vjav.tube/
104.21.96.90301 Moved Permanently 0 B IP 104.21.96.90:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: vjav.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 05 Feb 2023 06:23:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 05 Feb 2023 07:23:06 GMT
Location: https://vjav.tube/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6yYLK859ICuPch8QALUHCpJvrsX2jKdeC2N7enb7QAIQ6CYYLEfxegHo33U9NEy9mTw%2BNOLfMt37FVawOpyplGKWzzaK%2BxepZsDiYWuu8dhpYol2A8q30JbHCUU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79498e317df8b51e-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1cdc095521e9ee2606059be447d1fdd5
02b5d0a5b5823e2338daf7e144700babe2a213af
8bda3aabcf331c2bfcc4c7023cd797c760fd301dc353641bb95048e072f66c66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8BDA3AABCF331C2BFCC4C7023CD797C760FD301DC353641BB95048E072F66C66"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2859
Expires: Sun, 05 Feb 2023 07:10:45 GMT
Date: Sun, 05 Feb 2023 06:23:06 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11553
Expires: Sun, 05 Feb 2023 09:35:39 GMT
Date: Sun, 05 Feb 2023 06:23:06 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Retry-After, Content-Length, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 05 Feb 2023 05:36:17 GMT
content-type: application/json
age: 2809
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19236
Expires: Sun, 05 Feb 2023 11:43:42 GMT
Date: Sun, 05 Feb 2023 06:23:06 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ZiobAHAoMPvSd7ob4qFSEXofBXAkYM9+jdk4ufztvpI244riXuudnItINYzmQocaRTi5m610TPA=
x-amz-request-id: MW2JD6HWX51YCG3R
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 05 Feb 2023 05:24:21 GMT
age: 3525
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 06:23:06 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
vjav.tube/main/
172.67.176.68200 OK 17 kB IP 172.67.176.68:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (17553)
Hash 6057e19ac63ebc3a708faa529d201a37
ab2bf442ec4a663121b0047cab4eb6c7b8364863
abc0523188e1894b692e4c04d0c7f33b51a31e5d11f021ad1cf6001759647430
GET /main/ HTTP/1.1
Host: vjav.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:06 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.2.34
access-control-allow-origin: *
set-cookie: kt_lang=en; expires=Wed, 31-Jan-2024 06:23:07 GMT; Max-Age=31104000; path=/; domain=.vjav.tube
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6xrQjXUHw7%2BfbNaBD9En695PV5sBp0IC1qDS2aO7SszCzBFYAfUNW38CXnH07IrV5Cyyoq2bi1vVfoJUTTgvxpxseC3QL0ijzX%2F%2BQ%2FFwVlPKQOIUYIhVM2I120U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79498e33dbb4b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 61 kB IP 216.58.211.3:0
Hash 07d2596e592b4c58aacff3fc05dc3d4a
f13739da6c59581c2adf12099e35b32d0f62dc02
8fda01325c5e685a50d59c9f93c506a13f5eb6c0fe97f40c2a19387dbf7b32f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 06:23:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-MVMB4DG
142.250.74.40200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MVMB4DG
IP 142.250.74.40:0
File type ASCII text, with very long lines (5449), with no line terminators
Hash a55819a91fbfd2fe487afae06bda8653
a260c9099a2f4a5b1c4f58e2c6ba85035e2b47bb
d64e3aa962d138b4dc1516fe882ab1d9f8d5cdc11a95e8e3720e0cd2e23de243
GET /gtm.js?id=GTM-MVMB4DG HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 Feb 2023 06:23:07 GMT
expires: Sun, 05 Feb 2023 06:23:07 GMT
cache-control: private, max-age=900
last-modified: Sun, 05 Feb 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 39831
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 4.1 kB IP 216.58.211.3:0
Hash a640a2b0b96dc6c5092b979ac640c0ea
243b76b22fb1b14c745f71bf1c8fba99aaecb22a
87cf5ebe713d7fa160a808e14974b852b15c59170721f04f57b985a356ea3f57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 06:23:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 153d0de36959c722c00df71ba86daca2
305f56a3134879ebf0828e169e903e560540c070
0cf533a798d42d1e97fb6619a411afadf9a68c92302ba852869b0c0555a47987
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 06:23:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-MW9PQ3
142.250.74.40200 OK 66 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MW9PQ3
IP 142.250.74.40:0
File type ASCII text, with very long lines (44097)
Hash 03542acf34cc833afb07307eb51381f5
9b44dce65a167e0eb1a56b5a96eb463ed7a8d167
7733594cd5b76f97740bb07fd01669080121a6fdfbefa6d55bcbcc95c81c22ed
GET /gtm.js?id=GTM-MW9PQ3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 Feb 2023 06:23:07 GMT
expires: Sun, 05 Feb 2023 06:23:07 GMT
cache-control: private, max-age=900
last-modified: Sun, 05 Feb 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46690
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 05 Feb 2023 06:07:20 GMT
age: 947
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8499
Expires: Sun, 05 Feb 2023 08:44:46 GMT
Date: Sun, 05 Feb 2023 06:23:07 GMT
Connection: keep-alive
a.exosrv.com/ads.js
185.76.9.26200 OK 1.9 kB IP 185.76.9.26:0
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (4950), with no line terminators
Hash 30343395823e49bd4769c96032203e47
2eccc557dd9ec3f7fe0af8abc4e76fdcca596258
9ad4df142568f436c3a811974c95e101e87b20424af78010c6ccde28721b1205
GET /ads.js HTTP/1.1
Host: a.exosrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: application/javascript
etag: W/"b60fdcc211f42a1f246a8c80b56"
expires: Thu, 02 Feb 2023 18:45:33 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1675579621
server: CDN77-Turbo
x-77-nzt: AblMCRR62wn/liQAAA
x-77-nzt-ray: af58563035b82a944b4bdf6336bd3722
x-cache: HIT
x-age: 9366
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.110200 OK 142 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.110:0
Size 142 kB (141587 bytes)
Hash e79f319860434bdae7c5941d03cf6430
396eedc16b9a85f22c493c104629b4a8f4dbabfe
62180d93e324b568cd362c0f02428f79f0018e5fda79af34ead83762f9da35f3
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sun, 05 Feb 2023 05:44:08 GMT
expires: Sun, 05 Feb 2023 07:44:08 GMT
cache-control: public, max-age=7200
age: 2339
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
104.18.21.226200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.21.226:0
Hash 7d5a683115d8ea72c415abdea091fa1f
c93970b5763ffdc0b3e9384d707437832d870b93
8f821a70038d960920a5b2f2905fbf8d8cf163db63fcd52790d425bae4592b8d
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 06:23:07 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Thu, 09 Feb 2023 04:17:43 GMT
ETag: "c93970b5763ffdc0b3e9384d707437832d870b93"
Last-Modified: Sun, 05 Feb 2023 04:17:44 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 617
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79498e3908dd0b49-OSL
ocsp.globalsign.com/gseccovsslca2018
104.18.21.226200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.21.226:0
Hash 7d5a683115d8ea72c415abdea091fa1f
c93970b5763ffdc0b3e9384d707437832d870b93
8f821a70038d960920a5b2f2905fbf8d8cf163db63fcd52790d425bae4592b8d
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 06:23:07 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Thu, 09 Feb 2023 04:17:43 GMT
ETag: "c93970b5763ffdc0b3e9384d707437832d870b93"
Last-Modified: Sun, 05 Feb 2023 04:17:44 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 617
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79498e3918530b31-OSL
mc.yandex.ru/metrika/watch.js
87.250.250.119200 OK 58 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP 87.250.250.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (554)
Hash 315a601116a9b3b0fbc85feb58375ba4
5d283ed923d0b3beb8a2ec4e80c2958d1d132fbf
251ba0fc04953e3615e7c19a9a10c5d6a4f25cc03bef190f8a5e7c6cd72a991a
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 58140
date: Sun, 05 Feb 2023 06:23:07 GMT
access-control-allow-origin: *
etag: "63c93a4b-e31c"
expires: Sun, 05 Feb 2023 07:23:07 GMT
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
87.250.250.119200 OK 116 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP 87.250.250.119:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 116 kB (115987 bytes)
Hash 048f6b8363e70e2e9973d8359a8fb837
3948c1db0448295fe3d88ef587bcd534aeee22f2
1f298172b50d654e402c05432c6c558a204421b953dbef99ff27c76527ae635a
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73769
date: Sun, 05 Feb 2023 06:23:07 GMT
access-control-allow-origin: *
etag: "63c93a4b-12029"
expires: Sun, 05 Feb 2023 07:23:07 GMT
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c32cd33d90dd0e787134ae77714278a2
78f44c90b05e8482230e13dd629f6bd1e0a4566b
6e4ade2ceee3cd727f6494fe3d3776b5611afeecea0ce23837c0289776026403
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6E4ADE2CEEE3CD727F6494FE3D3776B5611AFEECEA0CE23837C0289776026403"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9377
Expires: Sun, 05 Feb 2023 08:59:24 GMT
Date: Sun, 05 Feb 2023 06:23:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c32cd33d90dd0e787134ae77714278a2
78f44c90b05e8482230e13dd629f6bd1e0a4566b
6e4ade2ceee3cd727f6494fe3d3776b5611afeecea0ce23837c0289776026403
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6E4ADE2CEEE3CD727F6494FE3D3776B5611AFEECEA0CE23837C0289776026403"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9377
Expires: Sun, 05 Feb 2023 08:59:24 GMT
Date: Sun, 05 Feb 2023 06:23:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c32cd33d90dd0e787134ae77714278a2
78f44c90b05e8482230e13dd629f6bd1e0a4566b
6e4ade2ceee3cd727f6494fe3d3776b5611afeecea0ce23837c0289776026403
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6E4ADE2CEEE3CD727F6494FE3D3776B5611AFEECEA0CE23837C0289776026403"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9377
Expires: Sun, 05 Feb 2023 08:59:24 GMT
Date: Sun, 05 Feb 2023 06:23:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c32cd33d90dd0e787134ae77714278a2
78f44c90b05e8482230e13dd629f6bd1e0a4566b
6e4ade2ceee3cd727f6494fe3d3776b5611afeecea0ce23837c0289776026403
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6E4ADE2CEEE3CD727F6494FE3D3776B5611AFEECEA0CE23837C0289776026403"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9377
Expires: Sun, 05 Feb 2023 08:59:24 GMT
Date: Sun, 05 Feb 2023 06:23:07 GMT
Connection: keep-alive
push.services.mozilla.com/
35.166.71.249101 Switching Protocols 65 kB URL HTTP/1.1 push.services.mozilla.com/
IP 35.166.71.249:0
Hash e4196e6fe20e6677d80ce47e73d28883
3d23b8968a3e6c55401e390bf77a9d9828a36af6
0b75e501557d2530ef2014e9490f64452578245e1900cd65be7f4d9d2108a8f9
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ljU5MPB8z9164eluv4AVjw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 5YNcQzrgVkK10qccE0UIT2rS6sA=
tn.vjav.com/contents/videos_screenshots/434000/434219/240x180/1.jpg
45.133.44.25200 OK 20 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/434000/434219/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash 2de383243d37cb7c3c9fb4575c01d747
a758e5f721661c42534f67e7b4222965a7fdf05e
1e284174fdc15ce7bbdd56b8ca279474750dad67657f39b47dd1fbf5da905d71
GET /contents/videos_screenshots/434000/434219/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 20526
server: nginx/1.19.6
last-modified: Tue, 29 Jun 2021 12:56:06 GMT
etag: "60db1866-502e"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/351000/351521/240x180/1.jpg
45.133.44.25200 OK 24 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/351000/351521/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash a51db2bb767ae60ef8158074f971e2f6
59dcf75218e68f63c69b18af68bdd9ea5cfeda67
9702b82f17d0275e3777053ad697e3f57f19326da1c9ad2e6949240487f0ca51
GET /contents/videos_screenshots/351000/351521/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 23957
server: nginx/1.19.6
last-modified: Sun, 02 Aug 2020 21:53:06 GMT
etag: "5f2735c2-5d95"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/365000/365978/240x180/1.jpg
45.133.44.25200 OK 31 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/365000/365978/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash 096fc582e056f324c1e3d9d6e5d81e6e
46278fb2bf02da5e63b33acd42c50b452a2440e0
e86d3a174f6c110e1767c7c3d8dc4fbb7541bc4a69bc110ea8340f235bcc11a7
GET /contents/videos_screenshots/365000/365978/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 30861
server: nginx/1.19.6
last-modified: Tue, 27 Oct 2020 14:50:27 GMT
etag: "5f9833b3-788d"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/404000/404745/240x180/1.jpg
45.133.44.25200 OK 26 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/404000/404745/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash d3769f4920dbd62552b029f267b6cae7
a630c65af8b8a8cebcf4630c95502d1006451bc6
bf871377bbf652711971a15d424712d9b9583e43da878edbedf2bac9c62172be
GET /contents/videos_screenshots/404000/404745/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 26191
server: nginx/1.19.6
last-modified: Mon, 10 May 2021 20:31:14 GMT
etag: "60999812-664f"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/396000/396279/240x180/1.jpg
45.133.44.25200 OK 22 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/396000/396279/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash d75921675d6791d45bc31a7240783bfc
6dc27c80793818b96d95187a98429387ffb202d9
ed10ff9fc97efe806e0fed51b749b8c7b11d8991a3180d9f8b756ad8f52e136a
GET /contents/videos_screenshots/396000/396279/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 21628
server: nginx/1.19.6
last-modified: Sun, 28 Feb 2021 00:23:12 GMT
etag: "603ae270-547c"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 82d4cd75b5f78fa430c52f966c17f5e6
87ff62d3fa3478bb14091f1451b5c914549bfd3e
2d81207474e9c7b4aecbb13fb3442ae08cf1524ed79f9caaae41668c941f48c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2D81207474E9C7B4AECBB13FB3442AE08CF1524ED79F9CAAAE41668C941F48C2"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5942
Expires: Sun, 05 Feb 2023 08:02:09 GMT
Date: Sun, 05 Feb 2023 06:23:07 GMT
Connection: keep-alive
tn.vjav.com/contents/videos_screenshots/518000/518311/240x180/1.jpg
45.133.44.25200 OK 27 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/518000/518311/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash 8089aa4ea53a037e2c909f6a0c255b1f
fa309d9829f0ef81c42820237dc03a969fbc1f1b
93ca9ae51e7a77e32f5f0da07388409af01b26dd9e9d878f56e9f9770561ad93
GET /contents/videos_screenshots/518000/518311/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 27429
server: nginx/1.19.6
last-modified: Sat, 19 Mar 2022 18:09:08 GMT
etag: "62361c44-6b25"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/591000/591845/240x180/1.jpg
45.133.44.25200 OK 57 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/591000/591845/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
Hash 613a8581bc176bff334dd816a82a4c88
f43a4cca004208554d942eb8cbaac9a97212f7a9
d3d3d53867b348c6a234542cdfea9c90f74e857fa24226e7bc7b85f4e96963f4
GET /contents/videos_screenshots/591000/591845/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 55130
server: nginx/1.19.6
last-modified: Thu, 22 Dec 2022 20:21:19 GMT
etag: "63a4bc3f-d75a"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/397000/397331/240x180/1.jpg
45.133.44.25200 OK 22 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/397000/397331/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash ffae8e5f941b9d97f7e2bfe58894ddfc
faf0a4c938d6a7847dbbd9932ffe94d499fb4cf5
951a367a5cc61a60cee1d97d4626b3656928952e30363f01b51799e499413ea4
GET /contents/videos_screenshots/397000/397331/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 21600
server: nginx/1.19.6
last-modified: Sun, 14 Mar 2021 14:39:12 GMT
etag: "604e2010-5460"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/351000/351093/240x180/1.jpg
45.133.44.25200 OK 28 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/351000/351093/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash 712feb268158dbbaf40799e4a6742e8e
6b9b86deadf82424f80fb45163daca18ccc02ce1
66ba0591fb5f2005cc24a299b8d4980af320f087e1ab2d7722d4e0187bab0b01
GET /contents/videos_screenshots/351000/351093/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 27961
server: nginx/1.19.6
last-modified: Sat, 01 Aug 2020 18:09:20 GMT
etag: "5f25afd0-6d39"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/579000/579509/240x180/1.jpg
45.133.44.25200 OK 24 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/579000/579509/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash 3ca3bffa7c2421feb0dd7cb3ea006500
759cb69de4e28fb85d4a8ff60eb73444133c148f
ec9a03d6a0aba34b4ac3318c97c2a63f5b616d734863ea57f54b5f8380c24221
GET /contents/videos_screenshots/579000/579509/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 23484
server: nginx/1.19.6
last-modified: Wed, 16 Nov 2022 14:59:10 GMT
etag: "6374fabe-5bbc"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/450000/450227/240x180/1.jpg
45.133.44.25200 OK 41 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/450000/450227/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash 1383f5586682bf6c4ace3b8ee1b7fa84
8c914b306fe5ee1094e53b98a4cff34b845abdd7
d959b3a856889ff376a945694baf399a7278d3a289480f6a5c33ab5d807929bb
GET /contents/videos_screenshots/450000/450227/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 40817
server: nginx/1.19.6
last-modified: Tue, 20 Jul 2021 16:55:12 GMT
etag: "60f6fff0-9f71"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/508000/508067/240x180/1.jpg
45.133.44.25200 OK 24 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/508000/508067/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash e725b971c5e15ea86acb80eef1ce01ef
bebff5ede2b9ac9f2ef48fae8dfcc6bea02d0648
f3f5949e75a50eda804d7c18db888e1d9ad41832813bcb1cd468e9eb3a96c478
GET /contents/videos_screenshots/508000/508067/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 24009
server: nginx/1.19.6
last-modified: Tue, 15 Feb 2022 22:24:15 GMT
etag: "620c280f-5dc9"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/590000/590603/240x180/1.jpg
45.133.44.25200 OK 23 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/590000/590603/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash a4b5635d691f604ecba148f640e47792
c53bb304ca6c3951fe5b6f12c43e7a6cad0adf90
b5a50cb3c2f7bf5d05d63b46a32faf7459265a1c35e791c1ef55403758fba504
GET /contents/videos_screenshots/590000/590603/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 22848
server: nginx/1.19.6
last-modified: Mon, 19 Dec 2022 22:25:07 GMT
etag: "63a0e4c3-5940"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/191000/191510/240x180/1.jpg
45.133.44.25200 OK 17 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/191000/191510/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash bd78153e74e882f7fcaaf6b9fbcb0c31
fd25c92570aa338da4ea851c70bc267f81bb3a8c
997115be5df6b14b3cbf7ba0c0cfb8250a5e02a255ce144f1208461cfcdb41c1
GET /contents/videos_screenshots/191000/191510/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 17053
server: nginx/1.19.6
last-modified: Wed, 27 Feb 2019 11:00:03 GMT
etag: "5c766db3-429d"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/449000/449407/240x180/1.jpg
45.133.44.25200 OK 36 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/449000/449407/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash 529af2df42a30765016fb8ba795974ee
3f39e64e5a1a31dea63a1e7dcd9b31a96bf03c0f
fb1ec28621ca9f996d46b03205cff4a00a1fd4baaae52ec498adac64bd3e02f4
GET /contents/videos_screenshots/449000/449407/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 35467
server: nginx/1.19.6
last-modified: Sat, 17 Jul 2021 14:10:12 GMT
etag: "60f2e4c4-8a8b"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/606000/606345/240x180/1.jpg
45.133.44.25200 OK 32 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/606000/606345/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash 6035f41f29668193115ec54873754402
7d5686e26372f7cde7b26dc48dc6b86aac9e1f9b
448432cdd29173521ba577338ee4215334e99479c2dba673316a9932e7a6a598
GET /contents/videos_screenshots/606000/606345/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 31627
server: nginx/1.19.6
last-modified: Mon, 23 Jan 2023 11:14:06 GMT
etag: "63ce6bfe-7b8b"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/366000/366342/240x180/1.jpg
45.133.44.25200 OK 26 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/366000/366342/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash 8ac2e84fb40cb0921f8f17c72d53bfd9
2eb2616ab5d1fe33e2f82e6ca6fe6cfce531b798
bdd90d89e6e8a84f3158fb798e44d497640a26742630a2833b18529bcad50337
GET /contents/videos_screenshots/366000/366342/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 25890
server: nginx/1.19.6
last-modified: Fri, 30 Oct 2020 14:32:07 GMT
etag: "5f9c23e7-6522"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/470000/470407/240x180/1.jpg
45.133.44.25200 OK 24 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/470000/470407/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash 1cc83cfa6b02f5a6e5d751b715a94283
6dc7c1f2fc9cd98f3b72b54f91aeefb9b5ce7e63
d34b445c3b8781eee0bd3b2b4b1828800e28890660f1682c26c40ad8cc0c16a3
GET /contents/videos_screenshots/470000/470407/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 24237
server: nginx/1.19.6
last-modified: Sun, 21 Nov 2021 07:52:06 GMT
etag: "6199faa6-5ead"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/363000/363349/240x180/1.jpg
45.133.44.25200 OK 26 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/363000/363349/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash dfe88530cdcf51c24970e998a40b6c3c
4b6c7eca7b1b9ae378ff27f585d7e984c034f5e7
b18beaf58a4b99de2ce12de8cd6df96d9fb837234a08c2335c56b1e317254469
GET /contents/videos_screenshots/363000/363349/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 26165
server: nginx/1.19.6
last-modified: Sun, 11 Oct 2020 11:26:04 GMT
etag: "5f82ebcc-6635"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/467000/467375/240x180/1.jpg
45.133.44.25200 OK 24 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/467000/467375/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash efdd767694be7752348e98802f0da340
f8119f86030263085d07565e53253fa1e02d7c85
402c81e300f22dc0c089ad3558e9f03281b680637cb28246b131f7ee8bb90ec9
GET /contents/videos_screenshots/467000/467375/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 24269
server: nginx/1.19.6
last-modified: Mon, 08 Nov 2021 07:10:25 GMT
etag: "6188cd61-5ecd"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/518000/518375/240x180/1.jpg
45.133.44.25200 OK 25 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/518000/518375/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash 08b67fab865a94a458ad96fdfcd645b7
ad9a106c9dfdbb5509b36ee9953a569c1929e7a2
20b998fb3b9934e937bd504dfb3e92d6e4c400aa8b8387fb936a2c5d0e63161d
GET /contents/videos_screenshots/518000/518375/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 25449
server: nginx/1.19.6
last-modified: Sun, 20 Mar 2022 00:06:50 GMT
etag: "6236701a-6369"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/556000/556447/240x180/1.jpg
45.133.44.25200 OK 30 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/556000/556447/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash 7ca936525cfe583c64a79ae05552468c
ba9d333cb20ccf86e57cd86f5a88576325cbc154
fd6efbd3caefe6dda14e9ed65af03cb1c38738723c94928077690fba14b4427a
GET /contents/videos_screenshots/556000/556447/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 30456
server: nginx/1.19.6
last-modified: Fri, 05 Aug 2022 15:41:11 GMT
etag: "62ed3a17-76f8"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/489000/489923/240x180/1.jpg
45.133.44.25200 OK 24 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/489000/489923/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash fa8836918dd654ebf9a817e2d02e7b70
16f49f4ffd13a174923f0da67b2b08c4be1fcae7
f3cfcc8ec8631bcea055f07f59311347600b2adb86bae348c01e439a901ca598
GET /contents/videos_screenshots/489000/489923/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 23807
server: nginx/1.19.6
last-modified: Sun, 02 Jan 2022 17:25:08 GMT
etag: "61d1dff4-5cff"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/610000/610519/240x180/1.jpg
45.133.44.25200 OK 32 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/610000/610519/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash 13d9b1384fa7d1aadec1aa68b2976ff3
39b7f45f36a3d03746f18949e651fc81b9f4fbf2
7adb540b007689643714ba4f2dd0ecc176911a99c008d534ed25b7132725426c
GET /contents/videos_screenshots/610000/610519/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 31685
server: nginx/1.19.6
last-modified: Wed, 01 Feb 2023 09:12:07 GMT
etag: "63da2ce7-7bc5"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/482000/482685/240x180/1.jpg
45.133.44.25200 OK 21 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/482000/482685/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash 0e1028f61405599dfbce51adc31bcd97
0cc86f906444140bbc60e0169acd6896572a6ecf
284f8e3806a10da231111ec0507e184a8f452b2477d81bb763489837e3388a3a
GET /contents/videos_screenshots/482000/482685/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 20707
server: nginx/1.19.6
last-modified: Wed, 22 Dec 2021 19:44:11 GMT
etag: "61c3800b-50e3"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tn.vjav.com/contents/videos_screenshots/236000/236202/240x180/1.jpg
45.133.44.25200 OK 16 kB URL HTTP/2 tn.vjav.com/contents/videos_screenshots/236000/236202/240x180/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3\012- data
Hash fb15ca4db6a5dc5ea774a2d783a9898f
de9d8f41c73279a9c51dd37f2aed7885e6bd3943
81539e67d8d85aef388fba51c25f051488135fdd075d361c93fd7cddfc04da16
GET /contents/videos_screenshots/236000/236202/240x180/1.jpg HTTP/1.1
Host: tn.vjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: image/jpeg
content-length: 15809
server: nginx/1.19.6
last-modified: Tue, 28 May 2019 10:40:23 GMT
etag: "5ced1017-3dc1"
cache-control: max-age=7776000
expires: Sat, 06 May 2023 06:23:07 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
js.wpadmngr.com/npc/sdk/wp-banners.js
45.133.44.25200 OK 0 B URL HTTP/2 js.wpadmngr.com/npc/sdk/wp-banners.js
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/wp-banners.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:07 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 20 Aug 2021 15:14:31 GMT
etag: "611fc6d7-0"
expires: Sun, 05 Feb 2023 06:28:07 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 05 Feb 2023 06:23:08 GMT
access-control-allow-origin: *
etag: "63c93a4b-2b"
expires: Sun, 05 Feb 2023 07:23:08 GMT
accept-ranges: bytes
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/35313285?wmode=7&page-url=https%3A%2F%2Fvjav.tube%2Fmain%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1025%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A175660100672%3Ahid%3A543045797%3Az%3A0%3Ai%3A20230205062347%3Aet%3A1675578227%3Ac%3A1%3Arn%3A419898474%3Arqn%3A1%3Au%3A1675578227120300882%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C50%2C0%2C434%2C0%2C%2C507%2C3%2C%2C%2C%2C1045%3Aco%3A0%3Ans%3A1675578225442%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675578227%3At%3AJapanese%20Porn%20Videos%2C%20Asian%20Porn%20movies%2C%20Japan%20Sex%20Movies%20-%20VJAV.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
87.250.250.119302 Found 419 B URL HTTP/2 mc.yandex.ru/watch/35313285?wmode=7&page-url=https%3A%2F%2Fvjav.tube%2Fmain%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1025%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A175660100672%3Ahid%3A543045797%3Az%3A0%3Ai%3A20230205062347%3Aet%3A1675578227%3Ac%3A1%3Arn%3A419898474%3Arqn%3A1%3Au%3A1675578227120300882%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C50%2C0%2C434%2C0%2C%2C507%2C3%2C%2C%2C%2C1045%3Aco%3A0%3Ans%3A1675578225442%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675578227%3At%3AJapanese%20Porn%20Videos%2C%20Asian%20Porn%20movies%2C%20Japan%20Sex%20Movies%20-%20VJAV.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP 87.250.250.119:0
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash 6b7cb7667a19aef7a71f5e1a874a1175
e2007aa8907001fca1368a4b39bb4ee6877a9085
f9b4f242e8ce1a64275315b806b381e7b7e7e87a5644c65174c3c1e4f9e53e0f
GET /watch/35313285?wmode=7&page-url=https%3A%2F%2Fvjav.tube%2Fmain%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1025%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A175660100672%3Ahid%3A543045797%3Az%3A0%3Ai%3A20230205062347%3Aet%3A1675578227%3Ac%3A1%3Arn%3A419898474%3Arqn%3A1%3Au%3A1675578227120300882%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C50%2C0%2C434%2C0%2C%2C507%2C3%2C%2C%2C%2C1045%3Aco%3A0%3Ans%3A1675578225442%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675578227%3At%3AJapanese%20Porn%20Videos%2C%20Asian%20Porn%20movies%2C%20Japan%20Sex%20Movies%20-%20VJAV.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vjav.tube
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/35313285/1?wmode=7&page-url=https%3A%2F%2Fvjav.tube%2Fmain%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A1025%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A175660100672%3Ahid%3A543045797%3Az%3A0%3Ai%3A20230205062347%3Aet%3A1675578227%3Ac%3A1%3Arn%3A419898474%3Arqn%3A1%3Au%3A1675578227120300882%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C50%2C0%2C434%2C0%2C%2C507%2C3%2C%2C%2C%2C1045%3Aco%3A0%3Ans%3A1675578225442%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675578227%3At%3AJapanese%20Porn%20Videos%2C%20Asian%20Porn%20movies%2C%20Japan%20Sex%20Movies%20-%20VJAV.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Sun, 05 Feb 2023 06:23:08 GMT
access-control-allow-origin: https://vjav.tube
set-cookie: yabs-sid=1328148231675578188; Path=/; SameSite=None; Secure
i=VXsz0hgePQZa48Rex1ppzWq4FlaYYdBSQBDuEoadK53lwSl4qYtVGIQgC1WW3kbB5lh75tmSdOk0vPg+RU07ylhfLuk=; Expires=Wed, 02-Feb-2033 06:23:01 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=8100026801675578188; Expires=Mon, 05-Feb-2024 06:23:08 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8100026801675578188; Expires=Mon, 05-Feb-2024 06:23:08 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707114188.yc.1675578188#1707114188.yrts.1675578188#1707114188.yrtsi.1675578188; Expires=Mon, 05-Feb-2024 06:23:08 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 05-Feb-2023 06:23:08 GMT
last-modified: Sun, 05-Feb-2023 06:23:08 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/49315045/1?wmode=7&page-url=https%3A%2F%2Fvjav.tube%2Fmain%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1025%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A520918236481%3Ahid%3A543045797%3Az%3A0%3Ai%3A20230205062347%3Aet%3A1675578227%3Ac%3A1%3Arn%3A373059180%3Arqn%3A1%3Au%3A1675578227120300882%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C50%2C0%2C434%2C0%2C%2C507%2C3%2C%2C%2C%2C1045%3Aco%3A0%3Ans%3A1675578225442%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675578227%3At%3AJapanese%20Porn%20Videos%2C%20Asian%20Porn%20movies%2C%20Japan%20Sex%20Movies%20-%20VJAV.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
87.250.250.119200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/49315045/1?wmode=7&page-url=https%3A%2F%2Fvjav.tube%2Fmain%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1025%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A520918236481%3Ahid%3A543045797%3Az%3A0%3Ai%3A20230205062347%3Aet%3A1675578227%3Ac%3A1%3Arn%3A373059180%3Arqn%3A1%3Au%3A1675578227120300882%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C50%2C0%2C434%2C0%2C%2C507%2C3%2C%2C%2C%2C1045%3Aco%3A0%3Ans%3A1675578225442%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675578227%3At%3AJapanese%20Porn%20Videos%2C%20Asian%20Porn%20movies%2C%20Japan%20Sex%20Movies%20-%20VJAV.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP 87.250.250.119:0
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash fc65a992f983204582656bfa24dbfe78
d76ffb4d08e70c45f69d03bc27b567bab6a1e444
7650785836872370e20739de0fd88e600333db32cb2e7c0eb26a1e7a59dcb0b3
GET /watch/49315045/1?wmode=7&page-url=https%3A%2F%2Fvjav.tube%2Fmain%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1025%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A520918236481%3Ahid%3A543045797%3Az%3A0%3Ai%3A20230205062347%3Aet%3A1675578227%3Ac%3A1%3Arn%3A373059180%3Arqn%3A1%3Au%3A1675578227120300882%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C50%2C0%2C434%2C0%2C%2C507%2C3%2C%2C%2C%2C1045%3Aco%3A0%3Ans%3A1675578225442%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675578227%3At%3AJapanese%20Porn%20Videos%2C%20Asian%20Porn%20movies%2C%20Japan%20Sex%20Movies%20-%20VJAV.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vjav.tube
Referer: https://vjav.tube/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Sun, 05 Feb 2023 06:23:08 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://vjav.tube
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 05-Feb-2023 06:23:08 GMT
last-modified: Sun, 05-Feb-2023 06:23:08 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/35313285/1?page-url=https%3A%2F%2Fvjav.tube%2Fmain%2F&charset=utf-8&hittoken=1675578188_59b792f2315762162777b7ec5fdac012dfa2eb9a3b126f0aa7137fe18591a0e7&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A175660100672%3Ahid%3A543045797%3Az%3A0%3Ai%3A20230205062347%3Aet%3A1675578227%3Ac%3A1%3Arn%3A140497873%3Arqn%3A2%3Au%3A1675578227120300882%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1673%2C1673%2C0%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1675578225442%3Aadb%3A2%3Ast%3A1675578227&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/35313285/1?page-url=https%3A%2F%2Fvjav.tube%2Fmain%2F&charset=utf-8&hittoken=1675578188_59b792f2315762162777b7ec5fdac012dfa2eb9a3b126f0aa7137fe18591a0e7&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A175660100672%3Ahid%3A543045797%3Az%3A0%3Ai%3A20230205062347%3Aet%3A1675578227%3Ac%3A1%3Arn%3A140497873%3Arqn%3A2%3Au%3A1675578227120300882%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1673%2C1673%2C0%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1675578225442%3Aadb%3A2%3Ast%3A1675578227&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/35313285/1?page-url=https%3A%2F%2Fvjav.tube%2Fmain%2F&charset=utf-8&hittoken=1675578188_59b792f2315762162777b7ec5fdac012dfa2eb9a3b126f0aa7137fe18591a0e7&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A175660100672%3Ahid%3A543045797%3Az%3A0%3Ai%3A20230205062347%3Aet%3A1675578227%3Ac%3A1%3Arn%3A140497873%3Arqn%3A2%3Au%3A1675578227120300882%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1673%2C1673%2C0%2C%3Aco%3A0%3Aeu%3A1%3Ans%3A1675578225442%3Aadb%3A2%3Ast%3A1675578227&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 35
Origin: https://vjav.tube
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 05 Feb 2023 06:23:08 GMT
access-control-allow-origin: https://vjav.tube
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 05-Feb-2023 06:23:08 GMT
last-modified: Sun, 05-Feb-2023 06:23:08 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 76cf050a7f68b805961048b7e68924ca
7dc17007f7f9b9f9b7d30fc7cbb366c6423b572c
34fee2b95cd9896c4c001eed98958c9e66fe993ddff17ef9eced9688861ca450
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "34FEE2B95CD9896C4C001EED98958C9E66FE993DDFF17EF9ECED9688861CA450"
Last-Modified: Sat, 04 Feb 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6646
Expires: Sun, 05 Feb 2023 08:13:54 GMT
Date: Sun, 05 Feb 2023 06:23:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 269deacb0c8fc168d6089a8acf2550fd
45b40fbd74d504a24643ef5521d03dd1d532063f
8c5ef23b2b7d9c27c1c8dc1739254c94919495db4afadda21f88a0e36807f7e3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8C5EF23B2B7D9C27C1C8DC1739254C94919495DB4AFADDA21F88A0E36807F7E3"
Last-Modified: Fri, 03 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7713
Expires: Sun, 05 Feb 2023 08:31:41 GMT
Date: Sun, 05 Feb 2023 06:23:08 GMT
Connection: keep-alive
fp.metricswpsh.com/fp?tag_id=184
157.90.84.242204 No Content 0 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=184
IP 157.90.84.242:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=184 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://vjav.tube/
Origin: https://vjav.tube
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Sun, 05 Feb 2023 06:23:08 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://vjav.tube
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
1ec994c645.369c83119d.com/in/track?data=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
45.133.44.24200 OK 0 B URL HTTP/2 1ec994c645.369c83119d.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI0NzE1NDM2NTM3NDI0MTEwMDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMjIuMCIsInRhZ19pZCI6MTg0LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuNjcsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MCwidXNlcl9rZXl3b3JkcyI6IkphcGFuZXNlJTJDUG9ybiUyQ1ZpZGVvcyUyQ0FzaWFuJTJDUG9ybiUyQ21vdmllcyUyQ0phcGFuJTJDU2V4JTJDTW92aWVzJTJDVkpBVi5jb20lMkN2amF2LmNvbSUyQ2phdiUyQ3Bvcm4lMkN0dWJlJTJDeHh4JTJDamF2JTJDdHViZSUyQ2ZyZWUlMkNwb3JuJTJDdmlkZW9zJTJDZnJlZSUyQ3Bvcm4lMkN4eHglMkNtb3ZpZXMlMkN4eHglMkN0dWJlJTJDdmlkZW8lMkNmcmVlJTJDeHh4JTJDdmlkZW8lMkNjbGlwcyUyQ3h4eHR1YmUlMkNob3QlMkNqYXBhbmVzZSUyQ3Bvcm4lMkNvcmllbnRhbCUyQ3Bvcm4lMkN2aWRlbyUyQ1dhdGNoJTJDSmFwYW5lc2UlMkNwb3JuJTJDdmlkZW8lMkNMb3RzJTJDb2YlMkNmcmVlJTJDdmlkZW9zJTJDd2l0aCUyQ0phcGFuZXNlJTJDc3RhcnMlMkNMYXJnZSUyQ2FyY2hpdmUlMkNvZiUyQ3VuY2Vuc29yZWQlMkNKQVYlMkNIRCUyQ21vdmllcyJ9
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/track?data=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 HTTP/1.1
Host: 1ec994c645.369c83119d.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vjav.tube
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:08 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b28998fd4d582fea4d17d3b41060e959
fdfb74992b535bd6daa5696d08fdb9e49e0c3b8d
fb1dbfd6994ce383a3fea9e7cfe0a29afe3ab65243d90e782ec61e82b2032640
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FB1DBFD6994CE383A3FEA9E7CFE0A29AFE3AB65243D90E782EC61E82B2032640"
Last-Modified: Sat, 04 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6863
Expires: Sun, 05 Feb 2023 08:17:31 GMT
Date: Sun, 05 Feb 2023 06:23:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 42 kB IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ff21d399d308549c631f1b2f93620e89
50a86ec969efedfd4841f3ecf124f2261b194830
cadf5f58d0e8b94a25afa7d3c89403e009d86f958947b80a3a50201f48fd4830
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FB1DBFD6994CE383A3FEA9E7CFE0A29AFE3AB65243D90E782EC61E82B2032640"
Last-Modified: Sat, 04 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6863
Expires: Sun, 05 Feb 2023 08:17:31 GMT
Date: Sun, 05 Feb 2023 06:23:08 GMT
Connection: keep-alive
vast.yomeno.xyz/prepare
109.206.182.60204 No Content 2.9 kB IP 109.206.182.60:0
Hash bb9defda7343a132f3be19e9e75c71dd
a2aca03fe414d17aa84eb8d2ff4837f1a7c4875f
aa4a0eb0fa058d2a275592ce334cae49879d7d5421a48d159071a4b6a451e87d
OPTIONS /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://vjav.tube/
Origin: https://vjav.tube
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.20.1
date: Sun, 05 Feb 2023 06:23:08 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://vjav.tube
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
content-type: text/plain; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
vast.yomeno.xyz/prepare
109.206.182.60204 No Content 0 B IP 109.206.182.60:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1046
Origin: https://vjav.tube
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
date: Sun, 05 Feb 2023 06:23:08 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://vjav.tube
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=184
157.90.84.242200 OK 28 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=184
IP 157.90.84.242:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text
Hash e3af49472d683a217237a6ebaf79bcb7
378db4d7e6171a2676ee15c80b4475d7f5ec9742
7714898d715fb8b1ce7a1de73e0e7c9f6394acc8a08cf1a3b342a7829d4de84a
POST /fp?tag_id=184 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 22286
Origin: https://vjav.tube
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 05 Feb 2023 06:23:08 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 28
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://vjav.tube
Set-Cookie: id=17976093369016305604; Expires=Mon, 05 Feb 2024 06:23:08 GMT; Secure; SameSite=None
Vary: Origin
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 34b53a6bad92157e04c41905ef0b02a0
b3ef9238f397cf70173e2619e02ed2479399c3f8
ee436c54c02178c4893c7bb1a24b799ed4e813168264318e2b2ec34422587d4a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EE436C54C02178C4893C7BB1A24B799ED4E813168264318E2B2EC34422587D4A"
Last-Modified: Fri, 03 Feb 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3268
Expires: Sun, 05 Feb 2023 07:17:36 GMT
Date: Sun, 05 Feb 2023 06:23:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6f481a2ac2fb32b367f34800f33003f7
1a33ec5cf9443c1763c450f85e8cdc1f1990273c
4330d407a9f02e3b6739f1343c37fa6b68ac6943e127dd90429165120fec1026
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4330D407A9F02E3B6739F1343C37FA6B68AC6943E127DD90429165120FEC1026"
Last-Modified: Fri, 03 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2786
Expires: Sun, 05 Feb 2023 07:09:34 GMT
Date: Sun, 05 Feb 2023 06:23:08 GMT
Connection: keep-alive
cdntocdn.com/dli/stars.svg?fill=rgb(128%2C%20128%2C%20128)
45.133.44.24200 OK 806 B URL HTTP/2 cdntocdn.com/dli/stars.svg?fill=rgb(128%2C%20128%2C%20128)
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (394), with CRLF line terminators
Hash b3abb3998f17bfd29fa9ac1ea792c629
1a09bcb47f879892481b624953e267e943e3eff4
e1d58e96d3d6f3d1e401c67dddaa7908219f9a3fd30229a22093a906930bd23d
GET /dli/stars.svg?fill=rgb(128%2C%20128%2C%20128) HTTP/1.1
Host: cdntocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:08 GMT
content-type: image/svg+xml
content-length: 806
server: nginx/1.12.2
last-modified: Tue, 16 Jun 2020 16:25:10 GMT
etag: "5ee8f266-326"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache, no-cache
expires: 0
x-proxy-cache: HIT, HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
12112336.pix-cdn.org/dli/whatshot.svg?fill=rgb(128%2C%20128%2C%20128)
45.133.44.25200 OK 1.1 kB URL HTTP/2 12112336.pix-cdn.org/dli/whatshot.svg?fill=rgb(128%2C%20128%2C%20128)
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (652), with CRLF line terminators
Hash 92d4b3c9db72fefd9d6d927ec40be29b
efb550da28d7b18d7e2beb7698577415fde2b24f
7ad9fcb297f4600edf827b026deca9e0ed695be37ab46ac2d9fee35040611130
GET /dli/whatshot.svg?fill=rgb(128%2C%20128%2C%20128) HTTP/1.1
Host: 12112336.pix-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:08 GMT
content-type: image/svg+xml
content-length: 1064
server: nginx/1.12.2
last-modified: Tue, 16 Jun 2020 16:25:10 GMT
etag: "5ee8f266-428"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 97ab63789f83a179123e1e7f5b1301e4
dab2a191eb18e1c6f0c30b094bac6c45aeef286d
d43a9b4d130aa735ccb3e625485c94572d87c4ae3aff6017dce9155219bf9369
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D43A9B4D130AA735CCB3E625485C94572D87C4AE3AFF6017DCE9155219BF9369"
Last-Modified: Sat, 04 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12001
Expires: Sun, 05 Feb 2023 09:43:09 GMT
Date: Sun, 05 Feb 2023 06:23:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b45aced3f9f05f1f4da20f8b6ea21d30
bd28ecb25ce9fb326fd8914316142aec4e70d84b
af3a035d682dd50f81039ee0b356e4a60fba24e7db5fd0e74329bd12178839b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AF3A035D682DD50F81039EE0B356E4A60FBA24E7DB5FD0E74329BD12178839B0"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12812
Expires: Sun, 05 Feb 2023 09:56:40 GMT
Date: Sun, 05 Feb 2023 06:23:08 GMT
Connection: keep-alive
js.wpshsdk.com/npc/sdk/wp-banners.js
45.133.44.24200 OK 0 B URL HTTP/2 js.wpshsdk.com/npc/sdk/wp-banners.js
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/wp-banners.js HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:08 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 20 Aug 2021 15:14:31 GMT
etag: "611fc6d7-0"
expires: Sun, 05 Feb 2023 06:28:08 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
nereserv.com/in/dip?site=native-push&wl=1&event_id=2e67743a-3d61-48eb-8ed8-3148363a5e08&subid=1238912481&sid=3762898344&spot_id=50&created_at=2023-02-05&timezone=0&ver=8.24.1&is_native=1
94.130.198.6200 OK 0 B URL HTTP/2 nereserv.com/in/dip?site=native-push&wl=1&event_id=2e67743a-3d61-48eb-8ed8-3148363a5e08&subid=1238912481&sid=3762898344&spot_id=50&created_at=2023-02-05&timezone=0&ver=8.24.1&is_native=1
IP 94.130.198.6:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?site=native-push&wl=1&event_id=2e67743a-3d61-48eb-8ed8-3148363a5e08&subid=1238912481&sid=3762898344&spot_id=50&created_at=2023-02-05&timezone=0&ver=8.24.1&is_native=1 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vjav.tube
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 05 Feb 2023 06:23:08 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5d3d2ce0b7cd5712a0c9453dd888a9f9
5f05097510cb7cbf48738c9b5efa3e1ff6a18f9e
1a6f08f69fa9404f2a6e462797884d22edc7cf7f21e89da273adac2c80693479
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1A6F08F69FA9404F2A6E462797884D22EDC7CF7F21E89DA273ADAC2C80693479"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4905
Expires: Sun, 05 Feb 2023 07:44:53 GMT
Date: Sun, 05 Feb 2023 06:23:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 49 kB IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 740d03180408fc8b494dba92e04b502d
8e0b81f55613fbca31365bbbcbfed7df5f5b6dc1
ed860d5bf4f76c159938a54e04a6ebc635da5a5e2020fde3ca46f0638a76f7cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2DAD102C038C3BBC96E0AA94F5EC737FE005B258EC74D131B798976DAD51E0E1"
Last-Modified: Sat, 04 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16483
Expires: Sun, 05 Feb 2023 10:57:51 GMT
Date: Sun, 05 Feb 2023 06:23:08 GMT
Connection: keep-alive
js.wpshsdk.com/npc/sdk/common/config.js
45.133.44.24200 OK 19 B URL HTTP/2 js.wpshsdk.com/npc/sdk/common/config.js
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash 67fc2c9421e21f4a3707c7fabc8e9f33
0d311fbfaea3d64122b4c5e575a5c3fbea11f718
b93ed3f9c6f2c27004ef57a9fa8f11248af5bd9848cc56a1c215db36d4ecc1bb
GET /npc/sdk/common/config.js HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vjav.tube/
Origin: https://vjav.tube
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 19
server: nginx/1.18.0
last-modified: Thu, 26 Jan 2023 12:22:57 GMT
etag: "63d270a1-13"
expires: Sun, 05 Feb 2023 06:28:09 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f47220936601fbaad86b28337c2d7cad
9bdeb7f26c0f25714ed2c281a83c2a4241d3b74b
302bbb4d751ebd8f04b229f3b06e98ab3f083dccf53f7c598991c4ed712e100c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "302BBB4D751EBD8F04B229F3B06E98AB3F083DCCF53F7C598991C4ED712E100C"
Last-Modified: Sat, 04 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11621
Expires: Sun, 05 Feb 2023 09:36:50 GMT
Date: Sun, 05 Feb 2023 06:23:09 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2721
Expires: Sun, 05 Feb 2023 07:08:30 GMT
Date: Sun, 05 Feb 2023 06:23:09 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2721
Expires: Sun, 05 Feb 2023 07:08:30 GMT
Date: Sun, 05 Feb 2023 06:23:09 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2721
Expires: Sun, 05 Feb 2023 07:08:30 GMT
Date: Sun, 05 Feb 2023 06:23:09 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8e0be7db14d930d6227443314bcd1747
4e42e2ad289dfe5bd9a55d34fd768f7532bdf71d
baedfbdb08a67f9ff4c698f7e65b08d7e4c5078d0a4233e6bff529b44812735a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12967
x-amzn-requestid: 013fa296-a431-410b-b3fb-7417b3e877eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpIQAFCMIAMF0Sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9ed99-2e1daa8b75977de07c48b8fc;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 04:42:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UzQGDCYe_8AuYYLaLSAWzHQhwJMpzpXWbjE5AwukevW6G6SLDxDjmA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 03:42:59 GMT
age: 9610
etag: "4e42e2ad289dfe5bd9a55d34fd768f7532bdf71d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F085f1306-f595-4e1a-8162-7d3d1f959ac3.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F085f1306-f595-4e1a-8162-7d3d1f959ac3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7dbe304b5138a360ff07a9842bcf6a7f
00572f7667e322c9ef34bc35b7998c1c172dd34c
d63c58d6c96e23c61b92272de8c2aab01f4cf85f3420cc434c05447d355b1c77
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F085f1306-f595-4e1a-8162-7d3d1f959ac3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9108
x-amzn-requestid: a3bffa19-86ce-4a59-b826-551deddb3e9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fostZG2xIAMF0wQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9c188-18acd7311c6190c9486e86ac;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 01:34:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mWqq5MbsWYvQmSzPw3kTdjzTkz22mNHbOoqyiHfbxv0BhNhgFfnZGw==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:44:03 GMT
age: 31146
etag: "00572f7667e322c9ef34bc35b7998c1c172dd34c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg
34.120.237.76200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5b6c30ad03669b66bf2f63b3edd69882
e630bd132b52b965a5ade646ea8a165d1abf6d7b
f8233d879ec17fd91909655ff8881f2ebfad84272fde3ed5e5be37580378a989
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5014
x-amzn-requestid: a434aae4-fe4b-4fc7-9b7e-eeb552484e8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3bIE0aoAMF6YQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c47-5556d14757190c842bbc6b06;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:43 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: k6YqagXr3Wr-u1uDKojEnIGW0CxU5yvWPtlzNpzoIvmg9F-rJb9uFQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 11:30:27 GMT
age: 67962
etag: "e630bd132b52b965a5ade646ea8a165d1abf6d7b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F030e2301-116b-4cdd-ae90-c5bbc86e9669.jpeg
34.120.237.76200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F030e2301-116b-4cdd-ae90-c5bbc86e9669.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b1092c4dd4d9ca4d09462ae46e1dd7c1
17444ff60be1afbc40d3653fa936f9eaf9478068
ea8362c7249080b34288ee675f70333607fc3be37e716fdcf63e4901849def9f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F030e2301-116b-4cdd-ae90-c5bbc86e9669.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7288
x-amzn-requestid: 1aa297f5-2f9a-45be-b823-1eb4d5887769
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f1WrwH-iIAMFyhQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ded17e-2b630b4a302b8ae118883b71;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 21:43:26 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: z2oKgp1keqEkvN6jjsUepMbrxD4JCXKAOHrMNJHcuXN0CpulUh5GLA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:43:26 GMT
etag: "17444ff60be1afbc40d3653fa936f9eaf9478068"
content-type: image/jpeg
age: 31183
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F94063a59-0665-4d1d-89f4-785b4ab501d8.jpeg
34.120.237.76200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F94063a59-0665-4d1d-89f4-785b4ab501d8.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bee08788da5b88dde69aeb1d4de005c9
537c7a19a9395a60452b6b0b3ae08d47f4705181
02365d88ae9ff3ace3f29509df0e436ab0838d44714ef0f25dea463d665f794a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F94063a59-0665-4d1d-89f4-785b4ab501d8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6486
x-amzn-requestid: 544d13b9-8d45-4029-88e0-280f27cc0fa3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi4-SHN1IAMFSkw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76ec1-3f1ee84f53fe45cc01439a28;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:16:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TtyPO9j12ZpU3XdElRgCrqB4XNERrppavwJZJn5As8mqjjDLyZBmsw==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:43:26 GMT
age: 31183
etag: "537c7a19a9395a60452b6b0b3ae08d47f4705181"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed9dd21c-6496-4f6e-b306-570e4802aba4.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed9dd21c-6496-4f6e-b306-570e4802aba4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 251f1a5d671fb797fb98e9a71754c341
335425603d9eec146a3c03422dbca91134272e53
74932f07561287e33302aabcf9c639e9df7ae0fbc4bf71f5467310aabafea208
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed9dd21c-6496-4f6e-b306-570e4802aba4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6202
x-amzn-requestid: 01b85fcd-69a0-49da-8640-32a3ef19378a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3bUFEJoAMFapg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c48-14817e717361e09170714e9d;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1_1mEN4j5cciWEiimz4PRjx3PNGnrSRib9oEJAdYLrrtyjqnz_zvcQ==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 11:30:27 GMT
age: 67962
etag: "335425603d9eec146a3c03422dbca91134272e53"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
btds.zog.link/in/dl_show/?spot_id=84723&out_name=73385|12302|cpm|0.0001|$%200.0001&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84723&p=https%3A%2F%2Fvjav.tube%2Fmain%2F
109.206.181.2200 OK 2 B URL HTTP/2 btds.zog.link/in/dl_show/?spot_id=84723&out_name=73385|12302|cpm|0.0001|$%200.0001&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84723&p=https%3A%2F%2Fvjav.tube%2Fmain%2F
IP 109.206.181.2:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /in/dl_show/?spot_id=84723&out_name=73385|12302|cpm|0.0001|$%200.0001&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84723&p=https%3A%2F%2Fvjav.tube%2Fmain%2F HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: application/json
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 952.0=1; expires=Mon, 06 Feb 2023 06:23:09 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
btds.zog.link/in/dl_show/?spot_id=84723&out_name=115436|36491|cpc|0.0468|$%200.0520&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84723&p=https%3A%2F%2Fvjav.tube%2Fmain%2F
109.206.181.2200 OK 2 B URL HTTP/2 btds.zog.link/in/dl_show/?spot_id=84723&out_name=115436|36491|cpc|0.0468|$%200.0520&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84723&p=https%3A%2F%2Fvjav.tube%2Fmain%2F
IP 109.206.181.2:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /in/dl_show/?spot_id=84723&out_name=115436|36491|cpc|0.0468|$%200.0520&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84723&p=https%3A%2F%2Fvjav.tube%2Fmain%2F HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: application/json
content-length: 2
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: 952.0=1; expires=Mon, 06 Feb 2023 06:23:09 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
0f6e7d3222.ba33938e50.com/in/multy
168.119.25.22204 No Content 0 B URL HTTP/2 0f6e7d3222.ba33938e50.com/in/multy
IP 168.119.25.22:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /in/multy HTTP/1.1
Host: 0f6e7d3222.ba33938e50.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://vjav.tube/
Origin: https://vjav.tube
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.18.0
date: Sun, 05 Feb 2023 06:23:09 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=3276217163572519994&pid=0&site=29876&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vjav.tube&hostname=auc-banner-hz-6&site_id=0&spot_id=29876&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.002677&placement_type_id=&skin_test=&verify_hash=&score=99.80019851195031&ml=&tag_ab=b&v2=0&ttl=&space_id=29876&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D29876%26source%3D0%26idzone%3D1920764%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D29876%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D29876%26p%3Dhttps%253A%252F%252Fvjav.tube%252Fmain%252F%26katds_labels%3D%26btype%3D0%26score%3D99.80019851195031%26bf%3D0.002677&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=nlabel-b&ssp=3756&refresh=1
116.202.60.158302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=3276217163572519994&pid=0&site=29876&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vjav.tube&hostname=auc-banner-hz-6&site_id=0&spot_id=29876&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.002677&placement_type_id=&skin_test=&verify_hash=&score=99.80019851195031&ml=&tag_ab=b&v2=0&ttl=&space_id=29876&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D29876%26source%3D0%26idzone%3D1920764%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D29876%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D29876%26p%3Dhttps%253A%252F%252Fvjav.tube%252Fmain%252F%26katds_labels%3D%26btype%3D0%26score%3D99.80019851195031%26bf%3D0.002677&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=nlabel-b&ssp=3756&refresh=1
IP 116.202.60.158:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=3276217163572519994&pid=0&site=29876&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vjav.tube&hostname=auc-banner-hz-6&site_id=0&spot_id=29876&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.002677&placement_type_id=&skin_test=&verify_hash=&score=99.80019851195031&ml=&tag_ab=b&v2=0&ttl=&space_id=29876&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D29876%26source%3D0%26idzone%3D1920764%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D29876%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D29876%26p%3Dhttps%253A%252F%252Fvjav.tube%252Fmain%252F%26katds_labels%3D%26btype%3D0%26score%3D99.80019851195031%26bf%3D0.002677&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=nlabel-b&ssp=3756&refresh=1 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Sun, 05 Feb 2023 06:23:09 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=29876&source=0&idzone=1920764&w=300&h=250&mo=&ve=&site_id=29876&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=29876&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=99.80019851195031&bf=0.002677
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=5506334815110399530&pid=0&site=29874&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vjav.tube&hostname=auc-banner-hz-9&site_id=0&spot_id=29874&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.002398&placement_type_id=&skin_test=&verify_hash=&score=99.8000342093474&ml=&tag_ab=b&v2=0&ttl=&space_id=29874&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D29874%26source%3D0%26idzone%3D1920760%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D29874%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D29874%26p%3Dhttps%253A%252F%252Fvjav.tube%252Fmain%252F%26katds_labels%3D%26btype%3D0%26score%3D99.8000342093474%26bf%3D0.002398&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=nlabel-b&ssp=3756&refresh=1
116.202.60.158302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=5506334815110399530&pid=0&site=29874&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vjav.tube&hostname=auc-banner-hz-9&site_id=0&spot_id=29874&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.002398&placement_type_id=&skin_test=&verify_hash=&score=99.8000342093474&ml=&tag_ab=b&v2=0&ttl=&space_id=29874&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D29874%26source%3D0%26idzone%3D1920760%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D29874%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D29874%26p%3Dhttps%253A%252F%252Fvjav.tube%252Fmain%252F%26katds_labels%3D%26btype%3D0%26score%3D99.8000342093474%26bf%3D0.002398&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=nlabel-b&ssp=3756&refresh=1
IP 116.202.60.158:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=5506334815110399530&pid=0&site=29874&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vjav.tube&hostname=auc-banner-hz-9&site_id=0&spot_id=29874&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.002398&placement_type_id=&skin_test=&verify_hash=&score=99.8000342093474&ml=&tag_ab=b&v2=0&ttl=&space_id=29874&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D29874%26source%3D0%26idzone%3D1920760%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D29874%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D29874%26p%3Dhttps%253A%252F%252Fvjav.tube%252Fmain%252F%26katds_labels%3D%26btype%3D0%26score%3D99.8000342093474%26bf%3D0.002398&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=nlabel-b&ssp=3756&refresh=1 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Sun, 05 Feb 2023 06:23:09 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=29874&source=0&idzone=1920760&w=300&h=250&mo=&ve=&site_id=29874&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=29874&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=99.8000342093474&bf=0.002398
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=29876&source=0&idzone=1920764&w=300&h=250&mo=&ve=&site_id=29876&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=29876&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=99.80019851195031&bf=0.002677
109.206.181.2302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=29876&source=0&idzone=1920764&w=300&h=250&mo=&ve=&site_id=29876&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=29876&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=99.80019851195031&bf=0.002677
IP 109.206.181.2:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=29876&source=0&idzone=1920764&w=300&h=250&mo=&ve=&site_id=29876&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=29876&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=99.80019851195031&bf=0.002677 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Cookie: 952.0=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://12007250.pix-cdn.org/a/pjexo.html?idzone=1920764&w=300&h=250&ad_sub=0
vary: *
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
set-cookie: 912.0=1; expires=Mon, 06 Feb 2023 06:23:09 GMT; path=/; secure; SameSite=None
1624.0=1; expires=Mon, 06 Feb 2023 06:23:09 GMT; path=/; secure; SameSite=None
1625.0=1; expires=Mon, 06 Feb 2023 06:23:09 GMT; path=/; secure; SameSite=None
1629.0=1; expires=Mon, 06 Feb 2023 06:23:09 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=2971583283425997608&pid=0&site=29877&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vjav.tube&hostname=auc-banner-hz-3&site_id=0&spot_id=29877&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.003938&placement_type_id=&skin_test=&verify_hash=&score=100&ml=&tag_ab=b&v2=0&ttl=&space_id=29877&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D29877%26source%3D0%26idzone%3D1920768%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D29877%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D29877%26p%3Dhttps%253A%252F%252Fvjav.tube%252Fmain%252F%26katds_labels%3D%26btype%3D0%26score%3D100%26bf%3D0.003938&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=nlabel-b&ssp=3756&refresh=1
116.202.60.158302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=2971583283425997608&pid=0&site=29877&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vjav.tube&hostname=auc-banner-hz-3&site_id=0&spot_id=29877&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.003938&placement_type_id=&skin_test=&verify_hash=&score=100&ml=&tag_ab=b&v2=0&ttl=&space_id=29877&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D29877%26source%3D0%26idzone%3D1920768%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D29877%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D29877%26p%3Dhttps%253A%252F%252Fvjav.tube%252Fmain%252F%26katds_labels%3D%26btype%3D0%26score%3D100%26bf%3D0.003938&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=nlabel-b&ssp=3756&refresh=1
IP 116.202.60.158:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=2971583283425997608&pid=0&site=29877&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vjav.tube&hostname=auc-banner-hz-3&site_id=0&spot_id=29877&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.003938&placement_type_id=&skin_test=&verify_hash=&score=100&ml=&tag_ab=b&v2=0&ttl=&space_id=29877&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D29877%26source%3D0%26idzone%3D1920768%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D29877%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D29877%26p%3Dhttps%253A%252F%252Fvjav.tube%252Fmain%252F%26katds_labels%3D%26btype%3D0%26score%3D100%26bf%3D0.003938&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=nlabel-b&ssp=3756&refresh=1 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Sun, 05 Feb 2023 06:23:09 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=29877&source=0&idzone=1920768&w=300&h=250&mo=&ve=&site_id=29877&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=29877&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=100&bf=0.003938
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=8865220444594414094&pid=0&site=29875&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vjav.tube&hostname=auc-banner-hz-6&site_id=0&spot_id=29875&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.002412&placement_type_id=&skin_test=&verify_hash=&score=99.79989500882056&ml=&tag_ab=b&v2=0&ttl=&space_id=29875&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D29875%26source%3D0%26idzone%3D1920762%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D29875%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D29875%26p%3Dhttps%253A%252F%252Fvjav.tube%252Fmain%252F%26katds_labels%3D%26btype%3D0%26score%3D99.79989500882056%26bf%3D0.002412&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=nlabel-b&ssp=3756&refresh=1
116.202.60.158302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=8865220444594414094&pid=0&site=29875&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vjav.tube&hostname=auc-banner-hz-6&site_id=0&spot_id=29875&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.002412&placement_type_id=&skin_test=&verify_hash=&score=99.79989500882056&ml=&tag_ab=b&v2=0&ttl=&space_id=29875&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D29875%26source%3D0%26idzone%3D1920762%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D29875%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D29875%26p%3Dhttps%253A%252F%252Fvjav.tube%252Fmain%252F%26katds_labels%3D%26btype%3D0%26score%3D99.79989500882056%26bf%3D0.002412&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=nlabel-b&ssp=3756&refresh=1
IP 116.202.60.158:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=8865220444594414094&pid=0&site=29875&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vjav.tube&hostname=auc-banner-hz-6&site_id=0&spot_id=29875&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.002412&placement_type_id=&skin_test=&verify_hash=&score=99.79989500882056&ml=&tag_ab=b&v2=0&ttl=&space_id=29875&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D29875%26source%3D0%26idzone%3D1920762%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D29875%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D29875%26p%3Dhttps%253A%252F%252Fvjav.tube%252Fmain%252F%26katds_labels%3D%26btype%3D0%26score%3D99.79989500882056%26bf%3D0.002412&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=nlabel-b&ssp=3756&refresh=1 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbrennab.com/get/?go=1&data=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Sun, 05 Feb 2023 06:23:09 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=29875&source=0&idzone=1920762&w=300&h=250&mo=&ve=&site_id=29875&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=29875&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=99.79989500882056&bf=0.002412
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=29874&source=0&idzone=1920760&w=300&h=250&mo=&ve=&site_id=29874&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=29874&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=99.8000342093474&bf=0.002398
109.206.181.2302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=29874&source=0&idzone=1920760&w=300&h=250&mo=&ve=&site_id=29874&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=29874&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=99.8000342093474&bf=0.002398
IP 109.206.181.2:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=29874&source=0&idzone=1920760&w=300&h=250&mo=&ve=&site_id=29874&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=29874&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=99.8000342093474&bf=0.002398 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Cookie: 952.0=1; 912.0=1; 1624.0=1; 1625.0=1; 1629.0=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://12007250.pix-cdn.org/a/pjexo.html?idzone=1920760&w=300&h=250&ad_sub=0
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 912.0=1; expires=Mon, 06 Feb 2023 06:23:09 GMT; path=/; secure; SameSite=None
1624.0=1; expires=Mon, 06 Feb 2023 06:23:09 GMT; path=/; secure; SameSite=None
1625.0=1; expires=Mon, 06 Feb 2023 06:23:09 GMT; path=/; secure; SameSite=None
1629.0=1; expires=Mon, 06 Feb 2023 06:23:09 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=29875&source=0&idzone=1920762&w=300&h=250&mo=&ve=&site_id=29875&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=29875&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=99.79989500882056&bf=0.002412
109.206.181.2302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=29875&source=0&idzone=1920762&w=300&h=250&mo=&ve=&site_id=29875&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=29875&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=99.79989500882056&bf=0.002412
IP 109.206.181.2:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=29875&source=0&idzone=1920762&w=300&h=250&mo=&ve=&site_id=29875&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=29875&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=99.79989500882056&bf=0.002412 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Cookie: 952.0=1; 912.0=1; 1624.0=1; 1625.0=1; 1629.0=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://tsyndicate.com/iframes2/32b9f150b3c14f2ca0a16bdb66bdf6fa.html?subid=0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: *
set-cookie: 912.0=1; expires=Mon, 06 Feb 2023 06:23:09 GMT; path=/; secure; SameSite=None
1624.0=1; expires=Mon, 06 Feb 2023 06:23:09 GMT; path=/; secure; SameSite=None
1625.0=1; expires=Mon, 06 Feb 2023 06:23:09 GMT; path=/; secure; SameSite=None
1629.0=1; expires=Mon, 06 Feb 2023 06:23:09 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=29877&source=0&idzone=1920768&w=300&h=250&mo=&ve=&site_id=29877&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=29877&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=100&bf=0.003938
109.206.181.2302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=29877&source=0&idzone=1920768&w=300&h=250&mo=&ve=&site_id=29877&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=29877&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=100&bf=0.003938
IP 109.206.181.2:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=29877&source=0&idzone=1920768&w=300&h=250&mo=&ve=&site_id=29877&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=29877&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=100&bf=0.003938 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Cookie: 952.0=1; 912.0=1; 1624.0=1; 1625.0=1; 1629.0=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://tsyndicate.com/iframes2/44132dc7dc4c45c888d2766303bce35c.html?subid=0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: *
set-cookie: 912.0=1; expires=Mon, 06 Feb 2023 06:23:09 GMT; path=/; secure; SameSite=None
1624.0=1; expires=Mon, 06 Feb 2023 06:23:09 GMT; path=/; secure; SameSite=None
1625.0=1; expires=Mon, 06 Feb 2023 06:23:09 GMT; path=/; secure; SameSite=None
1629.0=1; expires=Mon, 06 Feb 2023 06:23:09 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 09f481ffc66516b69f393113acdc7121
140da1efc695692cfaea747d02341dd9671b3e60
db46ac7009f3a90e9c28914a75a2488a1424d369e921432a0b873531c1bf7f01
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DB46AC7009F3A90E9C28914A75A2488A1424D369E921432A0B873531C1BF7F01"
Last-Modified: Sat, 04 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8619
Expires: Sun, 05 Feb 2023 08:46:48 GMT
Date: Sun, 05 Feb 2023 06:23:09 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 09f481ffc66516b69f393113acdc7121
140da1efc695692cfaea747d02341dd9671b3e60
db46ac7009f3a90e9c28914a75a2488a1424d369e921432a0b873531c1bf7f01
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DB46AC7009F3A90E9C28914A75A2488A1424D369E921432A0B873531C1BF7F01"
Last-Modified: Sat, 04 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8619
Expires: Sun, 05 Feb 2023 08:46:48 GMT
Date: Sun, 05 Feb 2023 06:23:09 GMT
Connection: keep-alive
5bc16ad8c6.b20c64fd8f.com/get/
94.130.197.134200 OK 2.8 kB URL HTTP/2 5bc16ad8c6.b20c64fd8f.com/get/
IP 94.130.197.134:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with very long lines (2816), with no line terminators
Hash 61e3d09cd257fdbc7b28f55472bec623
fb4eacb94c789e36d5118a9bdf5da4973316896b
0b5d934d18b54a2fc79a3d0fa4e9588d8aceb36203360085bcf274a16d5281d1
POST /get/ HTTP/1.1
Host: 5bc16ad8c6.b20c64fd8f.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vjav.tube/
Content-Type: text/plain;charset=UTF-8
Origin: https://vjav.tube
Content-Length: 591
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.16.0
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: application/json
content-length: 2816
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
tsyndicate.com/iframes2/32b9f150b3c14f2ca0a16bdb66bdf6fa.html?subid=0
136.243.80.153200 OK 3.0 kB URL HTTP/2 tsyndicate.com/iframes2/32b9f150b3c14f2ca0a16bdb66bdf6fa.html?subid=0
IP 136.243.80.153:0
ASN #24940 Hetzner Online GmbH
Hash abde59b8ab2d638cac3c74b1787ef761
cde6622336a56cc934b0e941ffadfd5425cb3c36
d36361320ec5c978758f1af291c12dc0195760bfb39b13d6515c3bf74e43bd4e
GET /iframes2/32b9f150b3c14f2ca0a16bdb66bdf6fa.html?subid=0 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: 8b3571edf2a79b9a
set-cookie: ts_uid=43194d82-fb27-4744-9f25-1b95db02e177; expires=Sat, 05 Aug 2023 06:23:09 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCxxYZN2zQsDFjRhcWIsYU3BLjoYgyE2PYuFHDhsIaOHJ06aMg; expires=Mon, 06 Feb 2023 06:23:09 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
ads.realsrv.com/ads.js
185.76.9.26200 OK 1.8 kB IP 185.76.9.26:0
ASN #60068 Datacamp Limited
File type HTML document text\012- HTML document, ASCII text, with very long lines (4163), with no line terminators
Hash 9ac7d758a349b651b9962e992617f18d
f0acf0aba486f4bcb347c52271bf399d4c6d8dcd
9ed58e103d0fbbe3562ae2afcd0aa960b16761f4aa4d4bb2c7a3ebc70f6d806a
GET /ads.js HTTP/1.1
Host: ads.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://12007250.pix-cdn.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: application/javascript
etag: W/"f4fddb85b686269b678e3caf766"
expires: Thu, 02 Feb 2023 18:45:37 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1675579621
server: CDN77-Turbo
x-77-nzt: AblMCRQhCx//mCQAAA
x-77-nzt-ray: af58563012b887a14d4bdf63aa83491c
x-cache: HIT
x-age: 9368
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
syndication.realsrv.com/ads-iframe-display.php?idzone=1920764&type=300x250&p=https%3A//rtbrennab.com/&dt=1675578228530&sub=0&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
95.211.229.245200 OK 829 B URL HTTP/1.1 syndication.realsrv.com/ads-iframe-display.php?idzone=1920764&type=300x250&p=https%3A//rtbrennab.com/&dt=1675578228530&sub=0&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
IP 95.211.229.245:0
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (1688), with no line terminators
Hash e383698da51d3f042d846300cf4eb020
106b2a4bbb16c721ca250e14103e86d9089ad05c
b51e7fad85fa68088840bb1b5cbf0054d58f38bd8389b272353a262d87781da8
GET /ads-iframe-display.php?idzone=1920764&type=300x250&p=https%3A//rtbrennab.com/&dt=1675578228530&sub=0&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://12007250.pix-cdn.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Feb 2023 06:23:09 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263df4b4d8d9c69.183307862129902357%22%3B%7D; expires=Tue, 04 Feb 2025 06:23:09 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
impressions=oslmrxbrnxgxamrcraoxsgeicxbmsbcenxgxamrrobxcageimmccrbebnxgxamcbexxbmgeioslmrxbmnxgxamrroelrxgeicxbmsbocnxgxamrroelrxgeimmccrlaonxgxamrcremlrgeimmccrlacnxgxamcmlarclgeicxbmsboenxgxamrrsrorxgeioslmrxlrnxgxamslescrogeimmccrbxenxgxamrescroogeislsaroornxgxamccolacbgeioslmroemnxgxamrrobxcageioslmrxlsnxgxamrremcslgeicmmsxrbonxgxamsoeamlmgeimmccrlaenxgxamrsxxxmrgeimmccrbeanxgxamcssabxegeicaocmrmanxgxamolcrcergeimcclsxronxgxamsscrmclgeimcclsxmenxgxamrceerargeialbserebnxgxamccrrssogeimcclsxaonxgxamsxsxllxgeicxbmsbxcnxgxamrrrsbaageimrblxebenxgxamselmborgeimcclsxconxgxamrcraoxsgeirbabxabbnxgxamrescroogeimcclsxacnxgxamsscrmclgeicmmsxaeenxgxamcmrmsrmgeialbsereanxgxamsoeabscgeicaxsscmbnxgxamsosomemgeimcclosconxgxamrrxsoaageimcclsoeonxgxamrcraoxsgeimcclsxlcnxgxamrrxsoaageimcclossbnxgxamcscxaesgeimcclsxscnxgxamsmoooeegeimcclsxlenxgxamcbrorxbgeimaecseaenxgxamrcremlrgeimaecsxcbnxgxamsmoooeegeimcclsxoanxgxamclrbcelgeimcclsxlbnxgxamcrbalrageimccloscanxgxamrrobxcageiclsmrbsonxgxamsmmrbmbgeiclsmarsenxgxamsmmrbmbgeiccmmllebnxgxamclarlmmgeimcclsxsbnxgxamrroelrxgeiclsmrbxonxgxamsbebceegeiclsmrbxcnxgxamsbebceegeiclsmarscnxgxamsbebceegeiccmmlmlcnxgxamsbebceegeiclsmarrenxgxamsbebceegeicaormbaonxgxamsbxxbsrgeicaormlrenxgxamcememscgeimcclsxlonxgxamcsmlmxcgeimrblelronxgxamsbremaegeimaecsxobnxgxamsbremaegeiclsmrbrcnxgxamsbroemmgeiclsmrraanxgxamclsslaegeiclsmrmxbnxgxamsbroemmgeimccloscenxgxamrcraoxsgeimcclsxxonxgxamslescrogeimrblelxbnxgxamslescrogeimcclsoeenxgxamclrbcelgeimrblelmonxgxamcxcrasxgeimrbleloenxgxamcxcrasxgeiclsmrrmanxgxamcxabcxbgeiclsmrbeonxgxamcxabcxbgeiclsmrrcenxgxamcxabcxbgeiclsmrmxanxgxamcxabcxbgeiclsmrbxenxgxamcxabcxbgeiclsmaroonxgxamcxabcxbgeialbserxenxgxamcosraregeimcclsxsenxgxamrcraoxsgeimcclsxlanxgxamcblrlbcgeiccmmlleanxgxamccrrssogeicaormlabnxgxamcrllsmageicaormlconxgxamcrllsmageiclsmarsonxgxamclsslaegeiclsmrmlbnxgxamclsslaegeiclsmrmocnxgxamclsslaegeiccmmllecnxgxamclsslaegeimcclsxcanxgxamrceerscgeimrblelcenxgxamclrbcelgeimaecsxrcnxgxamclrbcelgeialbserxonxgxamclarlmmgeimcclosscnxgxamrceerscgeimaecobronxgxamrescroogeimaecobeenxgxamrescroogeimcclosccnxgxamrescroogeimaecoboonxgxamrescroogeimrblxelenxgxamrescroogeimaecsxccnxgxamrcremlrgeimlxbaxlonxgxamrcraoxsgeimlxbaxbanxgxamrcaxocmgeimxlbmoscnogxamrclresagxcceimboslabcnxgxamrclresagxcceimcssmlrcnsgxamrclresagxcceimblelamanxgxamrclresagxcceimbbcemoancgxamrclrcergxcceialaroxrcnxgxamrclaermgxcceimxeemblbnogxamrclaeaegxcceialrexeoonxgxamrclamblgxcceimaoobbebnxgxamrclablagxcceimclsaoxbncgxamrclablagxcceimlxmrlxonxgxamrrexelcgxcceimlxocxobnbgxamrrexelcgxcceixaoosscrnxgxamrrexelcgxcceimxxerreonxgxamrreosbmgxcceimxlbmosonogxamrreosbbgxcceialbbebsanxgxamrreosbbgxcceimlxocxoonxgxamrreosblgxcceimbbcemobncgxamrreosblgxcceimaooloranxgxamrreoslxgxcceimeembescnxgxamrreoslogxcceicmarxbbonsgxamrreoslogxcceimxlbmosenogxamrrecasxgxcceimlxbaxbonxgxamrroelrxgeimsacexoonxgxamrremcslgxcceixaoossalnxgxamrrelbergxcceimbscxmobnxgxamrrelbergxcceimeembecenxgxamrrxemecgxcceimxlbmxlcnogxamrrxobrlgxcceimmooobronxgxamrrxolcogxcceimmooobrbnxgxamrrxolcogxcceimmooobranxgxamrrxolcogxcceimbscxmoanxgxamrrxolcogxcceimcssmlrensgxamrrxolcogxcceimeembesonogxamrrxsoamgxcceimrmaobxanogxamrrxmabrgxcceirrmlllronxgxamrroelrxgxcceialbbebsbnxgxamrroelrxgxcceimxxerrxenxgxamrroelrxgxcceimblelabensgxamrroelrxgxcceimbrsslsanxgxamrroelrxgxcceimbclraroncgxamrroelrxgxcceicloaxxmonxgxamrroelrxgxcceimeelaclanrgxamrrocsalgxcceimxeemlxenxgxamrrocsalgxcceimeelaclcnbgxamrrocsalgxcceimeelaclonrgxamrrocsalgxcceiceecmorsnxgxamrromambgxcceimlxbaxlanxgxamrrobxcageimxlbalscnogxamrrobxcagxcceicloaxxabnxgxamrrobxcagxcceimbsblroanbgxamrrsoxsxgxcceimxlbmosanogxamrrsscacgxcceimlxmrlxenxgxamrrscmsagxcceimaoolslanxgxamrrscmsagxcceimxxerrebnxgxamrrsrorxgxcceimlxbaxlcnxgxamrrsrorxgeimbscxmxanxgxamrrsrorxgxcceicxmecmcanxgxamrrsrorxgxcceimexexabbnxgxamrrsrorxgxcceimcssmlronsgxamrrsmbelgxcceimbscxmoonxgxamrrsmbelgxcceimbamerlbnxgxamrrslacmgxcceimxlbmoconxgxamrrcsobrgxcceimxlbalsbnogxamrrcmxxegxcceimrxccosenxgxamrrreclogxcceimocbmmacnxgxamrrrealegxcceimraeelsanxgxamrrrealegxcceimxlbalcencgxamrrrebobgxcceimxlbmxlenogxamrrrebolgxcceimemlxmcbnxgxamrrrebolgxcceimsleoaronxgxamrrrebolgxcceimxxerreanxgxamrrrebolgxcceimbscxmocnxgxamrrrsbaagxcceimxxerrecnxgxamrrrsbaagxcceimlxbaxbcnxgxamrrrsbaageimxlbmxlonogxamrracbslgxcceicloaxxaanxgxamrrabasmgxcceimblrcssenxgxamrrmxrsagxcceicloaxxacnxgxamrrmxrsagxcceimblrcsoanxgxamrrmxrsagxcceimblrcsscnxgxamrrmxrsagxcceimblrcssonxgxamrrmxrsagxcceicloaxxmenxgxamrrmoocsgxcceimmcoaalonxgxamrrmmrssgxcce; expires=Mon, 06 Feb 2023 06:23:09 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s3t3d2y8.afcdn.net/library/428515/afaf6b58a8d6050615369f81598d4bd126bd021e.webp
185.76.9.19200 OK 13 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/428515/afaf6b58a8d6050615369f81598d4bd126bd021e.webp
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8da76954e810412b8ec5378d8480ab45
afaf6b58a8d6050615369f81598d4bd126bd021e
4f186cbdc1268f6ab21f0e5bc6dfa6dce0c52fb60dec007a79e2c41d41bc4293
GET /library/428515/afaf6b58a8d6050615369f81598d4bd126bd021e.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.realsrv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: image/webp
content-length: 13180
last-modified: Fri, 31 Dec 2021 10:19:16 GMT
etag: "61ced924-337c"
expires: Fri, 30 Jun 2023 11:26:51 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195238
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ21cVv/J64gAQ
x-77-nzt-ray: c0a4cc286a051cb64d4bdf63c77b4c27
x-cache: HIT
x-age: 18918951
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/428515/5ceded664676db96d2b3b5382cb17da5e728eefc.webp
185.76.9.19200 OK 12 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/428515/5ceded664676db96d2b3b5382cb17da5e728eefc.webp
IP 185.76.9.19:0
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f873befbe3e52bba71c605062b1ff845
5ceded664676db96d2b3b5382cb17da5e728eefc
480a21117ecb1dac929af83d77cf4e57cb2342a2d424c5b798edf6379d472a41
GET /library/428515/5ceded664676db96d2b3b5382cb17da5e728eefc.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.realsrv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: image/webp
content-length: 12098
last-modified: Fri, 31 Dec 2021 10:19:16 GMT
etag: "61ced924-2f42"
expires: Fri, 30 Jun 2023 11:13:27 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195274
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCQ2+KzX/A64gAQ
x-77-nzt-ray: c0a4cc286a051cb64d4bdf63aa367427
x-cache: HIT
x-age: 18918915
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
12007250.pix-cdn.org/a/pjexo.html?idzone=1920764&w=300&h=250&ad_sub=0
45.133.44.25200 OK 863 B URL HTTP/2 12007250.pix-cdn.org/a/pjexo.html?idzone=1920764&w=300&h=250&ad_sub=0
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
Hash d142568efb6fb933fae98de0a80a0c5c
7bc26674677a9b41e02f144408fc8160fa88439b
e1dcbfaf5a0185ac7ffc7cef06ceae51810d5e744616363aec573f2d6a66861d
GET /a/pjexo.html?idzone=1920764&w=300&h=250&ad_sub=0 HTTP/1.1
Host: 12007250.pix-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: text/html; charset=UTF-8
last-modified: Wed, 20 May 2020 13:08:32 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OGd1Zyf1wVYM7MR9IxrDZyOK4FlagkOMkCy8CUGxtUkTG0osE6%2FLbxc3AyDZfsfEAirTD%2FWAD1VngHa0qpnMQnHBOU9mz1z86WezD6eSHTli1t0z6dGcg%2FpdO3sr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 77853ef9ec004163-HAM
content-encoding: gzip
alt-svc: h2=":443"; ma=60
expires: Sun, 05 Feb 2023 07:23:09 GMT
cache-control: max-age=3600
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
tsyndicate.com/iframes2/44132dc7dc4c45c888d2766303bce35c.html?subid=0
136.243.80.153200 OK 5.3 kB URL HTTP/2 tsyndicate.com/iframes2/44132dc7dc4c45c888d2766303bce35c.html?subid=0
IP 136.243.80.153:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3808)
Hash d4052a163c43447202590b9034004daf
c782ce3028bb14d452eb57ef38dd17c2e1f42aa9
5b79795910de76daaa93b4de71f2b16899f1a8e38a56ad2d22c64507afca423e
GET /iframes2/44132dc7dc4c45c888d2766303bce35c.html?subid=0 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: d147f51c72816389
set-cookie: ts_uid=468d77f7-195b-41e0-912a-e5c3cf39d0a5; expires=Sat, 05 Aug 2023 06:23:09 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCxxYZN2zQsDFjRhcWIsYU3BLjoYgyE2PYuFHDhsIaOHJ06aMg; expires=Mon, 06 Feb 2023 06:23:09 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
8.254.252.210304 Not Modified 0 B URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP 8.254.252.210:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=43194d82-fb27-4744-9f25-1b95db02e177; bfq=APeIECNCxxYZN2zQsDFjRhcWIsYU3BLjoYgyE2PYuFHDhsIaOHJ06aMg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
TE: trailers
HTTP/2 304 Not Modified
date: Sun, 05 Feb 2023 06:23:09 GMT
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 28843926
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5d3d2ce0b7cd5712a0c9453dd888a9f9
5f05097510cb7cbf48738c9b5efa3e1ff6a18f9e
1a6f08f69fa9404f2a6e462797884d22edc7cf7f21e89da273adac2c80693479
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1A6F08F69FA9404F2A6E462797884D22EDC7CF7F21E89DA273ADAC2C80693479"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4903
Expires: Sun, 05 Feb 2023 07:44:53 GMT
Date: Sun, 05 Feb 2023 06:23:10 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 314 B IP 93.184.220.29:0
Hash 6af16d067871048ec2e2cdc0dbb087f8
bb31231bfd24a0aa3de7551c64e45a793d11025c
0bc2663bc1786864847e5b99735ee7e167388ac690a005817ea3ba91f1c4e86e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5027
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 06:23:10 GMT
Last-Modified: Sun, 05 Feb 2023 04:59:23 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 314
rtbrennab.com/get/?go=1&data=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
116.202.60.158200 OK 1.3 kB URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP 116.202.60.158:0
ASN #24940 Hetzner Online GmbH
Hash 128a2ad0cdbd66cbdddddee2f4334bc7
43361e7760b6eaeae9a6b2f9c9b67ab17e0884d6
e4d1083919eb539ec37191c02b2b88fe2887f96d28a0662d866abca88f64bce1
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
hw-cdn2.adtng.com/delivery/intersection_observer/IntersectionObserver.js
209.197.3.25200 OK 17 kB URL HTTP/1.1 hw-cdn2.adtng.com/delivery/intersection_observer/IntersectionObserver.js
IP 209.197.3.25:0
File type ASCII text, with very long lines (16885), with no line terminators
Hash 48c80c7c28b5b00a8b4ff94a22b72fe3
d57303c2ad2fd5cedc5cb20f264a6965a7819cee
6e9be773031b3234fb9c2d6cf3d9740db1208f4351beca325ec34f76fd38f356
GET /delivery/intersection_observer/IntersectionObserver.js HTTP/1.1
Host: hw-cdn2.adtng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.adtng.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 06:23:10 GMT
Connection: Keep-Alive
ETag: "1649192094"
Content-Length: 16885
Content-Type: application/javascript
Last-Modified: Tue, 05 Apr 2022 20:54:54 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10721591
X-HW: 1675578190.dop203.sk1.t,1675578190.cds068.sk1.shn,1675578190.dop203.sk1.t,1675578190.cds228.sk1.c
Access-Control-Allow-Origin: *
0f6e7d3222.ba33938e50.com/in/multy
168.119.25.22200 OK 21 kB URL HTTP/2 0f6e7d3222.ba33938e50.com/in/multy
IP 168.119.25.22:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (20936), with no line terminators
Hash 13c39bb42f590076f1a46db153bfc77e
de4eccecc4bbc63d97794a24a14e69ca25d966f0
a3e252125bc38da82fdaa7e3fe37e0980d12519de1d9ad3156b70f4ce944a843
POST /in/multy HTTP/1.1
Host: 0f6e7d3222.ba33938e50.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1628
Origin: https://vjav.tube
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 05 Feb 2023 06:23:10 GMT
content-type: application/json
content-length: 20938
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
0f6e7d3222.ba33938e50.com/in/show/?mid=3016915085888411477&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1238912481&sid=3762898344&cid=13433&price=0.0031&is_cpm=0&cpm=0&ecpm=0.06328669539124947&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.24.1&ver_c=&refdom=vjav.tube&hostname=auc-inpage-hz-6-c&site_id=3150&spot_id=50&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-02-05&is_native=2&auction_queue=0&burl=by2JKmUsu6UMW_nFK5ry83xKD4CIKebrmHB0nF8eYXVN5fTUAAyAcg&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5350&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.009855020361963649&placement_type_id=&skin_test=0&verify_hash=7cbddf3c60ff8e7fc9790d9badda289c&score=53.133338069609835&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1238912481%26spot_id%3D50%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fvjav.tube%252F%26idzone%3D4438152%26sid%3D1886&ml=&tag_ab=b&original_bid=0.0031&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=KFsD2w_VKlpa_lKBqC9jKAbLuFnS56dmyiSfGTUbvkzdxGJklCJIiXK6l7k-L3qpGPGh3mqHGhmMYHWMGqv0WxaPf7QwbscoKQXIcKu0BuWUk4em3SxVfW-6FDy4IxtDbr22tuZFcv6AkFbDF76dtWzgQlmza6syXjOB6utN-TebEup0dQ&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=4&vertical_id=0&real_bid=0.0027264499999999996&pr=&user_keywords=&auc_type=1&aid=3335&ext_cid=0&device_theme=light&keywords=Japanese,Asian,Adult&label_ids=4,83,89,0&conditions=dch_ip,tz_offset,all&need_redirect_show=0&mlf=1&cpa=68fc851c-4d1b-4b6d-978a-e43d3bca34cb&mlc=1&format=social-scale-b_r-body
168.119.25.22200 OK 0 B URL HTTP/2 0f6e7d3222.ba33938e50.com/in/show/?mid=3016915085888411477&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1238912481&sid=3762898344&cid=13433&price=0.0031&is_cpm=0&cpm=0&ecpm=0.06328669539124947&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.24.1&ver_c=&refdom=vjav.tube&hostname=auc-inpage-hz-6-c&site_id=3150&spot_id=50&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-02-05&is_native=2&auction_queue=0&burl=by2JKmUsu6UMW_nFK5ry83xKD4CIKebrmHB0nF8eYXVN5fTUAAyAcg&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5350&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.009855020361963649&placement_type_id=&skin_test=0&verify_hash=7cbddf3c60ff8e7fc9790d9badda289c&score=53.133338069609835&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1238912481%26spot_id%3D50%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fvjav.tube%252F%26idzone%3D4438152%26sid%3D1886&ml=&tag_ab=b&original_bid=0.0031&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=KFsD2w_VKlpa_lKBqC9jKAbLuFnS56dmyiSfGTUbvkzdxGJklCJIiXK6l7k-L3qpGPGh3mqHGhmMYHWMGqv0WxaPf7QwbscoKQXIcKu0BuWUk4em3SxVfW-6FDy4IxtDbr22tuZFcv6AkFbDF76dtWzgQlmza6syXjOB6utN-TebEup0dQ&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=4&vertical_id=0&real_bid=0.0027264499999999996&pr=&user_keywords=&auc_type=1&aid=3335&ext_cid=0&device_theme=light&keywords=Japanese,Asian,Adult&label_ids=4,83,89,0&conditions=dch_ip,tz_offset,all&need_redirect_show=0&mlf=1&cpa=68fc851c-4d1b-4b6d-978a-e43d3bca34cb&mlc=1&format=social-scale-b_r-body
IP 168.119.25.22:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=3016915085888411477&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1238912481&sid=3762898344&cid=13433&price=0.0031&is_cpm=0&cpm=0&ecpm=0.06328669539124947&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.24.1&ver_c=&refdom=vjav.tube&hostname=auc-inpage-hz-6-c&site_id=3150&spot_id=50&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-02-05&is_native=2&auction_queue=0&burl=by2JKmUsu6UMW_nFK5ry83xKD4CIKebrmHB0nF8eYXVN5fTUAAyAcg&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5350&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.009855020361963649&placement_type_id=&skin_test=0&verify_hash=7cbddf3c60ff8e7fc9790d9badda289c&score=53.133338069609835&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1238912481%26spot_id%3D50%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fvjav.tube%252F%26idzone%3D4438152%26sid%3D1886&ml=&tag_ab=b&original_bid=0.0031&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=KFsD2w_VKlpa_lKBqC9jKAbLuFnS56dmyiSfGTUbvkzdxGJklCJIiXK6l7k-L3qpGPGh3mqHGhmMYHWMGqv0WxaPf7QwbscoKQXIcKu0BuWUk4em3SxVfW-6FDy4IxtDbr22tuZFcv6AkFbDF76dtWzgQlmza6syXjOB6utN-TebEup0dQ&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FUS%2FUS_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp&skin_id=4&vertical_id=0&real_bid=0.0027264499999999996&pr=&user_keywords=&auc_type=1&aid=3335&ext_cid=0&device_theme=light&keywords=Japanese,Asian,Adult&label_ids=4,83,89,0&conditions=dch_ip,tz_offset,all&need_redirect_show=0&mlf=1&cpa=68fc851c-4d1b-4b6d-978a-e43d3bca34cb&mlc=1&format=social-scale-b_r-body HTTP/1.1
Host: 0f6e7d3222.ba33938e50.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 05 Feb 2023 06:23:10 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
0f6e7d3222.ba33938e50.com/in/show/?mid=3016915085888411477&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1238912481&sid=3762898344&cid=12694&price=0&is_cpm=1&cpm=0.036&ecpm=0.036&crid=2240&crtid=f70aa6a0d437f901eea3e30be1aacaa8&tcid=0&out_id=0&ver=8.24.1&ver_c=&refdom=vjav.tube&hostname=auc-inpage-hz-6-c&site_id=3150&spot_id=50&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1675750989&created_at=2023-02-05&is_native=1&auction_queue=0&burl=LULE7FKr5bQ59WGELMIGbZ56eU1kZEEZ4r7vUg3l1qIiVYu9C5EexA&pop_winurl=&ip=91.90.42.154&testab=0&px_id=7350&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.0023959409483345763&placement_type_id=&skin_test=0&verify_hash=2eaa3f54b456893747a1862f777b5663&score=53.133338069609835&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1238912481%26spot_id%3D50%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fvjav.tube%252F%26idzone%3D4438152%26sid%3D1886&ml=&tag_ab=b&original_bid=0.036&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=uA3SIqoHcqLVTKAYDx0bTxDV3i1MHh9eqX0YmjHs2imOAfxcPCyTM7ln4S0BQ62ao5IpbbeubLyyv2i8DXmRk_guXbxAtIu8tDdgfWj3CJ7O9kU_LbR3w4rOAbWezCVvpWpsD2Y8rj89xlmLfwCmPYiDJ08zlFXPLYSMle74bQWDHdSkAp6cEmzutRHx8G0nYnzz5R-49dH3wWjCuM1dv-Oru7_Na5mPAbSllsM6B7Ne6CJm0W6O2Lz-PkiKvaUZgAzZ2lg33pZr08lXu2zFD7y9KLTB81wgyIUv17-4H1F43TkHD9FyqEGJGEj-7VXMFmJAfPUVoTw7CBSIFfwzethvjd8MQSaG0jbGObaWVzNpbYlzi-9kCxXY8v_eV8xZrPz21bBNR3iYWZ-65CkuMvWE-KPlUxfLfC4viccd7X8deHpl24Lw2ysQOmL4cqzr_NsMnWcnSqTLOXE078nWA1YgYkLekS75Cc_ZtDQRo6wchJocDcXCw4b9E-HOmXUB_aAuRzixHdT73KNw1TA42hbZlP3nBG7kDGc8HpqBtgH_MwlYLM9fS7HKY1s3rpI5eUvxCYbUON3IkBd4UG6iapvZxxk2I7rNqUGQEZLFtjfTSQNGoSi0Lu_E5eGvWTJK1xpNkfTDvurfMEV_7xSKk0ZOqBm64g1bclv9dADl-6A94Zyj2PcsEPG5g7eo-3R6ECydGCxrA47VjurroTHosoE89z5_57_1avO4hgGRAV9vU-Onca-wU2Vccl-OQoKveMe7ygKbouHvdi9JJb6UfMBrh0pyEksnftGd4g1fjlOUp1cnK2uQW5dWziKpvkEIK3z6iHrIQql5u44X8NMY9psNoMVzn3jjsvahnBaUcs_s85yoKXB1GGrg_pgw5NCzA6cNshTdhzbn7jTYvDlh2HoQwZdPz5KxnSSCkmo1j2N17Y1XHEgARI7qmFeBbSdpNJWyTZrDGyHShDwOoJjuJpCBexhYxU_O4NYBWbIb2YEjofDs7MqIcyS1aiHeOABNsH5HuZP59NYpiFeYWJLB2IK40SzH9z0cvhu858fCesivg_Dbc0GBq6yrUvARYafW9y1HMpxL9R9_sZ811V2lbIoYH8sxYPvX9-Aq0CJwe4v7pmB0TCzYTMjwEl1UE-O8WBnA5nhX5MJP5Rqm19vmBx15e6tFybu_HECLka66Gf7QgwMVfF-pj2kW37CXi72-79ln8RPSixOLcPFQC18h7gQchCYOWJo5fux8&image_url=https%3A%2F%2F12112336.pix-cdn.org%2Fm%2Fp%2F0%2F374%2F374539%2Fconversions%2FuaDvnmZE-minify.jpg&skin_id=4&vertical_id=0&real_bid=0.036&pr=&user_keywords=&auc_type=1&aid=127&ext_cid=100266&device_theme=light&keywords=Japanese,Asian,Adult&label_ids=4,90,5,0&conditions=dch_ip,tz_offset,all&need_redirect_show=0&cpa=883d2ab8-83c5-412b-9eb9-47e9a7ab130c&format=social-scale-b_r-body
168.119.25.22200 OK 0 B URL HTTP/2 0f6e7d3222.ba33938e50.com/in/show/?mid=3016915085888411477&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1238912481&sid=3762898344&cid=12694&price=0&is_cpm=1&cpm=0.036&ecpm=0.036&crid=2240&crtid=f70aa6a0d437f901eea3e30be1aacaa8&tcid=0&out_id=0&ver=8.24.1&ver_c=&refdom=vjav.tube&hostname=auc-inpage-hz-6-c&site_id=3150&spot_id=50&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1675750989&created_at=2023-02-05&is_native=1&auction_queue=0&burl=LULE7FKr5bQ59WGELMIGbZ56eU1kZEEZ4r7vUg3l1qIiVYu9C5EexA&pop_winurl=&ip=91.90.42.154&testab=0&px_id=7350&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.0023959409483345763&placement_type_id=&skin_test=0&verify_hash=2eaa3f54b456893747a1862f777b5663&score=53.133338069609835&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1238912481%26spot_id%3D50%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fvjav.tube%252F%26idzone%3D4438152%26sid%3D1886&ml=&tag_ab=b&original_bid=0.036&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=uA3SIqoHcqLVTKAYDx0bTxDV3i1MHh9eqX0YmjHs2imOAfxcPCyTM7ln4S0BQ62ao5IpbbeubLyyv2i8DXmRk_guXbxAtIu8tDdgfWj3CJ7O9kU_LbR3w4rOAbWezCVvpWpsD2Y8rj89xlmLfwCmPYiDJ08zlFXPLYSMle74bQWDHdSkAp6cEmzutRHx8G0nYnzz5R-49dH3wWjCuM1dv-Oru7_Na5mPAbSllsM6B7Ne6CJm0W6O2Lz-PkiKvaUZgAzZ2lg33pZr08lXu2zFD7y9KLTB81wgyIUv17-4H1F43TkHD9FyqEGJGEj-7VXMFmJAfPUVoTw7CBSIFfwzethvjd8MQSaG0jbGObaWVzNpbYlzi-9kCxXY8v_eV8xZrPz21bBNR3iYWZ-65CkuMvWE-KPlUxfLfC4viccd7X8deHpl24Lw2ysQOmL4cqzr_NsMnWcnSqTLOXE078nWA1YgYkLekS75Cc_ZtDQRo6wchJocDcXCw4b9E-HOmXUB_aAuRzixHdT73KNw1TA42hbZlP3nBG7kDGc8HpqBtgH_MwlYLM9fS7HKY1s3rpI5eUvxCYbUON3IkBd4UG6iapvZxxk2I7rNqUGQEZLFtjfTSQNGoSi0Lu_E5eGvWTJK1xpNkfTDvurfMEV_7xSKk0ZOqBm64g1bclv9dADl-6A94Zyj2PcsEPG5g7eo-3R6ECydGCxrA47VjurroTHosoE89z5_57_1avO4hgGRAV9vU-Onca-wU2Vccl-OQoKveMe7ygKbouHvdi9JJb6UfMBrh0pyEksnftGd4g1fjlOUp1cnK2uQW5dWziKpvkEIK3z6iHrIQql5u44X8NMY9psNoMVzn3jjsvahnBaUcs_s85yoKXB1GGrg_pgw5NCzA6cNshTdhzbn7jTYvDlh2HoQwZdPz5KxnSSCkmo1j2N17Y1XHEgARI7qmFeBbSdpNJWyTZrDGyHShDwOoJjuJpCBexhYxU_O4NYBWbIb2YEjofDs7MqIcyS1aiHeOABNsH5HuZP59NYpiFeYWJLB2IK40SzH9z0cvhu858fCesivg_Dbc0GBq6yrUvARYafW9y1HMpxL9R9_sZ811V2lbIoYH8sxYPvX9-Aq0CJwe4v7pmB0TCzYTMjwEl1UE-O8WBnA5nhX5MJP5Rqm19vmBx15e6tFybu_HECLka66Gf7QgwMVfF-pj2kW37CXi72-79ln8RPSixOLcPFQC18h7gQchCYOWJo5fux8&image_url=https%3A%2F%2F12112336.pix-cdn.org%2Fm%2Fp%2F0%2F374%2F374539%2Fconversions%2FuaDvnmZE-minify.jpg&skin_id=4&vertical_id=0&real_bid=0.036&pr=&user_keywords=&auc_type=1&aid=127&ext_cid=100266&device_theme=light&keywords=Japanese,Asian,Adult&label_ids=4,90,5,0&conditions=dch_ip,tz_offset,all&need_redirect_show=0&cpa=883d2ab8-83c5-412b-9eb9-47e9a7ab130c&format=social-scale-b_r-body
IP 168.119.25.22:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=3016915085888411477&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1238912481&sid=3762898344&cid=12694&price=0&is_cpm=1&cpm=0.036&ecpm=0.036&crid=2240&crtid=f70aa6a0d437f901eea3e30be1aacaa8&tcid=0&out_id=0&ver=8.24.1&ver_c=&refdom=vjav.tube&hostname=auc-inpage-hz-6-c&site_id=3150&spot_id=50&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1675750989&created_at=2023-02-05&is_native=1&auction_queue=0&burl=LULE7FKr5bQ59WGELMIGbZ56eU1kZEEZ4r7vUg3l1qIiVYu9C5EexA&pop_winurl=&ip=91.90.42.154&testab=0&px_id=7350&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.0023959409483345763&placement_type_id=&skin_test=0&verify_hash=2eaa3f54b456893747a1862f777b5663&score=53.133338069609835&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1238912481%26spot_id%3D50%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fvjav.tube%252F%26idzone%3D4438152%26sid%3D1886&ml=&tag_ab=b&original_bid=0.036&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=uA3SIqoHcqLVTKAYDx0bTxDV3i1MHh9eqX0YmjHs2imOAfxcPCyTM7ln4S0BQ62ao5IpbbeubLyyv2i8DXmRk_guXbxAtIu8tDdgfWj3CJ7O9kU_LbR3w4rOAbWezCVvpWpsD2Y8rj89xlmLfwCmPYiDJ08zlFXPLYSMle74bQWDHdSkAp6cEmzutRHx8G0nYnzz5R-49dH3wWjCuM1dv-Oru7_Na5mPAbSllsM6B7Ne6CJm0W6O2Lz-PkiKvaUZgAzZ2lg33pZr08lXu2zFD7y9KLTB81wgyIUv17-4H1F43TkHD9FyqEGJGEj-7VXMFmJAfPUVoTw7CBSIFfwzethvjd8MQSaG0jbGObaWVzNpbYlzi-9kCxXY8v_eV8xZrPz21bBNR3iYWZ-65CkuMvWE-KPlUxfLfC4viccd7X8deHpl24Lw2ysQOmL4cqzr_NsMnWcnSqTLOXE078nWA1YgYkLekS75Cc_ZtDQRo6wchJocDcXCw4b9E-HOmXUB_aAuRzixHdT73KNw1TA42hbZlP3nBG7kDGc8HpqBtgH_MwlYLM9fS7HKY1s3rpI5eUvxCYbUON3IkBd4UG6iapvZxxk2I7rNqUGQEZLFtjfTSQNGoSi0Lu_E5eGvWTJK1xpNkfTDvurfMEV_7xSKk0ZOqBm64g1bclv9dADl-6A94Zyj2PcsEPG5g7eo-3R6ECydGCxrA47VjurroTHosoE89z5_57_1avO4hgGRAV9vU-Onca-wU2Vccl-OQoKveMe7ygKbouHvdi9JJb6UfMBrh0pyEksnftGd4g1fjlOUp1cnK2uQW5dWziKpvkEIK3z6iHrIQql5u44X8NMY9psNoMVzn3jjsvahnBaUcs_s85yoKXB1GGrg_pgw5NCzA6cNshTdhzbn7jTYvDlh2HoQwZdPz5KxnSSCkmo1j2N17Y1XHEgARI7qmFeBbSdpNJWyTZrDGyHShDwOoJjuJpCBexhYxU_O4NYBWbIb2YEjofDs7MqIcyS1aiHeOABNsH5HuZP59NYpiFeYWJLB2IK40SzH9z0cvhu858fCesivg_Dbc0GBq6yrUvARYafW9y1HMpxL9R9_sZ811V2lbIoYH8sxYPvX9-Aq0CJwe4v7pmB0TCzYTMjwEl1UE-O8WBnA5nhX5MJP5Rqm19vmBx15e6tFybu_HECLka66Gf7QgwMVfF-pj2kW37CXi72-79ln8RPSixOLcPFQC18h7gQchCYOWJo5fux8&image_url=https%3A%2F%2F12112336.pix-cdn.org%2Fm%2Fp%2F0%2F374%2F374539%2Fconversions%2FuaDvnmZE-minify.jpg&skin_id=4&vertical_id=0&real_bid=0.036&pr=&user_keywords=&auc_type=1&aid=127&ext_cid=100266&device_theme=light&keywords=Japanese,Asian,Adult&label_ids=4,90,5,0&conditions=dch_ip,tz_offset,all&need_redirect_show=0&cpa=883d2ab8-83c5-412b-9eb9-47e9a7ab130c&format=social-scale-b_r-body HTTP/1.1
Host: 0f6e7d3222.ba33938e50.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 05 Feb 2023 06:23:10 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash db0fbd0d8cd40a6d6dd0eaefaab7768b
217add18e86b9e605f9006e537f15400b45f0f90
507697d43fda32713698e09eefff9b6e1730774b8da6ca86b131b1cb4a860852
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4835
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 06:23:10 GMT
Last-Modified: Sun, 05 Feb 2023 05:02:35 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
sw.wpu.sh/npc/sdk/common/service-worker.js
45.133.44.24200 OK 2.9 kB URL HTTP/2 sw.wpu.sh/npc/sdk/common/service-worker.js
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (8695)
Hash 1671ed5a74ab91bb574274825da4d442
a1572a8eb9d873860688f275bde743eba1f17de9
a2bd956f5ac4ec56f3719bcf1093b79f3ca917937a38911ad10651e960c81738
GET /npc/sdk/common/service-worker.js HTTP/1.1
Host: sw.wpu.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:10 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 26 Jan 2023 12:22:57 GMT
etag: W/"63d270a1-158c"
content-encoding: gzip
expires: Sun, 05 Feb 2023 06:28:10 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
12112336.pix-cdn.org/m/p/0/374/374539/conversions/uaDvnmZE-minify.jpg
45.133.44.25200 OK 9.0 kB URL HTTP/2 12112336.pix-cdn.org/m/p/0/374/374539/conversions/uaDvnmZE-minify.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70", baseline, precision 8, 300x200, components 3\012- data
Hash ac4fce2099a6cbd7264384fba760fc66
d95ed9daf1b4e01d98b089f6688319cc5e377aad
0e5e7942344997c25d52522d74def5e71eb22337f2fecf13ac63fe940bcdb176
GET /m/p/0/374/374539/conversions/uaDvnmZE-minify.jpg HTTP/1.1
Host: 12112336.pix-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:10 GMT
content-type: image/jpeg
content-length: 9014
server: nginx/1.12.2
last-modified: Sat, 30 Jul 2022 08:18:07 GMT
etag: "62e4e93f-2336"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
pn.bquildna43.site/in/tip_shows/?katds_ep=u27RuxKhEamfsSrTe3OtgSOC3T8fwsLODI2n7LNtrZ8ZwbSskZ8_a4rOqraCC1-yd1Afvf8SigWfhE3hs5X6X4S9cWI4nRoIGTlD_dRZdhNEDXQcxqtG_qyUqhQ6t8rZD0QgOdXL39APfjThAJldxHUSV5Hgmhr39NqWNPDsg1foZkUFR_sXMWQSL2lvE8_PKhYAaAdwLiB4IwK6WSvf4NAC3MG5iFnsjePnsbq94qKF0n9HBw_nSxPTTx1BgkLfmZQ1Ky6cPheg9kjlnPFJEZnYxzbvBhvXh5_CcwVTKdjR7SXrQJjNTR1u6pk0AY_eBzkRW9fFPjxHNo24PlCYdVHc0KJYuVaq8fRyhz9g6IBaJTkrFQrUQ5mXhDtl1fzxCMcVKXWNK-Vrri7d3JoPTN9mO3KHbW5XUTdpIzxu0o2oShMe-A8rkv47F6fwtTPWAlQKX909VeuYl4Gd3uLQ7NrnvkHjOHLIzRurcF2NV2OExphSkorU2csEGj_1pVyUzOwLXVxK1uFgsRfeb7_dgWSNYVb1zTktFyvBaIcIDb6Xnu94r2jzteq_-YL1bWuksPasA-HP7VZlUmCHjUWpNuBYmImWzFJQBglXQfDLsxY69w1VOprhx-9qB4V6ryCW_GK7xr2x_CqLORrju8Pglq9dkgXRx6Aj3iGEr68-GjjmKv76JSVzyhFv1jBWyrC-Hnlr-vemOvi6ngcxGLN7xjlfuFpeF57uAQR0tyhCTZ7AUDyHTOQ5d0K1gSZISu8PvsQhVFHFmkTPxoz2c9irR_Hd_WM2St0Hco6UJ4vPw-2VudGgym14BldxRw&sp=0.02298465503391376&cpa=d87f830e-0c2b-4aae-9001-076caf2860be&format=social-scale-b_r-body
104.21.84.94302 Found 0 B URL HTTP/2 pn.bquildna43.site/in/tip_shows/?katds_ep=u27RuxKhEamfsSrTe3OtgSOC3T8fwsLODI2n7LNtrZ8ZwbSskZ8_a4rOqraCC1-yd1Afvf8SigWfhE3hs5X6X4S9cWI4nRoIGTlD_dRZdhNEDXQcxqtG_qyUqhQ6t8rZD0QgOdXL39APfjThAJldxHUSV5Hgmhr39NqWNPDsg1foZkUFR_sXMWQSL2lvE8_PKhYAaAdwLiB4IwK6WSvf4NAC3MG5iFnsjePnsbq94qKF0n9HBw_nSxPTTx1BgkLfmZQ1Ky6cPheg9kjlnPFJEZnYxzbvBhvXh5_CcwVTKdjR7SXrQJjNTR1u6pk0AY_eBzkRW9fFPjxHNo24PlCYdVHc0KJYuVaq8fRyhz9g6IBaJTkrFQrUQ5mXhDtl1fzxCMcVKXWNK-Vrri7d3JoPTN9mO3KHbW5XUTdpIzxu0o2oShMe-A8rkv47F6fwtTPWAlQKX909VeuYl4Gd3uLQ7NrnvkHjOHLIzRurcF2NV2OExphSkorU2csEGj_1pVyUzOwLXVxK1uFgsRfeb7_dgWSNYVb1zTktFyvBaIcIDb6Xnu94r2jzteq_-YL1bWuksPasA-HP7VZlUmCHjUWpNuBYmImWzFJQBglXQfDLsxY69w1VOprhx-9qB4V6ryCW_GK7xr2x_CqLORrju8Pglq9dkgXRx6Aj3iGEr68-GjjmKv76JSVzyhFv1jBWyrC-Hnlr-vemOvi6ngcxGLN7xjlfuFpeF57uAQR0tyhCTZ7AUDyHTOQ5d0K1gSZISu8PvsQhVFHFmkTPxoz2c9irR_Hd_WM2St0Hco6UJ4vPw-2VudGgym14BldxRw&sp=0.02298465503391376&cpa=d87f830e-0c2b-4aae-9001-076caf2860be&format=social-scale-b_r-body
IP 104.21.84.94:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/tip_shows/?katds_ep=u27RuxKhEamfsSrTe3OtgSOC3T8fwsLODI2n7LNtrZ8ZwbSskZ8_a4rOqraCC1-yd1Afvf8SigWfhE3hs5X6X4S9cWI4nRoIGTlD_dRZdhNEDXQcxqtG_qyUqhQ6t8rZD0QgOdXL39APfjThAJldxHUSV5Hgmhr39NqWNPDsg1foZkUFR_sXMWQSL2lvE8_PKhYAaAdwLiB4IwK6WSvf4NAC3MG5iFnsjePnsbq94qKF0n9HBw_nSxPTTx1BgkLfmZQ1Ky6cPheg9kjlnPFJEZnYxzbvBhvXh5_CcwVTKdjR7SXrQJjNTR1u6pk0AY_eBzkRW9fFPjxHNo24PlCYdVHc0KJYuVaq8fRyhz9g6IBaJTkrFQrUQ5mXhDtl1fzxCMcVKXWNK-Vrri7d3JoPTN9mO3KHbW5XUTdpIzxu0o2oShMe-A8rkv47F6fwtTPWAlQKX909VeuYl4Gd3uLQ7NrnvkHjOHLIzRurcF2NV2OExphSkorU2csEGj_1pVyUzOwLXVxK1uFgsRfeb7_dgWSNYVb1zTktFyvBaIcIDb6Xnu94r2jzteq_-YL1bWuksPasA-HP7VZlUmCHjUWpNuBYmImWzFJQBglXQfDLsxY69w1VOprhx-9qB4V6ryCW_GK7xr2x_CqLORrju8Pglq9dkgXRx6Aj3iGEr68-GjjmKv76JSVzyhFv1jBWyrC-Hnlr-vemOvi6ngcxGLN7xjlfuFpeF57uAQR0tyhCTZ7AUDyHTOQ5d0K1gSZISu8PvsQhVFHFmkTPxoz2c9irR_Hd_WM2St0Hco6UJ4vPw-2VudGgym14BldxRw&sp=0.02298465503391376&cpa=d87f830e-0c2b-4aae-9001-076caf2860be&format=social-scale-b_r-body HTTP/1.1
Host: pn.bquildna43.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 05 Feb 2023 06:23:10 GMT
content-type: application/json
content-length: 0
location: https://12112336.pix-cdn.org/m/p/0/374/374538/conversions/6OTjphwd-minify.jpg
access-control-allow-origin: *
access-control-allow-credentials: true
set-cookie: 2357.0=1; expires=Mon, 06 Feb 2023 06:23:10 GMT; path=/; secure; SameSite=None
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nlCh3l9waj9e%2FZT2IBYPQ44vTgth3iCnA2tvZlJ7j59jmdo%2BC5G9fIa%2BeoM6vc0b%2B51mIA2kEIWENs0zaLUgKLoUqcqhDlPszgzrqN8T9RERPhrsyDKhVVG4hv7vkqAFy3OcSEI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79498e49bbf5b518-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?mlf=1&cpa=fa8060df-b37b-491a-8551-7bbab89ac814&mlc=1&format=social-scale-b_r-body
138.201.236.216200 OK 590 B URL HTTP/2 static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?mlf=1&cpa=fa8060df-b37b-491a-8551-7bbab89ac814&mlc=1&format=social-scale-b_r-body
IP 138.201.236.216:0
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash debce753f1ce6652c1637491fd72b1b1
fd102eb3f058f7a43b0f9ec03541681699f5895e
c2443b0a74b25158756abb7aa12832e5442adab247aab6e24514f54396c72579
GET /creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?mlf=1&cpa=fa8060df-b37b-491a-8551-7bbab89ac814&mlc=1&format=social-scale-b_r-body HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 05 Feb 2023 06:23:10 GMT
content-type: image/webp
content-length: 590
last-modified: Tue, 24 Nov 2020 14:24:12 GMT
etag: "5fbd178c-24e"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash db0fbd0d8cd40a6d6dd0eaefaab7768b
217add18e86b9e605f9006e537f15400b45f0f90
507697d43fda32713698e09eefff9b6e1730774b8da6ca86b131b1cb4a860852
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4572
Cache-Control: max-age=98647
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 06:23:10 GMT
Etag: "63de17c9-117"
Expires: Mon, 06 Feb 2023 09:47:17 GMT
Last-Modified: Sat, 04 Feb 2023 08:31:05 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 279
static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp
138.201.236.216200 OK 590 B URL HTTP/2 static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp
IP 138.201.236.216:0
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash debce753f1ce6652c1637491fd72b1b1
fd102eb3f058f7a43b0f9ec03541681699f5895e
c2443b0a74b25158756abb7aa12832e5442adab247aab6e24514f54396c72579
GET /creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 05 Feb 2023 06:23:10 GMT
content-type: image/webp
content-length: 590
last-modified: Tue, 24 Nov 2020 14:24:12 GMT
etag: "5fbd178c-24e"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
12112336.pix-cdn.org/m/p/0/374/374538/conversions/6OTjphwd-minify.jpg
45.133.44.25200 OK 2.9 kB URL HTTP/2 12112336.pix-cdn.org/m/p/0/374/374538/conversions/6OTjphwd-minify.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70", baseline, precision 8, 100x100, components 3\012- data
Hash 66098442dc8934e8c6f5351e39d40e71
6bdebd9a664636433febe19afd7a5b37bff07126
b264aead392358ee4523a21bdd6726c1ec24c6ff849dbdf07dfd15bc6dedff4e
GET /m/p/0/374/374538/conversions/6OTjphwd-minify.jpg HTTP/1.1
Host: 12112336.pix-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:10 GMT
content-type: image/jpeg
content-length: 2921
server: nginx/1.12.2
last-modified: Sat, 30 Jul 2022 08:17:53 GMT
etag: "62e4e931-b69"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
hw-cdn2.ang-content.com/delivery/vortex/vortex-simple-1.0.0.js
205.185.208.20200 OK 5.0 kB URL HTTP/1.1 hw-cdn2.ang-content.com/delivery/vortex/vortex-simple-1.0.0.js
IP 205.185.208.20:0
File type ASCII text, with very long lines (5027), with no line terminators
Hash 5e5817bcf4c82c7c85d1d88636d221ce
b5c32cc6c931c33c1297884016e13d3b9a5bf261
6f0e50ac39121175ca0427c4e87cdfa2520b526c8497e23cffbca726eb6ca42c
GET /delivery/vortex/vortex-simple-1.0.0.js HTTP/1.1
Host: hw-cdn2.ang-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.adtng.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 06:23:10 GMT
Connection: Keep-Alive
ETag: "1541168231"
Content-Length: 5027
Content-Type: application/javascript
Last-Modified: Fri, 02 Nov 2018 14:17:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10624026
X-HW: 1675578190.dop205.sk1.t,1675578190.cds258.sk1.shn,1675578190.dop205.sk1.t,1675578190.cds225.sk1.c
Access-Control-Allow-Origin: *
hw-cdn2.ang-content.com/a7/creatives/24/124/814208/1027236/1027236_logo.png
205.185.208.20200 OK 3.2 kB URL HTTP/1.1 hw-cdn2.ang-content.com/a7/creatives/24/124/814208/1027236/1027236_logo.png
IP 205.185.208.20:0
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 4c291fddf374f420d3645fe505286658
6539ef9a49e9a2af5c91f21ccfd8c404be9a56d7
530eeb89457746b4902702ebce75ce75a441f7812a48109aa585204c80cdef03
GET /a7/creatives/24/124/814208/1027236/1027236_logo.png HTTP/1.1
Host: hw-cdn2.ang-content.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.adtng.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 06:23:10 GMT
Connection: Keep-Alive
ETag: "1648065983"
Content-Length: 3236
Content-Type: image/png
Last-Modified: Wed, 23 Mar 2022 20:06:23 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10448779
X-HW: 1675578190.dop227.sk1.t,1675578190.cds251.sk1.shn,1675578190.dop227.sk1.t,1675578190.cds242.sk1.c
Access-Control-Allow-Origin: *
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zCyGWIWOGRg0xZVrAGGNjTAsaMnLkaCEmhhkyLSKWuWEGh4waMsbUICPi4Rwxacgo1LFFBAwRXR6GqTMmYxkaBcOImRGSTI0yIWncKAODpQ2rLTqOMWOjRkccYmgcVUrGzkIbOWzIeAinjhiKKW8ohQNnIcoaDkXMgTNRh9ocONTOFTGmTV_DMWzcsDGDrRmKD8W4cbNQxmQalCuLaOMGow7PM-DSJW06Bo0YMXA8rBMjIxo6dODM0fHiRRgXBumUdjHmTZsXZ8rQeREDhvMaqWf8oJOmTZkeDXPIoJHDNWAaM2JwqeNcho0wdMb0eC2Z8vjy5-GI6aFED50hSOwUkUEkj5M5arDRhBpBxDGDE0VckYQUYxix0hRl1DBEE3HMYYMWbBSBRxoyWCEFEjW0YcQbOSQxhhJXaAHHGVpkEcVIRBzBBBa53dCCDVIcQYQaTZBBgxB1aOGEFVUgQYcdWIiBgxt3GKGFFXSEcUYeddjRAhNO3qFFEFYcoQcVcBABhxlfnFFFEkRIUUUaPYkARxuYifDGm3GSYVxGctAhhhxlbCYVcXc-NAZ6C20RXlJuytGUDjC44FxFIohxGaOOQjrGm1_AoehCjToHAw0oPSSHHY_FkMNDZVwKJ6We1gDabHWwqYMI4JlKAxk2hSWGZyfdAGoLOZhxUwsxiJHDTmLAIEMZMdxwQ5tpPCZCdy7k0ChKLjREQ5tyfBFtRtRa6wK22rZZRxgZNfGGHmmwwUYYL9TgKAgoXJGGG3beMQcITlABQnOO7gCCvW7YQIPAeBgs8KgMwSAvDCmAcESqa7zxggwwNJdxxiAYkQafZryBB3MOO9rmGIuK4MQTbb7RLcoZrdwmGykX4USbB9nxBZ9sUFSDszikhoNzop7B2Wk14KCXCDl_sedCOMjGdBk6t_EGT6fhYAOkZMjxxkKivTEUDXR5jUcefolaxqQD4aYbby_kuWefbvxZ3HFtzjEqnm9ESYfLLdThRhp0EIuDC2SMEYMMOKd80BeJL94mHatGdgNgN-AQ26kiUM44Q5JhrjkOOWglmkE7lzHYF4SCfvnPo3NONetsIETHUIbSgKhUhU1txlJsTEQXzZwKahoMfSgQEA%3D%3D&s=797c4e8a2f0aadf4330d0d04a9fb8357dd679c508eb244bcbf267cfba0126d891675578189&w=t&r=1&d=806&priv=false
148.251.152.17200 OK 24 B URL HTTP/2 pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zCyGWIWOGRg0xZVrAGGNjTAsaMnLkaCEmhhkyLSKWuWEGh4waMsbUICPi4Rwxacgo1LFFBAwRXR6GqTMmYxkaBcOImRGSTI0yIWncKAODpQ2rLTqOMWOjRkccYmgcVUrGzkIbOWzIeAinjhiKKW8ohQNnIcoaDkXMgTNRh9ocONTOFTGmTV_DMWzcsDGDrRmKD8W4cbNQxmQalCuLaOMGow7PM-DSJW06Bo0YMXA8rBMjIxo6dODM0fHiRRgXBumUdjHmTZsXZ8rQeREDhvMaqWf8oJOmTZkeDXPIoJHDNWAaM2JwqeNcho0wdMb0eC2Z8vjy5-GI6aFED50hSOwUkUEkj5M5arDRhBpBxDGDE0VckYQUYxix0hRl1DBEE3HMYYMWbBSBRxoyWCEFEjW0YcQbOSQxhhJXaAHHGVpkEcVIRBzBBBa53dCCDVIcQYQaTZBBgxB1aOGEFVUgQYcdWIiBgxt3GKGFFXSEcUYeddjRAhNO3qFFEFYcoQcVcBABhxlfnFFFEkRIUUUaPYkARxuYifDGm3GSYVxGctAhhhxlbCYVcXc-NAZ6C20RXlJuytGUDjC44FxFIohxGaOOQjrGm1_AoehCjToHAw0oPSSHHY_FkMNDZVwKJ6We1gDabHWwqYMI4JlKAxk2hSWGZyfdAGoLOZhxUwsxiJHDTmLAIEMZMdxwQ5tpPCZCdy7k0ChKLjREQ5tyfBFtRtRa6wK22rZZRxgZNfGGHmmwwUYYL9TgKAgoXJGGG3beMQcITlABQnOO7gCCvW7YQIPAeBgs8KgMwSAvDCmAcESqa7zxggwwNJdxxiAYkQafZryBB3MOO9rmGIuK4MQTbb7RLcoZrdwmGykX4USbB9nxBZ9sUFSDszikhoNzop7B2Wk14KCXCDl_sedCOMjGdBk6t_EGT6fhYAOkZMjxxkKivTEUDXR5jUcefolaxqQD4aYbby_kuWefbvxZ3HFtzjEqnm9ESYfLLdThRhp0EIuDC2SMEYMMOKd80BeJL94mHatGdgNgN-AQ26kiUM44Q5JhrjkOOWglmkE7lzHYF4SCfvnPo3NONetsIETHUIbSgKhUhU1txlJsTEQXzZwKahoMfSgQEA%3D%3D&s=797c4e8a2f0aadf4330d0d04a9fb8357dd679c508eb244bcbf267cfba0126d891675578189&w=t&r=1&d=806&priv=false
IP 148.251.152.17:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zCyGWIWOGRg0xZVrAGGNjTAsaMnLkaCEmhhkyLSKWuWEGh4waMsbUICPi4Rwxacgo1LFFBAwRXR6GqTMmYxkaBcOImRGSTI0yIWncKAODpQ2rLTqOMWOjRkccYmgcVUrGzkIbOWzIeAinjhiKKW8ohQNnIcoaDkXMgTNRh9ocONTOFTGmTV_DMWzcsDGDrRmKD8W4cbNQxmQalCuLaOMGow7PM-DSJW06Bo0YMXA8rBMjIxo6dODM0fHiRRgXBumUdjHmTZsXZ8rQeREDhvMaqWf8oJOmTZkeDXPIoJHDNWAaM2JwqeNcho0wdMb0eC2Z8vjy5-GI6aFED50hSOwUkUEkj5M5arDRhBpBxDGDE0VckYQUYxix0hRl1DBEE3HMYYMWbBSBRxoyWCEFEjW0YcQbOSQxhhJXaAHHGVpkEcVIRBzBBBa53dCCDVIcQYQaTZBBgxB1aOGEFVUgQYcdWIiBgxt3GKGFFXSEcUYeddjRAhNO3qFFEFYcoQcVcBABhxlfnFFFEkRIUUUaPYkARxuYifDGm3GSYVxGctAhhhxlbCYVcXc-NAZ6C20RXlJuytGUDjC44FxFIohxGaOOQjrGm1_AoehCjToHAw0oPSSHHY_FkMNDZVwKJ6We1gDabHWwqYMI4JlKAxk2hSWGZyfdAGoLOZhxUwsxiJHDTmLAIEMZMdxwQ5tpPCZCdy7k0ChKLjREQ5tyfBFtRtRa6wK22rZZRxgZNfGGHmmwwUYYL9TgKAgoXJGGG3beMQcITlABQnOO7gCCvW7YQIPAeBgs8KgMwSAvDCmAcESqa7zxggwwNJdxxiAYkQafZryBB3MOO9rmGIuK4MQTbb7RLcoZrdwmGykX4USbB9nxBZ9sUFSDszikhoNzop7B2Wk14KCXCDl_sedCOMjGdBk6t_EGT6fhYAOkZMjxxkKivTEUDXR5jUcefolaxqQD4aYbby_kuWefbvxZ3HFtzjEqnm9ESYfLLdThRhp0EIuDC2SMEYMMOKd80BeJL94mHatGdgNgN-AQ26kiUM44Q5JhrjkOOWglmkE7lzHYF4SCfvnPo3NONetsIETHUIbSgKhUhU1txlJsTEQXzZwKahoMfSgQEA%3D%3D&s=797c4e8a2f0aadf4330d0d04a9fb8357dd679c508eb244bcbf267cfba0126d891675578189&w=t&r=1&d=806&priv=false HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=43194d82-fb27-4744-9f25-1b95db02e177; bfq=APeIECNCxxYZN2zQsDFjRhcWIsYU3BLjoYgyE2PYuFHDhsIaOHJ06aMg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 06:23:10 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0UUhJGj4wwZLcjkmFGmBY0yMsi0yEEmRowWMca4FCNDzA0zOMzYEPFwjpg0ZBTq2CIChoguD8PUGZNxzBgyTmWYudHCDI0aOEyKsaFSTA4cJWXQuAHDBgwZMXDmqMETIhk7C23ksCHjIZw6YijKyHEjKRw4C2nIqOFQxBw4E3XQ4IhjMY2HY9oAVhzDxg0bM5KSMUPxoRg3bhbKuEwDc2YRbdxg1DF6hly7qVfHoOESx8M6MTKioUMHzhwdL16EcWGQjmoXY960eXGmDJ0XMWBIr-F6xg86adqU6dEwh9gcswnTmBGDSx3pMmyEoTOmB23LmM2jVw9HTA80R6LMWTPmxpQ3ejyBxxOLwSGHDG8UUYMQNShxRhRrZNFEhMkFMUUOQzxxRxBK4MDGGmJYcUUTQWhRAx45qCHGDHOoYUUVahxxRg1oTBHGHWYEYQcOYlyxBhJnRCcEGWKYMUUSOKBRxR146JFDEVC00VELbExBhRxIrJEEGUVYQQURSKQRRxY2uPHFGVUkQYQUVaTRFhxtdCbCG3DKSYZyGclBhxhylAFaGGIghydk6y20BXlIiWAgUzrA4IJ0FYlQ5EKOwhCpHHZMFkMOt9Xhpg4ilIYDGTfcRNWmNYhhUgxlwLBSDDKE0UIZNYwxwxhmzMASDGGw9VAak4kAngs5OCqYCw3R0JYcXwCb0bDFunBssm3VEUZGTQCYBhtshPFCDY-CgMIVabhx5x1zgOAEFSBE9-gOIJDrhg00wIsHvfBiyhAM4MKQAghHlDHGGm-8IIOlkFoKghFp9GnGG3hAx--jbTmVkRNPtPUGsxaDinFbbDAqQhFOtHWQHV_0yQZFNZSKg2s4SPeQHGeExhpWfYlw8hd8LoSDbTqXgXIbb5AhGg42REqGHG8sdNobQj2mKNN45BHYzGVwBupuvf0WnJ58-ukGoIIu19YcmOb5Bh3rbdxCHW6kQQdMNrgAFawmi3zQF3fL0BYdcTJkGWE34BADDpyKALjfgt9AuOGI05a4QSmXcdgXhTb--OGJC405GwjRIdShNCQKaGJBm6EUGxPZFTKlkK0GQx8KBAQ%3D&s=03afcb1175764d8e76cdffd4e1e0bdbf382eee53ba03a0332b3ca5555d61817c1675578189&w=t&r=1&d=819&priv=false
148.251.152.17200 OK 24 B URL HTTP/2 pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0UUhJGj4wwZLcjkmFGmBY0yMsi0yEEmRowWMca4FCNDzA0zOMzYEPFwjpg0ZBTq2CIChoguD8PUGZNxzBgyTmWYudHCDI0aOEyKsaFSTA4cJWXQuAHDBgwZMXDmqMETIhk7C23ksCHjIZw6YijKyHEjKRw4C2nIqOFQxBw4E3XQ4IhjMY2HY9oAVhzDxg0bM5KSMUPxoRg3bhbKuEwDc2YRbdxg1DF6hly7qVfHoOESx8M6MTKioUMHzhwdL16EcWGQjmoXY960eXGmDJ0XMWBIr-F6xg86adqU6dEwh9gcswnTmBGDSx3pMmyEoTOmB23LmM2jVw9HTA80R6LMWTPmxpQ3ejyBxxOLwSGHDG8UUYMQNShxRhRrZNFEhMkFMUUOQzxxRxBK4MDGGmJYcUUTQWhRAx45qCHGDHOoYUUVahxxRg1oTBHGHWYEYQcOYlyxBhJnRCcEGWKYMUUSOKBRxR146JFDEVC00VELbExBhRxIrJEEGUVYQQURSKQRRxY2uPHFGVUkQYQUVaTRFhxtdCbCG3DKSYZyGclBhxhylAFaGGIghydk6y20BXlIiWAgUzrA4IJ0FYlQ5EKOwhCpHHZMFkMOt9Xhpg4ilIYDGTfcRNWmNYhhUgxlwLBSDDKE0UIZNYwxwxhmzMASDGGw9VAak4kAngs5OCqYCw3R0JYcXwCb0bDFunBssm3VEUZGTQCYBhtshPFCDY-CgMIVabhx5x1zgOAEFSBE9-gOIJDrhg00wIsHvfBiyhAM4MKQAghHlDHGGm-8IIOlkFoKghFp9GnGG3hAx--jbTmVkRNPtPUGsxaDinFbbDAqQhFOtHWQHV_0yQZFNZSKg2s4SPeQHGeExhpWfYlw8hd8LoSDbTqXgXIbb5AhGg42REqGHG8sdNobQj2mKNN45BHYzGVwBupuvf0WnJ58-ukGoIIu19YcmOb5Bh3rbdxCHW6kQQdMNrgAFawmi3zQF3fL0BYdcTJkGWE34BADDpyKALjfgt9AuOGI05a4QSmXcdgXhTb--OGJC405GwjRIdShNCQKaGJBm6EUGxPZFTKlkK0GQx8KBAQ%3D&s=03afcb1175764d8e76cdffd4e1e0bdbf382eee53ba03a0332b3ca5555d61817c1675578189&w=t&r=1&d=819&priv=false
IP 148.251.152.17:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0UUhJGj4wwZLcjkmFGmBY0yMsi0yEEmRowWMca4FCNDzA0zOMzYEPFwjpg0ZBTq2CIChoguD8PUGZNxzBgyTmWYudHCDI0aOEyKsaFSTA4cJWXQuAHDBgwZMXDmqMETIhk7C23ksCHjIZw6YijKyHEjKRw4C2nIqOFQxBw4E3XQ4IhjMY2HY9oAVhzDxg0bM5KSMUPxoRg3bhbKuEwDc2YRbdxg1DF6hly7qVfHoOESx8M6MTKioUMHzhwdL16EcWGQjmoXY960eXGmDJ0XMWBIr-F6xg86adqU6dEwh9gcswnTmBGDSx3pMmyEoTOmB23LmM2jVw9HTA80R6LMWTPmxpQ3ejyBxxOLwSGHDG8UUYMQNShxRhRrZNFEhMkFMUUOQzxxRxBK4MDGGmJYcUUTQWhRAx45qCHGDHOoYUUVahxxRg1oTBHGHWYEYQcOYlyxBhJnRCcEGWKYMUUSOKBRxR146JFDEVC00VELbExBhRxIrJEEGUVYQQURSKQRRxY2uPHFGVUkQYQUVaTRFhxtdCbCG3DKSYZyGclBhxhylAFaGGIghydk6y20BXlIiWAgUzrA4IJ0FYlQ5EKOwhCpHHZMFkMOt9Xhpg4ilIYDGTfcRNWmNYhhUgxlwLBSDDKE0UIZNYwxwxhmzMASDGGw9VAak4kAngs5OCqYCw3R0JYcXwCb0bDFunBssm3VEUZGTQCYBhtshPFCDY-CgMIVabhx5x1zgOAEFSBE9-gOIJDrhg00wIsHvfBiyhAM4MKQAghHlDHGGm-8IIOlkFoKghFp9GnGG3hAx--jbTmVkRNPtPUGsxaDinFbbDAqQhFOtHWQHV_0yQZFNZSKg2s4SPeQHGeExhpWfYlw8hd8LoSDbTqXgXIbb5AhGg42REqGHG8sdNobQj2mKNN45BHYzGVwBupuvf0WnJ58-ukGoIIu19YcmOb5Bh3rbdxCHW6kQQdMNrgAFawmi3zQF3fL0BYdcTJkGWE34BADDpyKALjfgt9AuOGI05a4QSmXcdgXhTb--OGJC405GwjRIdShNCQKaGJBm6EUGxPZFTKlkK0GQx8KBAQ%3D&s=03afcb1175764d8e76cdffd4e1e0bdbf382eee53ba03a0332b3ca5555d61817c1675578189&w=t&r=1&d=819&priv=false HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=43194d82-fb27-4744-9f25-1b95db02e177; bfq=APeIECNCxxYZN2zQsDFjRhcWIsYU3BLjoYgyE2PYuFHDhsIaOHJ06aMg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 06:23:10 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
116.202.60.158302 Found 0 B URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP 116.202.60.158:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Sun, 05 Feb 2023 06:23:11 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://rtbrennab.com/banner/in/show/?mid=5570099814215037008&pid=0&site=24340&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vjav.tube&hostname=auc-banner-hz-2&site_id=0&spot_id=24340&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=41.86069503275057&ml=&tag_ab=b&v2=0&ttl=&space_id=24340&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D24340%26source%3D0%26idzone%3D1%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D24340%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D24340%26p%3Dhttps%253A%252F%252Fvjav.tube%252Fmain%252F%26katds_labels%3D%26btype%3D0%26score%3D41.86069503275057%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=nlabel-b&ssp=3972&refresh=1
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=5570099814215037008&pid=0&site=24340&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vjav.tube&hostname=auc-banner-hz-2&site_id=0&spot_id=24340&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=41.86069503275057&ml=&tag_ab=b&v2=0&ttl=&space_id=24340&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D24340%26source%3D0%26idzone%3D1%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D24340%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D24340%26p%3Dhttps%253A%252F%252Fvjav.tube%252Fmain%252F%26katds_labels%3D%26btype%3D0%26score%3D41.86069503275057%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=nlabel-b&ssp=3972&refresh=1
116.202.60.158302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=5570099814215037008&pid=0&site=24340&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vjav.tube&hostname=auc-banner-hz-2&site_id=0&spot_id=24340&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=41.86069503275057&ml=&tag_ab=b&v2=0&ttl=&space_id=24340&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D24340%26source%3D0%26idzone%3D1%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D24340%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D24340%26p%3Dhttps%253A%252F%252Fvjav.tube%252Fmain%252F%26katds_labels%3D%26btype%3D0%26score%3D41.86069503275057%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=nlabel-b&ssp=3972&refresh=1
IP 116.202.60.158:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=5570099814215037008&pid=0&site=24340&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=vjav.tube&hostname=auc-banner-hz-2&site_id=0&spot_id=24340&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=41.86069503275057&ml=&tag_ab=b&v2=0&ttl=&space_id=24340&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D24340%26source%3D0%26idzone%3D1%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D24340%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DStraight%2C%26spot_id%3D24340%26p%3Dhttps%253A%252F%252Fvjav.tube%252Fmain%252F%26katds_labels%3D%26btype%3D0%26score%3D41.86069503275057%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Straight,&stratagem=nlabel-b&ssp=3972&refresh=1 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vjav.tube/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Sun, 05 Feb 2023 06:23:11 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=24340&source=0&idzone=1&w=1&h=1&mo=&ve=&site_id=24340&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=24340&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=41.86069503275057&bf=0.0001
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=24340&source=0&idzone=1&w=1&h=1&mo=&ve=&site_id=24340&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=24340&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=41.86069503275057&bf=0.0001
109.206.181.2302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=24340&source=0&idzone=1&w=1&h=1&mo=&ve=&site_id=24340&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=24340&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=41.86069503275057&bf=0.0001
IP 109.206.181.2:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=24340&source=0&idzone=1&w=1&h=1&mo=&ve=&site_id=24340&utm1=&utm2=&utm3=&utm4=&ad_tags=Straight,&spot_id=24340&p=https%3A%2F%2Fvjav.tube%2Fmain%2F&katds_labels=&btype=0&score=41.86069503275057&bf=0.0001 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vjav.tube/
Connection: keep-alive
Cookie: 952.0=1; 912.0=1; 1624.0=1; 1625.0=1; 1629.0=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Sun, 05 Feb 2023 06:23:12 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://cdn.1vag.com/1x1.png
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 912.0=1; expires=Mon, 06 Feb 2023 06:23:12 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5714dae27d6972774d3a73c8419365d9
3588cd04f19dfc75fdb4e91aa22ad5639e11fcfa
0312964ee2442aa66c2a8aaeaa0f3277ca9c30edf32dc7d0a2cf036938afb628
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0312964EE2442AA66C2A8AAEAA0F3277CA9C30EDF32DC7D0A2CF036938AFB628"
Last-Modified: Fri, 03 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2881
Expires: Sun, 05 Feb 2023 07:11:12 GMT
Date: Sun, 05 Feb 2023 06:23:11 GMT
Connection: keep-alive
cdn.1vag.com/1x1.png
45.133.44.25200 OK 68 B IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /1x1.png HTTP/1.1
Host: cdn.1vag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vjav.tube/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:11 GMT
content-type: image/png
content-length: 68
server: nginx/1.20.1
last-modified: Wed, 15 Apr 2020 13:30:15 GMT
etag: "5e970c67-44"
cache-control: max-age=3600
x-request-id: 28eea0836f6cd5562d41ccabe8fa4a5b
expires: Sun, 05 Feb 2023 07:23:11 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
a.adtng.com/get/10005363?time=1592491455431&atc=416763&apb=RthiwhjffCa8qAtDuj64bW1JIMLi69OcEvsMCRCA2kJmTvmbQmyxyjQ2pkxG5XfRTQSMD9CxDxVKoZZBkNm2oyee8EtUShIRge-CUPoTVfa58XA4menc_gUIDRUi
66.254.114.171200 OK 0 B URL HTTP/2 a.adtng.com/get/10005363?time=1592491455431&atc=416763&apb=RthiwhjffCa8qAtDuj64bW1JIMLi69OcEvsMCRCA2kJmTvmbQmyxyjQ2pkxG5XfRTQSMD9CxDxVKoZZBkNm2oyee8EtUShIRge-CUPoTVfa58XA4menc_gUIDRUi
IP 66.254.114.171:0
GET /get/10005363?time=1592491455431&atc=416763&apb=RthiwhjffCa8qAtDuj64bW1JIMLi69OcEvsMCRCA2kJmTvmbQmyxyjQ2pkxG5XfRTQSMD9CxDxVKoZZBkNm2oyee8EtUShIRge-CUPoTVfa58XA4menc_gUIDRUi HTTP/1.1
Host: a.adtng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Sun, 05 Feb 2023 06:23:10 GMT
content-type: text/html
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
content-encoding: gzip
set-cookie: adtool_guid=Ch5KFmPfS06hjxsgTa/4Ag==; expires=Thu, 31-Dec-37 23:55:55 GMT; path=/; Secure; HTTPOnly; SameSite=None;
RNLBSERVERID=ded7040; path=/; HttpOnly; Secure; SameSite=None
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
x-request-id: 63DF4B4E-42FE72AB01BBADDD-4A9E7FD
X-Firefox-Spdy: h2
mc.yandex.ru/watch/49315045?wmode=7&page-url=https%3A%2F%2Fvjav.tube%2Fmain%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1025%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A520918236481%3Ahid%3A543045797%3Az%3A0%3Ai%3A20230205062347%3Aet%3A1675578227%3Ac%3A1%3Arn%3A373059180%3Arqn%3A1%3Au%3A1675578227120300882%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C50%2C0%2C434%2C0%2C%2C507%2C3%2C%2C%2C%2C1045%3Aco%3A0%3Ans%3A1675578225442%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675578227%3At%3AJapanese%20Porn%20Videos%2C%20Asian%20Porn%20movies%2C%20Japan%20Sex%20Movies%20-%20VJAV.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
87.250.250.119302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/49315045?wmode=7&page-url=https%3A%2F%2Fvjav.tube%2Fmain%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1025%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A520918236481%3Ahid%3A543045797%3Az%3A0%3Ai%3A20230205062347%3Aet%3A1675578227%3Ac%3A1%3Arn%3A373059180%3Arqn%3A1%3Au%3A1675578227120300882%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C50%2C0%2C434%2C0%2C%2C507%2C3%2C%2C%2C%2C1045%3Aco%3A0%3Ans%3A1675578225442%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675578227%3At%3AJapanese%20Porn%20Videos%2C%20Asian%20Porn%20movies%2C%20Japan%20Sex%20Movies%20-%20VJAV.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP 87.250.250.119:0
GET /watch/49315045?wmode=7&page-url=https%3A%2F%2Fvjav.tube%2Fmain%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1025%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A520918236481%3Ahid%3A543045797%3Az%3A0%3Ai%3A20230205062347%3Aet%3A1675578227%3Ac%3A1%3Arn%3A373059180%3Arqn%3A1%3Au%3A1675578227120300882%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C50%2C0%2C434%2C0%2C%2C507%2C3%2C%2C%2C%2C1045%3Aco%3A0%3Ans%3A1675578225442%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675578227%3At%3AJapanese%20Porn%20Videos%2C%20Asian%20Porn%20movies%2C%20Japan%20Sex%20Movies%20-%20VJAV.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vjav.tube
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/49315045/1?wmode=7&page-url=https%3A%2F%2Fvjav.tube%2Fmain%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1025%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A520918236481%3Ahid%3A543045797%3Az%3A0%3Ai%3A20230205062347%3Aet%3A1675578227%3Ac%3A1%3Arn%3A373059180%3Arqn%3A1%3Au%3A1675578227120300882%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C50%2C0%2C434%2C0%2C%2C507%2C3%2C%2C%2C%2C1045%3Aco%3A0%3Ans%3A1675578225442%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675578227%3At%3AJapanese%20Porn%20Videos%2C%20Asian%20Porn%20movies%2C%20Japan%20Sex%20Movies%20-%20VJAV.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Sun, 05 Feb 2023 06:23:08 GMT
access-control-allow-origin: https://vjav.tube
set-cookie: yabs-sid=673818671675578188; Path=/; SameSite=None; Secure
i=zr96DWNqDKb63FOUipARod7+k6jx+YQTLR/SC7/tvY324/yukkkBleGqbGaCH1NsJVKZU15kVPiwsWDXwfrXKRE5Hpg=; Expires=Wed, 02-Feb-2033 06:23:05 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=5376587841675578188; Expires=Mon, 05-Feb-2024 06:23:08 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=5376587841675578188; Expires=Mon, 05-Feb-2024 06:23:08 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707114188.yc.1675578188#1707114188.yrts.1675578188#1707114188.yrtsi.1675578188; Expires=Mon, 05-Feb-2024 06:23:08 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 05-Feb-2023 06:23:08 GMT
last-modified: Sun, 05-Feb-2023 06:23:08 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
js.wpshsdk.com/npc/sdk/common/core.js
45.133.44.24200 OK 0 B URL HTTP/2 js.wpshsdk.com/npc/sdk/common/core.js
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
GET /npc/sdk/common/core.js HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vjav.tube/
Origin: https://vjav.tube
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 26 Jan 2023 12:22:57 GMT
etag: W/"63d270a1-1bf5c"
content-encoding: gzip
expires: Sun, 05 Feb 2023 06:28:09 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
btds.zog.link/in/dl/?spot_id=84723&screen_resolution=1280x1024&dt=1675578227456&ad_sub=0&mo=&ve=&katds_labels=&p=https%3A//vjav.tube/main/&utm1=&utm2=&utm3=&utm4=&ad_tags=Japanese%252CPorn%252CVideos%252CAsian%252CPorn%252Cmovies%252CJapan%252CSex%252CMovies%252CVJAV.com%252Cvjav.com%252Cjav%252Cporn%252Ctube%252Cxxx%252Cjav%252Ctube%252Cfree%252Cporn%252Cvideos%252Cfree%252Cporn%252Cxxx%252Cmovies%252Cxxx%252Ctube%252Cvideo%252Cfree%252Cxxx%252Cvideo%252Cclips%252Cxxxtube%252Chot%252Cjapanese%252Cporn%252Coriental%252Cporn%252Cvideo%252CWatch%252CJapanese%252Cporn%252Cvideo%252CLots%252Cof%252Cfree%252Cvideos%252Cwith%252CJapanese%252Cstars%252CLarge%252Carchive%252Cof%252Cuncensored%252CJAV%252CHD%252Cmovies&title=Japanese%20Porn%20Videos%2C%20Asian%20Porn%20movies%2C%20Japan%20Sex%20Movies%20-%20VJAV.com&katds_rcc=2
109.206.181.2200 OK 0 B URL HTTP/2 btds.zog.link/in/dl/?spot_id=84723&screen_resolution=1280x1024&dt=1675578227456&ad_sub=0&mo=&ve=&katds_labels=&p=https%3A//vjav.tube/main/&utm1=&utm2=&utm3=&utm4=&ad_tags=Japanese%252CPorn%252CVideos%252CAsian%252CPorn%252Cmovies%252CJapan%252CSex%252CMovies%252CVJAV.com%252Cvjav.com%252Cjav%252Cporn%252Ctube%252Cxxx%252Cjav%252Ctube%252Cfree%252Cporn%252Cvideos%252Cfree%252Cporn%252Cxxx%252Cmovies%252Cxxx%252Ctube%252Cvideo%252Cfree%252Cxxx%252Cvideo%252Cclips%252Cxxxtube%252Chot%252Cjapanese%252Cporn%252Coriental%252Cporn%252Cvideo%252CWatch%252CJapanese%252Cporn%252Cvideo%252CLots%252Cof%252Cfree%252Cvideos%252Cwith%252CJapanese%252Cstars%252CLarge%252Carchive%252Cof%252Cuncensored%252CJAV%252CHD%252Cmovies&title=Japanese%20Porn%20Videos%2C%20Asian%20Porn%20movies%2C%20Japan%20Sex%20Movies%20-%20VJAV.com&katds_rcc=2
IP 109.206.181.2:0
GET /in/dl/?spot_id=84723&screen_resolution=1280x1024&dt=1675578227456&ad_sub=0&mo=&ve=&katds_labels=&p=https%3A//vjav.tube/main/&utm1=&utm2=&utm3=&utm4=&ad_tags=Japanese%252CPorn%252CVideos%252CAsian%252CPorn%252Cmovies%252CJapan%252CSex%252CMovies%252CVJAV.com%252Cvjav.com%252Cjav%252Cporn%252Ctube%252Cxxx%252Cjav%252Ctube%252Cfree%252Cporn%252Cvideos%252Cfree%252Cporn%252Cxxx%252Cmovies%252Cxxx%252Ctube%252Cvideo%252Cfree%252Cxxx%252Cvideo%252Cclips%252Cxxxtube%252Chot%252Cjapanese%252Cporn%252Coriental%252Cporn%252Cvideo%252CWatch%252CJapanese%252Cporn%252Cvideo%252CLots%252Cof%252Cfree%252Cvideos%252Cwith%252CJapanese%252Cstars%252CLarge%252Carchive%252Cof%252Cuncensored%252CJAV%252CHD%252Cmovies&title=Japanese%20Porn%20Videos%2C%20Asian%20Porn%20movies%2C%20Japan%20Sex%20Movies%20-%20VJAV.com&katds_rcc=2 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vjav.tube/
Origin: https://vjav.tube
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 05 Feb 2023 06:23:08 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: 953.115436=1; expires=Mon, 06 Feb 2023 06:23:08 GMT; path=/; secure; SameSite=None
953.73385=1; expires=Mon, 06 Feb 2023 06:23:08 GMT; path=/; secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6Mjk4NzQsInR5cGUiOiJwb3AiLCJpZHpvbmUiOjE5MjA3NjAsImFkX3RhZ3MiOiJTdHJhaWdodCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIwIiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6Mjk4NzQsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjgsInN0cmF0YWdlbSI6Im5sYWJlbC1iIiwiZ3lyIjowLCJhY2NlbCI6MCwic3NwIjozNzU2LCJidHlwZSI6MCwidjIiOjAsInJjaGFuZ2UiOmZhbHNlfSwiYmFubmVyIjp7InciOjMwMCwiaCI6MjUwfX1dLCJzaXRlIjp7ImlkIjoiMjk4NzQiLCJjYXQiOlsiSUFCMjUiXSwicGFnZSI6Imh0dHBzOi8vdmphdi50dWJlL21haW4vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjllNDk0N2YzNTc1MTQ2NTQxMWZkMWE0ZjVjMzU4Yzc4IiwiZnAiOm51bGx9LCJleHQiOnsiZHQiOjE2NzU1NzgyMjc1Nzd9fQ==
116.202.60.158200 OK 0 B URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP 116.202.60.158:0
ASN #24940 Hetzner Online GmbH
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
116.202.60.158200 OK 0 B URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP 116.202.60.158:0
ASN #24940 Hetzner Online GmbH
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
rtbrennab.com/get/?go=1&data=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
116.202.60.158200 OK 0 B URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP 116.202.60.158:0
ASN #24940 Hetzner Online GmbH
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
12007250.pix-cdn.org/a/pjexo.html?idzone=1920760&w=300&h=250&ad_sub=0
45.133.44.25200 OK 0 B URL HTTP/2 12007250.pix-cdn.org/a/pjexo.html?idzone=1920760&w=300&h=250&ad_sub=0
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
GET /a/pjexo.html?idzone=1920760&w=300&h=250&ad_sub=0 HTTP/1.1
Host: 12007250.pix-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbrennab.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:09 GMT
content-type: text/html; charset=UTF-8
last-modified: Wed, 20 May 2020 13:08:32 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SutxFRGaLCFQoNUyPdlrgzd8wSTuIuYWtyP7xPuOcVc90LZhoCFvEq3TkYkK%2FTed2ekAgux959qchg8Svhy5LTqsAkAi4P%2BBac8pwTxcAQF46Kt%2FQF2dG8IdlONW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 77833217ccb3ca4c-HAM
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
expires: Sun, 05 Feb 2023 07:23:09 GMT
cache-control: max-age=3600
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
a.adtng.com/get/10005363?time=1592491455431&atc=416763&apb=lwD-OXfdsYOft64eUNwMYciOPTTHLPNYGvSTMN7eidsaXRd6_OaMvxRjjvBhjui3p0mXgZ6HNg4f1PaWaQgl3MJcYyMbkwieLpbcelWZRGVTZd67whjS_gUIDRUi
66.254.114.171200 OK 0 B URL HTTP/2 a.adtng.com/get/10005363?time=1592491455431&atc=416763&apb=lwD-OXfdsYOft64eUNwMYciOPTTHLPNYGvSTMN7eidsaXRd6_OaMvxRjjvBhjui3p0mXgZ6HNg4f1PaWaQgl3MJcYyMbkwieLpbcelWZRGVTZd67whjS_gUIDRUi
IP 66.254.114.171:0
GET /get/10005363?time=1592491455431&atc=416763&apb=lwD-OXfdsYOft64eUNwMYciOPTTHLPNYGvSTMN7eidsaXRd6_OaMvxRjjvBhjui3p0mXgZ6HNg4f1PaWaQgl3MJcYyMbkwieLpbcelWZRGVTZd67whjS_gUIDRUi HTTP/1.1
Host: a.adtng.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Sun, 05 Feb 2023 06:23:10 GMT
content-type: text/html
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
content-encoding: gzip
set-cookie: adtool_guid=Ch5KGmPfS05ThT8v4U+LAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; path=/; Secure; HTTPOnly; SameSite=None;
RNLBSERVERID=ded7077; path=/; HttpOnly; Secure; SameSite=None
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
x-request-id: 63DF4B4E-42FE72AB01BBADDD-4A9E7FC
X-Firefox-Spdy: h2
vjav.tube/
172.67.176.68301 Moved Permanently 0 B IP 172.67.176.68:0
GET / HTTP/1.1
Host: vjav.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Sun, 05 Feb 2023 06:23:06 GMT
content-type: text/html
location: https://vjav.tube/main/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PcfYBJfLXGn5jkLvblNs4qkwZcjqQzFRzeDw%2B%2FDvoEemx7MgtP2pOcid5fAR9P2SOWHwrXgwMkVbjEELgb4nLvOr%2FryTvl7508WpiTKlRw3MZGddRaAecZ1oTNU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79498e333b50b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
sw.wpu.sh/npc/sdk/common/service-worker.js
45.133.44.24200 OK 0 B URL HTTP/2 sw.wpu.sh/npc/sdk/common/service-worker.js
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
GET /npc/sdk/common/service-worker.js HTTP/1.1
Host: sw.wpu.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vjav.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 Feb 2023 06:23:08 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 26 Jan 2023 12:22:57 GMT
etag: W/"63d270a1-158c"
content-encoding: gzip
expires: Sun, 05 Feb 2023 06:28:08 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2