
Accept-CH: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
Content-Encoding: gzip
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/68/f7/2d/68f72d91ab4f6cdfc61c4f8a0c486064/68f72d91ab4f6cdfc61c4f8a0c486064.20.jpg
200 OK 15 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/68/f7/2d/68f72d91ab4f6cdfc61c4f8a0c486064/68f72d91ab4f6cdfc61c4f8a0c486064.20.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 4c4b840fca77db31b47417ddbc5d3eb7
7dc286d4c6d6c2585637959116636ce0cf69eb68
f29f8aaa10e517e9ee6ce6251386ec6178c2c4cbe16743c4171eafee37fc33e7
GET /videos/thumbs169ll/68/f7/2d/68f72d91ab4f6cdfc61c4f8a0c486064/68f72d91ab4f6cdfc61c4f8a0c486064.20.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 14834
last-modified: Wed, 14 Apr 2021 06:08:55 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1675819427
x-77-nzt: A8O1pg3Ra83/x3EoAIrHJcENd37/UGhpAI/0Osj/IST/BdMUAA
x-77-nzt-ray: ffffffffa2283e05ba9fd66365958a09
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 6907984, 2650567
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169ll/2d/7a/fa/2d7afac4705657a1ff02891dcff26b0d/2d7afac4705657a1ff02891dcff26b0d.23.jpg
200 OK 18 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169ll/2d/7a/fa/2d7afac4705657a1ff02891dcff26b0d/2d7afac4705657a1ff02891dcff26b0d.23.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 66ff50cb049ce3c0461a151e152c90d5
d4ec6a8727f6dc0b722233527a973be8bf6ef165
20e54048177298acf24070e0fd362517582129664690f413b5ccb0e6c23e9857
GET /videos/thumbs169ll/2d/7a/fa/2d7afac4705657a1ff02891dcff26b0d/2d7afac4705657a1ff02891dcff26b0d.23.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 17979
cf-ray: 79135debce99b506-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 309414
cache-control: public, max-age=10368000
expires: Mon, 29 May 2023 16:32:58 GMT
last-modified: Wed, 25 Jan 2023 14:56:53 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/5a/19/30/5a19305d2b980e0ae3fb381b1a255a24/5a19305d2b980e0ae3fb381b1a255a24.23.jpg
200 OK 12 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/5a/19/30/5a19305d2b980e0ae3fb381b1a255a24/5a19305d2b980e0ae3fb381b1a255a24.23.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 0bca93cee8e5d48b5ef299b2801a14ef
cdeb31a9a748fb7380bc77e9221b3dbc32c4dfbd
d48a167ee22f41dada5b790b821ded2aab828483bb9ed920f0adc8bcf91a7a24
GET /videos/thumbs169ll/5a/19/30/5a19305d2b980e0ae3fb381b1a255a24/5a19305d2b980e0ae3fb381b1a255a24.23.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 12350
x-frame-options: sameorigin
last-modified: Mon, 16 Jan 2023 05:01:03 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1685235730
x-77-nzt: A8O1pg2yAf7/xt0BANRmOAm1fG//4k0AAI/0OtiqtsKh
x-77-nzt-ray: ffffffffa2283e05ba9fd6630da9aa09
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 19938, 122310
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/83/1c/99/831c99e8396343becaa4fddf15f91c77/831c99e8396343becaa4fddf15f91c77.29.jpg
200 OK 7.9 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/83/1c/99/831c99e8396343becaa4fddf15f91c77/831c99e8396343becaa4fddf15f91c77.29.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash dd229cff8106929dedae8c9f258b1654
6816b16c84459c59a47a1e7bdaee91abce7a627d
dc2e9d16577c1acb341f825dd8b4636aa0389a518f0aa4292ce8e053d6dff2cb
GET /videos/thumbs169ll/83/1c/99/831c99e8396343becaa4fddf15f91c77/831c99e8396343becaa4fddf15f91c77.29.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 7926
x-frame-options: sameorigin
last-modified: Sat, 28 Jan 2023 18:10:20 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1685299984
x-77-nzt: A8O1pg27r7P/dCMBAJySIR+PIa7/Ng0AAI/0OtiRF8Wh
x-77-nzt-ray: ffffffffa2283e05ba9fd66303c1ed09
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 3382, 74612
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/76/2d/2a/762d2a278aabea9f66499781f5a1271f/762d2a278aabea9f66499781f5a1271f.9.jpg
200 OK 12 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/76/2d/2a/762d2a278aabea9f66499781f5a1271f/762d2a278aabea9f66499781f5a1271f.9.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash b0f3bec7420a66203802549718948f67
6e24a78c7978b2baa0c3a33c466e2ded7b70c4f2
5bf0b7e7cff562aac41ac192db5b2421e7ef48af01d8e95c6d5b31874c20d313
GET /videos/thumbs169ll/76/2d/2a/762d2a278aabea9f66499781f5a1271f/762d2a278aabea9f66499781f5a1271f.9.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 11694
x-frame-options: sameorigin
last-modified: Sat, 28 Jan 2023 23:34:09 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1685319014
x-77-nzt: A8O1pg1u99T/SeYAANRmOAF90Wz/CwAAAI/0Otj+Q9eh
x-77-nzt-ray: ffffffffa2283e05ba9fd6639cd3f109
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 11, 58953
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/09/59/5d/09595de03c4b1913a810eaba282e6072/09595de03c4b1913a810eaba282e6072.25.jpg
200 OK 22 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/09/59/5d/09595de03c4b1913a810eaba282e6072/09595de03c4b1913a810eaba282e6072.25.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash dfbe7bc45511d6fccf447b9ef78e94e2
a83b4f9e4c50c0c73b1ff9133459625f57507907
8fd754418c1186479469b2520e500153368f35549cc570c44c25a93980b34f8f
GET /videos/thumbs169ll/09/59/5d/09595de03c4b1913a810eaba282e6072/09595de03c4b1913a810eaba282e6072.25.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 22155
x-frame-options: sameorigin
last-modified: Sat, 28 Jan 2023 20:44:35 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1685309295
x-77-nzt: A8O1pg2cVYP/DAsBANRmOAlkPdP/PwEAAI/0Osg6XRWh
x-77-nzt-ray: ffffffffa2283e05ba9fd6631f4df409
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 319, 68364
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash a5c593767860b5bfd48481ada63233b8
c5e6b47acd443f9b59013fd2fa4f8d8adfdcecab
c00dcf5a1b234eb9859ecc4d635b0a4db9f0693a9c043c60bb993b5cc9b3c476
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3974
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 16:32:58 GMT
Last-Modified: Sun, 29 Jan 2023 15:26:44 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
79xmz3lmss.com/lv/esnk/1934870/code.js
200 OK 43 kB URL HTTP/1.1 79xmz3lmss.com/lv/esnk/1934870/code.js
IP
File type ASCII text, with very long lines (65530)
Hash 8db4af33c03811e3faf3c8f938620cb3
0a030dc7c0acd3e4226f7dbde7aca82753f437d8
e3e9d90b5d81f1d7173e541ace87a6164c5be7566f6afdd361a0d53b23b5fa3b
Analyzer Verdict Alert quad9 Sinkholed
GET /lv/esnk/1934870/code.js HTTP/1.1
Host: 79xmz3lmss.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hamjav.cc/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Jan 2023 16:32:58 GMT
Content-Type: application/javascript
Last-Modified: Thu, 26 Jan 2023 13:21:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"63d27e45-1a2c5"
X-JS-AB1: current
Timing-Allow-Origin: *
Accept-CH: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
Content-Encoding: gzip
img-l3.xvideos-cdn.com/videos/thumbs169ll/2e/5d/37/2e5d3765443068d1ca5ce6f023a935df/2e5d3765443068d1ca5ce6f023a935df.8.jpg
200 OK 22 kB URL HTTP/1.1 img-l3.xvideos-cdn.com/videos/thumbs169ll/2e/5d/37/2e5d3765443068d1ca5ce6f023a935df/2e5d3765443068d1ca5ce6f023a935df.8.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 632a8291ede0b7dc721972f0a7c0e543
1b5cbbff49c4cc581bfccf807ee196846eb5a32e
b95890a7dc4fd07830470937dd3e3014dee3672f07b738116e46cfe255c36ebd
GET /videos/thumbs169ll/2e/5d/37/2e5d3765443068d1ca5ce6f023a935df/2e5d3765443068d1ca5ce6f023a935df.8.jpg HTTP/1.1
Host: img-l3.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 23:26:46 GMT
Content-Type: image/jpeg
Content-Length: 22311
Connection: keep-alive
Cache-Control: public, max-age=10368000
Expires: Fri, 28 Apr 2023 23:26:46 GMT
Last-Modified: Thu, 10 Jun 2021 12:24:46 GMT
Server: nginx
Access-Control-Allow-Origin: *
X-Frame-Options: sameorigin
Age: 2653572
Accept-Ranges: bytes
img-cf.xvideos-cdn.com/videos/thumbs169ll/ec/cc/4c/eccc4c06926196766384dc2b2b9cde14/eccc4c06926196766384dc2b2b9cde14.27.jpg
200 OK 10 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169ll/ec/cc/4c/eccc4c06926196766384dc2b2b9cde14/eccc4c06926196766384dc2b2b9cde14.27.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash f8d50dccd5c492be3d211e0c1e2145b0
1c54a43b53fc4b3481ea6caa0bbc83db9180f20c
b8db1c691bdacc2f672d25eaa0306f1d4077f9eb70fec71d7c9974b1ffe109be
GET /videos/thumbs169ll/ec/cc/4c/eccc4c06926196766384dc2b2b9cde14/eccc4c06926196766384dc2b2b9cde14.27.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 10238
cf-ray: 79135debceaeb506-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 57831
cache-control: public, max-age=10368000
expires: Mon, 29 May 2023 16:32:58 GMT
last-modified: Sat, 28 Jan 2023 17:36:05 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash a5c593767860b5bfd48481ada63233b8
c5e6b47acd443f9b59013fd2fa4f8d8adfdcecab
c00dcf5a1b234eb9859ecc4d635b0a4db9f0693a9c043c60bb993b5cc9b3c476
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1883
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 16:32:58 GMT
Last-Modified: Sun, 29 Jan 2023 16:01:35 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
img-cf.xvideos-cdn.com/videos/thumbs169ll/c8/e6/a5/c8e6a55e3ecdc60806c680cc89397dc6/c8e6a55e3ecdc60806c680cc89397dc6.1.jpg
200 OK 19 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169ll/c8/e6/a5/c8e6a55e3ecdc60806c680cc89397dc6/c8e6a55e3ecdc60806c680cc89397dc6.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 352x198, components 3\012- data
Hash 16b901dcdfc19e7ce93dc66156db980a
0a985566d7941426f2adcb83dae8cad9e96e83e3
8b89b23ca4a2000506cdcd4b115f06e713cc984b2f0259daf927f93e8ff45e4b
GET /videos/thumbs169ll/c8/e6/a5/c8e6a55e3ecdc60806c680cc89397dc6/c8e6a55e3ecdc60806c680cc89397dc6.1.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 19355
cf-ray: 79135debdeb1b506-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 72625
cache-control: public, max-age=10368000
expires: Mon, 29 May 2023 16:32:58 GMT
last-modified: Mon, 31 Aug 2020 12:36:00 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-polished: origSize=20414, status=webp_bigger
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169ll/fc/1f/9d/fc1f9d6bd09f0e4cffae71c8a4695bb4/fc1f9d6bd09f0e4cffae71c8a4695bb4.9.jpg
200 OK 11 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169ll/fc/1f/9d/fc1f9d6bd09f0e4cffae71c8a4695bb4/fc1f9d6bd09f0e4cffae71c8a4695bb4.9.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash e8905558bba0861a452ba6447c7d5d90
a15aec4ef170919af5c7050db85b1ef297cea02c
7a8715a9eaa6501ff39165c556dc02ef33c40785e5cedeaea0c4f0a346dee035
GET /videos/thumbs169ll/fc/1f/9d/fc1f9d6bd09f0e4cffae71c8a4695bb4/fc1f9d6bd09f0e4cffae71c8a4695bb4.9.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 11050
cf-ray: 79135debce9cb506-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 2459
cache-control: public, max-age=10368000
expires: Mon, 29 May 2023 16:32:58 GMT
last-modified: Sat, 10 Sep 2022 05:00:25 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169ll/20/5b/bc/205bbcde99acfc70c5cca6f4a3e30818/205bbcde99acfc70c5cca6f4a3e30818.29.jpg
200 OK 26 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169ll/20/5b/bc/205bbcde99acfc70c5cca6f4a3e30818/205bbcde99acfc70c5cca6f4a3e30818.29.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 539c815893067dcc13115052e9d73382
ca08422bfa1e470ebd9cc96fcb4d68ca34ad20a8
b52abae2f399f23a3f493d81cc1b1746f40f30c3dfbb8c57738bb34b5040d86c
GET /videos/thumbs169ll/20/5b/bc/205bbcde99acfc70c5cca6f4a3e30818/205bbcde99acfc70c5cca6f4a3e30818.29.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 25550
cf-ray: 79135debcea7b506-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 22716
cache-control: public, max-age=10368000
expires: Mon, 29 May 2023 16:32:58 GMT
last-modified: Sat, 28 Jan 2023 01:16:11 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169ll/e3/27/39/e32739cbdde12033c18c0bab068a8f59/e32739cbdde12033c18c0bab068a8f59.6.jpg
200 OK 18 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169ll/e3/27/39/e32739cbdde12033c18c0bab068a8f59/e32739cbdde12033c18c0bab068a8f59.6.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash dc996798783c7a1a09069a1652bd242d
10e06cad4b5aded7795f0bd17f2b21955422d0cf
7480b6fc37c9a809627e6857455f6e62347cd3d6a06d6286d04380518ccae579
GET /videos/thumbs169ll/e3/27/39/e32739cbdde12033c18c0bab068a8f59/e32739cbdde12033c18c0bab068a8f59.6.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 17634
cf-ray: 79135debceb0b506-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 31805
cache-control: public, max-age=10368000
expires: Mon, 29 May 2023 16:32:58 GMT
last-modified: Sat, 28 Jan 2023 23:47:39 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/d9/2c/3a/d92c3a465784b6d04c19234d0e77b6f1/d92c3a465784b6d04c19234d0e77b6f1.13.jpg
200 OK 12 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/d9/2c/3a/d92c3a465784b6d04c19234d0e77b6f1/d92c3a465784b6d04c19234d0e77b6f1.13.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash e39402b1de0f08b0d69cdd507505a1d6
47beff89f9290bdda639915bcc3c8132a79eae31
ba068a4c0fc9dc7145f6948eb7433ed508f6c114cbefc948736ecff84804eed5
GET /videos/thumbs169ll/d9/2c/3a/d92c3a465784b6d04c19234d0e77b6f1/d92c3a465784b6d04c19234d0e77b6f1.13.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 12185
x-frame-options: sameorigin
last-modified: Sat, 21 Jan 2023 22:21:33 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1684710355
x-77-nzt: A8O1pg2M8W3/3SgKAIrHJcTzJ/D/CgcAAI/0OtiY1VOh
x-77-nzt-ray: ffffffffa2283e05ba9fd66358c1f709
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 1802, 665821
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/ee/18/16/ee18163929cb4c458cdc6295dc8ca681/ee18163929cb4c458cdc6295dc8ca681.13.jpg
200 OK 9.5 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/ee/18/16/ee18163929cb4c458cdc6295dc8ca681/ee18163929cb4c458cdc6295dc8ca681.13.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 7d3ad4606089a0cea486de495bd4c5f8
6633425d70025dc78e56bfaef5b589e66cf40cbd
3982cfdf9707f363c1d43b367f8d3f98bddc40c3e4a12e90ad0ef816c8c67dfe
GET /videos/thumbs169ll/ee/18/16/ee18163929cb4c458cdc6295dc8ca681/ee18163929cb4c458cdc6295dc8ca681.13.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 9543
x-frame-options: sameorigin
last-modified: Sat, 25 Jun 2022 17:35:50 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1681881084
x-77-nzt: A8O1pg239FT/AcErANRmOBXveAjvZfACAI/0OtgCPRX/WKoGAA
x-77-nzt-ray: ffffffffa2283e05ba9fd66328d9e60a
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 192613, 2867457
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169ll/c6/49/ea/c649eaf1b521f1378eb4ed65029a8bfd/c649eaf1b521f1378eb4ed65029a8bfd.12.jpg
200 OK 8.4 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169ll/c6/49/ea/c649eaf1b521f1378eb4ed65029a8bfd/c649eaf1b521f1378eb4ed65029a8bfd.12.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 0f6d0a003f0ada9d636d72a62b734633
9a817ae3f2547ff0cbcd54ab765c7e8e6425d301
7a71ae6a64449d0b8a4741a0b9cc07e908533662dff59c665c374e375ac51bfa
GET /videos/thumbs169ll/c6/49/ea/c649eaf1b521f1378eb4ed65029a8bfd/c649eaf1b521f1378eb4ed65029a8bfd.12.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 8365
cf-ray: 79135debceabb506-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 82487
cache-control: public, max-age=10368000
expires: Mon, 29 May 2023 16:32:58 GMT
last-modified: Fri, 27 Jan 2023 18:53:28 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/6c/e3/e6/6ce3e6259f8e08d8e3ad9d2887d42949/6ce3e6259f8e08d8e3ad9d2887d42949.2.jpg
200 OK 10 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/6c/e3/e6/6ce3e6259f8e08d8e3ad9d2887d42949/6ce3e6259f8e08d8e3ad9d2887d42949.2.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash c99994ab4fdf2f85a51d1915dcd7b10b
d2db3738b49489e7720c8a606334b3ecf576fd26
fb582055133161e1e7c679859a9491095f9a7151a99d403f135bf27335bdc018
GET /videos/thumbs169ll/6c/e3/e6/6ce3e6259f8e08d8e3ad9d2887d42949/6ce3e6259f8e08d8e3ad9d2887d42949.2.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 10443
x-frame-options: sameorigin
last-modified: Sun, 12 Sep 2021 19:47:13 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1683892405
x-77-nzt: A8O1pg3vO8z/5KgWAIrHJcHtpdv/x1eMAI/0OtgA8Br/CQMAAA
x-77-nzt-ray: ffffffffa2283e05ba9fd663ffdcf00a
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 9197511, 1485028
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169ll/95/b5/be/95b5bead2331bbc23a72507385fe4fbc/95b5bead2331bbc23a72507385fe4fbc.6.jpg
200 OK 11 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169ll/95/b5/be/95b5bead2331bbc23a72507385fe4fbc/95b5bead2331bbc23a72507385fe4fbc.6.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 0460b2a11675c7b4353eb6880ee3237c
2b02d64ebee3520d49ed7e775dcad2995a8f8ab7
5b516849d7359f04a0c1b74a3a2df1684c1b458a0a30b648c739665c6c9067d4
GET /videos/thumbs169ll/95/b5/be/95b5bead2331bbc23a72507385fe4fbc/95b5bead2331bbc23a72507385fe4fbc.6.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 11352
cf-ray: 79135debcea9b506-OSL
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=10368000
expires: Mon, 29 May 2023 16:32:58 GMT
last-modified: Fri, 27 Jan 2023 12:38:22 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/bc/4a/e4/bc4ae4eef6ab22b4678e88058c3ed878/bc4ae4eef6ab22b4678e88058c3ed878.14.jpg
200 OK 12 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/bc/4a/e4/bc4ae4eef6ab22b4678e88058c3ed878/bc4ae4eef6ab22b4678e88058c3ed878.14.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 94b6bf9bba249c7d8018edc48a639588
436f9e2b6fb47b024f7f48174888edf1fa32a6c6
9d7cb6585471e49b2598b111a587039a73bd6cece8e787045facece2a07ed5d0
GET /videos/thumbs169ll/bc/4a/e4/bc4ae4eef6ab22b4678e88058c3ed878/bc4ae4eef6ab22b4678e88058c3ed878.14.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 11999
x-frame-options: sameorigin
last-modified: Mon, 09 Jan 2023 21:02:23 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1684109183
x-77-nzt: A8O1pg21rKX/AFcTAJySIR8vSXv/OwUAAI/0OsjB4S6h
x-77-nzt-ray: ffffffffa2283e05ba9fd663757c080b
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 1339, 1267456
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/9b/99/68/9b9968e6bf08aad5fc7905f8e7333430/9b9968e6bf08aad5fc7905f8e7333430.8.jpg
200 OK 15 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/9b/99/68/9b9968e6bf08aad5fc7905f8e7333430/9b9968e6bf08aad5fc7905f8e7333430.8.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 6c0f623e6f1829b26f6b33ce01ff3d4c
8a35dd2cf55734d17194c1afcd94187a5e8fc58b
b0ad5490a6b5fa39cd66c6ca1b9a820d8e79dc950a7711de93f8ade4bb2835ae
GET /videos/thumbs169ll/9b/99/68/9b9968e6bf08aad5fc7905f8e7333430/9b9968e6bf08aad5fc7905f8e7333430.8.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 14788
x-frame-options: sameorigin
last-modified: Sat, 10 Dec 2022 20:40:28 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1683160356
x-77-nzt: A8O1pg3qwXD/sVkhANRmOJzTg2r/5XwAAI/0Ot0Jj6eh
x-77-nzt-ray: ffffffffa2283e05ba9fd6639a9b0b0b
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 31973, 2185649
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/ca/77/4b/ca774b8e8d74815f96192192476e7a1d/ca774b8e8d74815f96192192476e7a1d.24.jpg
200 OK 16 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/ca/77/4b/ca774b8e8d74815f96192192476e7a1d/ca774b8e8d74815f96192192476e7a1d.24.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 5f4dc813d383886e706a123498cf1e29
043ad9b48b97b3ce00c054f7a86808b1d2fbab6e
2ac205a7f49275144d2e2c2b5a7a4997618a47c74919bba6387f465722cbf880
GET /videos/thumbs169ll/ca/77/4b/ca774b8e8d74815f96192192476e7a1d/ca774b8e8d74815f96192192476e7a1d.24.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 15836
x-frame-options: sameorigin
last-modified: Mon, 04 Apr 2022 14:39:12 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1676320801
x-77-nzt: A8O1pg0BLW//mHwDANRmOBGSadb/57aGAI/0Ot2+YVT/GgAAAA
x-77-nzt-ray: ffffffffa2283e05ba9fd663498c4b0b
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 8828647, 228504
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/d5/cb/ac/d5cbac9c237c9382e279289a687566a9/d5cbac9c237c9382e279289a687566a9.30.jpg
200 OK 13 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/d5/cb/ac/d5cbac9c237c9382e279289a687566a9/d5cbac9c237c9382e279289a687566a9.30.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3\012- data
Hash e7cf8c7f8d0215987fd652f001f10bac
7388c7f1a89ba56f372cfaf9cf6bae9a18a18a32
3210360443ce42fbebfc9e5e205002ad67a927f1dc0b74723009348b11a4fb3a
GET /videos/thumbs169ll/d5/cb/ac/d5cbac9c237c9382e279289a687566a9/d5cbac9c237c9382e279289a687566a9.30.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 13436
x-frame-options: sameorigin
last-modified: Sun, 01 Nov 2020 15:59:14 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1682649360
x-77-nzt: A8O1pg3KXLb/w58pAJySISfCFf3vnpSbAI/0OtjKXLj/U3sAAA
x-77-nzt-ray: ffffffffa2283e05ba9fd663856b630b
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 10196126, 2727875
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash a5c593767860b5bfd48481ada63233b8
c5e6b47acd443f9b59013fd2fa4f8d8adfdcecab
c00dcf5a1b234eb9859ecc4d635b0a4db9f0693a9c043c60bb993b5cc9b3c476
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3974
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 16:32:58 GMT
Last-Modified: Sun, 29 Jan 2023 15:26:44 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
img-l3.xvideos-cdn.com/videos/thumbs169ll/3f/bc/b7/3fbcb720cf468ac8db7ca35a9a3ca2b4/3fbcb720cf468ac8db7ca35a9a3ca2b4.18.jpg
200 OK 13 kB URL HTTP/1.1 img-l3.xvideos-cdn.com/videos/thumbs169ll/3f/bc/b7/3fbcb720cf468ac8db7ca35a9a3ca2b4/3fbcb720cf468ac8db7ca35a9a3ca2b4.18.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 05c0899057e0ee008c384d4e02526d1f
b5846b2686862ae4427326282fc6d8ac1823b838
446b7f49c43d6c4c0ec8df6d73d3f014d640f4d3206eb8425e3701c33609e58e
GET /videos/thumbs169ll/3f/bc/b7/3fbcb720cf468ac8db7ca35a9a3ca2b4/3fbcb720cf468ac8db7ca35a9a3ca2b4.18.jpg HTTP/1.1
Host: img-l3.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 09 Nov 2022 12:25:43 GMT
Content-Type: image/jpeg
Content-Length: 12863
Connection: keep-alive
Cache-Control: public, max-age=10368000
Expires: Thu, 09 Mar 2023 12:25:43 GMT
Last-Modified: Sat, 28 Nov 2020 05:28:23 GMT
Server: nginx
Access-Control-Allow-Origin: *
Age: 7013235
Accept-Ranges: bytes
img-cf.xvideos-cdn.com/videos/thumbs169ll/18/69/84/1869847df5943fc82b34968b74543cca/1869847df5943fc82b34968b74543cca.24.jpg
200 OK 10 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169ll/18/69/84/1869847df5943fc82b34968b74543cca/1869847df5943fc82b34968b74543cca.24.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash f772a363cf41bb19c8cf4322f2b23a9a
9a0daec1f196e6cfa24b45820a9251124a3652a0
b434bacfc8de505e28cb8647ac8717a7364a59c49c35f1db35b7da6acee53d32
GET /videos/thumbs169ll/18/69/84/1869847df5943fc82b34968b74543cca/1869847df5943fc82b34968b74543cca.24.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 10505
cf-ray: 79135dec5f7ab506-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 300014
cache-control: public, max-age=10368000
expires: Mon, 29 May 2023 16:32:58 GMT
last-modified: Thu, 16 Jun 2022 11:28:52 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169ll/40/5e/7d/405e7da928c54937f3b27c2181f4c7bf/405e7da928c54937f3b27c2181f4c7bf.1.jpg
200 OK 8.5 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169ll/40/5e/7d/405e7da928c54937f3b27c2181f4c7bf/405e7da928c54937f3b27c2181f4c7bf.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash b3d7f76e80987bf55cf71cfe539bc0a3
42cbe0b1e773518c444109115fe1578722694dcc
87669f5ef6f0b2dbaff4877318565714ed7b3f56be515eae0b7254f8887ff1d5
GET /videos/thumbs169ll/40/5e/7d/405e7da928c54937f3b27c2181f4c7bf/405e7da928c54937f3b27c2181f4c7bf.1.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 8538
cf-ray: 79135dec5f76b506-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 10062328
cache-control: public, max-age=10368000
expires: Mon, 29 May 2023 16:32:58 GMT
last-modified: Wed, 19 Jan 2022 13:47:10 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/0a/45/7b/0a457b5e08d9def7e935b7d229d1ef50/0a457b5e08d9def7e935b7d229d1ef50.9.jpg
200 OK 14 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/0a/45/7b/0a457b5e08d9def7e935b7d229d1ef50/0a457b5e08d9def7e935b7d229d1ef50.9.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 59b76a6d953ddf5e9757824d66ac3b61
e393f5db3c3c107bacd2bd08116485c1eaddb2ae
4a9d1b45dd3ef1899085f779431e58351a388d61cc6346f5b1bd2dbbab128a86
GET /videos/thumbs169ll/0a/45/7b/0a457b5e08d9def7e935b7d229d1ef50/0a457b5e08d9def7e935b7d229d1ef50.9.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 14521
x-frame-options: sameorigin
last-modified: Sat, 28 Jan 2023 18:22:57 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1685298437
x-77-nzt: A8O1pg10dFj/8CwBANRmOA3lM9j/xQkAAI/0OsjvkJCh
x-77-nzt-ray: ffffffffa2283e05ba9fd6635762730b
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 2501, 77040
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
syndication.realsrv.com/v1/api.php
200 OK 1.1 kB URL HTTP/1.1 syndication.realsrv.com/v1/api.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- Macintosh HFS Extended version 29775 data (spared blocks) (unclean) last mounted by: 'Amte', created: Sat Aug 3 13:42:03 2069, last modified: Fri Jul 12 17:14:20 2086, block size: 1333292386, number of blocks: 1953912624, free blocks: 1450852973\012- , ASCII text, with very long lines (1406), with no line terminators
Hash 8cedc917a112b4747f11d720be213737
c42d1a2365057be6aadca03457f116afcb4db3dd
fb452a15980924551d15aef3cf9e09e55d3982b901f00780e7aa9612c24dff12
POST /v1/api.php HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain
Content-Length: 267
Origin: http://hamjav.cc
Connection: keep-alive
Referer: http://hamjav.cc/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Jan 2023 16:32:58 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: http://hamjav.cc
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263d69fba36df89.732425612946985088%22%3B%7D; expires=Tue, 28-Jan-2025 16:32:58 GMT; Max-Age=63072000; path=/; domain=realsrv.com
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
img-cf.xvideos-cdn.com/videos/thumbs169ll/9d/c2/57/9dc257a63e2213a045dcf2782fe3f136/9dc257a63e2213a045dcf2782fe3f136.8.jpg
200 OK 12 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169ll/9d/c2/57/9dc257a63e2213a045dcf2782fe3f136/9dc257a63e2213a045dcf2782fe3f136.8.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 627e5601744fb9ed1de227d4185b3d15
4bd1ad47e800f4904558c0689d77d3a41fd037ee
1c903aa73fb9c0c3fc37fb0e98c68c7531282fcb9da96e841b3d36a82b35fd61
GET /videos/thumbs169ll/9d/c2/57/9dc257a63e2213a045dcf2782fe3f136/9dc257a63e2213a045dcf2782fe3f136.8.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 12339
cf-ray: 79135dec9fbab506-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 4324547
cache-control: public, max-age=10368000
expires: Mon, 29 May 2023 16:32:58 GMT
last-modified: Fri, 09 Dec 2022 19:05:18 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/5a/cc/51/5acc519bddff08300f68657fccf4e58f/5acc519bddff08300f68657fccf4e58f.10.jpg
200 OK 13 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/5a/cc/51/5acc519bddff08300f68657fccf4e58f/5acc519bddff08300f68657fccf4e58f.10.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash e44d5d34a2a47ddbb043ffa59c97a965
1b5c35bfbbe9cc38d60faa9a1942164fe4148bd6
19746f05396fd5f4b1194c02db1b1ae33ef731809d2d032cabc9a4aa1b2db9ee
GET /videos/thumbs169ll/5a/cc/51/5acc519bddff08300f68657fccf4e58f/5acc519bddff08300f68657fccf4e58f.10.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 12983
x-frame-options: sameorigin
last-modified: Thu, 26 Jan 2023 09:36:46 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1685161777
x-77-nzt: A8O1pg3Tst7/AiIDANRmOJmC6pz/hyoAAI/0OsgIsHOh
x-77-nzt-ray: ffffffffa2283e05ba9fd6631941770b
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 10887, 205314
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/94/d3/2d/94d32d36dde00da0d065a4fc6884ac4b/94d32d36dde00da0d065a4fc6884ac4b.6.jpg
200 OK 4.4 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/94/d3/2d/94d32d36dde00da0d065a4fc6884ac4b/94d32d36dde00da0d065a4fc6884ac4b.6.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 7ad214a332d1fc82125fcb3d99256746
a158165848c5303e7cf25fdfdbc2e447d1786049
6258ae908ef13619cc4a285b210f625faadeec164a1878a8690ee4e13f427966
GET /videos/thumbs169ll/94/d3/2d/94d32d36dde00da0d065a4fc6884ac4b/94d32d36dde00da0d065a4fc6884ac4b.6.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 4356
x-frame-options: sameorigin
last-modified: Sat, 28 Jan 2023 05:30:53 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1685252909
x-77-nzt: A8O1pg20vH//YBsAANRmOAG6k3D/Lc0BAI/0OsilnSah
x-77-nzt-ray: ffffffffa2283e05ba9fd66381dd7a0b
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 118061, 7008
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/8f/86/99/8f8699f0d84a2c58f5d5601325fcbd7c/8f8699f0d84a2c58f5d5601325fcbd7c.10.jpg
200 OK 9.7 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/8f/86/99/8f8699f0d84a2c58f5d5601325fcbd7c/8f8699f0d84a2c58f5d5601325fcbd7c.10.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 232da4f95235d818531fd18ff12c5469
75d2dc041a6187030a5c0c0fe8c67cacbc75f6fb
3fbcc0a3876a3bf5e2922ff78e5ae02e742f28d50084f7b5d878dd061591299c
GET /videos/thumbs169ll/8f/86/99/8f8699f0d84a2c58f5d5601325fcbd7c/8f8699f0d84a2c58f5d5601325fcbd7c.10.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 9705
x-frame-options: sameorigin
last-modified: Mon, 23 Jan 2023 08:42:19 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1685318875
x-77-nzt: A8O1pg2rjbP/Z2MAAIrHJcEtamL/eIMAAI/0Ot2fTEqh
x-77-nzt-ray: ffffffffa2283e05ba9fd6631afb870b
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 33656, 25447
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169ll/ac/5d/5d/ac5d5d7029659d5b7f722b49ba62879f/ac5d5d7029659d5b7f722b49ba62879f.28.jpg
200 OK 9.3 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169ll/ac/5d/5d/ac5d5d7029659d5b7f722b49ba62879f/ac5d5d7029659d5b7f722b49ba62879f.28.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 59c1ec236cedfb885d090a2273ca8641
b3f5c2f9e0b183e0cdb5ada7b65834d657f0dd9e
2d14833d6690bb5f254c0d2e091327aea07994df122cf3975799249d846ac6cf
GET /videos/thumbs169ll/ac/5d/5d/ac5d5d7029659d5b7f722b49ba62879f/ac5d5d7029659d5b7f722b49ba62879f.28.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 9309
cf-ray: 79135decafd9b506-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 29840
cache-control: public, max-age=10368000
expires: Mon, 29 May 2023 16:32:58 GMT
last-modified: Thu, 15 Dec 2022 05:12:22 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/38/ee/dc/38eedcf703f52f4a78c94feed3f6ed29/38eedcf703f52f4a78c94feed3f6ed29.6.jpg
200 OK 14 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/38/ee/dc/38eedcf703f52f4a78c94feed3f6ed29/38eedcf703f52f4a78c94feed3f6ed29.6.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash d0518887f773018fb5c8673d96279c11
53c4f2b0818433f89fad3140630281aeb86569e9
4edff5b26600f0feef55581326458a06533755ddf3869b43c05d46be8588250b
GET /videos/thumbs169ll/38/ee/dc/38eedcf703f52f4a78c94feed3f6ed29/38eedcf703f52f4a78c94feed3f6ed29.6.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 14241
x-frame-options: sameorigin
last-modified: Sun, 29 Jan 2023 11:21:23 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1685366316
x-77-nzt: A8O1pg3pP3n/+ikAANRmOAkPaSL/lAMAAI/0Ot2P5e6h
x-77-nzt-ray: ffffffffa2283e05ba9fd663ca168f0b
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 916, 10746
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/b8/57/4b/b8574bc0f45f9208507cbef012429c81/b8574bc0f45f9208507cbef012429c81.10.jpg
200 OK 11 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/b8/57/4b/b8574bc0f45f9208507cbef012429c81/b8574bc0f45f9208507cbef012429c81.10.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash d7ae49ab334e28c87c87b45ececb5717
b7441641d59be49a4dd778d18de7030eb1ba1aea
8c94a79c14b38b008704ca3d85603ffdb565fabe1d058f0fe2b3a972f0552c7e
GET /videos/thumbs169ll/b8/57/4b/b8574bc0f45f9208507cbef012429c81/b8574bc0f45f9208507cbef012429c81.10.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 11263
x-frame-options: sameorigin
last-modified: Wed, 18 Jan 2023 14:17:44 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1684419747
x-77-nzt: A8O1pg1JNUv/8ZQNANRmOAFvHNb/JgoBAI/0Ot24X5Sh
x-77-nzt-ray: ffffffffa2283e05ba9fd6637749930b
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 68134, 890097
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/b2/8c/2e/b28c2e7802e2eda99bb5b273fd03e364/b28c2e7802e2eda99bb5b273fd03e364.12.jpg
200 OK 11 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/b2/8c/2e/b28c2e7802e2eda99bb5b273fd03e364/b28c2e7802e2eda99bb5b273fd03e364.12.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash e1c3696bf7bf785cae85fbe96212c211
dfa95008476c9451118e38d8d2f18279ea09fe64
6cc81e4595a384e5b234d4136e12277d2e6891bc88a95f1945f1d5ae979dcc9f
GET /videos/thumbs169ll/b2/8c/2e/b28c2e7802e2eda99bb5b273fd03e364/b28c2e7802e2eda99bb5b273fd03e364.12.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 10851
x-frame-options: sameorigin
last-modified: Sun, 29 Jan 2023 05:11:07 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1685337270
x-77-nzt: A8O1pg0Qx9T/ll8AANRmOAEwcFb/bj8AAI/0Ot3v/EKh
x-77-nzt-ray: ffffffffa2283e05ba9fd663a67b9b0b
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 16238, 24470
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/16/80/35/168035ca2c64216691a3caf64d128d70/168035ca2c64216691a3caf64d128d70.1.jpg
200 OK 15 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/16/80/35/168035ca2c64216691a3caf64d128d70/168035ca2c64216691a3caf64d128d70.1.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash a4593866ebb1d6e0ddf486f8977ee200
6cd028dbea45d3b327681e0fa75671f9863f5a73
bb0b9ab1ecef9dbd2c9e56078ae1a5c07124b747918b40c45154e22ca7a6197e
GET /videos/thumbs169ll/16/80/35/168035ca2c64216691a3caf64d128d70/168035ca2c64216691a3caf64d128d70.1.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 14706
x-frame-options: sameorigin
last-modified: Sat, 28 Jan 2023 20:35:10 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1685308308
x-77-nzt: A8O1pg3dMu3/8ZQAANRmOJxFAuH/NXsAAI/0Otj6+32h
x-77-nzt-ray: ffffffffa2283e05ba9fd663d5bb9f0b
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 31541, 38129
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/426059/a5466baa0ca43e51feeba8210b1daa2985e87f25.mp4
206 Partial Content 19 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/426059/a5466baa0ca43e51feeba8210b1daa2985e87f25.mp4
IP
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 6a517b70ed3ec8905a7ac8f48e15196d
a5466baa0ca43e51feeba8210b1daa2985e87f25
8c823f4d20c7aede2604358cba311703d44b2003a7e016e96adf85a0653d4904
GET /library/426059/a5466baa0ca43e51feeba8210b1daa2985e87f25.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 206 Partial Content
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: video/mp4
content-length: 18895
last-modified: Tue, 20 Dec 2022 18:08:43 GMT
etag: "63a1fa2b-49cf"
expires: Wed, 20 Dec 2023 18:55:10 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
x-accel-expires: @1703098531
server: CDN77-Turbo
x-77-nzt: AblMCRQ0VgP/l5o0AA
x-77-nzt-ray: af585630c31ad28fba9fd66381429016
x-cache: HIT
x-age: 3447447
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-18894/18895
X-Firefox-Spdy: h2
cdnaz.win/site.js
200 OK 22 kB IP
Hash bdf432584d79fd0a0b980d3d49c1dd5e
078e6ec3a8af0333267c2f77693816037b815438
9da9734366e8639b631e23c2cfbe1346900681aee9370f14eff4b07d759a9961
GET /site.js HTTP/1.1
Host: cdnaz.win
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:57 GMT
content-type: application/javascript
last-modified: Wed, 11 Jan 2023 14:54:32 GMT
vary: Accept-Encoding
etag: W/"63becda8-6a9a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
cf-cache-status: HIT
age: 1558941
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ksCgsWoBFJWWkObyYzzys%2BanAAr0o74Y4XKP5WPx8NM8pG4lpOju0Zj2xgypD4HtHhcOT%2F9JbikTuhwXbhL1JUiBLc5v1PlqUFZhrNQvNBDhfXWwmdUaKy4%2B5%2FM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79135de859a2b506-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/76/e3/00/76e300ddcad962cc9be9f34e8cc283d8/76e300ddcad962cc9be9f34e8cc283d8.26.jpg
200 OK 15 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/76/e3/00/76e300ddcad962cc9be9f34e8cc283d8/76e300ddcad962cc9be9f34e8cc283d8.26.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 95d5939f1ff207400e1745c37bb18c81
ed849a29c2a3c7fdf55fb06c4f9d2a2af9b35dc1
a1c6490530866299827abe11a3521a7a279203ee4f1b390438fb88c2fe404232
GET /videos/thumbs169ll/76/e3/00/76e300ddcad962cc9be9f34e8cc283d8/76e300ddcad962cc9be9f34e8cc283d8.26.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 14831
x-frame-options: sameorigin
last-modified: Fri, 21 Jan 2022 06:13:49 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1675337396
x-77-nzt: A8O1pg0r+GD/13MoANRmOBUy/9X/97pwAI/0OtjhlLr/OAYAAA
x-77-nzt-ray: ffffffffa2283e05ba9fd663a408f216
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 7387895, 2651095
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/02/f7/c6/02f7c6df8bd83654db2b531c41dc9d7e/02f7c6df8bd83654db2b531c41dc9d7e.5.jpg
200 OK 7.8 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/02/f7/c6/02f7c6df8bd83654db2b531c41dc9d7e/02f7c6df8bd83654db2b531c41dc9d7e.5.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 96a65db4fb6f86701c3efdefc357b8f0
05fbf75f88e176c80239becb09d747a76267805e
57f000eb4ad568238b5a18195674d21bb689510593be1ed169d79b78501ed1e1
GET /videos/thumbs169ll/02/f7/c6/02f7c6df8bd83654db2b531c41dc9d7e/02f7c6df8bd83654db2b531c41dc9d7e.5.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 7845
x-frame-options: sameorigin
last-modified: Tue, 17 Jan 2023 07:35:57 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1684370549
x-77-nzt: A8O1pg2mkNr/gBQPAJySIS7PQbb/xUoAAI/0Osjk9zah
x-77-nzt-ray: ffffffffa2283e05ba9fd6630996f716
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 19141, 988288
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/1c/d6/01/1cd601ed15917703d1d7c685a8157a38/1cd601ed15917703d1d7c685a8157a38.1.jpg
200 OK 11 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/1c/d6/01/1cd601ed15917703d1d7c685a8157a38/1cd601ed15917703d1d7c685a8157a38.1.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 7062e1f0ff10e31eb85aa3ea9a4b1029
2a3cadd02ced987a50d7e45b92963d1a80482a74
f83d72347e1f0496d656999475e6b381bbd85c49ce22499b15516bb943317a66
GET /videos/thumbs169ll/1c/d6/01/1cd601ed15917703d1d7c685a8157a38/1cd601ed15917703d1d7c685a8157a38.1.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 11400
x-frame-options: sameorigin
last-modified: Thu, 27 Oct 2022 06:04:37 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1685318968
x-77-nzt: A8O1pg0fgJP/xMcAANRmOAFKOA//vh4AAI/0OsiyVPyh
x-77-nzt-ray: ffffffffa2283e05ba9fd66380e0fb16
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 7870, 51140
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/39/0e/5f/390e5f7d55ecbc9bae4dbf9ab971af38/390e5f7d55ecbc9bae4dbf9ab971af38.6.jpg
200 OK 13 kB URL HTTP/2 cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/39/0e/5f/390e5f7d55ecbc9bae4dbf9ab971af38/390e5f7d55ecbc9bae4dbf9ab971af38.6.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 2bb340de790ba4ea83f9091b1cc778c2
01b27c96debcf99f49162bf86e7dda079bf7ba4e
509cbb04f62e1d2a3ef5b74b538bafcff0e9efcee369a4c72a939ec404b53540
GET /videos/thumbs169ll/39/0e/5f/390e5f7d55ecbc9bae4dbf9ab971af38/390e5f7d55ecbc9bae4dbf9ab971af38.6.jpg HTTP/1.1
Host: cdn77-pic.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 13289
x-frame-options: sameorigin
last-modified: Wed, 03 Nov 2021 13:12:49 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1685318589
x-77-nzt: A8O1pg3rZLH/W54AANRmOBGLHXX/okkAAI/0Otj5Fimh
x-77-nzt-ray: ffffffffa2283e05ba9fd663c36b0017
x-77-cache: HIT
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 18850, 40539
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
img-cf.xvideos-cdn.com/videos/thumbs169ll/3c/cf/bd/3ccfbd86e15806e23c1ef9e14a26f1ec/3ccfbd86e15806e23c1ef9e14a26f1ec.1.jpg
200 OK 17 kB URL HTTP/2 img-cf.xvideos-cdn.com/videos/thumbs169ll/3c/cf/bd/3ccfbd86e15806e23c1ef9e14a26f1ec/3ccfbd86e15806e23c1ef9e14a26f1ec.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3\012- data
Hash 7b1ad92151882c30a7594e5497f5272f
7e68670b8840ae595f1cccdf5ee3b7e79b76f1c2
1df609ce7b540f61d37654ef6ba4a374e25407244bf9c480245da608e4834cf9
GET /videos/thumbs169ll/3c/cf/bd/3ccfbd86e15806e23c1ef9e14a26f1ec/3ccfbd86e15806e23c1ef9e14a26f1ec.1.jpg HTTP/1.1
Host: img-cf.xvideos-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/jpeg
content-length: 17307
cf-ray: 79135decf87ab506-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 96142
cache-control: public, max-age=10368000
expires: Mon, 29 May 2023 16:32:58 GMT
last-modified: Sat, 28 Jan 2023 07:26:04 GMT
vary: Accept-Encoding
cf-cache-status: HIT
cf-bgj: h2pri
x-frame-options: sameorigin
server: cloudflare
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/widget-branding-logo.png
200 OK 1.5 kB URL HTTP/1.1 s3t3d2y8.afcdn.net/widget-branding-logo.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 94 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash 7a95be207bf27c9a91720b8ac81976ca
6412e94ce13924fede8b1bec73cb8e049b76688c
5325d5beb64d82d48d3f7d78b606ee93b8e975a55868bba038905329ed1044b9
GET /widget-branding-logo.png HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hamjav.cc/
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 16:32:58 GMT
Content-Type: image/png
Content-Length: 1547
Connection: keep-alive
Last-Modified: Mon, 15 Apr 2019 09:03:59 GMT
ETag: "5cb448ff-60b"
Expires: Fri, 30 Jun 2023 16:01:02 GMT
Cache-Control: max-age=31536000
Access-Control-Allow-Origin: *
X-Cache-OP: HIT
X-Accel-Expires: @1688195209
Server: CDN77-Turbo
X-Robots-Tag: noindex, follow
X-77-NZT: AblMCRTNZTL/sQIYAQ
X-77-NZT-Ray: af585630030e598eba9fd663e03b251c
X-Cache: HIT
X-Age: 18350769
X-77-POP: stockholmSE
X-77-Cache: HIT
Accept-Ranges: bytes
s3t3d2y8.afcdn.net/library/475567/69b2303da4a8f93b7196a0a654761b88c1046277.webp
200 OK 5.1 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/475567/69b2303da4a8f93b7196a0a654761b88c1046277.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3dd9401b6e3a4397dd4ceeef43f38526
69b2303da4a8f93b7196a0a654761b88c1046277
31592e858cd88332175200810163e596ece171f3be0177da15a0b8d5e6bd9190
GET /library/475567/69b2303da4a8f93b7196a0a654761b88c1046277.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/webp
content-length: 5112
last-modified: Wed, 03 Nov 2021 16:02:32 GMT
etag: "6182b298-13f8"
expires: Fri, 30 Jun 2023 14:34:48 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195230
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCRR034L/nAIYAQ
x-77-nzt-ray: af585630c31ad28fba9fd66320c0321c
x-cache: HIT
x-age: 18350748
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/676799/43cc0f34a7085743076083a29185a6d24ec79f8a.webp
200 OK 6.5 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/676799/43cc0f34a7085743076083a29185a6d24ec79f8a.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a7375e17e76259ef804acd4ce417e2da
43cc0f34a7085743076083a29185a6d24ec79f8a
0b2a5cff40ab5764f6c94a9bb88b8103e5c1bc8e54dc27f472bdb4fca12a37b7
GET /library/676799/43cc0f34a7085743076083a29185a6d24ec79f8a.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/webp
content-length: 6512
last-modified: Thu, 04 Nov 2021 10:09:28 GMT
etag: "6183b158-1970"
expires: Fri, 30 Jun 2023 14:50:48 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195352
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCRQUXl//IgIYAQ
x-77-nzt-ray: af585630c31ad28fba9fd6636e983d1c
x-cache: HIT
x-age: 18350626
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/426059/ca3c36473024303ff73194dba002fe4549b397a0.webp
200 OK 13 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/426059/ca3c36473024303ff73194dba002fe4549b397a0.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1d262ebff5c05a42d0eb7e45836eb3bc
ca3c36473024303ff73194dba002fe4549b397a0
d489c2b443812337fb4246e719c92c8a576979786af6531f22c92e45402d20f9
GET /library/426059/ca3c36473024303ff73194dba002fe4549b397a0.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/webp
content-length: 13160
last-modified: Thu, 15 Sep 2022 15:28:27 GMT
etag: "6323449b-3368"
expires: Tue, 31 Oct 2023 21:29:31 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
x-accel-expires: @1704989464
server: CDN77-Turbo
x-77-nzt: AblMCRRT19P/IsAXAA
x-77-nzt-ray: af585630c31ad28fba9fd663bb074b1c
x-cache: HIT
x-age: 1556514
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/623611/08383e72ee30f54920b69f036aa7050b9906cf65.webp
200 OK 10 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/623611/08383e72ee30f54920b69f036aa7050b9906cf65.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e456e1fcd5b9782e95a8a4beafdaa6f7
08383e72ee30f54920b69f036aa7050b9906cf65
652ef2a4170f9f3331fa3efbbf4f76a170be4d96c0b22a8ad23b490ccab9b534
GET /library/623611/08383e72ee30f54920b69f036aa7050b9906cf65.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/webp
content-length: 10274
last-modified: Wed, 03 Nov 2021 19:29:43 GMT
etag: "6182e327-2822"
expires: Wed, 25 Oct 2023 07:00:21 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
x-accel-expires: @1702198157
server: CDN77-Turbo
x-77-nzt: AblMCRQRD3f/rVdCAA
x-77-nzt-ray: af585630c31ad28fba9fd663dadc641c
x-cache: HIT
x-age: 4347821
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/759202/14cdf1353d64a64ee271f5211a0dc1e60cf6f0e6.webp
200 OK 7.8 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/759202/14cdf1353d64a64ee271f5211a0dc1e60cf6f0e6.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d207740399aab46e880de871c8aaed60
14cdf1353d64a64ee271f5211a0dc1e60cf6f0e6
2eeb7427375b10973a39daaccbc7adac1a143988e3fe2768ec7cacac8aa73c48
GET /library/759202/14cdf1353d64a64ee271f5211a0dc1e60cf6f0e6.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/webp
content-length: 7778
last-modified: Thu, 04 Nov 2021 11:46:24 GMT
etag: "6183c810-1e62"
expires: Tue, 24 Oct 2023 16:35:29 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
x-accel-expires: @1699450168
server: CDN77-Turbo
x-77-nzt: AblMCRQAtcb/AkZsAA
x-77-nzt-ray: af585630c31ad28fba9fd66301c27a1c
x-cache: HIT
x-age: 7095810
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: l57fFTtRzFZHtP7I6/l6Ng==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ToEmr+PWf7wvbK/4acqSDdl9r7s=
s3t3d2y8.afcdn.net/library/366026/52210feda06ede630d29bcaf5699abb8b60b13af.gif
200 OK 34 kB URL HTTP/1.1 s3t3d2y8.afcdn.net/library/366026/52210feda06ede630d29bcaf5699abb8b60b13af.gif
IP
ASN #60068 Datacamp Limited
File type GIF image data, version 87a, 300 x 250\012- data
Hash de7b5f0f330a7334443954ee85688796
52210feda06ede630d29bcaf5699abb8b60b13af
ee98bc0aac6d6d7e8bfd0eedc2b5783abdafeeb831ff3acaaa92bc47b6c8e33e
GET /library/366026/52210feda06ede630d29bcaf5699abb8b60b13af.gif HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hamjav.cc/
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 16:32:58 GMT
Content-Type: image/gif
Content-Length: 33476
Connection: keep-alive
Last-Modified: Wed, 04 Jul 2018 11:47:03 GMT
ETag: "5b3cb3b7-82c4"
Expires: Fri, 30 Jun 2023 11:16:46 GMT
Cache-Control: max-age=31536000
Access-Control-Allow-Origin: *
X-Cache-OP: HIT
X-Accel-Expires: @1688195242
Server: CDN77-Turbo
X-Robots-Tag: noindex, follow
X-77-NZT: AblMCRTUVHj/kAIYAQ
X-77-NZT-Ray: af585630030e598eba9fd663b3629320
X-Cache: HIT
X-Age: 18350736
X-77-POP: stockholmSE
X-77-Cache: HIT
Accept-Ranges: bytes
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA02PTWrEMAyFr9ILxOg/8qy7nkJLD+DEHkqhsykMKejwVbwo9cPoW+jpSQTEC+BC9QnxwnRRj4qlQhEqqBLXl9cQjON+HKWPR7AZkIUyK0FUE10hZBUB9lDw4BWVDcOqAgJRCAQHpEhZ5KQCwFot0vn+9jw/pigY4CCF5DM2MmD2H6e7VRk7kWPjLZF6A/KOo2Lv1vpIE8RH+/psj7LvyVLVwsHkDLTqMwH+tOAs+SAmte+f+x7xr+WUTlOulxdmiXHDdV9bzrOxmbtvW0VzBm63YQN/AVtKofJRAQAA
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA02PTWrEMAyFr9ILxOg/8qy7nkJLD+DEHkqhsykMKejwVbwo9cPoW+jpSQTEC+BC9QnxwnRRj4qlQhEqqBLXl9cQjON+HKWPR7AZkIUyK0FUE10hZBUB9lDw4BWVDcOqAgJRCAQHpEhZ5KQCwFot0vn+9jw/pigY4CCF5DM2MmD2H6e7VRk7kWPjLZF6A/KOo2Lv1vpIE8RH+/psj7LvyVLVwsHkDLTqMwH+tOAs+SAmte+f+x7xr+WUTlOulxdmiXHDdV9bzrOxmbtvW0VzBm63YQN/AVtKofJRAQAA
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA02PTWrEMAyFr9ILxOg/8qy7nkJLD+DEHkqhsykMKejwVbwo9cPoW+jpSQTEC+BC9QnxwnRRj4qlQhEqqBLXl9cQjON+HKWPR7AZkIUyK0FUE10hZBUB9lDw4BWVDcOqAgJRCAQHpEhZ5KQCwFot0vn+9jw/pigY4CCF5DM2MmD2H6e7VRk7kWPjLZF6A/KOo2Lv1vpIE8RH+/psj7LvyVLVwsHkDLTqMwH+tOAs+SAmte+f+x7xr+WUTlOulxdmiXHDdV9bzrOxmbtvW0VzBm63YQN/AVtKofJRAQAA HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://hamjav.cc
Connection: keep-alive
Referer: http://hamjav.cc/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Jan 2023 16:32:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: http://hamjav.cc
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D; expires=Tue, 28 Jan 2025 16:32:58 GMT; path=/; domain=.realsrv.com;
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
cdn.pncloudfl.com/pn/b0a/10a/a6c/b0a10aa6c9f37143f4a63e2bb1bfb8be79b3ef4b.png
200 OK 27 kB URL HTTP/2 cdn.pncloudfl.com/pn/b0a/10a/a6c/b0a10aa6c9f37143f4a63e2bb1bfb8be79b3ef4b.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0bc7572129e84749c119db04346b0f07
bf8ae67f194c2faeb6a47d419d130dde27b9ae6f
6363f6dc72449ab775a6af3103e61617ecf70ebb8140996b9384a3eaa8b3698d
GET /pn/b0a/10a/a6c/b0a10aa6c9f37143f4a63e2bb1bfb8be79b3ef4b.png HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/webp
content-length: 26892
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=172800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=70331
content-disposition: inline; filename="b0a10aa6c9f37143f4a63e2bb1bfb8be79b3ef4b.webp"
etag: def74d9769fe75363891a2868865d99a
expires: Mon, 30 Jan 2023 21:53:32 GMT
last-modified: Tue, 22 Nov 2022 09:19:36 GMT
vary: Accept
x-openstack-request-id: txa3bf70e532dd40ea8f5b2-00637c9634
x-proxy-cache: HIT
x-timestamp: 1669108775.40440
x-trans-id: txa3bf70e532dd40ea8f5b2-00637c9634
cf-cache-status: HIT
age: 67166
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 79135deea9bafab4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
79xmz3lmss.com/chicken.gif?z=1923165&pb=1ebbd136342f2b2a48b0de279391f61b1675017178&psp=dNiq-bsXTmTLkO5Wzz23gaCSBKuOHwpMGm3NV-jnjcDcwmh60tn_cCg_AScipWdqAkAzhGPjE5SGitzl9Zx81HfZr6HHKsf_hpL68j3BS2yDfWT0XwmyQZoW4yWD5jo4b3kfD9Sil3xfEwLnPuW6qbUW0sHZFM7gznyr9Z1hmJZwwp8Za1blD_rVmIvDdFVIhCxc4G0Mj34p8B-jXeSirxLTw8UlaC6T6Z_55Pz6VwyYagli0iUkfIVD1tYEigx8ctbHitMUXjmNyU3XtrZiYZ322b59zkEnPVKx8xUXWq57unVs8ogISqFQUthyykp3qHXHS2U9P7pB2k-9VlGrs7aGNi9BWsZV7Ipn6_EkVALUCKoMB9q3v0l9rFeAHun8NOX-rGZRUqVt7ASAkK929_XI9RZnfWbegcgP8z0tqX738cmYi3SdXAdD6EL-ZZksV3bk-5JVTqr0OhzfB99oSz8Z-lKBBnxrSIq-sn1kZSQkUU8hh21XXyH4wALS7IRt9ZqLxTwMwHOYwxNNwM9OeeHT1UXSuXa5II6X4NeXsYrFxGxRHfhs_oWgr1zrt7jzpmW88vQ19oQhP6pwKo4erYSfI-crjZ2MFwE9Lps2LvNFvtHl4h4d_KswNnIWkNpbEhty2-U3rNYSL4QhkY6kl7ThalmzKNdxPZTWz-TjBKUJ_ER-3zyfnPmy7KBlnXTAicR78XwkUl8cWidyPL2DfaUBI8cwZjpDUNQn-MH5IENcUpcHhXoueqn1JIrto3kj1qQ38NGoGVe_dT0UHgeT4lXJc2eSwuO8cI5aZCjsOFg1UGYcC77gGVwfLLrRriIP-5qbegzjN5ziFs0tUbAJ2R0WfaFxoxrVa1kA5PC8WPSVTXBOPbnQ7G-YblelG3IhfvFFRnCn1W8yrEBDcIHwhooBX_u5SOAHU2e0lvk9WHSgR12pGJMfjWtOk1kak7jTJxvFgFhAi5il8w==&abvar=0&os=0
200 OK 43 B URL HTTP/2 79xmz3lmss.com/chicken.gif?z=1923165&pb=1ebbd136342f2b2a48b0de279391f61b1675017178&psp=dNiq-bsXTmTLkO5Wzz23gaCSBKuOHwpMGm3NV-jnjcDcwmh60tn_cCg_AScipWdqAkAzhGPjE5SGitzl9Zx81HfZr6HHKsf_hpL68j3BS2yDfWT0XwmyQZoW4yWD5jo4b3kfD9Sil3xfEwLnPuW6qbUW0sHZFM7gznyr9Z1hmJZwwp8Za1blD_rVmIvDdFVIhCxc4G0Mj34p8B-jXeSirxLTw8UlaC6T6Z_55Pz6VwyYagli0iUkfIVD1tYEigx8ctbHitMUXjmNyU3XtrZiYZ322b59zkEnPVKx8xUXWq57unVs8ogISqFQUthyykp3qHXHS2U9P7pB2k-9VlGrs7aGNi9BWsZV7Ipn6_EkVALUCKoMB9q3v0l9rFeAHun8NOX-rGZRUqVt7ASAkK929_XI9RZnfWbegcgP8z0tqX738cmYi3SdXAdD6EL-ZZksV3bk-5JVTqr0OhzfB99oSz8Z-lKBBnxrSIq-sn1kZSQkUU8hh21XXyH4wALS7IRt9ZqLxTwMwHOYwxNNwM9OeeHT1UXSuXa5II6X4NeXsYrFxGxRHfhs_oWgr1zrt7jzpmW88vQ19oQhP6pwKo4erYSfI-crjZ2MFwE9Lps2LvNFvtHl4h4d_KswNnIWkNpbEhty2-U3rNYSL4QhkY6kl7ThalmzKNdxPZTWz-TjBKUJ_ER-3zyfnPmy7KBlnXTAicR78XwkUl8cWidyPL2DfaUBI8cwZjpDUNQn-MH5IENcUpcHhXoueqn1JIrto3kj1qQ38NGoGVe_dT0UHgeT4lXJc2eSwuO8cI5aZCjsOFg1UGYcC77gGVwfLLrRriIP-5qbegzjN5ziFs0tUbAJ2R0WfaFxoxrVa1kA5PC8WPSVTXBOPbnQ7G-YblelG3IhfvFFRnCn1W8yrEBDcIHwhooBX_u5SOAHU2e0lvk9WHSgR12pGJMfjWtOk1kak7jTJxvFgFhAi5il8w==&abvar=0&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
GET /chicken.gif?z=1923165&pb=1ebbd136342f2b2a48b0de279391f61b1675017178&psp=dNiq-bsXTmTLkO5Wzz23gaCSBKuOHwpMGm3NV-jnjcDcwmh60tn_cCg_AScipWdqAkAzhGPjE5SGitzl9Zx81HfZr6HHKsf_hpL68j3BS2yDfWT0XwmyQZoW4yWD5jo4b3kfD9Sil3xfEwLnPuW6qbUW0sHZFM7gznyr9Z1hmJZwwp8Za1blD_rVmIvDdFVIhCxc4G0Mj34p8B-jXeSirxLTw8UlaC6T6Z_55Pz6VwyYagli0iUkfIVD1tYEigx8ctbHitMUXjmNyU3XtrZiYZ322b59zkEnPVKx8xUXWq57unVs8ogISqFQUthyykp3qHXHS2U9P7pB2k-9VlGrs7aGNi9BWsZV7Ipn6_EkVALUCKoMB9q3v0l9rFeAHun8NOX-rGZRUqVt7ASAkK929_XI9RZnfWbegcgP8z0tqX738cmYi3SdXAdD6EL-ZZksV3bk-5JVTqr0OhzfB99oSz8Z-lKBBnxrSIq-sn1kZSQkUU8hh21XXyH4wALS7IRt9ZqLxTwMwHOYwxNNwM9OeeHT1UXSuXa5II6X4NeXsYrFxGxRHfhs_oWgr1zrt7jzpmW88vQ19oQhP6pwKo4erYSfI-crjZ2MFwE9Lps2LvNFvtHl4h4d_KswNnIWkNpbEhty2-U3rNYSL4QhkY6kl7ThalmzKNdxPZTWz-TjBKUJ_ER-3zyfnPmy7KBlnXTAicR78XwkUl8cWidyPL2DfaUBI8cwZjpDUNQn-MH5IENcUpcHhXoueqn1JIrto3kj1qQ38NGoGVe_dT0UHgeT4lXJc2eSwuO8cI5aZCjsOFg1UGYcC77gGVwfLLrRriIP-5qbegzjN5ziFs0tUbAJ2R0WfaFxoxrVa1kA5PC8WPSVTXBOPbnQ7G-YblelG3IhfvFFRnCn1W8yrEBDcIHwhooBX_u5SOAHU2e0lvk9WHSgR12pGJMfjWtOk1kak7jTJxvFgFhAi5il8w==&abvar=0&os=0 HTTP/1.1
Host: 79xmz3lmss.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=230129113248100c145a264597b0f582d0f9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
79xmz3lmss.com/chicken.gif?z=1934870&pb=1ebbd136342f2b2a48b0de279391f61b1675017178&psp=S7NtZt6gqUPNbXoLcFSTrFsu2V_dSA_LvGIyE5pLKwxkXd7jpMLts4zn-aAZiU-opo0k3n53j0_N6bcORVIZz2yWffA0fZTnPXT7IWSIHvBwQscVpNEgbnImfkt_IuTGjQiy4UQrS2SsUszKtMqHi9x_JFveOKY-D-jkaHhOg2NvcbXt46q7HLoJ-eg3itRDkjfDU26XAPEAYdULyiTW9C3-0fybVAK__fe0eqva-8Uiro-DKoDEaVlQOPR_Qfpmu0s-2kUhvhrXW2k8X8s3_RS2l919IqwCMedalY3YuIkzcJ0t9Imcr6lrFz8AenFy5eTCmPvY58UNCLdo7wTbqpgw5v_79BKFRLwxj49yZ14TJPGonDm7tgGYkOA5-CE3cw0rY4nM5YkNvJgEU5caTAAJkfPP1P1ndjBfZil8ACTu-ZFdVfVueyR37StAX25Rv9548oNQg89tYfiTo76rQTXnsxKOkxYU2u80YG0LuIOC6qlqhZDzK8Z8qSW59IGZzNYt76g_tNSlK49IAPtJ9hSwlMSs546IFUfHDNR5cea6kDtX5M7yqTp7UtO8UfoVoGOOyzYGq0ZJIJTo22YsktpF6NCv7VnAKa5XT3owK-R-VHzA4f9xB_m7XXZkP4jQyGPFlUa3x9SSGAaWWTyzDcEn7qJX7gxVdKqSUNMsLbzV089-9Luxwx1g4UTQ6_-2ZJe6CkYId1Du01AfEx_RCUmj5ea_Z-BX8jkVD9WH0CPGeDGgliIGkpQRvsEnU3AcsiLqLtXpimwGbXI4zQ1jHhAhw54bPMpBgZQTuzTt4LRnRF_6QNvI16BJ1sZu9XIKibnBQTKYTBiBMNjZQNoab9110ZCQae5t0ueISj1JhCgEkWLcAEj472GQFMnb2QuXmUpNkgIJvlEMCbYKOhSdqbg5VcbRTpxaWBupu2SQs34-82F4i4ty1xGDNNvxjvhR0y7K_MDZDIBGdw==&abvar=0&os=0
200 OK 43 B URL HTTP/2 79xmz3lmss.com/chicken.gif?z=1934870&pb=1ebbd136342f2b2a48b0de279391f61b1675017178&psp=S7NtZt6gqUPNbXoLcFSTrFsu2V_dSA_LvGIyE5pLKwxkXd7jpMLts4zn-aAZiU-opo0k3n53j0_N6bcORVIZz2yWffA0fZTnPXT7IWSIHvBwQscVpNEgbnImfkt_IuTGjQiy4UQrS2SsUszKtMqHi9x_JFveOKY-D-jkaHhOg2NvcbXt46q7HLoJ-eg3itRDkjfDU26XAPEAYdULyiTW9C3-0fybVAK__fe0eqva-8Uiro-DKoDEaVlQOPR_Qfpmu0s-2kUhvhrXW2k8X8s3_RS2l919IqwCMedalY3YuIkzcJ0t9Imcr6lrFz8AenFy5eTCmPvY58UNCLdo7wTbqpgw5v_79BKFRLwxj49yZ14TJPGonDm7tgGYkOA5-CE3cw0rY4nM5YkNvJgEU5caTAAJkfPP1P1ndjBfZil8ACTu-ZFdVfVueyR37StAX25Rv9548oNQg89tYfiTo76rQTXnsxKOkxYU2u80YG0LuIOC6qlqhZDzK8Z8qSW59IGZzNYt76g_tNSlK49IAPtJ9hSwlMSs546IFUfHDNR5cea6kDtX5M7yqTp7UtO8UfoVoGOOyzYGq0ZJIJTo22YsktpF6NCv7VnAKa5XT3owK-R-VHzA4f9xB_m7XXZkP4jQyGPFlUa3x9SSGAaWWTyzDcEn7qJX7gxVdKqSUNMsLbzV089-9Luxwx1g4UTQ6_-2ZJe6CkYId1Du01AfEx_RCUmj5ea_Z-BX8jkVD9WH0CPGeDGgliIGkpQRvsEnU3AcsiLqLtXpimwGbXI4zQ1jHhAhw54bPMpBgZQTuzTt4LRnRF_6QNvI16BJ1sZu9XIKibnBQTKYTBiBMNjZQNoab9110ZCQae5t0ueISj1JhCgEkWLcAEj472GQFMnb2QuXmUpNkgIJvlEMCbYKOhSdqbg5VcbRTpxaWBupu2SQs34-82F4i4ty1xGDNNvxjvhR0y7K_MDZDIBGdw==&abvar=0&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
GET /chicken.gif?z=1934870&pb=1ebbd136342f2b2a48b0de279391f61b1675017178&psp=S7NtZt6gqUPNbXoLcFSTrFsu2V_dSA_LvGIyE5pLKwxkXd7jpMLts4zn-aAZiU-opo0k3n53j0_N6bcORVIZz2yWffA0fZTnPXT7IWSIHvBwQscVpNEgbnImfkt_IuTGjQiy4UQrS2SsUszKtMqHi9x_JFveOKY-D-jkaHhOg2NvcbXt46q7HLoJ-eg3itRDkjfDU26XAPEAYdULyiTW9C3-0fybVAK__fe0eqva-8Uiro-DKoDEaVlQOPR_Qfpmu0s-2kUhvhrXW2k8X8s3_RS2l919IqwCMedalY3YuIkzcJ0t9Imcr6lrFz8AenFy5eTCmPvY58UNCLdo7wTbqpgw5v_79BKFRLwxj49yZ14TJPGonDm7tgGYkOA5-CE3cw0rY4nM5YkNvJgEU5caTAAJkfPP1P1ndjBfZil8ACTu-ZFdVfVueyR37StAX25Rv9548oNQg89tYfiTo76rQTXnsxKOkxYU2u80YG0LuIOC6qlqhZDzK8Z8qSW59IGZzNYt76g_tNSlK49IAPtJ9hSwlMSs546IFUfHDNR5cea6kDtX5M7yqTp7UtO8UfoVoGOOyzYGq0ZJIJTo22YsktpF6NCv7VnAKa5XT3owK-R-VHzA4f9xB_m7XXZkP4jQyGPFlUa3x9SSGAaWWTyzDcEn7qJX7gxVdKqSUNMsLbzV089-9Luxwx1g4UTQ6_-2ZJe6CkYId1Du01AfEx_RCUmj5ea_Z-BX8jkVD9WH0CPGeDGgliIGkpQRvsEnU3AcsiLqLtXpimwGbXI4zQ1jHhAhw54bPMpBgZQTuzTt4LRnRF_6QNvI16BJ1sZu9XIKibnBQTKYTBiBMNjZQNoab9110ZCQae5t0ueISj1JhCgEkWLcAEj472GQFMnb2QuXmUpNkgIJvlEMCbYKOhSdqbg5VcbRTpxaWBupu2SQs34-82F4i4ty1xGDNNvxjvhR0y7K_MDZDIBGdw==&abvar=0&os=0 HTTP/1.1
Host: 79xmz3lmss.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=230129113248100c145a264597b0f582d0f9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACMMLgAAAAAAAAAB; Path=/; Expires=Tue, 28 Feb 2023 16:32:58 GMT; Secure; SameSite=None
OACIBLOCK=ACMMLgAAAABj1pgA; Path=/; Expires=Tue, 28 Feb 2023 16:32:58 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Mon, 30 Jan 2023 16:32:58 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
79xmz3lmss.com/whob.gif?z=1934870&pb=1ebbd136342f2b2a48b0de279391f61b1675017178&psp=S7NtZt6gqUPNbXoLcFSTrFsu2V_dSA_LvGIyE5pLKwxkXd7jpMLts4zn-aAZiU-opo0k3n53j0_N6bcORVIZz2yWffA0fZTnPXT7IWSIHvBwQscVpNEgbnImfkt_IuTGjQiy4UQrS2SsUszKtMqHi9x_JFveOKY-D-jkaHhOg2NvcbXt46q7HLoJ-eg3itRDkjfDU26XAPEAYdULyiTW9C3-0fybVAK__fe0eqva-8Uiro-DKoDEaVlQOPR_Qfpmu0s-2kUhvhrXW2k8X8s3_RS2l919IqwCMedalY3YuIkzcJ0t9Imcr6lrFz8AenFy5eTCmPvY58UNCLdo7wTbqpgw5v_79BKFRLwxj49yZ14TJPGonDm7tgGYkOA5-CE3cw0rY4nM5YkNvJgEU5caTAAJkfPP1P1ndjBfZil8ACTu-ZFdVfVueyR37StAX25Rv9548oNQg89tYfiTo76rQTXnsxKOkxYU2u80YG0LuIOC6qlqhZDzK8Z8qSW59IGZzNYt76g_tNSlK49IAPtJ9hSwlMSs546IFUfHDNR5cea6kDtX5M7yqTp7UtO8UfoVoGOOyzYGq0ZJIJTo22YsktpF6NCv7VnAKa5XT3owK-R-VHzA4f9xB_m7XXZkP4jQyGPFlUa3x9SSGAaWWTyzDcEn7qJX7gxVdKqSUNMsLbzV089-9Luxwx1g4UTQ6_-2ZJe6CkYId1Du01AfEx_RCUmj5ea_Z-BX8jkVD9WH0CPGeDGgliIGkpQRvsEnU3AcsiLqLtXpimwGbXI4zQ1jHhAhw54bPMpBgZQTuzTt4LRnRF_6QNvI16BJ1sZu9XIKibnBQTKYTBiBMNjZQNoab9110ZCQae5t0ueISj1JhCgEkWLcAEj472GQFMnb2QuXmUpNkgIJvlEMCbYKOhSdqbg5VcbRTpxaWBupu2SQs34-82F4i4ty1xGDNNvxjvhR0y7K_MDZDIBGdw==&abvar=0&os=0
200 OK 43 B URL HTTP/2 79xmz3lmss.com/whob.gif?z=1934870&pb=1ebbd136342f2b2a48b0de279391f61b1675017178&psp=S7NtZt6gqUPNbXoLcFSTrFsu2V_dSA_LvGIyE5pLKwxkXd7jpMLts4zn-aAZiU-opo0k3n53j0_N6bcORVIZz2yWffA0fZTnPXT7IWSIHvBwQscVpNEgbnImfkt_IuTGjQiy4UQrS2SsUszKtMqHi9x_JFveOKY-D-jkaHhOg2NvcbXt46q7HLoJ-eg3itRDkjfDU26XAPEAYdULyiTW9C3-0fybVAK__fe0eqva-8Uiro-DKoDEaVlQOPR_Qfpmu0s-2kUhvhrXW2k8X8s3_RS2l919IqwCMedalY3YuIkzcJ0t9Imcr6lrFz8AenFy5eTCmPvY58UNCLdo7wTbqpgw5v_79BKFRLwxj49yZ14TJPGonDm7tgGYkOA5-CE3cw0rY4nM5YkNvJgEU5caTAAJkfPP1P1ndjBfZil8ACTu-ZFdVfVueyR37StAX25Rv9548oNQg89tYfiTo76rQTXnsxKOkxYU2u80YG0LuIOC6qlqhZDzK8Z8qSW59IGZzNYt76g_tNSlK49IAPtJ9hSwlMSs546IFUfHDNR5cea6kDtX5M7yqTp7UtO8UfoVoGOOyzYGq0ZJIJTo22YsktpF6NCv7VnAKa5XT3owK-R-VHzA4f9xB_m7XXZkP4jQyGPFlUa3x9SSGAaWWTyzDcEn7qJX7gxVdKqSUNMsLbzV089-9Luxwx1g4UTQ6_-2ZJe6CkYId1Du01AfEx_RCUmj5ea_Z-BX8jkVD9WH0CPGeDGgliIGkpQRvsEnU3AcsiLqLtXpimwGbXI4zQ1jHhAhw54bPMpBgZQTuzTt4LRnRF_6QNvI16BJ1sZu9XIKibnBQTKYTBiBMNjZQNoab9110ZCQae5t0ueISj1JhCgEkWLcAEj472GQFMnb2QuXmUpNkgIJvlEMCbYKOhSdqbg5VcbRTpxaWBupu2SQs34-82F4i4ty1xGDNNvxjvhR0y7K_MDZDIBGdw==&abvar=0&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
GET /whob.gif?z=1934870&pb=1ebbd136342f2b2a48b0de279391f61b1675017178&psp=S7NtZt6gqUPNbXoLcFSTrFsu2V_dSA_LvGIyE5pLKwxkXd7jpMLts4zn-aAZiU-opo0k3n53j0_N6bcORVIZz2yWffA0fZTnPXT7IWSIHvBwQscVpNEgbnImfkt_IuTGjQiy4UQrS2SsUszKtMqHi9x_JFveOKY-D-jkaHhOg2NvcbXt46q7HLoJ-eg3itRDkjfDU26XAPEAYdULyiTW9C3-0fybVAK__fe0eqva-8Uiro-DKoDEaVlQOPR_Qfpmu0s-2kUhvhrXW2k8X8s3_RS2l919IqwCMedalY3YuIkzcJ0t9Imcr6lrFz8AenFy5eTCmPvY58UNCLdo7wTbqpgw5v_79BKFRLwxj49yZ14TJPGonDm7tgGYkOA5-CE3cw0rY4nM5YkNvJgEU5caTAAJkfPP1P1ndjBfZil8ACTu-ZFdVfVueyR37StAX25Rv9548oNQg89tYfiTo76rQTXnsxKOkxYU2u80YG0LuIOC6qlqhZDzK8Z8qSW59IGZzNYt76g_tNSlK49IAPtJ9hSwlMSs546IFUfHDNR5cea6kDtX5M7yqTp7UtO8UfoVoGOOyzYGq0ZJIJTo22YsktpF6NCv7VnAKa5XT3owK-R-VHzA4f9xB_m7XXZkP4jQyGPFlUa3x9SSGAaWWTyzDcEn7qJX7gxVdKqSUNMsLbzV089-9Luxwx1g4UTQ6_-2ZJe6CkYId1Du01AfEx_RCUmj5ea_Z-BX8jkVD9WH0CPGeDGgliIGkpQRvsEnU3AcsiLqLtXpimwGbXI4zQ1jHhAhw54bPMpBgZQTuzTt4LRnRF_6QNvI16BJ1sZu9XIKibnBQTKYTBiBMNjZQNoab9110ZCQae5t0ueISj1JhCgEkWLcAEj472GQFMnb2QuXmUpNkgIJvlEMCbYKOhSdqbg5VcbRTpxaWBupu2SQs34-82F4i4ty1xGDNNvxjvhR0y7K_MDZDIBGdw==&abvar=0&os=0 HTTP/1.1
Host: 79xmz3lmss.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=230129113248100c145a264597b0f582d0f9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.banner.view
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
hamjav.cc/favicon.png
200 OK 768 B IP
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 013a04eb8d5203e4acec99962b31e3e5
f7a8f3ee8c406418c3b0e0f31791e13affd4c8ca
6ac1d220f106ae11c7e387d06bf59cdd67276b25a3963f9a9d9038efb2d65b1c
GET /favicon.png HTTP/1.1
Host: hamjav.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hamjav.cc/
Cookie: zone-cap-4744046=1; bnState={"impressions":2,"delayStarted":0}
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 16:32:58 GMT
Content-Type: image/png
Content-Length: 768
Connection: keep-alive
Last-Modified: Sun, 08 Oct 2017 10:02:47 GMT
ETag: "59d9f7c7-300"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0SDLQemVxtRrQVh%2BIkJSMrAXcc0SdX0TSgjDoPHV65U4q99CQwjpcD5TNEkX1NMPALivhykHP1wIYOsottZHx2SycCv%2Fc11mt6VXPp%2Fcu%2BZTUikhdfEpxF9dlv0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79135deebd21b509-OSL
alt-svc: h2=":443"; ma=60
bg4nxu2u5t.com/solid.gif?z=1943486&abvar=13
200 OK 43 B URL HTTP/2 bg4nxu2u5t.com/solid.gif?z=1943486&abvar=13
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
POST /solid.gif?z=1943486&abvar=13 HTTP/1.1
Host: bg4nxu2u5t.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://hamjav.cc
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
whos.amung.us/swidget/5v3gek549b.png
307 Temporary Redirect 0 B URL HTTP/1.1 whos.amung.us/swidget/5v3gek549b.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /swidget/5v3gek549b.png HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hamjav.cc/
HTTP/1.1 307 Temporary Redirect
Date: Sun, 29 Jan 2023 16:32:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: no-cache, no-store, must-revalidate
location: http://widgets.amung.us/small/00/22.png
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79135deec80d15dc-ARN
bg4nxu2u5t.com/get/1943486?zoneid=1943486&jp=_cl5kot7c41284rmhdwaur4&nojs=0&ix=0&abvar=13&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&sp=0&cid=2080098291450011
200 OK 374 B URL HTTP/2 bg4nxu2u5t.com/get/1943486?zoneid=1943486&jp=_cl5kot7c41284rmhdwaur4&nojs=0&ix=0&abvar=13&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&sp=0&cid=2080098291450011
IP
Hash d58f88748c0af517c0557811e614bca2
1e0fd66837448d12227c5c464f6838aeba78bb70
d72f980c8c3645e38612d93a22771de95a8b0517c5dc2eaf623cc4f2bcf4af10
Analyzer Verdict Alert quad9 Sinkholed
GET /get/1943486?zoneid=1943486&jp=_cl5kot7c41284rmhdwaur4&nojs=0&ix=0&abvar=13&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&sp=0&cid=2080098291450011 HTTP/1.1
Host: bg4nxu2u5t.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: text/javascript
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=23012911322fc74ea3430b43569a24126db6; Path=/; Expires=Mon, 29 Jan 2024 16:32:58 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8921
Expires: Sun, 29 Jan 2023 19:01:40 GMT
Date: Sun, 29 Jan 2023 16:32:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8921
Expires: Sun, 29 Jan 2023 19:01:40 GMT
Date: Sun, 29 Jan 2023 16:32:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8921
Expires: Sun, 29 Jan 2023 19:01:40 GMT
Date: Sun, 29 Jan 2023 16:32:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8921
Expires: Sun, 29 Jan 2023 19:01:40 GMT
Date: Sun, 29 Jan 2023 16:32:59 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4205d8106659e00fff1cbe9262918b8c
ab4f6528594a1725934727dc7d834c028a79c609
31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hAzO-IMqc1CFpiBAlRl8seIYL9UonyrBMATibovyFq5kEuaweY_VyA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 21:56:46 GMT
age: 66973
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce27f1aa-8d31-4110-a47f-73de0b95926d.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce27f1aa-8d31-4110-a47f-73de0b95926d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 10a6491e2c1dfde68c7cd7297e70700f
d0f195319825a6d3e5e50ad15b2fcab27cb65896
4d9353d5874e5ea03c25e1562db5f479c222a48db526fdd10ede7c2e6a4dd874
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce27f1aa-8d31-4110-a47f-73de0b95926d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11470
x-amzn-requestid: 62d61967-9380-4ca9-b11a-531425dbd2ae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fIf6WFgAIAMF6gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cce042-6d9fe51029094b7f37c0a648;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 07:05:38 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rUIvvkZQ028ey3klplI-x9oZFugon5HsAWT-SN2GQo5hBeBJWqoMAg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 04:01:15 GMT
age: 45104
etag: "d0f195319825a6d3e5e50ad15b2fcab27cb65896"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5dcfee7f-f43c-4828-8113-8ba8eb26f727.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5dcfee7f-f43c-4828-8113-8ba8eb26f727.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d5ed99a9aed6f367efc5c9498ce87ff1
3123eb6f550c51fe17fc62eff943b3739e239a9b
536f45bf2eb41f7056df8b34964538005d6a0a4c6157def3fbdd9487f8c79027
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5dcfee7f-f43c-4828-8113-8ba8eb26f727.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10168
x-amzn-requestid: fe58fe3c-dd23-4614-b5a2-e91ef68c2ab7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fFOD7H-NIAMFcxw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cb907f-687fc51741d7ff97182d1955;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 07:13:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SORDxKQP-GudaCfRIbrmexyEeJXBExRipfF8sPHI-UkaYhR_RkDjvQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 00:55:27 GMT
age: 56252
etag: "3123eb6f550c51fe17fc62eff943b3739e239a9b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4c77437e3a7361861aed8bfecbfe6bd6
fefd238c13c0fdfb7d964c90fcc8a8cbbf953034
282d15c443cb6232ae0a30046a0dc24360617355a4651cdba59b11e6f7313d8a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5594
x-amzn-requestid: a13a8181-5783-42c1-9fda-1fcf8db4f0f9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVpetFv-oAMF_Kg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d222c4-68165b34525ca2a054f0b505;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 06:50:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: rJbdYq3bZDatEVvC83VR5WiWOFwNwVZEB16ez21KdnQJJrgJ-yKPCg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 14:55:48 GMT
age: 5831
etag: "fefd238c13c0fdfb7d964c90fcc8a8cbbf953034"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
79xmz3lmss.com/get/1923165?zoneid=1923165&jp=_cl0ozw9zlhle3euw8zzov0&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=5739272988711658
200 OK 10 kB URL HTTP/2 79xmz3lmss.com/get/1923165?zoneid=1923165&jp=_cl0ozw9zlhle3euw8zzov0&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=5739272988711658
IP
Hash a7b7dc492a9f4cf4808ff22f1302b945
7129b25d58e1bafa5957443a673bd3334983eb8b
fdaa4828d0c2cf53602023227d57fe78088ccdfa20cee5460593f4a30dd1437e
Analyzer Verdict Alert quad9 Sinkholed
GET /get/1923165?zoneid=1923165&jp=_cl0ozw9zlhle3euw8zzov0&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=5739272988711658 HTTP/1.1
Host: 79xmz3lmss.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=230129113248100c145a264597b0f582d0f9; Path=/; Expires=Mon, 29 Jan 2024 16:32:58 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3be81f83687ddb6c93d3ff3c09a9dba2
50a48e737310d3f31840db4301b25927fbcc12c5
e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9167
x-amzn-requestid: f644ca78-a07a-43d1-96e4-95bcdecff7fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPGLfFtOIAMFp7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf83e2-202ca7160544acd24259bd5d;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:08:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xRwqrWS66l4qJfg2HnGphN1dbrIUod9XKW3zTk_-Km9AQRPyV2UqWg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 20:46:16 GMT
age: 71203
etag: "50a48e737310d3f31840db4301b25927fbcc12c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8f2806c-ec5e-41a0-85d8-007f6d34d108.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8f2806c-ec5e-41a0-85d8-007f6d34d108.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6021d6a06bff2826eb341747e82484f7
a817ff1ba206234627706551820d0d9856b398de
f0ba6de8709fdb73e94dbdace635232c76b9d70dad73badaca0542d9ad49604d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8f2806c-ec5e-41a0-85d8-007f6d34d108.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11624
x-amzn-requestid: be28746a-a238-4718-a307-3a15dde1ed3d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVqzvF57oAMFUdw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d224e4-5d9eb5ec3f2041c71d7c6fce;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 06:59:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: HDcUb2ol2cYtxbpXtbXXM4aKulevAnfl7r65-Fy2NvA8gND3TRjepw==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 06:43:30 GMT
age: 35376
etag: "a817ff1ba206234627706551820d0d9856b398de"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
79xmz3lmss.com/get/1934870?zoneid=1934870&jp=_cl871ubg94p4857eibj6kp&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=1798623314762927
200 OK 0 B URL HTTP/2 79xmz3lmss.com/get/1934870?zoneid=1934870&jp=_cl871ubg94p4857eibj6kp&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=1798623314762927
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /get/1934870?zoneid=1934870&jp=_cl871ubg94p4857eibj6kp&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=1798623314762927 HTTP/1.1
Host: 79xmz3lmss.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2301291132cdfefb6c98124f0db08827c1de; Path=/; Expires=Mon, 29 Jan 2024 16:32:58 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
a.realsrv.com/ad-provider.js
200 OK 0 B URL HTTP/2 a.realsrv.com/ad-provider.js
IP
ASN #60068 Datacamp Limited
GET /ad-provider.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:57 GMT
content-type: application/javascript
etag: W/"c86623937323852b5fe82a29fcb"
expires: Tue, 24 Jan 2023 13:18:38 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1675020027
server: CDN77-Turbo
x-77-nzt: AblMCQ1/JCr/7gIAAA
x-77-nzt-ray: c0a4cc281a3ec735b99fd663e0868e27
x-cache: HIT
x-age: 750
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
media.vivaclix.com/js/code.min.js
200 OK 0 B URL HTTP/2 media.vivaclix.com/js/code.min.js
IP
GET /js/code.min.js HTTP/1.1
Host: media.vivaclix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:57 GMT
content-type: application/javascript
last-modified: Wed, 25 Jan 2023 10:19:14 GMT
etag: W/"63d10222-8dd6"
expires: Sat, 28 Jan 2023 23:04:29 GMT
cache-control: max-age=259200
x-robots-tag: noindex, nofollow, noarchive, noimageindex
cf-cache-status: HIT
age: 189474
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BpKg%2B3VQTrPGDirs0QhL1G6PCtXz%2BPLa4ROY8Fx9xFKBfRaormw392v1Ss6Xl%2BuDGVd2tIY2Lvn2yHSojQHG6gvdkR5CFVWN%2F0%2FhzzvR7QiHyRx6w4VVpcySlMhtms8d2VpvWt8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79135de90806732d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
bg4nxu2u5t.com/aas/r45d/vki/1943486/tghr.js
200 OK 0 B URL HTTP/2 bg4nxu2u5t.com/aas/r45d/vki/1943486/tghr.js
IP
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /aas/r45d/vki/1943486/tghr.js HTTP/1.1
Host: bg4nxu2u5t.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 16:32:58 GMT
content-type: application/javascript
last-modified: Fri, 27 Jan 2023 10:34:51 GMT
vary: Accept-Encoding
etag: W/"63d3a8cb-11355"
x-js-ab1: var13
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
a.realsrv.com/nativeads-v2.js
200 OK 0 B URL HTTP/2 a.realsrv.com/nativeads-v2.js
IP
ASN #60068 Datacamp Limited
GET /nativeads-v2.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hamjav.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:32:57 GMT
content-type: application/javascript
etag: W/"21b43fd9d304f2027f605b8ad4d"
expires: Tue, 24 Jan 2023 13:18:50 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1675020027
server: CDN77-Turbo
x-77-nzt: AblMCQ3YB/7/7gIAAA
x-77-nzt-ray: c0a4cc281a3ec735b99fd663f1234a27
x-cache: HIT
x-age: 750
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
188.114.96.1
95.101.11.115
104.18.56.51
62.122.171.6
195.181.166.14
8.252.23.243
93.184.220.29