javtv.to/video/144378/gigp-32.html
301 Moved Permanently 0 B URL HTTP/1.1 javtv.to/video/144378/gigp-32.html
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /video/144378/gigp-32.html HTTP/1.1
Host: javtv.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 05 Feb 2023 12:23:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 05 Feb 2023 13:23:00 GMT
Location: https://javtv.to/video/144378/gigp-32.html
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0mMf%2F01CYzujbHAFELiRVoqWhmdyoiWDeWIsGrtd2fkbdO1PbJBWgaOS3Hx9ZKQLEzXaCU89GB%2BqwuJ9PRp%2BIUX7BE1WHY3XAzdTuCU%2BTfr7Pc4Qj3tLYWVuPw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794b9d622ab075d7-LHR
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1cdc095521e9ee2606059be447d1fdd5
02b5d0a5b5823e2338daf7e144700babe2a213af
8bda3aabcf331c2bfcc4c7023cd797c760fd301dc353641bb95048e072f66c66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8BDA3AABCF331C2BFCC4C7023CD797C760FD301DC353641BB95048E072F66C66"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6268
Expires: Sun, 05 Feb 2023 14:07:28 GMT
Date: Sun, 05 Feb 2023 12:23:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2318
Expires: Sun, 05 Feb 2023 13:01:38 GMT
Date: Sun, 05 Feb 2023 12:23:00 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 05 Feb 2023 11:36:17 GMT
content-type: application/json
age: 2803
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16975
Expires: Sun, 05 Feb 2023 17:05:55 GMT
Date: Sun, 05 Feb 2023 12:23:00 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: CqHMF9f5nioDYv6SYWIyHG4AK7WEyLFU6908FmHMNNVDPKy8p9syJSqJvQ6K38NJ3EWcbvX2EHs=
x-amz-request-id: FNK5NKZ0WK48CCDM
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 05 Feb 2023 11:53:15 GMT
age: 1785
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash d203acd3499d5acbd986137d60895528
fcf63d974a831cb95ac39c0483115ed7f6121b01
f65324c1e68e818f24029a2cf45ea61d5dc871f3a51f599eaa016c92fd08cf62
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 546
Cache-Control: max-age=93515
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:00 GMT
Etag: "63de67cd-118"
Expires: Mon, 06 Feb 2023 14:21:35 GMT
Last-Modified: Sat, 04 Feb 2023 14:12:29 GMT
Server: ECS (amb/6B7E)
X-Cache: HIT
Content-Length: 280
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:00 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash d203acd3499d5acbd986137d60895528
fcf63d974a831cb95ac39c0483115ed7f6121b01
f65324c1e68e818f24029a2cf45ea61d5dc871f3a51f599eaa016c92fd08cf62
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 546
Cache-Control: max-age=93515
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:00 GMT
Etag: "63de67cd-118"
Expires: Mon, 06 Feb 2023 14:21:35 GMT
Last-Modified: Sat, 04 Feb 2023 14:12:29 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 153d0de36959c722c00df71ba86daca2
305f56a3134879ebf0828e169e903e560540c070
0cf533a798d42d1e97fb6619a411afadf9a68c92302ba852869b0c0555a47987
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 153d0de36959c722c00df71ba86daca2
305f56a3134879ebf0828e169e903e560540c070
0cf533a798d42d1e97fb6619a411afadf9a68c92302ba852869b0c0555a47987
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 8.7 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
Hash 15dc33ec2e02214af21fff860f1368d3
e9bcfaa4b15ebcf9d330a219a3d24a48bb4b2500
83f61c59f004092b7620b31f8268c0d1e469894d1c2a2056ebe3045bde9c5eb2
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 05 Feb 2023 12:07:20 GMT
age: 941
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.buypass.com/
200 OK 1.7 kB IP
ASN #20940 Akamai International B.V.
Hash 9619cc54015400ba9669f1e0c844327b
df9e55debe9af3b0ccd9fb7233ee6258b0448a23
d9918defb2f4c5a3409e16935953796b6212f3abe137e10f7757c8ee7e6d7b48
POST / HTTP/1.1
Host: ocsp.buypass.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 78
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Access-Control-Allow-Origin: https://www.buypass.no
Access-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With,Content-Length,Accept,Origin,X-Buypass-Session-Id,X-Buypass-Locale
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
MDC-correlationId: ad0352a9-1947-4439-bf42-c7bebc77b13f
Content-Length: 1701
Date: Sun, 05 Feb 2023 12:23:01 GMT
Connection: keep-alive
ocsp.buypass.com/
200 OK 1.7 kB IP
ASN #20940 Akamai International B.V.
Hash 5ab7f0cff6f5fe9e21de7b5ce365efb0
ecf51b7f2ebf7970bed10e1b86a62c85600acf5e
46c5eb4528beb07ab87f9ae2824f718bbbce30853d7413f1d82050c5a11d6dc9
POST / HTTP/1.1
Host: ocsp.buypass.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 78
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Access-Control-Allow-Origin: https://www.buypass.no
Access-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With,Content-Length,Accept,Origin,X-Buypass-Session-Id,X-Buypass-Locale
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
MDC-correlationId: 144de750-2da1-44a9-965b-32c202a58cb5
Content-Length: 1701
Date: Sun, 05 Feb 2023 12:23:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5443
Expires: Sun, 05 Feb 2023 13:53:44 GMT
Date: Sun, 05 Feb 2023 12:23:01 GMT
Connection: keep-alive
www.googletagmanager.com/gtag/js?id=UA-243926838-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-243926838-1
IP
File type ASCII text, with very long lines (1759)
Hash 70ae9c378dca6edb632b4e8c6dd5a92e
7e5e31ca3989f65212bf09fe525c541b9742731c
91f9a952a67c883b0f52be8641d6a7987a3f77811b4768afa1014088d0bed283
GET /gtag/js?id=UA-243926838-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 Feb 2023 12:23:01 GMT
expires: Sun, 05 Feb 2023 12:23:01 GMT
cache-control: private, max-age=900
last-modified: Sun, 05 Feb 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43884
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-TJX8C9Z02Z
200 OK 78 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-TJX8C9Z02Z
IP
File type ASCII text, with very long lines (21849)
Hash c2b1bab6ee408a604dd8b7322c43fccf
293a96b09d90635ec940a042a00c5c0ef10450e8
66f37ce615bf9cea2a83b14dac349178f2d5d8b3602c37a4ff0c01114e296fb4
GET /gtag/js?id=G-TJX8C9Z02Z HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 Feb 2023 12:23:01 GMT
expires: Sun, 05 Feb 2023 12:23:01 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77627
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 98be7fe21d059e46146a43d20c4eea92
1ec58129fea75085588be7b8baec05b0874b5274
7bb2eb5ffcd88a3b6ba7b210bdbcd4469134c9708f06befb6c616beebf8dae46
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 153d0de36959c722c00df71ba86daca2
305f56a3134879ebf0828e169e903e560540c070
0cf533a798d42d1e97fb6619a411afadf9a68c92302ba852869b0c0555a47987
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 98be7fe21d059e46146a43d20c4eea92
1ec58129fea75085588be7b8baec05b0874b5274
7bb2eb5ffcd88a3b6ba7b210bdbcd4469134c9708f06befb6c616beebf8dae46
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5452c58c07ce8d3cade93b323b271c35
581b1e438daeb32a12feaf50f2aab17dcf3e3171
b99ea2af71e697f45db51732f7d3e8d3e50258c9c96e50a772b8c4638577140a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cuddlethehyena.com/solid.gif?z=1909981&abvar=1
200 OK 43 B URL HTTP/2 cuddlethehyena.com/solid.gif?z=1909981&abvar=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
POST /solid.gif?z=1909981&abvar=1 HTTP/1.1
Host: cuddlethehyena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javtv.to
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:01 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: TvARBxwtJTTIY26aL6WgpQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: N601BhGPsKvbx7Z/CC217XtYHJg=
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Hash 2f1b67d9a923c2248f4d1274c5c41526
3f2b6eace14b20c4242f740a78428a505cfaa7b8
051523b365341f6dabb6499fc14c5a3f690a12902bd084ed9a18490347908f51
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://javtv.to
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 22:02:00 GMT
expires: Mon, 29 Jan 2024 22:02:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 570061
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://javtv.to
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 13:09:06 GMT
expires: Wed, 31 Jan 2024 13:09:06 GMT
cache-control: public, max-age=31536000
age: 429235
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15752, version 1.0\012- data
Hash b20371a6daf29d4a1f2e85dbbf40fb20
0355a01c1ccb45cb728e7e07c41c8ebf456f70bb
7e262106f82cc52663e403f5b73795bbeab9ca0630c33c03579354fbcd4fae1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://javtv.to
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Feb 2023 01:50:00 GMT
expires: Sat, 03 Feb 2024 01:50:00 GMT
cache-control: public, max-age=31536000
age: 210781
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5452c58c07ce8d3cade93b323b271c35
581b1e438daeb32a12feaf50f2aab17dcf3e3171
b99ea2af71e697f45db51732f7d3e8d3e50258c9c96e50a772b8c4638577140a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9ca001de6bb2030b6cd82f232c2f3df3
4c8abdff0f94e592ef667a1a62449cfbe4b6fe62
2f5ba66d08c3b6f58b93e69529662db61e4316d38a5043b5a51bda45fe8eef1d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2F5BA66D08C3B6F58B93E69529662DB61E4316D38A5043B5A51BDA45FE8EEF1D"
Last-Modified: Sun, 05 Feb 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2333
Expires: Sun, 05 Feb 2023 13:01:54 GMT
Date: Sun, 05 Feb 2023 12:23:01 GMT
Connection: keep-alive
cdn.pncloudfl.com/pn/56b/a42/3bc/56ba423bcacf05767ef7de043ed317f576e84ee2.png
200 OK 43 kB URL HTTP/2 cdn.pncloudfl.com/pn/56b/a42/3bc/56ba423bcacf05767ef7de043ed317f576e84ee2.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3e1c3d6737455035df23e1dd8c628159
ff5c77c8792281620a4793b43f38f1fdcc6f1c0a
eacb5c75d830f937a643288a9bb5ef5076c072ab6a2c5c4b3a9280ac8b0e0689
GET /pn/56b/a42/3bc/56ba423bcacf05767ef7de043ed317f576e84ee2.png HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:01 GMT
content-type: image/webp
content-length: 42896
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=172800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=55940
content-disposition: inline; filename="56ba423bcacf05767ef7de043ed317f576e84ee2.webp"
etag: b1f706760c0795f113260650d8b23f19
expires: Sun, 05 Feb 2023 22:26:40 GMT
last-modified: Wed, 13 Oct 2021 17:28:50 GMT
vary: Accept
x-openstack-request-id: tx9efe245160574944a0d40-0061b07698
x-proxy-cache: HIT
x-timestamp: 1634146129.98710
x-trans-id: tx9efe245160574944a0d40-0061b07698
cf-cache-status: HIT
age: 136581
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 794b9d6c7ba5b4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cuddlethehyena.com/get/1910055?zoneid=1910055&jp=_clojm0k09xei3ggwxmpk8y&nojs=0&ix=0&abvar=2&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=1517186993430164
200 OK 38 kB URL HTTP/2 cuddlethehyena.com/get/1910055?zoneid=1910055&jp=_clojm0k09xei3ggwxmpk8y&nojs=0&ix=0&abvar=2&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=1517186993430164
IP
Hash 96aa8e97dab160fd930c4685f474e56c
2f0ed72208607ea1bd58450228897a1060a86295
5c1f55c72ea533569e473c47acb5de2359dfcfef5af122c27b4fb67dd21f1c52
Analyzer Verdict Alert quad9 Sinkholed
GET /get/1910055?zoneid=1910055&jp=_clojm0k09xei3ggwxmpk8y&nojs=0&ix=0&abvar=2&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=1517186993430164 HTTP/1.1
Host: cuddlethehyena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Cookie: UID=2302050723d0e41ccda4c94f6095f7ea39fe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:01 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
cdn.pncloudfl.com/pn/597/84e/2a6/59784e2a61ac3aa5638fa67202b8a4f6230736b3.jpg
200 OK 42 kB URL HTTP/2 cdn.pncloudfl.com/pn/597/84e/2a6/59784e2a61ac3aa5638fa67202b8a4f6230736b3.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3692aeb3d8e97400160c19f93d8dfe7a
93cc0089e10d0c809842d7f40f37f725cdc3f532
3c13879cd6ddf95b6b37994ca197c3a5cc97ee37669eabb5f54d10c344feddbc
GET /pn/597/84e/2a6/59784e2a61ac3aa5638fa67202b8a4f6230736b3.jpg HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:01 GMT
content-type: image/webp
content-length: 41926
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
cache-control: max-age=172800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=75213
content-disposition: inline; filename="59784e2a61ac3aa5638fa67202b8a4f6230736b3.webp"
etag: de579877c115109ec9ca833aab057d1a
expires: Sun, 05 Feb 2023 22:39:32 GMT
last-modified: Sun, 19 Jun 2022 15:39:25 GMT
vary: Accept
x-openstack-request-id: tx107f7e6e2a7f43d895cc2-0062af4764
x-proxy-cache: HIT
x-timestamp: 1655653164.18243
x-trans-id: tx107f7e6e2a7f43d895cc2-0062af4764
cf-cache-status: HIT
age: 135809
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 794b9d6c7baeb4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
js.wpadmngr.com/npc/sdk/wp-banners.js
200 OK 19 kB URL HTTP/2 js.wpadmngr.com/npc/sdk/wp-banners.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash ee9860e3dfca4fe029eb3b4a1ab17bf3
f7745ef61529e0a2f819dec5cc6cad2b3cff666e
9b507ff474ec9d34d9c4b675d7d5ca3b5d2636fbe76d70881e58f4f0709b01e7
GET /npc/sdk/wp-banners.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 20 Aug 2021 15:14:31 GMT
etag: "611fc6d7-0"
expires: Sun, 05 Feb 2023 12:28:01 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
sltvhyjthx.com/solid.gif?z=1910056&abvar=4
200 OK 43 B URL HTTP/2 sltvhyjthx.com/solid.gif?z=1910056&abvar=4
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1910056&abvar=4 HTTP/1.1
Host: sltvhyjthx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javtv.to
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:02 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1d579a89e84c10b3ca694998f980334d
c4792763b903c0e22b8a5c4313e1e9894b38dba2
20f80cd2300130722a779b1cf0874aaf5165de5b1e7d39d2eabf7da09eb55bba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "20F80CD2300130722A779B1CF0874AAF5165DE5B1E7D39D2EABF7DA09EB55BBA"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6453
Expires: Sun, 05 Feb 2023 14:10:35 GMT
Date: Sun, 05 Feb 2023 12:23:02 GMT
Connection: keep-alive
sltvhyjthx.com/get/1910056?zoneid=1910056&jp=_clktc8hadjip4s9dcezt8u&nojs=0&ix=0&abvar=4&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=7991111457882191
200 OK 560 B URL HTTP/2 sltvhyjthx.com/get/1910056?zoneid=1910056&jp=_clktc8hadjip4s9dcezt8u&nojs=0&ix=0&abvar=4&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=7991111457882191
IP
Hash d067ab03cb0e4196642e55c86f253eef
ca9dd227d00c939b939f940b56857be5fbfd8ebc
21d611286ecaa7a175ecf77f4295045c4f0191c1e78a96969f1488f9a7a94fa7
GET /get/1910056?zoneid=1910056&jp=_clktc8hadjip4s9dcezt8u&nojs=0&ix=0&abvar=4&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=7991111457882191 HTTP/1.1
Host: sltvhyjthx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:02 GMT
content-type: text/javascript
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2302050723bc586794fc3b401f83397410b3; Path=/; Expires=Mon, 05 Feb 2024 12:23:02 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/97q-VzuQ-Mw
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/97q-VzuQ-Mw
IP
Hash 98c3876b3af05c102e8c2a3d0c3f822a
8021379d95ee92e5e17f1d89234186cc0f184c62
98e2b40db45f23e72f1f5c2f37618966987db3e82398842f55e2d434e797fb47
POST /s/gts1p5/97q-VzuQ-Mw HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:02 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tsyndicate.com/iframes2/97ca4c176fa543bab7b13942ae9265d5.html?
200 OK 1.9 kB URL HTTP/2 tsyndicate.com/iframes2/97ca4c176fa543bab7b13942ae9265d5.html?
IP
ASN #24940 Hetzner Online GmbH
Hash 287a4ab1a082060ea4decfffc5049658
06f5aff1e6b96ee90b810c3355adcd810b05fb8a
2244cd8794e0205313f1e5fe0e6d0869cd2899f4505de9e53717e89b5da26f60
GET /iframes2/97ca4c176fa543bab7b13942ae9265d5.html? HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:01 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
x-request-id: e04b9eeae3c21602
set-cookie: ts_uid=6278d7ae-2033-4219-b0b9-6f24ebc0992b; expires=Sat, 05 Aug 2023 12:23:01 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
static.adxadserv.com/js/adb.js
200 OK 26 kB URL HTTP/2 static.adxadserv.com/js/adb.js
IP
ASN #60068 Datacamp Limited
Hash b04825ca5368385241003e1c4895e89c
6cb58f4b2ce9cf736a87078bc3b3fd896f300e54
0c08fd91f6fdf5faf6f5bc4255c97009ea057915509ffdab866a03fcdd4c2896
GET /js/adb.js HTTP/1.1
Host: static.adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:01 GMT
content-type: application/javascript
last-modified: Tue, 24 Mar 2020 11:15:59 GMT
etag: W/"5e79ebef-532"
x-accel-expires: @1676019704
server: CDN77-Turbo
x-77-nzt: AblMCRSH0Pb/rWkJAA
x-77-nzt-ray: af58563097ae71faa59fdf6399630f39
x-cache: HIT
x-age: 616877
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
mc7clurd09pla4nrtat7ion.com/lv/esnk/1910054/code.js
200 OK 64 kB URL HTTP/2 mc7clurd09pla4nrtat7ion.com/lv/esnk/1910054/code.js
IP
File type ASCII text, with very long lines (64946)
Hash 46141db821c6e80dfb5e5709db4f2716
4d30c566ab63884f3037a622ffd2715606478228
af932f59925fc6323cc65f10cfb81a70f200187fa96d0e71a1ef902495ad9618
Analyzer Verdict Alert quad9 Sinkholed
GET /lv/esnk/1910054/code.js HTTP/1.1
Host: mc7clurd09pla4nrtat7ion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:02 GMT
content-type: application/javascript
last-modified: Tue, 31 Jan 2023 12:24:53 GMT
vary: Accept-Encoding
etag: W/"63d90895-1ac20"
x-js-ab1: var2
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 1dbe78a2eb6883ba260779237cd4cdd8
ef2cf998c5ebe46bffd0e75f0774379047bcebb4
74b0f3a17f007039631b1fc42510719d195ad3ba2da5b6dde6c65ca78339c7c2
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 12:23:02 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Thu, 09 Feb 2023 10:49:12 GMT
ETag: "ef2cf998c5ebe46bffd0e75f0774379047bcebb4"
Last-Modified: Sun, 05 Feb 2023 10:49:13 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 601
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794b9d706a3db4f1-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash 73904ce8b9f54f1a139d128f80e73cc2
51bdabba475b242d329a2526f7cde71a33b27ae2
e97a9086bd4690d8bae30211edd3bb4784fc570be218287cd1172fb2468fc79c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 12:23:02 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 05:29:14 GMT
Expires: Sat, 11 Feb 2023 05:29:13 GMT
Etag: "51bdabba475b242d329a2526f7cde71a33b27ae2"
Cache-Control: max-age=492970,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794b9d703b4db523-OSL
t.dtscout.com/i/?l=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html&j=
200 OK 47 kB URL HTTP/2 t.dtscout.com/i/?l=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html&j=
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9bc13b7c5a613200a65e0e3889d410f8
0bb62329d1bb36c50d5c293481bc5a09f99da896
42e62e3226894967fbe9932f17f6cfe58454690672b6d0906103b0ac65604a8f
GET /i/?l=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html&j= HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:02 GMT
content-type: application/javascript
x-s: mtl3
set-cookie: m=1; Domain=dtscout.com; Expires=Sun, 05-Feb-2023 13:46:22 GMT; Max-Age=5000; Path=/; SameSite=None; Secure
oa=1; Domain=dtscout.com; Expires=Sun, 05-Feb-2023 16:23:02 GMT; Max-Age=14400; Path=/; SameSite=None; Secure
df=1675599782; Domain=dtscout.com; Expires=Tue, 16-May-2023 12:23:02 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure
x-t: 0.531
expires: Sun, 05 Feb 2023 12:23:01 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ecgrce5S6UgS4AAjXvtjqn%2BeY8MRNuRFiRXU2TGwH4l19YEOgSyj5UiWUHIwuEjEEI7cFroFFbu3ul%2Br7a6V3hs629mE6szll8Q2MWdD8LSDSsyQkwAjvAC87JXMLf4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794b9d6eca010a44-ARN
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
200 OK 35 kB URL HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 34852, version 1.0\012- data
Hash 0e8eefb4549a2edf26c560cb9845952e
8d0b1718aacad934fd0043c87cbc54aa091396bf
7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a
GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.adxadserv.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 00:48:39 GMT
expires: Tue, 30 Jan 2024 00:48:39 GMT
cache-control: public, max-age=31536000
age: 560063
last-modified: Wed, 27 Apr 2022 16:31:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 3ab15beceaabe8ee88f3aceb012fc063
b23cc7ea4883102928c1ef515609fdcfebbad07b
e8de3ddd4fecfef061b86d8f0a9db1983f15625a1e5b02aa048569a82549443b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5097
Cache-Control: max-age=106710
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:02 GMT
Etag: "63de8993-117"
Expires: Mon, 06 Feb 2023 18:01:32 GMT
Last-Modified: Sat, 04 Feb 2023 16:36:35 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash db4a9daa3b446a019da83f80eec46533
c6907276a2a9a0820868f428cfdb7a0f07ebc5ce
baef0a0ae1d90bcf4455bd241f127e15b2da1cb551fcefbfabbaca80f2c78158
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BAEF0A0AE1D90BCF4455BD241F127E15B2DA1CB551FCEFBFABBACA80F2C78158"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7310
Expires: Sun, 05 Feb 2023 14:24:52 GMT
Date: Sun, 05 Feb 2023 12:23:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash db4a9daa3b446a019da83f80eec46533
c6907276a2a9a0820868f428cfdb7a0f07ebc5ce
baef0a0ae1d90bcf4455bd241f127e15b2da1cb551fcefbfabbaca80f2c78158
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BAEF0A0AE1D90BCF4455BD241F127E15B2DA1CB551FCEFBFABBACA80F2C78158"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7310
Expires: Sun, 05 Feb 2023 14:24:52 GMT
Date: Sun, 05 Feb 2023 12:23:02 GMT
Connection: keep-alive
cdn.bncloudfl.com/bn/8bb/9f7/8bf/8bb9f78bf7d01a053ac73b34735468c1c488b3cc.jpg
200 OK 25 kB URL HTTP/2 cdn.bncloudfl.com/bn/8bb/9f7/8bf/8bb9f78bf7d01a053ac73b34735468c1c488b3cc.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 300x250, components 3\012- data
Hash 86cb270cc41259bae3cb57b58853a364
105f5dab91e4fe599cf57d788d480ff3adb5f944
e76b1868cedc8517a332b92f76b022550dce5d9f6da597d94d52fa441735c88c
GET /bn/8bb/9f7/8bf/8bb9f78bf7d01a053ac73b34735468c1c488b3cc.jpg HTTP/1.1
Host: cdn.bncloudfl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:02 GMT
content-type: image/jpeg
content-length: 24956
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=432000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=25602, status=webp_bigger
etag: 8111d6709b49f39d21f280836ae2b038
expires: Mon, 06 Feb 2023 13:55:01 GMT
last-modified: Fri, 30 Dec 2022 09:28:13 GMT
x-openstack-request-id: txb4f123edf91e42e286674-0063aeaf77
x-proxy-cache: HIT
x-timestamp: 1672392492.78160
x-trans-id: txb4f123edf91e42e286674-0063aeaf77
cf-cache-status: HIT
age: 80881
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 794b9d70e971b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2e6da174ec74fd5e7421b5ac059ece30
c46b0cf22268710b7866b824d287662badfc24ad
aab071e38c026f51f401af3aa205d2d285fdae31a97be7a75937db11970fed6e
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73769
date: Sun, 05 Feb 2023 12:23:02 GMT
access-control-allow-origin: *
etag: "63c93a4b-12029"
expires: Sun, 05 Feb 2023 13:23:02 GMT
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 3ab15beceaabe8ee88f3aceb012fc063
b23cc7ea4883102928c1ef515609fdcfebbad07b
e8de3ddd4fecfef061b86d8f0a9db1983f15625a1e5b02aa048569a82549443b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5097
Cache-Control: max-age=106710
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:02 GMT
Etag: "63de8993-117"
Expires: Mon, 06 Feb 2023 18:01:32 GMT
Last-Modified: Sat, 04 Feb 2023 16:36:35 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
mc7clurd09pla4nrtat7ion.com/chicken.gif?z=1910054&pb=dcb4a484560c8b8d52523084063bca081675606982&psp=5HMKyYuDoXwwh9KGD-melyNylfQpv0V2VhtU_fgvm_NfJgpEJpUHSj4_xDfSuQqiRksEi4xYAEt_aeoWhubdtoMjCqyW4VXwfbTlcO82TShcI1OTHBjqUwMP40rc4ZgTDnvFMb8KnYlxMsauzUgKw4ZpO6-vcTE7KxAaGvZ95x3Hz-4C5aelieNjwaprN1dFIWv9Epj6iPz14Szh_pk_ANHP7fIcXhTAEhvKRVW1wgtQLnzjHq0x7230I2XJeX-5ybsdyhyt7FWZt59K9qZllMws2oNA8DNTztgL1rY6hnpCcJcxrrHmGMfkE4TYsltBB0z2GLUUxj41hN1dSkLcfMvgKCgaqS5g6xUA4Zu-IDfm50RzRlpJ_FojVB1RcqyQ8Js2DmWTIvdl0LZnRUWxdV85JmR-fO-tHthLHESLgHTK6wsFKxzLxjzVbAeXoJ8wJwsr3TH-czkWfrnWQY31NSMCoriMGgFKVIYc0AEeVWqVTp2pVxsNE5V0FBMEiKlxY__Hd5DOJDZtN_R_ZCcdFVOc51ie-epWpY1IAxbDmXvHNrFO8VEa9MACukhqbznB1MjhaUR-RSAAOCBHmHNz-MfAVsRmpcwJbOj2VXfRO0lYjejn1c4hVh1DnfQG1MP951pkJjdXrwd5_B1SZbw7SgENojZdqleRikQuWu2jGHqwh_ktUCi3YHYGSfwXmyrCoI8tKKS3jIyDU22_sajH8JuEtodpwE_TYfvPFGO8ZzGsS72Mbqs7vlhc3vJBOgrt28lc78wkjAqLfNohNE6XIkcPiL0s2GPrNkKlsPrl7s71bEB-wiDnhuPQUNZtVHqgV6gx7lOz0JEzrXHQlmn-JuQA3dONH-LdBesTXPzLQIOOmRJA9u0Z8otnLiuSdWAjaaJZAT3_g3Bvz58rRLnCzBm1uwAs-WH4_zleHR2Z0jUvVmYlE1tWzFbM1_9z6GSfWVLDT9ThFvhdmS4_5Edd&abvar=2&os=0
200 OK 43 B URL HTTP/2 mc7clurd09pla4nrtat7ion.com/chicken.gif?z=1910054&pb=dcb4a484560c8b8d52523084063bca081675606982&psp=5HMKyYuDoXwwh9KGD-melyNylfQpv0V2VhtU_fgvm_NfJgpEJpUHSj4_xDfSuQqiRksEi4xYAEt_aeoWhubdtoMjCqyW4VXwfbTlcO82TShcI1OTHBjqUwMP40rc4ZgTDnvFMb8KnYlxMsauzUgKw4ZpO6-vcTE7KxAaGvZ95x3Hz-4C5aelieNjwaprN1dFIWv9Epj6iPz14Szh_pk_ANHP7fIcXhTAEhvKRVW1wgtQLnzjHq0x7230I2XJeX-5ybsdyhyt7FWZt59K9qZllMws2oNA8DNTztgL1rY6hnpCcJcxrrHmGMfkE4TYsltBB0z2GLUUxj41hN1dSkLcfMvgKCgaqS5g6xUA4Zu-IDfm50RzRlpJ_FojVB1RcqyQ8Js2DmWTIvdl0LZnRUWxdV85JmR-fO-tHthLHESLgHTK6wsFKxzLxjzVbAeXoJ8wJwsr3TH-czkWfrnWQY31NSMCoriMGgFKVIYc0AEeVWqVTp2pVxsNE5V0FBMEiKlxY__Hd5DOJDZtN_R_ZCcdFVOc51ie-epWpY1IAxbDmXvHNrFO8VEa9MACukhqbznB1MjhaUR-RSAAOCBHmHNz-MfAVsRmpcwJbOj2VXfRO0lYjejn1c4hVh1DnfQG1MP951pkJjdXrwd5_B1SZbw7SgENojZdqleRikQuWu2jGHqwh_ktUCi3YHYGSfwXmyrCoI8tKKS3jIyDU22_sajH8JuEtodpwE_TYfvPFGO8ZzGsS72Mbqs7vlhc3vJBOgrt28lc78wkjAqLfNohNE6XIkcPiL0s2GPrNkKlsPrl7s71bEB-wiDnhuPQUNZtVHqgV6gx7lOz0JEzrXHQlmn-JuQA3dONH-LdBesTXPzLQIOOmRJA9u0Z8otnLiuSdWAjaaJZAT3_g3Bvz58rRLnCzBm1uwAs-WH4_zleHR2Z0jUvVmYlE1tWzFbM1_9z6GSfWVLDT9ThFvhdmS4_5Edd&abvar=2&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
GET /chicken.gif?z=1910054&pb=dcb4a484560c8b8d52523084063bca081675606982&psp=5HMKyYuDoXwwh9KGD-melyNylfQpv0V2VhtU_fgvm_NfJgpEJpUHSj4_xDfSuQqiRksEi4xYAEt_aeoWhubdtoMjCqyW4VXwfbTlcO82TShcI1OTHBjqUwMP40rc4ZgTDnvFMb8KnYlxMsauzUgKw4ZpO6-vcTE7KxAaGvZ95x3Hz-4C5aelieNjwaprN1dFIWv9Epj6iPz14Szh_pk_ANHP7fIcXhTAEhvKRVW1wgtQLnzjHq0x7230I2XJeX-5ybsdyhyt7FWZt59K9qZllMws2oNA8DNTztgL1rY6hnpCcJcxrrHmGMfkE4TYsltBB0z2GLUUxj41hN1dSkLcfMvgKCgaqS5g6xUA4Zu-IDfm50RzRlpJ_FojVB1RcqyQ8Js2DmWTIvdl0LZnRUWxdV85JmR-fO-tHthLHESLgHTK6wsFKxzLxjzVbAeXoJ8wJwsr3TH-czkWfrnWQY31NSMCoriMGgFKVIYc0AEeVWqVTp2pVxsNE5V0FBMEiKlxY__Hd5DOJDZtN_R_ZCcdFVOc51ie-epWpY1IAxbDmXvHNrFO8VEa9MACukhqbznB1MjhaUR-RSAAOCBHmHNz-MfAVsRmpcwJbOj2VXfRO0lYjejn1c4hVh1DnfQG1MP951pkJjdXrwd5_B1SZbw7SgENojZdqleRikQuWu2jGHqwh_ktUCi3YHYGSfwXmyrCoI8tKKS3jIyDU22_sajH8JuEtodpwE_TYfvPFGO8ZzGsS72Mbqs7vlhc3vJBOgrt28lc78wkjAqLfNohNE6XIkcPiL0s2GPrNkKlsPrl7s71bEB-wiDnhuPQUNZtVHqgV6gx7lOz0JEzrXHQlmn-JuQA3dONH-LdBesTXPzLQIOOmRJA9u0Z8otnLiuSdWAjaaJZAT3_g3Bvz58rRLnCzBm1uwAs-WH4_zleHR2Z0jUvVmYlE1tWzFbM1_9z6GSfWVLDT9ThFvhdmS4_5Edd&abvar=2&os=0 HTTP/1.1
Host: mc7clurd09pla4nrtat7ion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=230205072387a463cc230949a3aa1c1e608c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:02 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
mc7clurd09pla4nrtat7ion.com/chicken.gif?z=1909590&pb=dcb4a484560c8b8d52523084063bca081675606982&psp=axKc5mCinitRoHC6xQDGL-LlBcX_hD-SG0bNN72dxDFma3-kQ-SMeEGTeDMRIato23OxrsSCWa8XxgIA4_PTv1-qeuiAhXUSf6VQHCKqcUif_dnj3RUnc-T8rr5ci26UwtiuPbyKVzR-YJjp-PKt1AqRt2UTKqb5XmDb4cWexa3Y8wkTCa4k9Q4Gz-SLE-4A9K6WTLX7M94s9aeW6uS_bVG4ajipQDW4hTKCkFiaKBb0g8GF6qr_J4xrjSZoVd9-GMRMyLf9aN4CJRPR0aV08LfgZyk2sBqQ4hn6WdF6Po85akottOhSRUA2VEXEWYwK4W8Zvv3wef5DSLFhx7nM2i-M90eV5cIZruTIujt_fLAOU69mqZTQAQBEnUyDZLbVPMIi2Io6Ju6S0cFbu0L6Bq5d0AgRO5rtegyaiQHDO8fRR6r7R4bWgFjQz6wx_pdS4ZK_8Dw2v7sC2ewPiv2smOy89bOamJ8XX3k9I7IuRkNWjtd-2pSIDa-JNVSWKRFhXHInEWedyTW78FDzNVku90cXKQnkTaDEnN3i9PB-k_osc_2TPxayzt7b92yuRJBGYjzJuT-f_KlKnFZMtHVeVdZv_Eeeud2WjEsR0K3fBnvtN_6YiCtdjSwrWi1cJAnItc70JBHxcY35NxnycjGZa1oGjNCDBF16BuNJ7-PiwAdZA1Kshj-FdgWKxevJ5_-hAUuyRPZTU5g35rRqtUytfkZw_3W5jMVYbqTp9yzu0fOLgIEFEl0UtO5IVKuNAPede63LSJuzoarkwpZjtP334s2B704YeyJxneJje4IX_8aoSZlNxmu8sOrMf6txd5Jg3fLPTQRxSEZOV1h-jVA0ig==&abvar=30&os=0
200 OK 43 B URL HTTP/2 mc7clurd09pla4nrtat7ion.com/chicken.gif?z=1909590&pb=dcb4a484560c8b8d52523084063bca081675606982&psp=axKc5mCinitRoHC6xQDGL-LlBcX_hD-SG0bNN72dxDFma3-kQ-SMeEGTeDMRIato23OxrsSCWa8XxgIA4_PTv1-qeuiAhXUSf6VQHCKqcUif_dnj3RUnc-T8rr5ci26UwtiuPbyKVzR-YJjp-PKt1AqRt2UTKqb5XmDb4cWexa3Y8wkTCa4k9Q4Gz-SLE-4A9K6WTLX7M94s9aeW6uS_bVG4ajipQDW4hTKCkFiaKBb0g8GF6qr_J4xrjSZoVd9-GMRMyLf9aN4CJRPR0aV08LfgZyk2sBqQ4hn6WdF6Po85akottOhSRUA2VEXEWYwK4W8Zvv3wef5DSLFhx7nM2i-M90eV5cIZruTIujt_fLAOU69mqZTQAQBEnUyDZLbVPMIi2Io6Ju6S0cFbu0L6Bq5d0AgRO5rtegyaiQHDO8fRR6r7R4bWgFjQz6wx_pdS4ZK_8Dw2v7sC2ewPiv2smOy89bOamJ8XX3k9I7IuRkNWjtd-2pSIDa-JNVSWKRFhXHInEWedyTW78FDzNVku90cXKQnkTaDEnN3i9PB-k_osc_2TPxayzt7b92yuRJBGYjzJuT-f_KlKnFZMtHVeVdZv_Eeeud2WjEsR0K3fBnvtN_6YiCtdjSwrWi1cJAnItc70JBHxcY35NxnycjGZa1oGjNCDBF16BuNJ7-PiwAdZA1Kshj-FdgWKxevJ5_-hAUuyRPZTU5g35rRqtUytfkZw_3W5jMVYbqTp9yzu0fOLgIEFEl0UtO5IVKuNAPede63LSJuzoarkwpZjtP334s2B704YeyJxneJje4IX_8aoSZlNxmu8sOrMf6txd5Jg3fLPTQRxSEZOV1h-jVA0ig==&abvar=30&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
GET /chicken.gif?z=1909590&pb=dcb4a484560c8b8d52523084063bca081675606982&psp=axKc5mCinitRoHC6xQDGL-LlBcX_hD-SG0bNN72dxDFma3-kQ-SMeEGTeDMRIato23OxrsSCWa8XxgIA4_PTv1-qeuiAhXUSf6VQHCKqcUif_dnj3RUnc-T8rr5ci26UwtiuPbyKVzR-YJjp-PKt1AqRt2UTKqb5XmDb4cWexa3Y8wkTCa4k9Q4Gz-SLE-4A9K6WTLX7M94s9aeW6uS_bVG4ajipQDW4hTKCkFiaKBb0g8GF6qr_J4xrjSZoVd9-GMRMyLf9aN4CJRPR0aV08LfgZyk2sBqQ4hn6WdF6Po85akottOhSRUA2VEXEWYwK4W8Zvv3wef5DSLFhx7nM2i-M90eV5cIZruTIujt_fLAOU69mqZTQAQBEnUyDZLbVPMIi2Io6Ju6S0cFbu0L6Bq5d0AgRO5rtegyaiQHDO8fRR6r7R4bWgFjQz6wx_pdS4ZK_8Dw2v7sC2ewPiv2smOy89bOamJ8XX3k9I7IuRkNWjtd-2pSIDa-JNVSWKRFhXHInEWedyTW78FDzNVku90cXKQnkTaDEnN3i9PB-k_osc_2TPxayzt7b92yuRJBGYjzJuT-f_KlKnFZMtHVeVdZv_Eeeud2WjEsR0K3fBnvtN_6YiCtdjSwrWi1cJAnItc70JBHxcY35NxnycjGZa1oGjNCDBF16BuNJ7-PiwAdZA1Kshj-FdgWKxevJ5_-hAUuyRPZTU5g35rRqtUytfkZw_3W5jMVYbqTp9yzu0fOLgIEFEl0UtO5IVKuNAPede63LSJuzoarkwpZjtP334s2B704YeyJxneJje4IX_8aoSZlNxmu8sOrMf6txd5Jg3fLPTQRxSEZOV1h-jVA0ig==&abvar=30&os=0 HTTP/1.1
Host: mc7clurd09pla4nrtat7ion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=230205072387a463cc230949a3aa1c1e608c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:02 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACSxrAAAAAAAAAAB; Path=/; Expires=Tue, 07 Mar 2023 12:23:02 GMT; Secure; SameSite=None
OACIBLOCK=ACSxrAAAAABj3zfQ; Path=/; Expires=Tue, 07 Mar 2023 12:23:02 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Mon, 06 Feb 2023 12:23:02 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
cuddlethehyena.com/t/9/fret/meow4/1909981/9a025107.js
200 OK 77 kB URL HTTP/2 cuddlethehyena.com/t/9/fret/meow4/1909981/9a025107.js
IP
Hash 72613b9e0f8d57b39d751c06854218ea
a78cb3477d3d95e1618ca695191f60097cc1b5e2
1bf9063d52dbf5f75c5d17b98ca755d98b26cb48c6c3bf4565355b54a23ba54d
Analyzer Verdict Alert quad9 Sinkholed
GET /t/9/fret/meow4/1909981/9a025107.js HTTP/1.1
Host: cuddlethehyena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:01 GMT
content-type: application/javascript
last-modified: Tue, 31 Jan 2023 12:19:58 GMT
vary: Accept-Encoding
etag: W/"63d9076e-1273a"
x-js-ab1: var1
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
r.trackwilltrk.com/s1/e766d629-8aa2-4f64-800f-7458117d07a9?externalId=d58f2365-a54f-11ed-8703-e25a5bb9767f&cv1=d58f2365-a54f-11ed-8703-e25a5bb9767f&cv2=0c1c5c30286e1db21a741e4b62c8b6e4&cv3=desktop&cv4=623d833161d6e27cf559bde1&cv5=623d831361d6e2739a0c4ca4&cv6=en&cv7=300x250+-+javtv.to+-+NTVA+%28mobile%2C+desktop%29&cv8=Firefox&cv9=6295840561d6e234530f4025&cv10=exim_adxad_stub1_300x250_
200 OK 858 B URL HTTP/1.1 r.trackwilltrk.com/s1/e766d629-8aa2-4f64-800f-7458117d07a9?externalId=d58f2365-a54f-11ed-8703-e25a5bb9767f&cv1=d58f2365-a54f-11ed-8703-e25a5bb9767f&cv2=0c1c5c30286e1db21a741e4b62c8b6e4&cv3=desktop&cv4=623d833161d6e27cf559bde1&cv5=623d831361d6e2739a0c4ca4&cv6=en&cv7=300x250+-+javtv.to+-+NTVA+%28mobile%2C+desktop%29&cv8=Firefox&cv9=6295840561d6e234530f4025&cv10=exim_adxad_stub1_300x250_
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (662)
Hash 5e18ab11939c76c686fddd67721412ae
c3bf1718c4cc8dfefc8a2a379742064162aee5c6
701897bda5c64515e9011f5d0a63a8d8640297adcd390dd1b3d1e49fa40ee7b5
GET /s1/e766d629-8aa2-4f64-800f-7458117d07a9?externalId=d58f2365-a54f-11ed-8703-e25a5bb9767f&cv1=d58f2365-a54f-11ed-8703-e25a5bb9767f&cv2=0c1c5c30286e1db21a741e4b62c8b6e4&cv3=desktop&cv4=623d833161d6e27cf559bde1&cv5=623d831361d6e2739a0c4ca4&cv6=en&cv7=300x250+-+javtv.to+-+NTVA+%28mobile%2C+desktop%29&cv8=Firefox&cv9=6295840561d6e234530f4025&cv10=exim_adxad_stub1_300x250_ HTTP/1.1
Host: r.trackwilltrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 05 Feb 2023 12:23:02 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 858
Connection: close
Set-Cookie: uid=ZKlAs7btpZ; Path=/; Domain=trackwilltrk.com; Expires=Mon, 06 Feb 2023 12:23:02 GMT; HttpOnly
X-Request-Id: e443f1e6-bcd6-49d3-a8df-b0f4cba7a53c
cuddlethehyena.com/bultykh/ipp24/7/bazinga/1910055
200 OK 140 kB URL HTTP/2 cuddlethehyena.com/bultykh/ipp24/7/bazinga/1910055
IP
Size 140 kB (139474 bytes)
Hash 921b00d29338c5d8fe31ba55f2264420
74d4e7f0f3150973608567148c78f4dac3ff1c5e
c5554d90d68e1e84db1762f7a604afc6fc9aa7f93501c8eee8fe0c34fa11e78e
Analyzer Verdict Alert quad9 Sinkholed
GET /bultykh/ipp24/7/bazinga/1910055 HTTP/1.1
Host: cuddlethehyena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:01 GMT
content-type: application/javascript
last-modified: Tue, 31 Jan 2023 12:24:53 GMT
vary: Accept-Encoding
etag: W/"63d90895-343d4"
x-js-ab1: var2
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
adxadserv.com/px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D6295840561d6e234530f4025%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fjavtv.to%252F%2526dt%253D1675599822224%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Ftsyndicate.com%252F&d_r=1&d_s=1280x1024&d_w=300x250&t_s=1675599822480&t_i=1675599822632&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=a2d5b031-29a9-4230-aed5-b5224c71635c&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=d58f2365-a54f-11ed-8703-e25a5bb9767f&spid=6295840561d6e234530f4025&fpid_sa=1675599822632&fpid=&feid_sa=1675599822632&sid_sa=1675599822632&feid=c94fbcf946eca7adc7d7a8d0544c87af&sid=ef73cc15f5368ffdc21bc6851c2c1a46&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=tsyndicate.com&s_rst=1&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.332
200 OK 0 B URL HTTP/1.1 adxadserv.com/px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D6295840561d6e234530f4025%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fjavtv.to%252F%2526dt%253D1675599822224%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Ftsyndicate.com%252F&d_r=1&d_s=1280x1024&d_w=300x250&t_s=1675599822480&t_i=1675599822632&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=a2d5b031-29a9-4230-aed5-b5224c71635c&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=d58f2365-a54f-11ed-8703-e25a5bb9767f&spid=6295840561d6e234530f4025&fpid_sa=1675599822632&fpid=&feid_sa=1675599822632&sid_sa=1675599822632&feid=c94fbcf946eca7adc7d7a8d0544c87af&sid=ef73cc15f5368ffdc21bc6851c2c1a46&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=tsyndicate.com&s_rst=1&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.332
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D6295840561d6e234530f4025%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fjavtv.to%252F%2526dt%253D1675599822224%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Ftsyndicate.com%252F&d_r=1&d_s=1280x1024&d_w=300x250&t_s=1675599822480&t_i=1675599822632&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=a2d5b031-29a9-4230-aed5-b5224c71635c&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=d58f2365-a54f-11ed-8703-e25a5bb9767f&spid=6295840561d6e234530f4025&fpid_sa=1675599822632&fpid=&feid_sa=1675599822632&sid_sa=1675599822632&feid=c94fbcf946eca7adc7d7a8d0544c87af&sid=ef73cc15f5368ffdc21bc6851c2c1a46&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=tsyndicate.com&s_rst=1&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.332 HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 05 Feb 2023 12:23:02 GMT
Content-Length: 0
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11449
Expires: Sun, 05 Feb 2023 15:33:51 GMT
Date: Sun, 05 Feb 2023 12:23:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11449
Expires: Sun, 05 Feb 2023 15:33:51 GMT
Date: Sun, 05 Feb 2023 12:23:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11449
Expires: Sun, 05 Feb 2023 15:33:51 GMT
Date: Sun, 05 Feb 2023 12:23:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed9dd21c-6496-4f6e-b306-570e4802aba4.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed9dd21c-6496-4f6e-b306-570e4802aba4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 251f1a5d671fb797fb98e9a71754c341
335425603d9eec146a3c03422dbca91134272e53
74932f07561287e33302aabcf9c639e9df7ae0fbc4bf71f5467310aabafea208
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed9dd21c-6496-4f6e-b306-570e4802aba4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6202
x-amzn-requestid: 01b85fcd-69a0-49da-8640-32a3ef19378a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3bUFEJoAMFapg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c48-14817e717361e09170714e9d;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1_1mEN4j5cciWEiimz4PRjx3PNGnrSRib9oEJAdYLrrtyjqnz_zvcQ==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 11:30:31 GMT
age: 3151
etag: "335425603d9eec146a3c03422dbca91134272e53"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 683 B IP
ASN #20940 Akamai International B.V.
Hash 04bbce20ac155ab395523f0cb1a2bef1
e7c5d5cb0b127018398296add6769752f5268684
8723455b4522bc4f921d575ecdc4c507f79b5f0db0a473a43a5fabf649cc0375
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11449
Expires: Sun, 05 Feb 2023 15:33:51 GMT
Date: Sun, 05 Feb 2023 12:23:02 GMT
Connection: keep-alive
adxadserv.com/px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D62957d2861d6e234545d1b71%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fjavtv.to%252F%2526dt%253D1675599822412%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Ftsyndicate.com%252F&d_r=1&d_s=1280x1024&d_w=300x250&t_s=1675599822484&t_i=1675599822638&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=7c57b531-d7a3-456e-8c8d-bf1a708c6410&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=d58fda7d-a54f-11ed-93df-e2e38133f3a0&spid=62957d2861d6e234545d1b71&fpid_sa=1675599822632&fpid=&feid_sa=1675599822632&sid_sa=1675599822632&feid=c94fbcf946eca7adc7d7a8d0544c87af&sid=ef73cc15f5368ffdc21bc6851c2c1a46&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=tsyndicate.com&s_rst=0&e_d=%7B%7D&t_op=0.35
200 OK 0 B URL HTTP/1.1 adxadserv.com/px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D62957d2861d6e234545d1b71%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fjavtv.to%252F%2526dt%253D1675599822412%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Ftsyndicate.com%252F&d_r=1&d_s=1280x1024&d_w=300x250&t_s=1675599822484&t_i=1675599822638&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=7c57b531-d7a3-456e-8c8d-bf1a708c6410&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=d58fda7d-a54f-11ed-93df-e2e38133f3a0&spid=62957d2861d6e234545d1b71&fpid_sa=1675599822632&fpid=&feid_sa=1675599822632&sid_sa=1675599822632&feid=c94fbcf946eca7adc7d7a8d0544c87af&sid=ef73cc15f5368ffdc21bc6851c2c1a46&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=tsyndicate.com&s_rst=0&e_d=%7B%7D&t_op=0.35
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D62957d2861d6e234545d1b71%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fjavtv.to%252F%2526dt%253D1675599822412%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Ftsyndicate.com%252F&d_r=1&d_s=1280x1024&d_w=300x250&t_s=1675599822484&t_i=1675599822638&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=7c57b531-d7a3-456e-8c8d-bf1a708c6410&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=d58fda7d-a54f-11ed-93df-e2e38133f3a0&spid=62957d2861d6e234545d1b71&fpid_sa=1675599822632&fpid=&feid_sa=1675599822632&sid_sa=1675599822632&feid=c94fbcf946eca7adc7d7a8d0544c87af&sid=ef73cc15f5368ffdc21bc6851c2c1a46&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=tsyndicate.com&s_rst=0&e_d=%7B%7D&t_op=0.35 HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 05 Feb 2023 12:23:02 GMT
Content-Length: 0
Connection: keep-alive
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 05 Feb 2023 12:23:02 GMT
access-control-allow-origin: *
etag: "63c93a4b-2b"
expires: Sun, 05 Feb 2023 13:23:02 GMT
accept-ranges: bytes
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
javtv.to/video/144378/gigp-32.html
200 OK 12 kB URL HTTP/2 javtv.to/video/144378/gigp-32.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (993), with CRLF, LF line terminators
Hash 4c3e694997e1c84c2b6e5860b99802ed
d85cf116bfd434469961b3d559b9c7d46558cdb3
ff6c433572e7575cbac10d403392d8483e6e91c137159234953c28239649d00e
GET /video/144378/gigp-32.html HTTP/1.1
Host: javtv.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:00 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: max-age=86400
cf-cache-status: MISS
last-modified: Sun, 05 Feb 2023 12:23:00 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1HdRmGUZaY2WmcdCts%2FNTDmouz%2B50eOk%2BhueVeW2JiXy5j6ADM0g40CpQGRwuleQlHlXtKVFnHYEXlZMUMOPTpOrQao2ZcoE7fyHyhVdw%2F0vDWDDZ4MVSUD52g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794b9d64bfa271fb-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b593b5-5093-4504-8ab7-492c62b14ca7.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b593b5-5093-4504-8ab7-492c62b14ca7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c1f3df5bbad5048923e29c0767d703d3
48c408d37a7bd7f96653174359178eed46ddf298
c8bae041c3d64334964b2aa771a07bc2709ced4c497e1795f864d9416fed728f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b593b5-5093-4504-8ab7-492c62b14ca7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5801
x-amzn-requestid: 441284a8-923a-4b22-b39f-95dec713c292
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fjj9jHu_IAMFZ-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d7b389-788174a773fcd695540cc95e;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 12:09:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DgvqiQwdytO2caPNzg2OhGcv8ly9N_YeQTzpuf6iwAVt8AQZEXRLqw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:44:03 GMT
age: 52739
etag: "48c408d37a7bd7f96653174359178eed46ddf298"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static.javhdhello.com/h5/files/overlay/1602-overlay.png
200 OK 1.8 kB URL HTTP/2 static.javhdhello.com/h5/files/overlay/1602-overlay.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash f4403fc07b7c414db6ec613317885035
457d3e8f9e9fb0456292efdbd5f18b318e804ea7
00ffbfa9483f4a6e8b85b6ab368a9547cf29e54c1aeb2bfcf81f34ec2bf50ee7
GET /h5/files/overlay/1602-overlay.png HTTP/1.1
Host: static.javhdhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhdhello.com/h5/files/16514/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Ffaec45e5-c3cb-4b38-b158-2fd2c0bf1489%3Fcv1%3Dd58fda7d-a54f-11ed-93df-e2e38133f3a0%26cv10%3Dexim_adxad_stub1_300x250_%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D623d833161d6e27cf559bde1%26cv5%3D623d831361d6e2739a0c4ca4%26cv6%3Den%26cv7%3D300x250%2B-%2Bjavpro.cc%2B-%2BNTVA%2B%2528mobile%252C%2Bdesktop%2529%26cv8%3DFirefox%26cv9%3D62957d2861d6e234545d1b71%26externalId%3Dd58fda7d-a54f-11ed-93df-e2e38133f3a0%26p%3DeyJiIjoyNzgzMjcsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjQsInAiOjEsInMiOjI1MzMzfQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:02 GMT
content-type: image/png
content-length: 1839
last-modified: Wed, 20 Apr 2022 13:56:47 GMT
etag: "6260111f-72f"
expires: Tue, 23 May 2023 11:04:47 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684839887
server: CDN77-Turbo
x-77-nzt: AblMCQ3lhff/VzVUAQ
x-77-nzt-ray: c0a4cc28760551c2a69fdf631115eb32
x-cache: HIT
x-age: 22295895
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0def934-b27d-4612-bab8-84bfb73a9960.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0def934-b27d-4612-bab8-84bfb73a9960.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5beaead015b2b4fb6d36009926ba0378
67e7c49ea7648fc6d1dffc22588862c993b785b7
6ae0cec9ade23fd53e9c1407b0324a8060892a65a6b675ccffa4a4c82b66f1ff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0def934-b27d-4612-bab8-84bfb73a9960.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7589
x-amzn-requestid: 280f7003-2696-4a82-bd50-82b0a2b66faf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fsSpoEA0oAMFSBg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63db3170-35dcb9513c891af201b973d1;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 03:43:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: IxfTibTq6T_wq9a5YCIBZLBb70BI7AOLEAYMYYuMZPhvVKjDbFfrvA==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:52:08 GMT
etag: "67e7c49ea7648fc6d1dffc22588862c993b785b7"
content-type: image/jpeg
age: 52254
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static.javhdhello.com/h5/files/button/29-button.png
200 OK 733 B URL HTTP/2 static.javhdhello.com/h5/files/button/29-button.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 82a66a2d222379716ca9a03ff50d8f42
ae43d917ff791f9172edc527baa6266416182aaa
cc5da7b40e498d30bf5eaae43e59cae32202737076422676489dd8d3030803de
GET /h5/files/button/29-button.png HTTP/1.1
Host: static.javhdhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhdhello.com/h5/files/16514/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Ffaec45e5-c3cb-4b38-b158-2fd2c0bf1489%3Fcv1%3Dd58fda7d-a54f-11ed-93df-e2e38133f3a0%26cv10%3Dexim_adxad_stub1_300x250_%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D623d833161d6e27cf559bde1%26cv5%3D623d831361d6e2739a0c4ca4%26cv6%3Den%26cv7%3D300x250%2B-%2Bjavpro.cc%2B-%2BNTVA%2B%2528mobile%252C%2Bdesktop%2529%26cv8%3DFirefox%26cv9%3D62957d2861d6e234545d1b71%26externalId%3Dd58fda7d-a54f-11ed-93df-e2e38133f3a0%26p%3DeyJiIjoyNzgzMjcsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjQsInAiOjEsInMiOjI1MzMzfQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:02 GMT
content-type: image/png
content-length: 733
last-modified: Tue, 22 Dec 2015 18:41:22 GMT
etag: "56799952-2dd"
expires: Tue, 23 May 2023 11:04:47 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684839887
server: CDN77-Turbo
x-77-nzt: AblMCQ1YtBX/VzVUAQ
x-77-nzt-ray: c0a4cc28760551c2a69fdf635e1a2733
x-cache: HIT
x-age: 22295895
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8e0be7db14d930d6227443314bcd1747
4e42e2ad289dfe5bd9a55d34fd768f7532bdf71d
baedfbdb08a67f9ff4c698f7e65b08d7e4c5078d0a4233e6bff529b44812735a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12967
x-amzn-requestid: 013fa296-a431-410b-b3fb-7417b3e877eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpIQAFCMIAMF0Sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9ed99-2e1daa8b75977de07c48b8fc;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 04:42:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UzQGDCYe_8AuYYLaLSAWzHQhwJMpzpXWbjE5AwukevW6G6SLDxDjmA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 03:42:59 GMT
age: 31203
etag: "4e42e2ad289dfe5bd9a55d34fd768f7532bdf71d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5b6c30ad03669b66bf2f63b3edd69882
e630bd132b52b965a5ade646ea8a165d1abf6d7b
f8233d879ec17fd91909655ff8881f2ebfad84272fde3ed5e5be37580378a989
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5014
x-amzn-requestid: a434aae4-fe4b-4fc7-9b7e-eeb552484e8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3bIE0aoAMF6YQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c47-5556d14757190c842bbc6b06;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:43 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: k6YqagXr3Wr-u1uDKojEnIGW0CxU5yvWPtlzNpzoIvmg9F-rJb9uFQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 11:24:01 GMT
age: 3541
etag: "e630bd132b52b965a5ade646ea8a165d1abf6d7b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad60ff0-69ec-4be2-9334-41be71ca4b7f.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad60ff0-69ec-4be2-9334-41be71ca4b7f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1a4eed23b240d04a3cd6b085cfa93375
f29b9dc3f6bbd2ba76a5a4570ce044d5f240fd00
93e8371f80c12d3753842e36001dbb8d3dc2223b10a594639752cd816c492d4e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad60ff0-69ec-4be2-9334-41be71ca4b7f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10905
x-amzn-requestid: 093778fc-231c-452f-a6fc-15f4eb41ade0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmNJCEDzIAMFmxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8c239-7f56d6e56392f373541db219;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:24:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WVfpilnwhnRXBhJkHBWjxxoP09f7SqlRk8CdWRWOubIIwe0CX89bUA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 22:09:58 GMT
age: 51184
etag: "f29b9dc3f6bbd2ba76a5a4570ce044d5f240fd00"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mc.yandex.ru/watch/89847858/1?wmode=7&page-url=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1325%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1254259699951%3Ahid%3A624864758%3Az%3A0%3Ai%3A20230205122342%3Aet%3A1675599823%3Ac%3A1%3Arn%3A9951418%3Arqn%3A1%3Au%3A1675599823645717627%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C129%2C212%2C0%2C345%2C0%2C%2C1341%2C8%2C%2C%2C%2C2095%3Aco%3A0%3Ans%3A1675599820292%3Anp%3ATGludXggeDg2XzY0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675599823%3At%3AGIGP-32%20Bishoujo%20Senshi%20Sailor%20Rumes%20Virgin%20Loss%20Evil%20Fall%20Yokomiya%20Nanami%20Watch%20Online%20JAV%20-%20Hot%20JAV%20-%20Free%20download%20-%20JAVTV&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/89847858/1?wmode=7&page-url=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1325%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1254259699951%3Ahid%3A624864758%3Az%3A0%3Ai%3A20230205122342%3Aet%3A1675599823%3Ac%3A1%3Arn%3A9951418%3Arqn%3A1%3Au%3A1675599823645717627%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C129%2C212%2C0%2C345%2C0%2C%2C1341%2C8%2C%2C%2C%2C2095%3Aco%3A0%3Ans%3A1675599820292%3Anp%3ATGludXggeDg2XzY0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675599823%3At%3AGIGP-32%20Bishoujo%20Senshi%20Sailor%20Rumes%20Virgin%20Loss%20Evil%20Fall%20Yokomiya%20Nanami%20Watch%20Online%20JAV%20-%20Hot%20JAV%20-%20Free%20download%20-%20JAVTV&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash 24903347976b225d49c1b8c9dad35c68
a34dde2bfe2f73e65299cd83c895f784abcc1281
e0f46bb22992d2791ef84a1eaa6d357fb5e40e9177e6da102e9eb1ba8e2a0507
GET /watch/89847858/1?wmode=7&page-url=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1325%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1254259699951%3Ahid%3A624864758%3Az%3A0%3Ai%3A20230205122342%3Aet%3A1675599823%3Ac%3A1%3Arn%3A9951418%3Arqn%3A1%3Au%3A1675599823645717627%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C129%2C212%2C0%2C345%2C0%2C%2C1341%2C8%2C%2C%2C%2C2095%3Aco%3A0%3Ans%3A1675599820292%3Anp%3ATGludXggeDg2XzY0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675599823%3At%3AGIGP-32%20Bishoujo%20Senshi%20Sailor%20Rumes%20Virgin%20Loss%20Evil%20Fall%20Yokomiya%20Nanami%20Watch%20Online%20JAV%20-%20Hot%20JAV%20-%20Free%20download%20-%20JAVTV&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javtv.to
Referer: https://javtv.to/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Sun, 05 Feb 2023 12:23:02 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://javtv.to
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 05-Feb-2023 12:23:02 GMT
last-modified: Sun, 05-Feb-2023 12:23:02 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/ZdSHE9_fHNo
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/ZdSHE9_fHNo
IP
Hash bd454f73899fbe7bfd37e50ddf812c4d
67e7e6ff7fa5db5f6bcfd0909a3dcba029095629
ea65b80644754ee22eafc41d78b05776fdd4bea69b593e9c4ceb925d11ba7fe5
POST /s/gts1p5/ZdSHE9_fHNo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:02 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 471 B IP
Hash 31a51dfff45e63ba8909bda3a3f2ca53
429a7ea67f57ea2c49699e650a09e09c1f983950
dc62d165a95afb87c345affd01d2e6a18d9f85647892b90d94500cb333f76a1c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 12:23:03 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 11:33:42 GMT
Expires: Sun, 12 Feb 2023 11:33:41 GMT
Etag: "429a7ea67f57ea2c49699e650a09e09c1f983950"
Cache-Control: max-age=601238,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794b9d729e6ab523-OSL
mc7clurd09pla4nrtat7ion.com/whob.gif?z=1910054&pb=dcb4a484560c8b8d52523084063bca081675606982&psp=5HMKyYuDoXwwh9KGD-melyNylfQpv0V2VhtU_fgvm_NfJgpEJpUHSj4_xDfSuQqiRksEi4xYAEt_aeoWhubdtoMjCqyW4VXwfbTlcO82TShcI1OTHBjqUwMP40rc4ZgTDnvFMb8KnYlxMsauzUgKw4ZpO6-vcTE7KxAaGvZ95x3Hz-4C5aelieNjwaprN1dFIWv9Epj6iPz14Szh_pk_ANHP7fIcXhTAEhvKRVW1wgtQLnzjHq0x7230I2XJeX-5ybsdyhyt7FWZt59K9qZllMws2oNA8DNTztgL1rY6hnpCcJcxrrHmGMfkE4TYsltBB0z2GLUUxj41hN1dSkLcfMvgKCgaqS5g6xUA4Zu-IDfm50RzRlpJ_FojVB1RcqyQ8Js2DmWTIvdl0LZnRUWxdV85JmR-fO-tHthLHESLgHTK6wsFKxzLxjzVbAeXoJ8wJwsr3TH-czkWfrnWQY31NSMCoriMGgFKVIYc0AEeVWqVTp2pVxsNE5V0FBMEiKlxY__Hd5DOJDZtN_R_ZCcdFVOc51ie-epWpY1IAxbDmXvHNrFO8VEa9MACukhqbznB1MjhaUR-RSAAOCBHmHNz-MfAVsRmpcwJbOj2VXfRO0lYjejn1c4hVh1DnfQG1MP951pkJjdXrwd5_B1SZbw7SgENojZdqleRikQuWu2jGHqwh_ktUCi3YHYGSfwXmyrCoI8tKKS3jIyDU22_sajH8JuEtodpwE_TYfvPFGO8ZzGsS72Mbqs7vlhc3vJBOgrt28lc78wkjAqLfNohNE6XIkcPiL0s2GPrNkKlsPrl7s71bEB-wiDnhuPQUNZtVHqgV6gx7lOz0JEzrXHQlmn-JuQA3dONH-LdBesTXPzLQIOOmRJA9u0Z8otnLiuSdWAjaaJZAT3_g3Bvz58rRLnCzBm1uwAs-WH4_zleHR2Z0jUvVmYlE1tWzFbM1_9z6GSfWVLDT9ThFvhdmS4_5Edd&abvar=2&os=0
200 OK 43 B URL HTTP/2 mc7clurd09pla4nrtat7ion.com/whob.gif?z=1910054&pb=dcb4a484560c8b8d52523084063bca081675606982&psp=5HMKyYuDoXwwh9KGD-melyNylfQpv0V2VhtU_fgvm_NfJgpEJpUHSj4_xDfSuQqiRksEi4xYAEt_aeoWhubdtoMjCqyW4VXwfbTlcO82TShcI1OTHBjqUwMP40rc4ZgTDnvFMb8KnYlxMsauzUgKw4ZpO6-vcTE7KxAaGvZ95x3Hz-4C5aelieNjwaprN1dFIWv9Epj6iPz14Szh_pk_ANHP7fIcXhTAEhvKRVW1wgtQLnzjHq0x7230I2XJeX-5ybsdyhyt7FWZt59K9qZllMws2oNA8DNTztgL1rY6hnpCcJcxrrHmGMfkE4TYsltBB0z2GLUUxj41hN1dSkLcfMvgKCgaqS5g6xUA4Zu-IDfm50RzRlpJ_FojVB1RcqyQ8Js2DmWTIvdl0LZnRUWxdV85JmR-fO-tHthLHESLgHTK6wsFKxzLxjzVbAeXoJ8wJwsr3TH-czkWfrnWQY31NSMCoriMGgFKVIYc0AEeVWqVTp2pVxsNE5V0FBMEiKlxY__Hd5DOJDZtN_R_ZCcdFVOc51ie-epWpY1IAxbDmXvHNrFO8VEa9MACukhqbznB1MjhaUR-RSAAOCBHmHNz-MfAVsRmpcwJbOj2VXfRO0lYjejn1c4hVh1DnfQG1MP951pkJjdXrwd5_B1SZbw7SgENojZdqleRikQuWu2jGHqwh_ktUCi3YHYGSfwXmyrCoI8tKKS3jIyDU22_sajH8JuEtodpwE_TYfvPFGO8ZzGsS72Mbqs7vlhc3vJBOgrt28lc78wkjAqLfNohNE6XIkcPiL0s2GPrNkKlsPrl7s71bEB-wiDnhuPQUNZtVHqgV6gx7lOz0JEzrXHQlmn-JuQA3dONH-LdBesTXPzLQIOOmRJA9u0Z8otnLiuSdWAjaaJZAT3_g3Bvz58rRLnCzBm1uwAs-WH4_zleHR2Z0jUvVmYlE1tWzFbM1_9z6GSfWVLDT9ThFvhdmS4_5Edd&abvar=2&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
GET /whob.gif?z=1910054&pb=dcb4a484560c8b8d52523084063bca081675606982&psp=5HMKyYuDoXwwh9KGD-melyNylfQpv0V2VhtU_fgvm_NfJgpEJpUHSj4_xDfSuQqiRksEi4xYAEt_aeoWhubdtoMjCqyW4VXwfbTlcO82TShcI1OTHBjqUwMP40rc4ZgTDnvFMb8KnYlxMsauzUgKw4ZpO6-vcTE7KxAaGvZ95x3Hz-4C5aelieNjwaprN1dFIWv9Epj6iPz14Szh_pk_ANHP7fIcXhTAEhvKRVW1wgtQLnzjHq0x7230I2XJeX-5ybsdyhyt7FWZt59K9qZllMws2oNA8DNTztgL1rY6hnpCcJcxrrHmGMfkE4TYsltBB0z2GLUUxj41hN1dSkLcfMvgKCgaqS5g6xUA4Zu-IDfm50RzRlpJ_FojVB1RcqyQ8Js2DmWTIvdl0LZnRUWxdV85JmR-fO-tHthLHESLgHTK6wsFKxzLxjzVbAeXoJ8wJwsr3TH-czkWfrnWQY31NSMCoriMGgFKVIYc0AEeVWqVTp2pVxsNE5V0FBMEiKlxY__Hd5DOJDZtN_R_ZCcdFVOc51ie-epWpY1IAxbDmXvHNrFO8VEa9MACukhqbznB1MjhaUR-RSAAOCBHmHNz-MfAVsRmpcwJbOj2VXfRO0lYjejn1c4hVh1DnfQG1MP951pkJjdXrwd5_B1SZbw7SgENojZdqleRikQuWu2jGHqwh_ktUCi3YHYGSfwXmyrCoI8tKKS3jIyDU22_sajH8JuEtodpwE_TYfvPFGO8ZzGsS72Mbqs7vlhc3vJBOgrt28lc78wkjAqLfNohNE6XIkcPiL0s2GPrNkKlsPrl7s71bEB-wiDnhuPQUNZtVHqgV6gx7lOz0JEzrXHQlmn-JuQA3dONH-LdBesTXPzLQIOOmRJA9u0Z8otnLiuSdWAjaaJZAT3_g3Bvz58rRLnCzBm1uwAs-WH4_zleHR2Z0jUvVmYlE1tWzFbM1_9z6GSfWVLDT9ThFvhdmS4_5Edd&abvar=2&os=0 HTTP/1.1
Host: mc7clurd09pla4nrtat7ion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=230205072387a463cc230949a3aa1c1e608c; OACICAP=ACSxrAAAAAAAAAAB; OACIBLOCK=ACSxrAAAAABj3zfQ; ppucnt=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:03 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.banner.view
set-cookie: OACICAP=ACPunQAAAAAAAAABACSxrAAAAAAAAAAB; Path=/; Expires=Tue, 07 Mar 2023 12:23:03 GMT; Secure; SameSite=None
OACIBLOCK=ACPunQAAAABj35pAACSxrAAAAABj3zfQ; Path=/; Expires=Tue, 07 Mar 2023 12:23:03 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Mon, 06 Feb 2023 12:23:03 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/ZdSHE9_fHNo
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/ZdSHE9_fHNo
IP
Hash bd454f73899fbe7bfd37e50ddf812c4d
67e7e6ff7fa5db5f6bcfd0909a3dcba029095629
ea65b80644754ee22eafc41d78b05776fdd4bea69b593e9c4ceb925d11ba7fe5
POST /s/gts1p5/ZdSHE9_fHNo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:03 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash a660cbfb6d7a30d52558411c751ec1a4
2c8e54c7982b67427d5f12f7be94c9a09afdb931
1e56c7f4f778e0496d8d6c25e9543f5038450217297aeb1e7ff9a98d2d69a8f9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 252
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:03 GMT
Last-Modified: Sun, 05 Feb 2023 12:18:51 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 280
video.ktkjmp.com/adsbygoogle.js
200 OK 16 B URL HTTP/2 video.ktkjmp.com/adsbygoogle.js
IP
Hash 3d7f7a60216d40dea48e495fef6903c9
fecdb5184f55cf012563d78940eb97b10b9cc99b
96d83ac9f20fc0b88404f307f135e212642e02d6ea295c96b28aed0d771a224f
GET /adsbygoogle.js HTTP/1.1
Host: video.ktkjmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlrdr.com/
Origin: https://creative.xlrdr.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:03 GMT
content-type: application/javascript
content-length: 16
x-amz-id-2: JkCGjUrgnBgB5Ldx8o/A8ASqNLV5nPIAdv57lupABlhL2wyLLTncvB9KXBxRs01tDEzM0AFmFH4=
x-amz-request-id: 3YWDZBTT5KXYP4SY
last-modified: Thu, 10 Mar 2022 13:52:07 GMT
etag: "3d7f7a60216d40dea48e495fef6903c9"
x-amz-meta-s3cmd-attrs: atime:1646920284/ctime:1646920283/gid:20/gname:staff/md5:3d7f7a60216d40dea48e495fef6903c9/mode:33188/mtime:1646920283/uid:501/uname:mikhailchubar
x-amz-version-id: eIgLIBoMMcsEXtxOH6UDjWyfAquRpkIG
access-control-allow-origin: https://creative.xlrdr.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: HIT
age: 5141
expires: Sun, 05 Feb 2023 16:23:03 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 794b9d74e8060b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash a660cbfb6d7a30d52558411c751ec1a4
2c8e54c7982b67427d5f12f7be94c9a09afdb931
1e56c7f4f778e0496d8d6c25e9543f5038450217297aeb1e7ff9a98d2d69a8f9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 252
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:03 GMT
Last-Modified: Sun, 05 Feb 2023 12:18:51 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 280
region1.google-analytics.com/g/collect?v=2&tid=G-TJX8C9Z02Z>m=45je3210&_p=1253525960&cid=152305128.1675599823&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675599822&sct=1&seg=0&dl=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html&dt=GIGP-32%20Bishoujo%20Senshi%20Sailor%20Rumes%20Virgin%20Loss%20Evil%20Fall%20Yokomiya%20Nanami%20Watch%20Online%20JAV%20-%20Hot%20JAV%20-%20Free%20download%20-%20JAVTV&en=page_view&_fv=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-TJX8C9Z02Z>m=45je3210&_p=1253525960&cid=152305128.1675599823&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675599822&sct=1&seg=0&dl=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html&dt=GIGP-32%20Bishoujo%20Senshi%20Sailor%20Rumes%20Virgin%20Loss%20Evil%20Fall%20Yokomiya%20Nanami%20Watch%20Online%20JAV%20-%20Hot%20JAV%20-%20Free%20download%20-%20JAVTV&en=page_view&_fv=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-TJX8C9Z02Z>m=45je3210&_p=1253525960&cid=152305128.1675599823&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675599822&sct=1&seg=0&dl=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html&dt=GIGP-32%20Bishoujo%20Senshi%20Sailor%20Rumes%20Virgin%20Loss%20Evil%20Fall%20Yokomiya%20Nanami%20Watch%20Online%20JAV%20-%20Hot%20JAV%20-%20Free%20download%20-%20JAVTV&en=page_view&_fv=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javtv.to
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://javtv.to
date: Sun, 05 Feb 2023 12:23:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!javtvto&lm=0&ts=1675599823247&dn=TC&iso=0&pu=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html&t=GIGP-32%20Bishoujo%20Senshi%20Sailor%20Rumes%20Virgin%20Loss%20Evil%20Fall%20Yokomiya%20Nanami%20Watch%20Online%20JAV%20-%20Hot%20JAV%20-%20Free%20download%20-%20JAVTV
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!javtvto&lm=0&ts=1675599823247&dn=TC&iso=0&pu=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html&t=GIGP-32%20Bishoujo%20Senshi%20Sailor%20Rumes%20Virgin%20Loss%20Evil%20Fall%20Yokomiya%20Nanami%20Watch%20Online%20JAV%20-%20Hot%20JAV%20-%20Free%20download%20-%20JAVTV
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!javtvto&lm=0&ts=1675599823247&dn=TC&iso=0&pu=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html&t=GIGP-32%20Bishoujo%20Senshi%20Sailor%20Rumes%20Virgin%20Loss%20Evil%20Fall%20Yokomiya%20Nanami%20Watch%20Online%20JAV%20-%20Hot%20JAV%20-%20Free%20download%20-%20JAVTV HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.16.1
date: Sun, 05 Feb 2023 12:23:03 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
creative.xlrdr.com/widgets/v4/Universal/main.33831b792a3809ba493a.js
200 OK 80 kB URL HTTP/2 creative.xlrdr.com/widgets/v4/Universal/main.33831b792a3809ba493a.js
IP
File type Unicode text, UTF-8 text, with very long lines (35319), with LF, NEL line terminators
Hash c6d28918de43536f84ea20e2d2bcbdac
62d8649bafdeac9a9a4f0589c22e4ab0a67fdf21
353a687ebfb9d9aae466f3022d62b120f915f8db00292d31b5951b59b418591d
GET /widgets/v4/Universal/main.33831b792a3809ba493a.js HTTP/1.1
Host: creative.xlrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xlrdr.com/widgets/v4/Universal?tag=girls&modelsLanguage=en&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300x250_ased_adx_st_dt_en&creativeId=300x250_ased_adx_st_dt_en&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Cookie: __cflb=04dToQvE4FPLng5Mz6amGAT9NT3YTLKVwN8C7mk7Cx
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:03 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 31 Jan 2023 09:52:08 GMT
etag: W/"63d8e4c8-42f63"
expires: Sun, 05 Feb 2023 12:23:05 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 2
vary: Accept-Encoding
server: cloudflare
cf-ray: 794b9d741e48b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!javtvto&lm=0&ts=1675599823247&dn=TC&iso=0&pu=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!javtvto&lm=0&ts=1675599823247&dn=TC&iso=0&pu=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!javtvto&lm=0&ts=1675599823247&dn=TC&iso=0&pu=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Sun, 05 Feb 2023 12:23:03 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!javtvto&lm=0&ts=1675599823247&dn=TC&iso=0&pu=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!javtvto&lm=0&ts=1675599823247&dn=TC&iso=0&pu=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!javtvto&lm=0&ts=1675599823247&dn=TC&iso=0&pu=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Sun, 05 Feb 2023 12:23:03 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!javtvto&lm=0&ts=1675599823247&dn=TC&iso=0&pu=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!javtvto&lm=0&ts=1675599823247&dn=TC&iso=0&pu=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!javtvto&lm=0&ts=1675599823247&dn=TC&iso=0&pu=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Sun, 05 Feb 2023 12:23:03 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
cuddlethehyena.com/chicken.gif?z=1910055&pb=2eec8bc0042dce037542a1f261c64da21675606981&psp=E0E8lA3ujiA67zOLcgJbWAJHPyq5o7GC5ty6mTAXKEHQg96tmQWiRl7FVCCtcOxv8eTNOsP0IisrBjM-mFrnXdFshOOQtMcrumzTRUHctK2rh6dZBQq3lbhMmwI2n1_-8MVbGmuRgeP2m3jMplL2C3bHRr_lookqnCPVT1cu0JMQ16skVgXujjc8_HJ67cDdoAnoO0fFlIIv3D5w6VVGINf2kv4j_J7HXxJEdsh6ZUj9wzuYxXln8GcYC8OAeE2zymvHpifrN8zJlFMiVlLXEDeZnluciu2ID4JgNoYpFb3NKSOIZkGJE2FIW9kSD5vPNqmxcHjTmnHbMj15eDkU3gGU0CaKd0O8Yyf7cPVaO0F5IxetoGdi_taZejRe3xcNepJFzfyryivOi9vsGmqeq-6Dd5zTnTuxX052nb807WKkTj6HtGGul7RhExj_pS4_0qdfdx3UTiX5AlGwdJ65op7y-RMRu0HGAhaBwYcgz8_P4EIIsWmYHhHTX55KOJM5TuY08QI3fNAEVkc6s0T1t2gsh2slMUeg_XUyBUKBFIsb1Sq0th9iLC5llItS1THBQkqBiuYIMdZX2KD8eth46PrZfojnW9MtPWkAGQl-GZg3Ap0kJeEW5Oz6BMvSFw1Ji0pYKOEJ8h7LTF60Pl4q1_aYR79CvbT07cjja9OC1Ggibv5qsaAEjRpKbjQk9wPMNByI7CTo0nYoiMVjQF5QflITQX6jvjqJuBF1Nw-X7wzyy-HI8-H3-0F-l4a4wxrI0zPNde-4dwK9NO5RVu-mUC5rBSPylMFYZ9dsCkCcPdXJOj5Lt5LHHFmltjV5OSgs58k9INa8DE7LAcbMmFymH0tCuWd8xeUm-r9XbgySkJc1Gt5OpnirPZ3CklGG9w7BX9KMrerJKyBR6V4ENJ4zNSQmPI_O9YFGQ3mushihtbnq6VjKU3BwqYRiWx3N5X6o2w90vNNglyEFJx-2TLouCXFIt3QUym01D67YYoPXqPVRwvtuD9AZYL2JUbuON4UgADpdK4y22NeccINom2n91pewDMhuyUDP36FKj8y6r3wZOiTCLMhd1eXaO90iWtpoS_0LP5SZXYFdRa2JxWDDlc_GrsKU8YavVoJ5Q0PGTY1NQ5TLm7HYybvbBnwtgmwSoHEgFrpVMF03FldXhlKvxe5BA0_axRU6NDUlX3OEnD5m3KYUPjcwrUxKlBoU7MFkHBaJDeED2UVIe_BYis-3z9zPNAyMOjOBDqwsDtre6g4nTQvt9DdJnWVCtDBQLi22YkTwzX_MpO2GUl07E_6089sLKnVRXfxkJEE5s1CCzXYR30OChxVWONVcjDUzQjt7dFbYf-2VFMin6ZAvW9s6v4uoY3b_qrUaH8SKKK0LzaM41vNIw3yhy_erEAcu6jlQIeMWmMCT51FxujKamrS2y1ulmI0T3tTG7Zy_KaKL4tyw5Y_zZo3rBtiAffPxXRceMJbEu_OplAdio6sao_wdh1fSUFSNcgtQNwUcDUPJHPS6vhaNdlcbUYvW3d2v5Tah_S1tj8o3ksRoZH-5KzgVJ1axRNWJO07QekQeruICHCHUuU-39aDLseJSjojjFuhruXUSSQrPI3cjhp4UDYe03ILyZTD_lunAlaS9oSnNEzlhzBrY1POT2EGoDr2f9fkRwYyqCufv9NQmu9GmRMz4fl7t1ps=&abvar=2&os=0
200 OK 43 B URL HTTP/2 cuddlethehyena.com/chicken.gif?z=1910055&pb=2eec8bc0042dce037542a1f261c64da21675606981&psp=E0E8lA3ujiA67zOLcgJbWAJHPyq5o7GC5ty6mTAXKEHQg96tmQWiRl7FVCCtcOxv8eTNOsP0IisrBjM-mFrnXdFshOOQtMcrumzTRUHctK2rh6dZBQq3lbhMmwI2n1_-8MVbGmuRgeP2m3jMplL2C3bHRr_lookqnCPVT1cu0JMQ16skVgXujjc8_HJ67cDdoAnoO0fFlIIv3D5w6VVGINf2kv4j_J7HXxJEdsh6ZUj9wzuYxXln8GcYC8OAeE2zymvHpifrN8zJlFMiVlLXEDeZnluciu2ID4JgNoYpFb3NKSOIZkGJE2FIW9kSD5vPNqmxcHjTmnHbMj15eDkU3gGU0CaKd0O8Yyf7cPVaO0F5IxetoGdi_taZejRe3xcNepJFzfyryivOi9vsGmqeq-6Dd5zTnTuxX052nb807WKkTj6HtGGul7RhExj_pS4_0qdfdx3UTiX5AlGwdJ65op7y-RMRu0HGAhaBwYcgz8_P4EIIsWmYHhHTX55KOJM5TuY08QI3fNAEVkc6s0T1t2gsh2slMUeg_XUyBUKBFIsb1Sq0th9iLC5llItS1THBQkqBiuYIMdZX2KD8eth46PrZfojnW9MtPWkAGQl-GZg3Ap0kJeEW5Oz6BMvSFw1Ji0pYKOEJ8h7LTF60Pl4q1_aYR79CvbT07cjja9OC1Ggibv5qsaAEjRpKbjQk9wPMNByI7CTo0nYoiMVjQF5QflITQX6jvjqJuBF1Nw-X7wzyy-HI8-H3-0F-l4a4wxrI0zPNde-4dwK9NO5RVu-mUC5rBSPylMFYZ9dsCkCcPdXJOj5Lt5LHHFmltjV5OSgs58k9INa8DE7LAcbMmFymH0tCuWd8xeUm-r9XbgySkJc1Gt5OpnirPZ3CklGG9w7BX9KMrerJKyBR6V4ENJ4zNSQmPI_O9YFGQ3mushihtbnq6VjKU3BwqYRiWx3N5X6o2w90vNNglyEFJx-2TLouCXFIt3QUym01D67YYoPXqPVRwvtuD9AZYL2JUbuON4UgADpdK4y22NeccINom2n91pewDMhuyUDP36FKj8y6r3wZOiTCLMhd1eXaO90iWtpoS_0LP5SZXYFdRa2JxWDDlc_GrsKU8YavVoJ5Q0PGTY1NQ5TLm7HYybvbBnwtgmwSoHEgFrpVMF03FldXhlKvxe5BA0_axRU6NDUlX3OEnD5m3KYUPjcwrUxKlBoU7MFkHBaJDeED2UVIe_BYis-3z9zPNAyMOjOBDqwsDtre6g4nTQvt9DdJnWVCtDBQLi22YkTwzX_MpO2GUl07E_6089sLKnVRXfxkJEE5s1CCzXYR30OChxVWONVcjDUzQjt7dFbYf-2VFMin6ZAvW9s6v4uoY3b_qrUaH8SKKK0LzaM41vNIw3yhy_erEAcu6jlQIeMWmMCT51FxujKamrS2y1ulmI0T3tTG7Zy_KaKL4tyw5Y_zZo3rBtiAffPxXRceMJbEu_OplAdio6sao_wdh1fSUFSNcgtQNwUcDUPJHPS6vhaNdlcbUYvW3d2v5Tah_S1tj8o3ksRoZH-5KzgVJ1axRNWJO07QekQeruICHCHUuU-39aDLseJSjojjFuhruXUSSQrPI3cjhp4UDYe03ILyZTD_lunAlaS9oSnNEzlhzBrY1POT2EGoDr2f9fkRwYyqCufv9NQmu9GmRMz4fl7t1ps=&abvar=2&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
GET /chicken.gif?z=1910055&pb=2eec8bc0042dce037542a1f261c64da21675606981&psp=E0E8lA3ujiA67zOLcgJbWAJHPyq5o7GC5ty6mTAXKEHQg96tmQWiRl7FVCCtcOxv8eTNOsP0IisrBjM-mFrnXdFshOOQtMcrumzTRUHctK2rh6dZBQq3lbhMmwI2n1_-8MVbGmuRgeP2m3jMplL2C3bHRr_lookqnCPVT1cu0JMQ16skVgXujjc8_HJ67cDdoAnoO0fFlIIv3D5w6VVGINf2kv4j_J7HXxJEdsh6ZUj9wzuYxXln8GcYC8OAeE2zymvHpifrN8zJlFMiVlLXEDeZnluciu2ID4JgNoYpFb3NKSOIZkGJE2FIW9kSD5vPNqmxcHjTmnHbMj15eDkU3gGU0CaKd0O8Yyf7cPVaO0F5IxetoGdi_taZejRe3xcNepJFzfyryivOi9vsGmqeq-6Dd5zTnTuxX052nb807WKkTj6HtGGul7RhExj_pS4_0qdfdx3UTiX5AlGwdJ65op7y-RMRu0HGAhaBwYcgz8_P4EIIsWmYHhHTX55KOJM5TuY08QI3fNAEVkc6s0T1t2gsh2slMUeg_XUyBUKBFIsb1Sq0th9iLC5llItS1THBQkqBiuYIMdZX2KD8eth46PrZfojnW9MtPWkAGQl-GZg3Ap0kJeEW5Oz6BMvSFw1Ji0pYKOEJ8h7LTF60Pl4q1_aYR79CvbT07cjja9OC1Ggibv5qsaAEjRpKbjQk9wPMNByI7CTo0nYoiMVjQF5QflITQX6jvjqJuBF1Nw-X7wzyy-HI8-H3-0F-l4a4wxrI0zPNde-4dwK9NO5RVu-mUC5rBSPylMFYZ9dsCkCcPdXJOj5Lt5LHHFmltjV5OSgs58k9INa8DE7LAcbMmFymH0tCuWd8xeUm-r9XbgySkJc1Gt5OpnirPZ3CklGG9w7BX9KMrerJKyBR6V4ENJ4zNSQmPI_O9YFGQ3mushihtbnq6VjKU3BwqYRiWx3N5X6o2w90vNNglyEFJx-2TLouCXFIt3QUym01D67YYoPXqPVRwvtuD9AZYL2JUbuON4UgADpdK4y22NeccINom2n91pewDMhuyUDP36FKj8y6r3wZOiTCLMhd1eXaO90iWtpoS_0LP5SZXYFdRa2JxWDDlc_GrsKU8YavVoJ5Q0PGTY1NQ5TLm7HYybvbBnwtgmwSoHEgFrpVMF03FldXhlKvxe5BA0_axRU6NDUlX3OEnD5m3KYUPjcwrUxKlBoU7MFkHBaJDeED2UVIe_BYis-3z9zPNAyMOjOBDqwsDtre6g4nTQvt9DdJnWVCtDBQLi22YkTwzX_MpO2GUl07E_6089sLKnVRXfxkJEE5s1CCzXYR30OChxVWONVcjDUzQjt7dFbYf-2VFMin6ZAvW9s6v4uoY3b_qrUaH8SKKK0LzaM41vNIw3yhy_erEAcu6jlQIeMWmMCT51FxujKamrS2y1ulmI0T3tTG7Zy_KaKL4tyw5Y_zZo3rBtiAffPxXRceMJbEu_OplAdio6sao_wdh1fSUFSNcgtQNwUcDUPJHPS6vhaNdlcbUYvW3d2v5Tah_S1tj8o3ksRoZH-5KzgVJ1axRNWJO07QekQeruICHCHUuU-39aDLseJSjojjFuhruXUSSQrPI3cjhp4UDYe03ILyZTD_lunAlaS9oSnNEzlhzBrY1POT2EGoDr2f9fkRwYyqCufv9NQmu9GmRMz4fl7t1ps=&abvar=2&os=0 HTTP/1.1
Host: cuddlethehyena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2302050723d0e41ccda4c94f6095f7ea39fe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:03 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACHfJgAAAAAAAAAB; Path=/; Expires=Tue, 07 Mar 2023 12:23:03 GMT; Secure; SameSite=None
OACIBLOCK=ACHfJgAAAABj3zfQ; Path=/; Expires=Tue, 07 Mar 2023 12:23:03 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Mon, 06 Feb 2023 12:23:03 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 28a62f6ff5490998b109ebfddd491255
722a2a1700919713bb5b5a8011bd3352307c5f2a
c8739159083f5ec2b9f0c9ba57ef8e044ae502d5a1e062997b5a22d49326177a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8739159083F5EC2B9F0C9BA57EF8E044AE502D5A1E062997B5A22D49326177A"
Last-Modified: Sun, 05 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2250
Expires: Sun, 05 Feb 2023 13:00:34 GMT
Date: Sun, 05 Feb 2023 12:23:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 28a62f6ff5490998b109ebfddd491255
722a2a1700919713bb5b5a8011bd3352307c5f2a
c8739159083f5ec2b9f0c9ba57ef8e044ae502d5a1e062997b5a22d49326177a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8739159083F5EC2B9F0C9BA57EF8E044AE502D5A1E062997B5A22D49326177A"
Last-Modified: Sun, 05 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2250
Expires: Sun, 05 Feb 2023 13:00:34 GMT
Date: Sun, 05 Feb 2023 12:23:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 97ab63789f83a179123e1e7f5b1301e4
dab2a191eb18e1c6f0c30b094bac6c45aeef286d
d43a9b4d130aa735ccb3e625485c94572d87c4ae3aff6017dce9155219bf9369
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D43A9B4D130AA735CCB3E625485C94572D87C4AE3AFF6017DCE9155219BF9369"
Last-Modified: Sat, 04 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9115
Expires: Sun, 05 Feb 2023 14:54:59 GMT
Date: Sun, 05 Feb 2023 12:23:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 155f081f99e1dc4e00b79a472e76147a
93a8482624b9073c51eaca18cdf29fa7ed319b7d
d2a5d0845888419c6beb687453c6dec89883ea90bd7baf7c18061eed679e7ea1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2A5D0845888419C6BEB687453C6DEC89883EA90BD7BAF7C18061EED679E7EA1"
Last-Modified: Sat, 04 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4528
Expires: Sun, 05 Feb 2023 13:38:32 GMT
Date: Sun, 05 Feb 2023 12:23:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 622168d76171d761c859a7d8d9f031d3
56752905bbe87ac7cb5437aba9d78ef3f0428add
3cd984bb579a3af43e97cbea5a02e9e7b9f4ef802c6718198f506e65cf91fbb4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3CD984BB579A3AF43E97CBEA5A02E9E7B9F4EF802C6718198F506E65CF91FBB4"
Last-Modified: Sat, 04 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8207
Expires: Sun, 05 Feb 2023 14:39:51 GMT
Date: Sun, 05 Feb 2023 12:23:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 155f081f99e1dc4e00b79a472e76147a
93a8482624b9073c51eaca18cdf29fa7ed319b7d
d2a5d0845888419c6beb687453c6dec89883ea90bd7baf7c18061eed679e7ea1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2A5D0845888419C6BEB687453C6DEC89883EA90BD7BAF7C18061EED679E7EA1"
Last-Modified: Sat, 04 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4528
Expires: Sun, 05 Feb 2023 13:38:32 GMT
Date: Sun, 05 Feb 2023 12:23:04 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 90a7ab17d999d4b27db6177061802e7b
0003475010abbef42f389214a5f29822d09a8480
1468356584c647bbecb8783462948d9e8377d37bd86f065f95aea3d66a0c3500
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "1468356584C647BBECB8783462948D9E8377D37BD86F065F95AEA3D66A0C3500"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6375
Expires: Sun, 05 Feb 2023 14:09:19 GMT
Date: Sun, 05 Feb 2023 12:23:04 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash d219159f00b54b29a0dc6aa0f7fac114
a4e455f630f6dec2e1611073773ecdcef2d40d4e
b828950b4bddc64089f4ea6d6019af33337523f820c962d2aac8a074b2b8bbd4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=127564
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:04 GMT
Etag: "63deeef4-118"
Expires: Mon, 06 Feb 2023 23:49:08 GMT
Last-Modified: Sat, 04 Feb 2023 23:49:08 GMT
Server: nginx
Content-Length: 280
ocsp.digicert.com/
200 OK 279 B IP
Hash e3f21481d43b15f19a910e1eb87b9b4e
a6e11e8489fa82fc92f42d3a18b2e964ddd8baed
906abc41a074c30d3c16f875f7a7391e51495583af21e7a3e7a8d5f675505a5c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5474
Cache-Control: max-age=155366
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:04 GMT
Etag: "63df462c-117"
Expires: Tue, 07 Feb 2023 07:32:30 GMT
Last-Modified: Sun, 05 Feb 2023 06:01:16 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 484e5bc3bbaec76049f1da4e04f2fab3
922c312011d28f1258ca42915270761a85d4bb49
cde5b61bf4fa99c80e7760f74ef6eb930f734b4b1c9321f1d44d76e1c1a78d51
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CDE5B61BF4FA99C80E7760F74EF6EB930F734B4B1C9321F1D44D76E1C1A78D51"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15470
Expires: Sun, 05 Feb 2023 16:40:54 GMT
Date: Sun, 05 Feb 2023 12:23:04 GMT
Connection: keep-alive
1ec994c645.369c83119d.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI5Njc2OTQ2NDE3MTI2MDQyMDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMjIuMCIsInRhZ19pZCI6Mjk0NjYsInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MS45NSwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowLCJ1c2VyX2tleXdvcmRzIjoiR0lHUC0zMiUyQ0Jpc2hvdWpvJTJDU2Vuc2hpJTJDU2FpbG9yJTJDUnVtZXMlMkNWaXJnaW4lMkNMb3NzJTJDRXZpbCUyQ0ZhbGwlMkNZb2tvbWl5YSUyQ05hbmFtaSUyQ1dhdGNoJTJDT25saW5lJTJDSkFWJTJDSG90JTJDSkFWJTJDRnJlZSUyQ2Rvd25sb2FkJTJDSkFWVFYlMkNHSUdQLTMyJTJDQmlzaG91am8lMkNTZW5zaGklMkNTYWlsb3IlMkNSdW1lcyUyQ1ZpcmdpbiUyQ0xvc3MlMkNFdmlsJTJDRmFsbCUyQ1lva29taXlhJTJDTmFuYW1pJTJDV2F0Y2glMkNPbmxpbmUlMkNKQVYlMkNIb3QlMkNKQVYlMkNGcmVlJTJDZG93bmxvYWQlMkNHSUdQLTMyJTJDQmlzaG91am8lMkNTZW5zaGklMkNTYWlsb3IlMkNSdW1lcyUyQ1ZpcmdpbiUyQ0xvc3MlMkNFdmlsJTJDRmFsbCUyQ1lva29taXlhJTJDTmFuYW1pJTJDVmlkZW8lMkNQb3JuJTJDSEQlMkNKQVZUViUyQ0phdnR2LnRvIn0=
200 OK 0 B URL HTTP/2 1ec994c645.369c83119d.com/in/track?data=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
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/track?data=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 HTTP/1.1
Host: 1ec994c645.369c83119d.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javtv.to
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:04 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
img.strpst.com/thumbs/1675599661/96883601
200 OK 54 kB URL HTTP/2 img.strpst.com/thumbs/1675599661/96883601
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 640x360, components 3\012- data
Hash 5d080651487d712390288a8d67c83142
88709b6aea017d9f74e6a4ebdcaa7ae107fc3789
7d865397b3aac448694d38b3174f7554bd1ea9b885d05e7d9564558ca5904235
GET /thumbs/1675599661/96883601 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xlrdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: image/jpeg
content-length: 54057
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-allow-origin: *
cf-bgj: imgq:100,h2pri
cf-polished: origSize=56840, status=webp_bigger
etag: "e727a1e74347d3f85bd99bd6e2612ae4"
last-modified: Sun, 05 Feb 2023 12:20:41 GMT
cf-cache-status: HIT
age: 80
expires: Sun, 05 Feb 2023 12:53:04 GMT
cache-control: public, max-age=1800
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 794b9d7b286eb50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
creative.xlrdr.com/widgets/v4/Universal?tag=girls&modelsLanguage=en&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300x250_ased_adx_st_dt_en&creativeId=300x250_ased_adx_st_dt_en&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
200 OK 310 B URL HTTP/2 creative.xlrdr.com/widgets/v4/Universal?tag=girls&modelsLanguage=en&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300x250_ased_adx_st_dt_en&creativeId=300x250_ased_adx_st_dt_en&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1ab3e663cbe43dcdd713923b7b3fee96
1256dbec4521d29c441d17234cadbde489edb006
13f000857cca2943a3fc9254b231f09e64d7113c2ca4b5372f80e5f016dd0dcd
GET /widgets/v4/Universal?tag=girls&modelsLanguage=en&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300x250_ased_adx_st_dt_en&creativeId=300x250_ased_adx_st_dt_en&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid} HTTP/1.1
Host: creative.xlrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r.trackwilltrk.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:03 GMT
content-type: text/html
last-modified: Tue, 31 Jan 2023 09:49:21 GMT
expires: Sun, 05 Feb 2023 12:23:04 GMT
cache-control: max-age=10
strict-transport-security: max-age=15768000
pragma: public
report-to: { "endpoints":[{ "url": "https://go.stripchat.com/report" }], "group": "default", "max_age": 1048576 }
cf-cache-status: HIT
set-cookie: __cflb=04dToQvE4FPLng5Mz6amGAT9NT3YTLKVwN8C7mk7Cx; SameSite=None; Secure; path=/; expires=Mon, 06-Feb-23 11:23:03 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 794b9d73bdb3b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=29464
204 No Content 0 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=29464
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=29464 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://tsyndicate.com/
Origin: https://tsyndicate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Sun, 05 Feb 2023 12:23:04 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://tsyndicate.com
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
js.wpushsdk.com/npc/sdk/wpu/csub.m.js
200 OK 27 kB URL HTTP/2 js.wpushsdk.com/npc/sdk/wpu/csub.m.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash da264f9100218174921e2d9b3bdb5df0
a320a86566a1869994e3b128e524a3136ff39342
6031ee0625db75065f44f33ee79839cf53b64bb795a59bf83ef7fae853857846
GET /npc/sdk/wpu/csub.m.js HTTP/1.1
Host: js.wpushsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 07 Dec 2022 08:28:22 GMT
etag: W/"63904ea6-16019"
content-encoding: gzip
expires: Sun, 05 Feb 2023 12:28:04 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=29466
204 No Content 0 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=29466
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=29466 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://javtv.to/
Origin: https://javtv.to
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Sun, 05 Feb 2023 12:23:04 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://javtv.to
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
js.wpshsdk.com/npc/sdk/wp-banners.js
200 OK 0 B URL HTTP/2 js.wpshsdk.com/npc/sdk/wp-banners.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/wp-banners.js HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 20 Aug 2021 15:14:31 GMT
etag: "611fc6d7-0"
expires: Sun, 05 Feb 2023 12:28:04 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash d219159f00b54b29a0dc6aa0f7fac114
a4e455f630f6dec2e1611073773ecdcef2d40d4e
b828950b4bddc64089f4ea6d6019af33337523f820c962d2aac8a074b2b8bbd4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=127564
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:04 GMT
Etag: "63deeef4-118"
Expires: Mon, 06 Feb 2023 23:49:08 GMT
Last-Modified: Sat, 04 Feb 2023 23:49:08 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 280
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d40b534a21680930d9bf77e80df3bab2
9ca564828b2ec4fbb8601134aeb6c7aa8f22c855
1686eac4ea30b1206cc616a0a1f7270484e08cc06e2cf29bd4adb112e3a31742
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1686EAC4EA30B1206CC616A0A1F7270484E08CC06E2CF29BD4ADB112E3A31742"
Last-Modified: Fri, 03 Feb 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4513
Expires: Sun, 05 Feb 2023 13:38:17 GMT
Date: Sun, 05 Feb 2023 12:23:04 GMT
Connection: keep-alive
fp.metricswpsh.com/fp?tag_id=29464
200 OK 27 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=29464
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text
Hash 893fd00d21cb2eafe2596e686ceaa7fd
5264446ff184115148de18a8885471fc116dd20f
b00f2b2b4f9190facc972e354768684fdc04f94d78bd9fac3050911bca41183f
POST /fp?tag_id=29464 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 22287
Origin: https://tsyndicate.com
Connection: keep-alive
Referer: https://tsyndicate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 05 Feb 2023 12:23:04 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 27
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://tsyndicate.com
Set-Cookie: id=14270821121772850720; Expires=Mon, 05 Feb 2024 12:23:04 GMT; Secure; SameSite=None
Vary: Origin
fp.metricswpsh.com/fp?tag_id=29466
200 OK 27 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=29466
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text
Hash 183e6bf6f5c39525b4c471c26331c4e4
fc2a0d615a704c8b198b65ce47716b2e168f956e
1127af318c7d62b581d8bb11d56417fef7072f10e3df42bdfb75ba72f94dbe0a
POST /fp?tag_id=29466 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 22282
Origin: https://javtv.to
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 05 Feb 2023 12:23:04 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 27
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://javtv.to
Set-Cookie: id=15094498684535513352; Expires=Mon, 05 Feb 2024 12:23:04 GMT; Secure; SameSite=None
Vary: Origin
static.javhdhello.com/h5/files/css/style.css
200 OK 889 B URL HTTP/2 static.javhdhello.com/h5/files/css/style.css
IP
ASN #60068 Datacamp Limited
Hash 4696b6f2b9becbcd2aff1eed76299dd8
81e15388d98a0fdea43cfe9665f44e5a70eecb4b
02b7d96211fdb1540ce02a9f6e7da18a838f358e3cf7a09865094d3789f01c40
GET /h5/files/css/style.css HTTP/1.1
Host: static.javhdhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhdhello.com/h5/files/16514/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Ffaec45e5-c3cb-4b38-b158-2fd2c0bf1489%3Fcv1%3Dd58fda7d-a54f-11ed-93df-e2e38133f3a0%26cv10%3Dexim_adxad_stub1_300x250_%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D623d833161d6e27cf559bde1%26cv5%3D623d831361d6e2739a0c4ca4%26cv6%3Den%26cv7%3D300x250%2B-%2Bjavpro.cc%2B-%2BNTVA%2B%2528mobile%252C%2Bdesktop%2529%26cv8%3DFirefox%26cv9%3D62957d2861d6e234545d1b71%26externalId%3Dd58fda7d-a54f-11ed-93df-e2e38133f3a0%26p%3DeyJiIjoyNzgzMjcsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjQsInAiOjEsInMiOjI1MzMzfQ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:02 GMT
content-type: text/css
last-modified: Wed, 25 May 2016 08:29:12 GMT
etag: W/"57456258-7bd"
expires: Tue, 23 May 2023 11:04:47 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684839887
server: CDN77-Turbo
x-77-nzt: AblMCQ3fL6f/VzVUAQ
x-77-nzt-ray: c0a4cc28760551c2a69fdf63b371c132
x-cache: HIT
x-age: 22295895
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f0c48a8351d4f7033aea436ee102dc70
d7855afaf4073c04bbba14d9c00d110962e10877
d16b09f41a41761c120b2ae412818b4ca9f7f4eaac85453cdbac718856b8b5fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D16B09F41A41761C120B2AE412818B4CA9F7F4EAAC85453CDBAC718856B8B5FC"
Last-Modified: Sat, 04 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7950
Expires: Sun, 05 Feb 2023 14:35:34 GMT
Date: Sun, 05 Feb 2023 12:23:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f0c48a8351d4f7033aea436ee102dc70
d7855afaf4073c04bbba14d9c00d110962e10877
d16b09f41a41761c120b2ae412818b4ca9f7f4eaac85453cdbac718856b8b5fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D16B09F41A41761C120B2AE412818B4CA9F7F4EAAC85453CDBAC718856B8B5FC"
Last-Modified: Sat, 04 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7950
Expires: Sun, 05 Feb 2023 14:35:34 GMT
Date: Sun, 05 Feb 2023 12:23:04 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 6630148a03da2d4ccf19993f0fefd44c
2c747b9bc89b4240ad4340b31b993e3d947d1e5a
68c252a328d6f8dbea1935f3a4a950fb02969e70aabfff9853add357f76ecd4f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5040
Cache-Control: max-age=120361
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:04 GMT
Etag: "63debf21-117"
Expires: Mon, 06 Feb 2023 21:49:05 GMT
Last-Modified: Sat, 04 Feb 2023 20:25:05 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8abf52b71ac6f5a09cfb82660d9d7d57
d445072fd87422f54263d3077f12c3ea153e9bfb
b7e800d7d36be8104edee3566cbdfb6d3f0f4efa208238963e473adf80182726
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B7E800D7D36BE8104EDEE3566CBDFB6D3F0F4EFA208238963E473ADF80182726"
Last-Modified: Sat, 04 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3306
Expires: Sun, 05 Feb 2023 13:18:10 GMT
Date: Sun, 05 Feb 2023 12:23:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8abf52b71ac6f5a09cfb82660d9d7d57
d445072fd87422f54263d3077f12c3ea153e9bfb
b7e800d7d36be8104edee3566cbdfb6d3f0f4efa208238963e473adf80182726
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B7E800D7D36BE8104EDEE3566CBDFB6D3F0F4EFA208238963E473ADF80182726"
Last-Modified: Sat, 04 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3306
Expires: Sun, 05 Feb 2023 13:18:10 GMT
Date: Sun, 05 Feb 2023 12:23:04 GMT
Connection: keep-alive
cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.6.0/css/bootstrap.min.css
200 OK 18 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.6.0/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65326)
Hash 735703d91d4b331ee5d113e215c05abf
2a5d0420375b833bf6233f8bd4e04cccda7b18ac
293de373dfb3f97cd2ea6eed16fcca7d2722ce3c116fcf3cd8df3d272e6a9a00
GET /ajax/libs/twitter-bootstrap/4.6.0/css/bootstrap.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://embedsb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: text/css; charset=utf-8
content-length: 17712
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60071661-27681"
last-modified: Tue, 19 Jan 2021 17:26:57 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1493240
expires: Fri, 26 Jan 2024 12:23:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tk47MzY2uADpaG314qBxuNWLTx65LjW0%2BOuiWNo3eM38c5t08jLFY1OzP%2FzqECLdziCB9C7SmGUuCwbzRLU94Dx9l22nQbDvpIYBz05%2FitxHV%2BxXqkHS%2F4iIp94gwJPxzdAK5nyU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 794b9d7cda401bfe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.6.0/js/bootstrap.bundle.min.js
200 OK 19 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.6.0/js/bootstrap.bundle.min.js
IP
File type ASCII text, with very long lines (65299)
Hash 6eec994f904e4a6a49d27df23d27c3dd
46d7824728ceb9116a5a118c2d4fdec7f39f4924
c2c51310d9d0b5de9a9c29b150f8d9f93811f21e0df5f3c03792717c90edaef4
GET /ajax/libs/twitter-bootstrap/4.6.0/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://embedsb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 19173
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60071661-1499a"
last-modified: Tue, 19 Jan 2021 17:26:57 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3823340
expires: Fri, 26 Jan 2024 12:23:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5oxzImNcKG8y%2FE2codP1I%2FuDocERXdplNrZAfwJ1Wcy4BlCSLx7ZJ0CWBMLR16syCozXQJPHThmrBHJj9%2BMVGIcOf%2BTy76IaGEjeKJ89TArLJGeIryW8bPa%2FeTdGSKwqpoYY95QW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 794b9d7cea511bfe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/axios/0.22.0/axios.min.js
200 OK 5.5 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/axios/0.22.0/axios.min.js
IP
File type ASCII text, with very long lines (17781)
Hash b0a12be08ec4fa4d54524b55363389fd
f171fb814f9e3d6080450f857c7ec99acc68d782
4411647947a3a1bc9693a501db3b6409489800274a6e1db06b33c2a6ae1540ce
GET /ajax/libs/axios/0.22.0/axios.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://embedsb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 5467
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6156acbe-155b"
last-modified: Fri, 01 Oct 2021 06:37:50 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3910344
expires: Fri, 26 Jan 2024 12:23:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gvF%2FVxcQdArq3GLjgn%2Flb%2FvXQ1tAWJ55c4Oflj9ho0E9PTjzezLeeVaR033yVs3xHM%2BIx7GzZurzXkYTQY8Fkng%2FCreQDeFqufAl8jAcEen9yXCgi%2F9ISypt2GFoAwsFp1bjZOhr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 794b9d7cea521bfe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 6630148a03da2d4ccf19993f0fefd44c
2c747b9bc89b4240ad4340b31b993e3d947d1e5a
68c252a328d6f8dbea1935f3a4a950fb02969e70aabfff9853add357f76ecd4f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5040
Cache-Control: max-age=120361
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:04 GMT
Etag: "63debf21-117"
Expires: Mon, 06 Feb 2023 21:49:05 GMT
Last-Modified: Sat, 04 Feb 2023 20:25:05 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
js.natsdk.com/npc/sdk/native.m.js
200 OK 15 kB URL HTTP/2 js.natsdk.com/npc/sdk/native.m.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (45618), with no line terminators
Hash 537af9728cefbc837681a504e734998d
be689e112c962a6deb33b4cce31900c88a0a6943
94be201b5c9ea50937dc7863a9933795d7777cdcbd7a606c92c69163579a2d53
GET /npc/sdk/native.m.js HTTP/1.1
Host: js.natsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 20 Dec 2022 14:01:44 GMT
etag: W/"63a1c048-b232"
content-encoding: gzip
expires: Sun, 05 Feb 2023 12:28:04 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
js.canstrm.com/in-stream-ad-admanager/build.js
200 OK 7.1 kB URL HTTP/2 js.canstrm.com/in-stream-ad-admanager/build.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash 33e5b93bac8aad6a133dce51028cb6bf
f79688ed026e41227d26926833e29008041d0cfe
7037b29318b39a8028c1f399581b892504c192bb17e962ea952bf68482930ffe
GET /in-stream-ad-admanager/build.js HTTP/1.1
Host: js.canstrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 31 Jan 2023 07:46:40 GMT
etag: W/"63d8c760-5156"
content-encoding: gzip
expires: Sun, 05 Feb 2023 12:28:04 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f47220936601fbaad86b28337c2d7cad
9bdeb7f26c0f25714ed2c281a83c2a4241d3b74b
302bbb4d751ebd8f04b229f3b06e98ab3f083dccf53f7c598991c4ed712e100c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "302BBB4D751EBD8F04B229F3B06E98AB3F083DCCF53F7C598991C4ED712E100C"
Last-Modified: Sat, 04 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5107
Expires: Sun, 05 Feb 2023 13:48:11 GMT
Date: Sun, 05 Feb 2023 12:23:04 GMT
Connection: keep-alive
js.canstrm.com/video-slider-ad/build.js
200 OK 13 kB URL HTTP/2 js.canstrm.com/video-slider-ad/build.js
IP
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (39905)
Hash 150b7fb9ce3dfa36d09f96c09e8c81c7
44066df1dfc9f417bd6e83c4a6e171933114aac6
13b28241a1ae0fac0732232114d6a2e6e148b8c7974e2a86b15cdf960baf608b
GET /video-slider-ad/build.js HTTP/1.1
Host: js.canstrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 31 Jan 2023 07:46:40 GMT
etag: W/"63d8c760-9c23"
content-encoding: gzip
expires: Sun, 05 Feb 2023 12:28:04 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
564cc73ffe.ed9b93b5ee.com/health/
200 OK 0 B URL HTTP/2 564cc73ffe.ed9b93b5ee.com/health/
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /health/ HTTP/1.1
Host: 564cc73ffe.ed9b93b5ee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.0
date: Sun, 05 Feb 2023 12:23:04 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
nereserv.com/in/dip?site=native-push&wl=1&event_id=9713b2e1-196f-442f-b3b7-547a34cae18e&subid=1113419871&sid=2197616319&spot_id=19660&created_at=2023-02-05&timezone=0&ver=8.24.1&is_native=1
200 OK 0 B URL HTTP/2 nereserv.com/in/dip?site=native-push&wl=1&event_id=9713b2e1-196f-442f-b3b7-547a34cae18e&subid=1113419871&sid=2197616319&spot_id=19660&created_at=2023-02-05&timezone=0&ver=8.24.1&is_native=1
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?site=native-push&wl=1&event_id=9713b2e1-196f-442f-b3b7-547a34cae18e&subid=1113419871&sid=2197616319&spot_id=19660&created_at=2023-02-05&timezone=0&ver=8.24.1&is_native=1 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javtv.to
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 05 Feb 2023 12:23:04 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
mc.yandex.ru/watch/89847858?wmode=7&page-url=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1325%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1254259699951%3Ahid%3A624864758%3Az%3A0%3Ai%3A20230205122342%3Aet%3A1675599823%3Ac%3A1%3Arn%3A9951418%3Arqn%3A1%3Au%3A1675599823645717627%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C129%2C212%2C0%2C345%2C0%2C%2C1341%2C8%2C%2C%2C%2C2095%3Aco%3A0%3Ans%3A1675599820292%3Anp%3ATGludXggeDg2XzY0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675599823%3At%3AGIGP-32%20Bishoujo%20Senshi%20Sailor%20Rumes%20Virgin%20Loss%20Evil%20Fall%20Yokomiya%20Nanami%20Watch%20Online%20JAV%20-%20Hot%20JAV%20-%20Free%20download%20-%20JAVTV&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 18 kB URL HTTP/2 mc.yandex.ru/watch/89847858?wmode=7&page-url=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1325%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1254259699951%3Ahid%3A624864758%3Az%3A0%3Ai%3A20230205122342%3Aet%3A1675599823%3Ac%3A1%3Arn%3A9951418%3Arqn%3A1%3Au%3A1675599823645717627%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C129%2C212%2C0%2C345%2C0%2C%2C1341%2C8%2C%2C%2C%2C2095%3Aco%3A0%3Ans%3A1675599820292%3Anp%3ATGludXggeDg2XzY0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675599823%3At%3AGIGP-32%20Bishoujo%20Senshi%20Sailor%20Rumes%20Virgin%20Loss%20Evil%20Fall%20Yokomiya%20Nanami%20Watch%20Online%20JAV%20-%20Hot%20JAV%20-%20Free%20download%20-%20JAVTV&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
File type gzip compressed data, from Unix\012- data
Hash 16647fadf5aced88d01b083108e2b23f
4699081b98a17e8e8f7522e23f316bf5b8268504
08eea730c5d7100826525e408f1874e97b66f28f17570f0b7b5e1d8318b6a0c3
GET /watch/89847858?wmode=7&page-url=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1325%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1254259699951%3Ahid%3A624864758%3Az%3A0%3Ai%3A20230205122342%3Aet%3A1675599823%3Ac%3A1%3Arn%3A9951418%3Arqn%3A1%3Au%3A1675599823645717627%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C129%2C212%2C0%2C345%2C0%2C%2C1341%2C8%2C%2C%2C%2C2095%3Aco%3A0%3Ans%3A1675599820292%3Anp%3ATGludXggeDg2XzY0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675599823%3At%3AGIGP-32%20Bishoujo%20Senshi%20Sailor%20Rumes%20Virgin%20Loss%20Evil%20Fall%20Yokomiya%20Nanami%20Watch%20Online%20JAV%20-%20Hot%20JAV%20-%20Free%20download%20-%20JAVTV&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javtv.to
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/89847858/1?wmode=7&page-url=https%3A%2F%2Fjavtv.to%2Fvideo%2F144378%2Fgigp-32.html&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1325%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1254259699951%3Ahid%3A624864758%3Az%3A0%3Ai%3A20230205122342%3Aet%3A1675599823%3Ac%3A1%3Arn%3A9951418%3Arqn%3A1%3Au%3A1675599823645717627%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C129%2C212%2C0%2C345%2C0%2C%2C1341%2C8%2C%2C%2C%2C2095%3Aco%3A0%3Ans%3A1675599820292%3Anp%3ATGludXggeDg2XzY0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675599823%3At%3AGIGP-32%20Bishoujo%20Senshi%20Sailor%20Rumes%20Virgin%20Loss%20Evil%20Fall%20Yokomiya%20Nanami%20Watch%20Online%20JAV%20-%20Hot%20JAV%20-%20Free%20download%20-%20JAVTV&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Sun, 05 Feb 2023 12:23:02 GMT
access-control-allow-origin: https://javtv.to
set-cookie: yabs-sid=2548855591675599782; Path=/; SameSite=None; Secure
i=kMUyIBmLizxzmbFHBmrnYlF6AK1ddNOt7YxKP8yMn4OjQpZogT0+lWB+ulyPMVufgwUimMbd0+EgVtAkaLwvv78elHY=; Expires=Wed, 02-Feb-2033 12:22:58 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=3444570751675599782; Expires=Mon, 05-Feb-2024 12:23:02 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=3444570751675599782; Expires=Mon, 05-Feb-2024 12:23:02 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707135782.yc.1675599782#1707135782.yrts.1675599782#1707135782.yrtsi.1675599782; Expires=Mon, 05-Feb-2024 12:23:02 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 05-Feb-2023 12:23:02 GMT
last-modified: Sun, 05-Feb-2023 12:23:02 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
0f6e7d3222.ba33938e50.com/in/multy
204 No Content 0 B URL HTTP/2 0f6e7d3222.ba33938e50.com/in/multy
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /in/multy HTTP/1.1
Host: 0f6e7d3222.ba33938e50.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://javtv.to/
Origin: https://javtv.to
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.20.1
date: Sun, 05 Feb 2023 12:23:04 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
0f6e7d3222.ba33938e50.com/in/multy
204 No Content 0 B URL HTTP/2 0f6e7d3222.ba33938e50.com/in/multy
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /in/multy HTTP/1.1
Host: 0f6e7d3222.ba33938e50.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://tsyndicate.com/
Origin: https://tsyndicate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.20.1
date: Sun, 05 Feb 2023 12:23:04 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aa35969f08a69c6c17b3f25dac6498d3
98bd79abc9caef252e4160d0d83555f2d2f5a536
86b85e39cbc1183a1feb1e446a237f24ee3bfee4333f01217fb1d9bdee46e5d2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "86B85E39CBC1183A1FEB1E446A237F24EE3BFEE4333F01217FB1D9BDEE46E5D2"
Last-Modified: Sat, 04 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1710
Expires: Sun, 05 Feb 2023 12:51:34 GMT
Date: Sun, 05 Feb 2023 12:23:04 GMT
Connection: keep-alive
vast.yomeno.xyz/wrapper?katds_ep=6o9UVbUFnA0EfoISNeS0fECSe2gxfyLWoARm6ZvY8_2d0koZF1rSC9sIzKt-LjULAxNMmi89b8TRjoTxlM-IT5RdWyKh_XBXUrQIsrJrJC4CGAiK1ziLsdSjmk7OSg0P8usheGvoYg35oBT9vamr-2sYH79xGlL_RUs8en0lREGUMHDJ3QA8ThoWaqRpZNhcweXWOIKpVE4uhL_U3zb9utm821PyqS5CUNPZqkuFZdY8V3aSVmU240cEL-YmvpjibMvmx3_c5K88y__Qmv5d5mfWe1saQVrEyOaJm_bJWApcOFE44eroLM6UZzov-FiaiSp4RjSHL3wI3iEUCKJO-Jx-xfTK9xC_VILUp_xd6zSboZ6DjsD9wCuxKFeWLzghL287moVwPuw0kV-zrF65HJmN1vqgqXa-cSPIAHAk1OmQZV8Z9CKeKwjlHp8B_MX4LXOF0ebwOrToFFt3kbMBAVrjtmG4q_O2iVi9lJGKyOI
200 OK 78 kB URL HTTP/2 vast.yomeno.xyz/wrapper?katds_ep=6o9UVbUFnA0EfoISNeS0fECSe2gxfyLWoARm6ZvY8_2d0koZF1rSC9sIzKt-LjULAxNMmi89b8TRjoTxlM-IT5RdWyKh_XBXUrQIsrJrJC4CGAiK1ziLsdSjmk7OSg0P8usheGvoYg35oBT9vamr-2sYH79xGlL_RUs8en0lREGUMHDJ3QA8ThoWaqRpZNhcweXWOIKpVE4uhL_U3zb9utm821PyqS5CUNPZqkuFZdY8V3aSVmU240cEL-YmvpjibMvmx3_c5K88y__Qmv5d5mfWe1saQVrEyOaJm_bJWApcOFE44eroLM6UZzov-FiaiSp4RjSHL3wI3iEUCKJO-Jx-xfTK9xC_VILUp_xd6zSboZ6DjsD9wCuxKFeWLzghL287moVwPuw0kV-zrF65HJmN1vqgqXa-cSPIAHAk1OmQZV8Z9CKeKwjlHp8B_MX4LXOF0ebwOrToFFt3kbMBAVrjtmG4q_O2iVi9lJGKyOI
IP
Hash f47744c2de86d47da4f547d7a20e6eac
9eef32b01310b33e31640cbb49d90cb7a7377fb6
b8f080fbbd82860c9b7947c075eceba8736c81acb1dad3625933748a6750051f
GET /wrapper?katds_ep=6o9UVbUFnA0EfoISNeS0fECSe2gxfyLWoARm6ZvY8_2d0koZF1rSC9sIzKt-LjULAxNMmi89b8TRjoTxlM-IT5RdWyKh_XBXUrQIsrJrJC4CGAiK1ziLsdSjmk7OSg0P8usheGvoYg35oBT9vamr-2sYH79xGlL_RUs8en0lREGUMHDJ3QA8ThoWaqRpZNhcweXWOIKpVE4uhL_U3zb9utm821PyqS5CUNPZqkuFZdY8V3aSVmU240cEL-YmvpjibMvmx3_c5K88y__Qmv5d5mfWe1saQVrEyOaJm_bJWApcOFE44eroLM6UZzov-FiaiSp4RjSHL3wI3iEUCKJO-Jx-xfTK9xC_VILUp_xd6zSboZ6DjsD9wCuxKFeWLzghL287moVwPuw0kV-zrF65HJmN1vqgqXa-cSPIAHAk1OmQZV8Z9CKeKwjlHp8B_MX4LXOF0ebwOrToFFt3kbMBAVrjtmG4q_O2iVi9lJGKyOI HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tsyndicate.com/
Origin: https://tsyndicate.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: text/xml;charset=UTF-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: Accept-Encoding, *
report-to: {"url":"https://kts.cvastico.com/in/kevents/?e_type=heavy-ad\u0026sid=49453\u0026feed_id=0\u0026stype=slider\u0026iab=IAB25\u0026uid=61a113beeb5c1307f0131429d929c04f\u0026auction_id=24746814182132267\u0026score=89.914857\u0026response=json\u0026user_id=13667\u0026rchange=0","max_age":86401}
access-control-allow-credentials: true
access-control-allow-origin: https://tsyndicate.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
content-encoding: gzip
X-Firefox-Spdy: h2
cuddlethehyena.com/chicken.gif?z=1910055&pb=2eec8bc0042dce037542a1f261c64da21675606981&psp=eNSUHmpx1SfDRIqWHEvMH97tqzvnDohPCsjxI9SE1pxUMfJdak80PCaPpStmr_kdvXot9RYfWgnFWtlmHhqC-GRI6Ork9wTeP9aqhS3ECqSzgcSE9GbYxy3CJvol2ECJ7s-cMw86qG915_bHEzTsM35oz98EMNU0bRzU8PmVNb9IXs8-kFHzXDCIfOlgBdE19CwmwOPGYpoKltkyD2SLWRXhHmJ5ixWsp8CGgfnmqe_QwFqgIJEkdM16JNxrE9d_unAe8S0W8pkmvyKX7g51LfRl-awAf2b-oy4JY2QtjFEWJO8kA0RDEY0Z9-LxLwtGREVPcfxZVj5yPgFEJmNJcah2_EPnCbT-fE40NFGLERfRwn_4y-Z9nP-wCjHPlY7Hjjj8emUaYC2kc94U2Msq4FbdV9jVPoMP1aUqr7ZEpFWA8JlT-SrLyP-AizX9gN9zQHYP1jUCl7WwUJbt8wiURCn_0l4pJGCUgenjYW2PGtXMsIki6bjGb3I4fUbh2fmlYY0bEk9SQRrKIjJKNnUgSmn0KiiBESxdkQg9tUuL9OXeEkkR3zFFpiDywyj7NxECGZonccSqCsum0slRufY4xW_qF-je8LZgBVu-DrkMQp0Ehjsw-aAxjgBjQ0AJWB9Ti_O9OaU6DZLfOi8v8L4fkVT14YnzKbXWlaF7nR5w_gKZrgx2DztmRGMbmDj1Wm2l9bcWWWty6sPlZGpcCoht8TA64VJlKhGliVWC4bzY06Qxcg8acccqnEGG2A7W-Vd5xcJvyMqKzqbmjl-NIRpG8-186Jsjo9JUMPYh2GsRqI_5sFRJjo6KiK5uc4YWjgqzHyhDRjU4ue2ifiRiyTN2qw5KQfdthq6v7Nsr6TkT_c7RmeBufF9aKpyrYoDk3OikPQC1EJhQzomLobEPYNRDEWo-nHLMvxJPDSQyVB6A_Rg0MKMOnPWydZsCIhGy8Vf_Co22h2JS4UjufZaKyizZ8bh11Uoqk4CdnIt6QFTPD4QQ5E-QuLjiwLDNNLDx6ipgV_ep3-c4yvmIKPy_r-yA7gEeHjkM5RkjMVi8cR3WQOTJRClBCH_Fuctk_tyQfr_P3QoN712Ttey6ULWGTFDEu9kfLFXw_anbauWtIedl0TGYndrCyFcFLKYZYmpb9w2J6rB9M6OJsFeRygIwCX3WSQ8cKYxa5FPk8hpZ3LwypLVxPXFrizjxfYugdjdZfAOwiptX2wF5_LU4A1IInfiplpGawYHiqXe31_E7Jsquz-mEGllVrJDzFQlSPyuZg2FMnqhGJTJW46rCbfIE5p3cTVIDSYgMMUeqVcbKPtbga6Uaf0YEcgWptcxrsP0qnKlDnYImkqAYFzIywQe4a3SSVFyJvuBVQ1XSfiXtXGo36aK5bs5U1uMKpRiSIUgLo6hrcF2VY8MB82EQBAZ9DQwR6QXw9iyTeb-4EYq0Wlv_SBZcve9E1HOx62ukQjznoLXHYxCAHJOpz5zkP6KZ5Kw5x2vs1wwBgw_jilKW7fgCXxRuBER_RIqn1bUlGCwPcwflPxNFekuvHPmDYQjpxS9in0OFn05UZrbwsdQgmk4C4S_PZ4AwVrXM8UuV3s-Xl6TSCA71uUern8zBIXuqBbqwR9Ip6m17vkewap2z7VfxUCMn-Dmbvu9ufedA2lAxI4yHWulNoClWahCtDmkTAI7KngaupZ-t-dBG-oNVqFjVss1GxJ4283PWocfmtlgSy8k1Nu_guYgN8Mtfj3mgWoGPRKhuNvFE7c0cyKi84y0e&abvar=2&os=0
200 OK 43 B URL HTTP/2 cuddlethehyena.com/chicken.gif?z=1910055&pb=2eec8bc0042dce037542a1f261c64da21675606981&psp=eNSUHmpx1SfDRIqWHEvMH97tqzvnDohPCsjxI9SE1pxUMfJdak80PCaPpStmr_kdvXot9RYfWgnFWtlmHhqC-GRI6Ork9wTeP9aqhS3ECqSzgcSE9GbYxy3CJvol2ECJ7s-cMw86qG915_bHEzTsM35oz98EMNU0bRzU8PmVNb9IXs8-kFHzXDCIfOlgBdE19CwmwOPGYpoKltkyD2SLWRXhHmJ5ixWsp8CGgfnmqe_QwFqgIJEkdM16JNxrE9d_unAe8S0W8pkmvyKX7g51LfRl-awAf2b-oy4JY2QtjFEWJO8kA0RDEY0Z9-LxLwtGREVPcfxZVj5yPgFEJmNJcah2_EPnCbT-fE40NFGLERfRwn_4y-Z9nP-wCjHPlY7Hjjj8emUaYC2kc94U2Msq4FbdV9jVPoMP1aUqr7ZEpFWA8JlT-SrLyP-AizX9gN9zQHYP1jUCl7WwUJbt8wiURCn_0l4pJGCUgenjYW2PGtXMsIki6bjGb3I4fUbh2fmlYY0bEk9SQRrKIjJKNnUgSmn0KiiBESxdkQg9tUuL9OXeEkkR3zFFpiDywyj7NxECGZonccSqCsum0slRufY4xW_qF-je8LZgBVu-DrkMQp0Ehjsw-aAxjgBjQ0AJWB9Ti_O9OaU6DZLfOi8v8L4fkVT14YnzKbXWlaF7nR5w_gKZrgx2DztmRGMbmDj1Wm2l9bcWWWty6sPlZGpcCoht8TA64VJlKhGliVWC4bzY06Qxcg8acccqnEGG2A7W-Vd5xcJvyMqKzqbmjl-NIRpG8-186Jsjo9JUMPYh2GsRqI_5sFRJjo6KiK5uc4YWjgqzHyhDRjU4ue2ifiRiyTN2qw5KQfdthq6v7Nsr6TkT_c7RmeBufF9aKpyrYoDk3OikPQC1EJhQzomLobEPYNRDEWo-nHLMvxJPDSQyVB6A_Rg0MKMOnPWydZsCIhGy8Vf_Co22h2JS4UjufZaKyizZ8bh11Uoqk4CdnIt6QFTPD4QQ5E-QuLjiwLDNNLDx6ipgV_ep3-c4yvmIKPy_r-yA7gEeHjkM5RkjMVi8cR3WQOTJRClBCH_Fuctk_tyQfr_P3QoN712Ttey6ULWGTFDEu9kfLFXw_anbauWtIedl0TGYndrCyFcFLKYZYmpb9w2J6rB9M6OJsFeRygIwCX3WSQ8cKYxa5FPk8hpZ3LwypLVxPXFrizjxfYugdjdZfAOwiptX2wF5_LU4A1IInfiplpGawYHiqXe31_E7Jsquz-mEGllVrJDzFQlSPyuZg2FMnqhGJTJW46rCbfIE5p3cTVIDSYgMMUeqVcbKPtbga6Uaf0YEcgWptcxrsP0qnKlDnYImkqAYFzIywQe4a3SSVFyJvuBVQ1XSfiXtXGo36aK5bs5U1uMKpRiSIUgLo6hrcF2VY8MB82EQBAZ9DQwR6QXw9iyTeb-4EYq0Wlv_SBZcve9E1HOx62ukQjznoLXHYxCAHJOpz5zkP6KZ5Kw5x2vs1wwBgw_jilKW7fgCXxRuBER_RIqn1bUlGCwPcwflPxNFekuvHPmDYQjpxS9in0OFn05UZrbwsdQgmk4C4S_PZ4AwVrXM8UuV3s-Xl6TSCA71uUern8zBIXuqBbqwR9Ip6m17vkewap2z7VfxUCMn-Dmbvu9ufedA2lAxI4yHWulNoClWahCtDmkTAI7KngaupZ-t-dBG-oNVqFjVss1GxJ4283PWocfmtlgSy8k1Nu_guYgN8Mtfj3mgWoGPRKhuNvFE7c0cyKi84y0e&abvar=2&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
GET /chicken.gif?z=1910055&pb=2eec8bc0042dce037542a1f261c64da21675606981&psp=eNSUHmpx1SfDRIqWHEvMH97tqzvnDohPCsjxI9SE1pxUMfJdak80PCaPpStmr_kdvXot9RYfWgnFWtlmHhqC-GRI6Ork9wTeP9aqhS3ECqSzgcSE9GbYxy3CJvol2ECJ7s-cMw86qG915_bHEzTsM35oz98EMNU0bRzU8PmVNb9IXs8-kFHzXDCIfOlgBdE19CwmwOPGYpoKltkyD2SLWRXhHmJ5ixWsp8CGgfnmqe_QwFqgIJEkdM16JNxrE9d_unAe8S0W8pkmvyKX7g51LfRl-awAf2b-oy4JY2QtjFEWJO8kA0RDEY0Z9-LxLwtGREVPcfxZVj5yPgFEJmNJcah2_EPnCbT-fE40NFGLERfRwn_4y-Z9nP-wCjHPlY7Hjjj8emUaYC2kc94U2Msq4FbdV9jVPoMP1aUqr7ZEpFWA8JlT-SrLyP-AizX9gN9zQHYP1jUCl7WwUJbt8wiURCn_0l4pJGCUgenjYW2PGtXMsIki6bjGb3I4fUbh2fmlYY0bEk9SQRrKIjJKNnUgSmn0KiiBESxdkQg9tUuL9OXeEkkR3zFFpiDywyj7NxECGZonccSqCsum0slRufY4xW_qF-je8LZgBVu-DrkMQp0Ehjsw-aAxjgBjQ0AJWB9Ti_O9OaU6DZLfOi8v8L4fkVT14YnzKbXWlaF7nR5w_gKZrgx2DztmRGMbmDj1Wm2l9bcWWWty6sPlZGpcCoht8TA64VJlKhGliVWC4bzY06Qxcg8acccqnEGG2A7W-Vd5xcJvyMqKzqbmjl-NIRpG8-186Jsjo9JUMPYh2GsRqI_5sFRJjo6KiK5uc4YWjgqzHyhDRjU4ue2ifiRiyTN2qw5KQfdthq6v7Nsr6TkT_c7RmeBufF9aKpyrYoDk3OikPQC1EJhQzomLobEPYNRDEWo-nHLMvxJPDSQyVB6A_Rg0MKMOnPWydZsCIhGy8Vf_Co22h2JS4UjufZaKyizZ8bh11Uoqk4CdnIt6QFTPD4QQ5E-QuLjiwLDNNLDx6ipgV_ep3-c4yvmIKPy_r-yA7gEeHjkM5RkjMVi8cR3WQOTJRClBCH_Fuctk_tyQfr_P3QoN712Ttey6ULWGTFDEu9kfLFXw_anbauWtIedl0TGYndrCyFcFLKYZYmpb9w2J6rB9M6OJsFeRygIwCX3WSQ8cKYxa5FPk8hpZ3LwypLVxPXFrizjxfYugdjdZfAOwiptX2wF5_LU4A1IInfiplpGawYHiqXe31_E7Jsquz-mEGllVrJDzFQlSPyuZg2FMnqhGJTJW46rCbfIE5p3cTVIDSYgMMUeqVcbKPtbga6Uaf0YEcgWptcxrsP0qnKlDnYImkqAYFzIywQe4a3SSVFyJvuBVQ1XSfiXtXGo36aK5bs5U1uMKpRiSIUgLo6hrcF2VY8MB82EQBAZ9DQwR6QXw9iyTeb-4EYq0Wlv_SBZcve9E1HOx62ukQjznoLXHYxCAHJOpz5zkP6KZ5Kw5x2vs1wwBgw_jilKW7fgCXxRuBER_RIqn1bUlGCwPcwflPxNFekuvHPmDYQjpxS9in0OFn05UZrbwsdQgmk4C4S_PZ4AwVrXM8UuV3s-Xl6TSCA71uUern8zBIXuqBbqwR9Ip6m17vkewap2z7VfxUCMn-Dmbvu9ufedA2lAxI4yHWulNoClWahCtDmkTAI7KngaupZ-t-dBG-oNVqFjVss1GxJ4283PWocfmtlgSy8k1Nu_guYgN8Mtfj3mgWoGPRKhuNvFE7c0cyKi84y0e&abvar=2&os=0 HTTP/1.1
Host: cuddlethehyena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2302050723d0e41ccda4c94f6095f7ea39fe; OACICAP=ACHfJgAAAAAAAAAB; OACIBLOCK=ACHfJgAAAABj3zfQ; ppucnt=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: ppucnt=0; Path=/; Expires=Mon, 06 Feb 2023 12:23:04 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
js.canstrm.com/vast-vpaid-player/main.js
200 OK 54 kB URL HTTP/2 js.canstrm.com/vast-vpaid-player/main.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash e639dff87335da07a5c902d3be387b63
274631d39ed7024628959d10d8a48963e428117f
72c2c335995627a50add93957d53a93edfc830eb4b5473983e69c99540b53b2d
GET /vast-vpaid-player/main.js HTTP/1.1
Host: js.canstrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Fri, 03 Feb 2023 07:14:32 GMT
etag: W/"63dcb458-2a475"
content-encoding: gzip
expires: Sun, 05 Feb 2023 12:28:04 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInDEuBEjhhkbNVrgwGEmRgsaNMaQaSFGzI2VNsLQsCFjDA2SMXDQEOFwjpg0ZBTq2CIiRg4ZMzYmhSGii8MxboTmoFHDYZg6YzDiqJHjBscaHWPQyDEDxw2NNniK-EkGYxo6Zdp8iaHWoJ2JNmjIgOEQTh0xC2vMqCHDKhw4C2UYtUFRxBw4EnXQ2EizBl8RZfDQ-fI48kMyet64KTN3bNqnbRDrAItSRsPPZhbSdCjGjZuFM2RQ7dq4jZuLOmbAyIHDRl_fwDfCgGFcRB05bHBbnpEjR1XnMjCioUMHzhwdL17IgUNGjJw1eFyMedPmRZU2Zd5AcZPkzRErMsLcaeOkih4mTUBhBBZ40GBGETjIQQUeS9hEhAxJnBGHHUWkEUcccMRAxx09vJCGGwfhEYMLcKABxw-j4dFDDFzUsZwMNtRBh1zwkZFGHW30wJpeN7iQ224ctfiiDXTIEYYZZqQxBmdvPDdGGT3IQUaRawgJA4wyygXXHHQAtWJeI9VgJZYzfmGQeW-sgVAPVBiJpJJT0BFGQl_IMGaMZRpkxhtytBEGHWwWgQUVd2bJpJNQKpYDY3eGNloPk91QGQx3jsGGkmt4WZIUd9TQhhhMJJHFE0RUIYcMWHQlBw1R1BGHFWUs8acQNsABgxXFPVeGHUuQUYQcUNjgBA5PpFFGC2vUigYUY8CBgxRzBJHGHE_AoccdarzxhRg2RLGZGGjYMYMcOXA2BRxXlPHEEkvc4AYceXzxBAxpUFGGGPphwQQUbNCURhRfnFFFEkRIUUUaapHBHkZqhGEHHXa4QMcbao3x50JbJOWUCHDIkdVqxzJHW2w6wODCctc1K1fHH5u8HA0OyWGHans5VIbKC7kMw3V11IGwDmvBINZgOZWhUwxi6HYDDEfqREZxZSA9HBkzAOZQGqqJkMOIOZislwsx1LCTQ3WEgVETb-iRBhtshPFCDSeDgMIVHyp8xxwgOEEFCDG4vAMIdLuR1994DA6CzDr0DTcMKYBwxM1rvPHCXn0LLTQIRqQhRxl74vGC4idX_LEITjyhFp9fjDF66WqxMXoRTiS86xebR5d4DV7hMIMNOCwX8xm36SBDDWY5dJAd28qx0EjGz97GG20JX1xjZMhBcXAOvSEUzBxbj0ceC3G_OckDcecdeC80_HDEE7-g1hwyY2S9nBPL0UIdbrzVAmMukDHGDQkb3UG-4D8AVqQNeLlBDbjSFZ0cMDuJs4ECGXiWmQzGKmSgXRkeY6bIxECCC6xOBW2GvDCwASF0EErGarCxMIjBMwcxw1XYIJG-uC5nT4FDG5BnpC5drzFjSI4M-qCAgAA%3D&r=1&s=d3f1df567f088810a389918d815731373adc8d579503463b4952b1e3bda2722c1675599784&w=t
200 OK 35 B URL HTTP/2 pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInDEuBEjhhkbNVrgwGEmRgsaNMaQaSFGzI2VNsLQsCFjDA2SMXDQEOFwjpg0ZBTq2CIiRg4ZMzYmhSGii8MxboTmoFHDYZg6YzDiqJHjBscaHWPQyDEDxw2NNniK-EkGYxo6Zdp8iaHWoJ2JNmjIgOEQTh0xC2vMqCHDKhw4C2UYtUFRxBw4EnXQ2EizBl8RZfDQ-fI48kMyet64KTN3bNqnbRDrAItSRsPPZhbSdCjGjZuFM2RQ7dq4jZuLOmbAyIHDRl_fwDfCgGFcRB05bHBbnpEjR1XnMjCioUMHzhwdL17IgUNGjJw1eFyMedPmRZU2Zd5AcZPkzRErMsLcaeOkih4mTUBhBBZ40GBGETjIQQUeS9hEhAxJnBGHHUWkEUcccMRAxx09vJCGGwfhEYMLcKABxw-j4dFDDFzUsZwMNtRBh1zwkZFGHW30wJpeN7iQ224ctfiiDXTIEYYZZqQxBmdvPDdGGT3IQUaRawgJA4wyygXXHHQAtWJeI9VgJZYzfmGQeW-sgVAPVBiJpJJT0BFGQl_IMGaMZRpkxhtytBEGHWwWgQUVd2bJpJNQKpYDY3eGNloPk91QGQx3jsGGkmt4WZIUd9TQhhhMJJHFE0RUIYcMWHQlBw1R1BGHFWUs8acQNsABgxXFPVeGHUuQUYQcUNjgBA5PpFFGC2vUigYUY8CBgxRzBJHGHE_AoccdarzxhRg2RLGZGGjYMYMcOXA2BRxXlPHEEkvc4AYceXzxBAxpUFGGGPphwQQUbNCURhRfnFFFEkRIUUUaapHBHkZqhGEHHXa4QMcbao3x50JbJOWUCHDIkdVqxzJHW2w6wODCctc1K1fHH5u8HA0OyWGHans5VIbKC7kMw3V11IGwDmvBINZgOZWhUwxi6HYDDEfqREZxZSA9HBkzAOZQGqqJkMOIOZislwsx1LCTQ3WEgVETb-iRBhtshPFCDSeDgMIVHyp8xxwgOEEFCDG4vAMIdLuR1994DA6CzDr0DTcMKYBwxM1rvPHCXn0LLTQIRqQhRxl74vGC4idX_LEITjyhFp9fjDF66WqxMXoRTiS86xebR5d4DV7hMIMNOCwX8xm36SBDDWY5dJAd28qx0EjGz97GG20JX1xjZMhBcXAOvSEUzBxbj0ceC3G_OckDcecdeC80_HDEE7-g1hwyY2S9nBPL0UIdbrzVAmMukDHGDQkb3UG-4D8AVqQNeLlBDbjSFZ0cMDuJs4ECGXiWmQzGKmSgXRkeY6bIxECCC6xOBW2GvDCwASF0EErGarCxMIjBMwcxw1XYIJG-uC5nT4FDG5BnpC5drzFjSI4M-qCAgAA%3D&r=1&s=d3f1df567f088810a389918d815731373adc8d579503463b4952b1e3bda2722c1675599784&w=t
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/p/p.gif?p=APeIQFMmDJkycuaI0HGDhYgwY-gsjOGQzpmFInDEuBEjhhkbNVrgwGEmRgsaNMaQaSFGzI2VNsLQsCFjDA2SMXDQEOFwjpg0ZBTq2CIiRg4ZMzYmhSGii8MxboTmoFHDYZg6YzDiqJHjBscaHWPQyDEDxw2NNniK-EkGYxo6Zdp8iaHWoJ2JNmjIgOEQTh0xC2vMqCHDKhw4C2UYtUFRxBw4EnXQ2EizBl8RZfDQ-fI48kMyet64KTN3bNqnbRDrAItSRsPPZhbSdCjGjZuFM2RQ7dq4jZuLOmbAyIHDRl_fwDfCgGFcRB05bHBbnpEjR1XnMjCioUMHzhwdL17IgUNGjJw1eFyMedPmRZU2Zd5AcZPkzRErMsLcaeOkih4mTUBhBBZ40GBGETjIQQUeS9hEhAxJnBGHHUWkEUcccMRAxx09vJCGGwfhEYMLcKABxw-j4dFDDFzUsZwMNtRBh1zwkZFGHW30wJpeN7iQ224ctfiiDXTIEYYZZqQxBmdvPDdGGT3IQUaRawgJA4wyygXXHHQAtWJeI9VgJZYzfmGQeW-sgVAPVBiJpJJT0BFGQl_IMGaMZRpkxhtytBEGHWwWgQUVd2bJpJNQKpYDY3eGNloPk91QGQx3jsGGkmt4WZIUd9TQhhhMJJHFE0RUIYcMWHQlBw1R1BGHFWUs8acQNsABgxXFPVeGHUuQUYQcUNjgBA5PpFFGC2vUigYUY8CBgxRzBJHGHE_AoccdarzxhRg2RLGZGGjYMYMcOXA2BRxXlPHEEkvc4AYceXzxBAxpUFGGGPphwQQUbNCURhRfnFFFEkRIUUUaapHBHkZqhGEHHXa4QMcbao3x50JbJOWUCHDIkdVqxzJHW2w6wODCctc1K1fHH5u8HA0OyWGHans5VIbKC7kMw3V11IGwDmvBINZgOZWhUwxi6HYDDEfqREZxZSA9HBkzAOZQGqqJkMOIOZislwsx1LCTQ3WEgVETb-iRBhtshPFCDSeDgMIVHyp8xxwgOEEFCDG4vAMIdLuR1994DA6CzDr0DTcMKYBwxM1rvPHCXn0LLTQIRqQhRxl74vGC4idX_LEITjyhFp9fjDF66WqxMXoRTiS86xebR5d4DV7hMIMNOCwX8xm36SBDDWY5dJAd28qx0EjGz97GG20JX1xjZMhBcXAOvSEUzBxbj0ceC3G_OckDcecdeC80_HDEE7-g1hwyY2S9nBPL0UIdbrzVAmMukDHGDQkb3UG-4D8AVqQNeLlBDbjSFZ0cMDuJs4ECGXiWmQzGKmSgXRkeY6bIxECCC6xOBW2GvDCwASF0EErGarCxMIjBMwcxw1XYIJG-uC5nT4FDG5BnpC5drzFjSI4M-qCAgAA%3D&r=1&s=d3f1df567f088810a389918d815731373adc8d579503463b4952b1e3bda2722c1675599784&w=t HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://564cc73ffe.ed9b93b5ee.com/
Cookie: ts_uid=b41e0314-0f68-4332-bbaa-7c84c673e7b5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:05 GMT
content-type: text/plain; charset=utf-8
content-length: 35
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
embedsb.com/e/1ydjsq0uab2b.html?poster=https://cdn.javtv.to/data/gigp-32.jpg
200 OK 10 kB URL HTTP/2 embedsb.com/e/1ydjsq0uab2b.html?poster=https://cdn.javtv.to/data/gigp-32.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (5217), with CRLF line terminators
Hash 84672961f2135a51d98032e5c638b9b8
f241d836dc4cfc4dc283c8b5cc753e58a25e14f8
7d5cba84b830bf1f68689050024401075c9f90dadd05b970bc19e2ae62203105
GET /e/1ydjsq0uab2b.html?poster=https://cdn.javtv.to/data/gigp-32.jpg HTTP/1.1
Host: embedsb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: text/html; charset=utf-8
last-modified: Wed, 01 Feb 2023 14:19:37 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XTYDySvDsuNa6ugHZhpDfqlUliEwuJDKNSCFTVEKRglCNh%2BlmMlGbzcVQz50ZEYd9ayV4dxvtZe1pLmtGFvnP7ukCOPK%2FjnYMAZmVLTL22sRDFPPTFkh2UU69qICQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 794b9d7aec88b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b45aced3f9f05f1f4da20f8b6ea21d30
bd28ecb25ce9fb326fd8914316142aec4e70d84b
af3a035d682dd50f81039ee0b356e4a60fba24e7db5fd0e74329bd12178839b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AF3A035D682DD50F81039EE0B356E4A60FBA24E7DB5FD0E74329BD12178839B0"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14694
Expires: Sun, 05 Feb 2023 16:27:59 GMT
Date: Sun, 05 Feb 2023 12:23:05 GMT
Connection: keep-alive
syndication.realsrv.com/splash.php?idzone=4886410&sub=841559744&ad_tags=GIGP-32%2CBishoujo%2CSenshi%2CSailor%2CRumes%2CVirgin%2CLoss%2CEvil%2CFall%2CYokomiya%2CNanami%2CWatch%2COnline%2CJAV%2CHot%2CJAV%2CFree%2Cdownload%2CJAVTV%2CGIGP-32%2CBishoujo%2CSenshi%2CSailor%2CRumes%2CVirgin%2CLoss%2CEvil%2CFall%2CYokomiya%2CNanami%2CWatch%2COnline%2CJAV%2CHot%2CJAV%2CFree%2Cdownload%2CGIGP-32%2CBishoujo%2CSenshi%2CSailor%2CRumes%2CVirgin%2CLoss%2CEvil%2CFall%2CYokomiya%2CNanami%2CVideo%2CPorn%2CHD%2CJAVTV%2CJavtv.to,
200 OK 2.6 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?idzone=4886410&sub=841559744&ad_tags=GIGP-32%2CBishoujo%2CSenshi%2CSailor%2CRumes%2CVirgin%2CLoss%2CEvil%2CFall%2CYokomiya%2CNanami%2CWatch%2COnline%2CJAV%2CHot%2CJAV%2CFree%2Cdownload%2CJAVTV%2CGIGP-32%2CBishoujo%2CSenshi%2CSailor%2CRumes%2CVirgin%2CLoss%2CEvil%2CFall%2CYokomiya%2CNanami%2CWatch%2COnline%2CJAV%2CHot%2CJAV%2CFree%2Cdownload%2CGIGP-32%2CBishoujo%2CSenshi%2CSailor%2CRumes%2CVirgin%2CLoss%2CEvil%2CFall%2CYokomiya%2CNanami%2CVideo%2CPorn%2CHD%2CJAVTV%2CJavtv.to,
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (1538)
Hash 4ebd119a80e07e8dfb69c6b38c08ebf8
ebbd034d063602884f8d2c6f153a8acc3045bba1
0d5bdf1a2e33ca59fdeeb2a99d32bf13d8038dd839ae3f08626ddaccd8f112d8
GET /splash.php?idzone=4886410&sub=841559744&ad_tags=GIGP-32%2CBishoujo%2CSenshi%2CSailor%2CRumes%2CVirgin%2CLoss%2CEvil%2CFall%2CYokomiya%2CNanami%2CWatch%2COnline%2CJAV%2CHot%2CJAV%2CFree%2Cdownload%2CJAVTV%2CGIGP-32%2CBishoujo%2CSenshi%2CSailor%2CRumes%2CVirgin%2CLoss%2CEvil%2CFall%2CYokomiya%2CNanami%2CWatch%2COnline%2CJAV%2CHot%2CJAV%2CFree%2Cdownload%2CGIGP-32%2CBishoujo%2CSenshi%2CSailor%2CRumes%2CVirgin%2CLoss%2CEvil%2CFall%2CYokomiya%2CNanami%2CVideo%2CPorn%2CHD%2CJAVTV%2CJavtv.to, HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pornlaundry.com/
Origin: https://pornlaundry.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Feb 2023 12:23:05 GMT
Content-Type: text/xml;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263df9fa935e2f3.255736301595042371%22%3B%7D; expires=Tue, 04 Feb 2025 12:23:05 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-video%22%3A%22v3%7C%7CNOR%7C4886410%7C59493762%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C841559744%7Cpornlaundry.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Mon, 06 Feb 2023 12:23:05 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
Cache-Control: no-store
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: https://pornlaundry.com
Access-Control-Allow-Credentials: true
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
rtbrennab.com/banner/in/show/?mid=859771511149387816&pid=0&site=55211&sc=NO&usage_type=DCH&subid=192317310&sid=0&cid=10920&price=0&is_cpm=1&cpm=0.004&ecpm=0.0033204&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=javtv.to&hostname=auc-banner-hz-3&site_id=0&spot_id=55211&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=native&iabcat=IAB25&min_cpm=0.00012046741356463078&placement_type_id=269&skin_test=&verify_hash=&score=0&ml=&tag_ab=d&v2=0&ttl=&space_id=1496&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=javtv.to&bid_crid=&bid_cid=&is_iframe=1&ad_tags=,&stratagem=nlabel-a&ssp=3758
302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=859771511149387816&pid=0&site=55211&sc=NO&usage_type=DCH&subid=192317310&sid=0&cid=10920&price=0&is_cpm=1&cpm=0.004&ecpm=0.0033204&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=javtv.to&hostname=auc-banner-hz-3&site_id=0&spot_id=55211&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=native&iabcat=IAB25&min_cpm=0.00012046741356463078&placement_type_id=269&skin_test=&verify_hash=&score=0&ml=&tag_ab=d&v2=0&ttl=&space_id=1496&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=javtv.to&bid_crid=&bid_cid=&is_iframe=1&ad_tags=,&stratagem=nlabel-a&ssp=3758
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=859771511149387816&pid=0&site=55211&sc=NO&usage_type=DCH&subid=192317310&sid=0&cid=10920&price=0&is_cpm=1&cpm=0.004&ecpm=0.0033204&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=javtv.to&hostname=auc-banner-hz-3&site_id=0&spot_id=55211&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=native&iabcat=IAB25&min_cpm=0.00012046741356463078&placement_type_id=269&skin_test=&verify_hash=&score=0&ml=&tag_ab=d&v2=0&ttl=&space_id=1496&banner_width=300&banner_height=250&accel=0&gyr=0&iabcat=IAB25&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=javtv.to&bid_crid=&bid_cid=&is_iframe=1&ad_tags=,&stratagem=nlabel-a&ssp=3758 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://564cc73ffe.ed9b93b5ee.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.18.0
date: Sun, 05 Feb 2023 12:23:05 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://preroll.hostave3.net/notifications/zeropixel.png
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=2255412845526940463&pid=0&site=55207&sc=NO&usage_type=DCH&subid=1685896512&sid=0&cid=10920&price=0&is_cpm=1&cpm=0.004&ecpm=0.0033204&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=javtv.to&hostname=auc-banner-hz-4&site_id=0&spot_id=55207&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=native&iabcat=IAB25-3&min_cpm=0.00012046741356463078&placement_type_id=271&skin_test=&verify_hash=&score=92.58818156353637&ml=&tag_ab=c&v2=0&ttl=&space_id=1497&banner_width=728&banner_height=90&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=GIGP-32%2CBishoujo%2CSenshi%2CSailor%2CRumes%2CVirgin%2CLoss%2CEvil%2CFall%2CYokomiya%2CNanami%2CWatch%2COnline%2CJAV%2CHot%2CJAV%2CFree%2Cdownload%2CJAVTV%2CGIGP-32%2CBishoujo%2CSenshi%2CSailor%2CRumes%2CVirgin%2CLoss%2CEvil%2CFall%2CYokomiya%2CNanami%2CWatch%2COnline%2CJAV%2CHot%2CJAV%2CFree%2Cdownload%2CGIGP-32%2CBishoujo%2CSenshi%2CSailor%2CRumes%2CVirgin%2CLoss%2CEvil%2CFall%2CYokomiya%2CNanami%2CVideo%2CPorn%2CHD%2CJAVTV%2CJavtv.to,&stratagem=nlabel-b&ssp=3758
302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=2255412845526940463&pid=0&site=55207&sc=NO&usage_type=DCH&subid=1685896512&sid=0&cid=10920&price=0&is_cpm=1&cpm=0.004&ecpm=0.0033204&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=javtv.to&hostname=auc-banner-hz-4&site_id=0&spot_id=55207&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=native&iabcat=IAB25-3&min_cpm=0.00012046741356463078&placement_type_id=271&skin_test=&verify_hash=&score=92.58818156353637&ml=&tag_ab=c&v2=0&ttl=&space_id=1497&banner_width=728&banner_height=90&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=GIGP-32%2CBishoujo%2CSenshi%2CSailor%2CRumes%2CVirgin%2CLoss%2CEvil%2CFall%2CYokomiya%2CNanami%2CWatch%2COnline%2CJAV%2CHot%2CJAV%2CFree%2Cdownload%2CJAVTV%2CGIGP-32%2CBishoujo%2CSenshi%2CSailor%2CRumes%2CVirgin%2CLoss%2CEvil%2CFall%2CYokomiya%2CNanami%2CWatch%2COnline%2CJAV%2CHot%2CJAV%2CFree%2Cdownload%2CGIGP-32%2CBishoujo%2CSenshi%2CSailor%2CRumes%2CVirgin%2CLoss%2CEvil%2CFall%2CYokomiya%2CNanami%2CVideo%2CPorn%2CHD%2CJAVTV%2CJavtv.to,&stratagem=nlabel-b&ssp=3758
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=2255412845526940463&pid=0&site=55207&sc=NO&usage_type=DCH&subid=1685896512&sid=0&cid=10920&price=0&is_cpm=1&cpm=0.004&ecpm=0.0033204&crid=&crtid=d41d8cd98f00b204e9800998ecf8427e&tcid=0&out_id=&ver=&ver_c=&refdom=javtv.to&hostname=auc-banner-hz-4&site_id=0&spot_id=55207&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=6&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=native&iabcat=IAB25-3&min_cpm=0.00012046741356463078&placement_type_id=271&skin_test=&verify_hash=&score=92.58818156353637&ml=&tag_ab=c&v2=0&ttl=&space_id=1497&banner_width=728&banner_height=90&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=GIGP-32%2CBishoujo%2CSenshi%2CSailor%2CRumes%2CVirgin%2CLoss%2CEvil%2CFall%2CYokomiya%2CNanami%2CWatch%2COnline%2CJAV%2CHot%2CJAV%2CFree%2Cdownload%2CJAVTV%2CGIGP-32%2CBishoujo%2CSenshi%2CSailor%2CRumes%2CVirgin%2CLoss%2CEvil%2CFall%2CYokomiya%2CNanami%2CWatch%2COnline%2CJAV%2CHot%2CJAV%2CFree%2Cdownload%2CGIGP-32%2CBishoujo%2CSenshi%2CSailor%2CRumes%2CVirgin%2CLoss%2CEvil%2CFall%2CYokomiya%2CNanami%2CVideo%2CPorn%2CHD%2CJAVTV%2CJavtv.to,&stratagem=nlabel-b&ssp=3758 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://564cc73ffe.ed9b93b5ee.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.18.0
date: Sun, 05 Feb 2023 12:23:05 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://preroll.hostave3.net/notifications/zeropixel.png
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0DEjBgsRYcbQWehQBJ0zC0XQyCGmzA0ZZXC0iHEjzI0WNHCYMdMijJgcOVp4FGPDBswZM8iIISPi4Rwxacgo1LFFRAwaH2vMgIHDBg4RXR6GqTMmo4wcZWjMKGNDTIsaNZCiHBNjTAsxG2m0gDHmRo4xMszEHTNmRk-IZOwsrBEDRgwcD-HUEUPx6g2pcOAspCGjhg2fcCbqYKw1BwwZD8e0UTw5B9iaUsmYWWhjxkMxbtwsbKgVxwzMItq4wagjRo4YNmAElk37aIy_D-vIYbOaBoyNOR6LqCMjIxo6dODM0fHihZk0bsiMCdNmjgs2aeyUefGjDB46CN2EYfNlDPgxa74E7dEii5YqQaK8uUOnTRY6eVQRAxRM4GHGEHrgcAQaUpRR1xBD1HDGRkkYVAMTbZCRRhPiUeGEEm7UAcUVc5yxBg5VTIEFHHmYwUQaYRghxRUypHHFEnHAoMQSVCwhxhcx0OEEE2NA4QYOdbARhxBPEBFDGHA8IYQVTrxRhRJk1IDFGke0YEUaX5xRRRJESFFFGlzUAcNlNhg0Bxxv0CEfGT1QNoNlMqS5pgw2bLdZGGmc4cacdXrmmA13kfFGGxnRMUce2aWxHXoujLHoXZMutEVDUYkgxmg6wOCCaSLIYQdntgVXRxoZoRVDGTCwtpYZTqGEkwxniRFGGC3cMAYONIxhww1b3SBGDXelwZkIt7lgmQuMuRBDWHfJId-yzT4b7bQ03FVHGBk18YYeabDBRhgv1OACDCCgcAV2it4xBwhOUAFCX-vuAMK7bthAg754-KuvqbXBoC4MKYBwhINrvPGCDH6t2VcMIBiRhhxlmPEGHi_0dTCmVekgghNP3PWGtXRlRPJdbIQsQhFOJFqGHV9gTFxtNdxwg2tOrfmQHIIu1BgOh4lwEM1iyLEQDoAZPfMXbbzBkw4yNFURGXK8sdpDbwxFQ2BZ45HHYj9n7Bx00lH3gqOQajhpGZUu-kIaZsjBXRlzyPBCDr6GESxJNpgRRlgz6CqGsTHcyVgYZeTAZw1ZuvBcG2z8cNccpmaUNR1h0HFyC3W4kQYdLQzrgnYxNPeQdhkd9AXqqlvEaG3DggXTzjU81F9ztN9gO9841ABx0wbVjDccX3ROUe013A7sQ0-vh5Cjms5AQ6cuSea04ElOFFjLC-kmwhi0wdCHAgEB&r=1&s=018b379f5173ca6e6cecc28f56fcd671ee906955859d8ba392ab3c16782b416b1675599785&w=t
200 OK 35 B URL HTTP/2 pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0DEjBgsRYcbQWehQBJ0zC0XQyCGmzA0ZZXC0iHEjzI0WNHCYMdMijJgcOVp4FGPDBswZM8iIISPi4Rwxacgo1LFFRAwaH2vMgIHDBg4RXR6GqTMmo4wcZWjMKGNDTIsaNZCiHBNjTAsxG2m0gDHmRo4xMszEHTNmRk-IZOwsrBEDRgwcD-HUEUPx6g2pcOAspCGjhg2fcCbqYKw1BwwZD8e0UTw5B9iaUsmYWWhjxkMxbtwsbKgVxwzMItq4wagjRo4YNmAElk37aIy_D-vIYbOaBoyNOR6LqCMjIxo6dODM0fHihZk0bsiMCdNmjgs2aeyUefGjDB46CN2EYfNlDPgxa74E7dEii5YqQaK8uUOnTRY6eVQRAxRM4GHGEHrgcAQaUpRR1xBD1HDGRkkYVAMTbZCRRhPiUeGEEm7UAcUVc5yxBg5VTIEFHHmYwUQaYRghxRUypHHFEnHAoMQSVCwhxhcx0OEEE2NA4QYOdbARhxBPEBFDGHA8IYQVTrxRhRJk1IDFGke0YEUaX5xRRRJESFFFGlzUAcNlNhg0Bxxv0CEfGT1QNoNlMqS5pgw2bLdZGGmc4cacdXrmmA13kfFGGxnRMUce2aWxHXoujLHoXZMutEVDUYkgxmg6wOCCaSLIYQdntgVXRxoZoRVDGTCwtpYZTqGEkwxniRFGGC3cMAYONIxhww1b3SBGDXelwZkIt7lgmQuMuRBDWHfJId-yzT4b7bQ03FVHGBk18YYeabDBRhgv1OACDCCgcAV2it4xBwhOUAFCX-vuAMK7bthAg754-KuvqbXBoC4MKYBwhINrvPGCDH6t2VcMIBiRhhxlmPEGHi_0dTCmVekgghNP3PWGtXRlRPJdbIQsQhFOJFqGHV9gTFxtNdxwg2tOrfmQHIIu1BgOh4lwEM1iyLEQDoAZPfMXbbzBkw4yNFURGXK8sdpDbwxFQ2BZ45HHYj9n7Bx00lH3gqOQajhpGZUu-kIaZsjBXRlzyPBCDr6GESxJNpgRRlgz6CqGsTHcyVgYZeTAZw1ZuvBcG2z8cNccpmaUNR1h0HFyC3W4kQYdLQzrgnYxNPeQdhkd9AXqqlvEaG3DggXTzjU81F9ztN9gO9841ABx0wbVjDccX3ROUe013A7sQ0-vh5Cjms5AQ6cuSea04ElOFFjLC-kmwhi0wdCHAgEB&r=1&s=018b379f5173ca6e6cecc28f56fcd671ee906955859d8ba392ab3c16782b416b1675599785&w=t
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/p/p.gif?p=APeIQFMmDJkycuaI0DEjBgsRYcbQWehQBJ0zC0XQyCGmzA0ZZXC0iHEjzI0WNHCYMdMijJgcOVp4FGPDBswZM8iIISPi4Rwxacgo1LFFRAwaH2vMgIHDBg4RXR6GqTMmo4wcZWjMKGNDTIsaNZCiHBNjTAsxG2m0gDHmRo4xMszEHTNmRk-IZOwsrBEDRgwcD-HUEUPx6g2pcOAspCGjhg2fcCbqYKw1BwwZD8e0UTw5B9iaUsmYWWhjxkMxbtwsbKgVxwzMItq4wagjRo4YNmAElk37aIy_D-vIYbOaBoyNOR6LqCMjIxo6dODM0fHihZk0bsiMCdNmjgs2aeyUefGjDB46CN2EYfNlDPgxa74E7dEii5YqQaK8uUOnTRY6eVQRAxRM4GHGEHrgcAQaUpRR1xBD1HDGRkkYVAMTbZCRRhPiUeGEEm7UAcUVc5yxBg5VTIEFHHmYwUQaYRghxRUypHHFEnHAoMQSVCwhxhcx0OEEE2NA4QYOdbARhxBPEBFDGHA8IYQVTrxRhRJk1IDFGke0YEUaX5xRRRJESFFFGlzUAcNlNhg0Bxxv0CEfGT1QNoNlMqS5pgw2bLdZGGmc4cacdXrmmA13kfFGGxnRMUce2aWxHXoujLHoXZMutEVDUYkgxmg6wOCCaSLIYQdntgVXRxoZoRVDGTCwtpYZTqGEkwxniRFGGC3cMAYONIxhww1b3SBGDXelwZkIt7lgmQuMuRBDWHfJId-yzT4b7bQ03FVHGBk18YYeabDBRhgv1OACDCCgcAV2it4xBwhOUAFCX-vuAMK7bthAg754-KuvqbXBoC4MKYBwhINrvPGCDH6t2VcMIBiRhhxlmPEGHi_0dTCmVekgghNP3PWGtXRlRPJdbIQsQhFOJFqGHV9gTFxtNdxwg2tOrfmQHIIu1BgOh4lwEM1iyLEQDoAZPfMXbbzBkw4yNFURGXK8sdpDbwxFQ2BZ45HHYj9n7Bx00lH3gqOQajhpGZUu-kIaZsjBXRlzyPBCDr6GESxJNpgRRlgz6CqGsTHcyVgYZeTAZw1ZuvBcG2z8cNccpmaUNR1h0HFyC3W4kQYdLQzrgnYxNPeQdhkd9AXqqlvEaG3DggXTzjU81F9ztN9gO9841ABx0wbVjDccX3ROUe013A7sQ0-vh5Cjms5AQ6cuSea04ElOFFjLC-kmwhi0wdCHAgEB&r=1&s=018b379f5173ca6e6cecc28f56fcd671ee906955859d8ba392ab3c16782b416b1675599785&w=t HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=b41e0314-0f68-4332-bbaa-7c84c673e7b5; bfq=APeIECNCx5YZMWjMwDFDRhcWIsYU3BLjoYgyE2PYuFHDBg4bMXDU6NJH
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:05 GMT
content-type: text/plain; charset=utf-8
content-length: 35
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash f66c6063daf95c7ed5d89f01f504cc51
8f5b659f255d50aac97ca2180f2b1e6a9e9be6c8
6f15c0e435c51b92fd3539f234885c33956a394fca8c8cfd3bb7701d869be6c2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4078
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:05 GMT
Last-Modified: Sun, 05 Feb 2023 11:15:07 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 280 B IP
Hash 815aec6528b6bd6e96a53eb773820edb
becc005a5b04f908b2e329652e6243c80542fe37
15355338f872f60ff9484695e0d6ed1092c3b81922c05bee87779031f1d500e3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4192
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:05 GMT
Last-Modified: Sun, 05 Feb 2023 11:13:13 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 280
ocsp.sectigo.com/
200 OK 472 B IP
Hash 13bfcb9d7a1e5ff7c0d8844223135917
3cf66ccffc4c3abfbaeeea64a179aa85bbecf4c2
5d68b78683dfc4c09918ed99aea9493d2be77869d061e290df3912fb0ac1111f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 12:23:05 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 15:56:19 GMT
Expires: Sat, 11 Feb 2023 15:56:18 GMT
Etag: "3cf66ccffc4c3abfbaeeea64a179aa85bbecf4c2"
Cache-Control: max-age=530592,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794b9d821ba1b500-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3f9298fb86037b7349c6959d218426b1
81786db2d9b072fe4a1a24a82b5ceaca9fcf65d1
69abf47895981a8ec7a4c0de5cb86c96e0a3a32fe1b353444804b1ad2955bcb4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "69ABF47895981A8EC7A4C0DE5CB86C96E0A3A32FE1B353444804B1AD2955BCB4"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2033
Expires: Sun, 05 Feb 2023 12:56:58 GMT
Date: Sun, 05 Feb 2023 12:23:05 GMT
Connection: keep-alive
564cc73ffe.ed9b93b5ee.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImMiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Nywic3BhY2VpZCI6MTQ5NywidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6IkdJR1AtMzIlMkNCaXNob3VqbyUyQ1NlbnNoaSUyQ1NhaWxvciUyQ1J1bWVzJTJDVmlyZ2luJTJDTG9zcyUyQ0V2aWwlMkNGYWxsJTJDWW9rb21peWElMkNOYW5hbWklMkNXYXRjaCUyQ09ubGluZSUyQ0pBViUyQ0hvdCUyQ0pBViUyQ0ZyZWUlMkNkb3dubG9hZCUyQ0pBVlRWJTJDR0lHUC0zMiUyQ0Jpc2hvdWpvJTJDU2Vuc2hpJTJDU2FpbG9yJTJDUnVtZXMlMkNWaXJnaW4lMkNMb3NzJTJDRXZpbCUyQ0ZhbGwlMkNZb2tvbWl5YSUyQ05hbmFtaSUyQ1dhdGNoJTJDT25saW5lJTJDSkFWJTJDSG90JTJDSkFWJTJDRnJlZSUyQ2Rvd25sb2FkJTJDR0lHUC0zMiUyQ0Jpc2hvdWpvJTJDU2Vuc2hpJTJDU2FpbG9yJTJDUnVtZXMlMkNWaXJnaW4lMkNMb3NzJTJDRXZpbCUyQ0ZhbGwlMkNZb2tvbWl5YSUyQ05hbmFtaSUyQ1ZpZGVvJTJDUG9ybiUyQ0hEJTJDSkFWVFYlMkNKYXZ0di50bywiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIxNjg1ODk2NTEyIiwicmVmcmVzaCI6MSwidXRtMSI6IiIsInV0bTIiOiIiLCJ1dG00IjoiIiwic3BvdF9pZCI6NTUyMDcsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjI3MSwic3RyYXRhZ2VtIjoibmxhYmVsLWIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTgsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2V9LCJiYW5uZXIiOnsidyI6NzI4LCJoIjo5MH19XSwic2l0ZSI6eyJpZCI6IjU1MjA3IiwiY2F0IjpbIklBQjI1Il0sInBhZ2UiOiJodHRwczovL2phdnR2LnRvL3ZpZGVvLzE0NDM3OC9naWdwLTMyLmh0bWwifSwiZGV2aWNlIjp7InciOjEyODAsImgiOjEwMjR9LCJ1c2VyIjp7ImlkIjoiOWU0OTQ3ZjM1NzUxNDY1NDExZmQxYTRmNWMzNThjNzgiLCJmcCI6bnVsbH0sImV4dCI6eyJkdCI6MTY3NTU5OTgyNDgzMn19
200 OK 47 kB URL HTTP/2 564cc73ffe.ed9b93b5ee.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
Hash 988007d03adfff7f45d1643a39f50c26
9327abc71ca454fb19f39a557e01a4bc831d87d0
180434773702053aafb6eb6e890578326cee3cfa3f02775a4de6005e9510ee0a
GET /get/?go=1&data=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 HTTP/1.1
Host: 564cc73ffe.ed9b93b5ee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.0
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b400c2c20802db300f72333da4ffa8aa
935b74452ae52ed54ca87df749586b6a667eca4d
6224e48de708a4119b097cebca9656f6d91527aa84f8c5eef00b6210696c2d5a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6224E48DE708A4119B097CEBCA9656F6D91527AA84F8C5EEF00B6210696C2D5A"
Last-Modified: Fri, 03 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12837
Expires: Sun, 05 Feb 2023 15:57:02 GMT
Date: Sun, 05 Feb 2023 12:23:05 GMT
Connection: keep-alive
go.xlivrdr.com/smartpop/165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&memberId=ooc4ASOpttrpmldVdTdRZXO6VzqpbXUzOodTK6V0rpXT1UU0uldK6V0zpXSuldK6Z0rpXTOc62maqq6ymlwgkB9mcGxFx6h_c50rpXSuldK6V0rpXSuD7A--&sourceId=4886410&p1=4581534&skipOffset=00:00:05
302 Found 0 B URL HTTP/2 go.xlivrdr.com/smartpop/165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&memberId=ooc4ASOpttrpmldVdTdRZXO6VzqpbXUzOodTK6V0rpXT1UU0uldK6V0zpXSuldK6Z0rpXTOc62maqq6ymlwgkB9mcGxFx6h_c50rpXSuldK6V0rpXSuD7A--&sourceId=4886410&p1=4581534&skipOffset=00:00:05
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smartpop/165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&memberId=ooc4ASOpttrpmldVdTdRZXO6VzqpbXUzOodTK6V0rpXT1UU0uldK6V0zpXSuldK6Z0rpXTOc62maqq6ymlwgkB9mcGxFx6h_c50rpXSuldK6V0rpXSuD7A--&sourceId=4886410&p1=4581534&skipOffset=00:00:05 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pornlaundry.com/
Origin: https://pornlaundry.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 05 Feb 2023 12:23:05 GMT
content-length: 0
location: https://go.xlivrdr.com/api/models/vast?campaignId=165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af&campaignType=smartpop&creativeId=1aa4022af61bfad6ec7c637003dfb79b6edb7465c731eac0e6955245fc823c00&duration=00%3A00%3A30&endpoint=room&iterationId=397613&masterSmartpopId=2683&memberId=ooc4ASOpttrpmldVdTdRZXO6VzqpbXUzOodTK6V0rpXT1UU0uldK6V0zpXSuldK6Z0rpXTOc62maqq6ymlwgkB9mcGxFx6h_c50rpXSuldK6V0rpXSuD7A--&p1=4581534&ruleId=157&skipOffset=00%3A00%3A05&smartpopId=3564&sourceId=4886410&tag=-girls%2Findian&userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&variationId=30208&videosList=oil-show11
access-control-allow-origin: https://pornlaundry.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: DYNAMIC
set-cookie: _var=7868025.30208; Path=/; HttpOnly; SameSite=Strict
__cflb=0H28uukSkGJRy5UBr1u9iAwwBfboBLDVMjUNPtAcfSU; SameSite=None; Secure; path=/; expires=Mon, 06-Feb-23 11:23:05 GMT; HttpOnly
server: cloudflare
cf-ray: 794b9d824dc70b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b400c2c20802db300f72333da4ffa8aa
935b74452ae52ed54ca87df749586b6a667eca4d
6224e48de708a4119b097cebca9656f6d91527aa84f8c5eef00b6210696c2d5a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6224E48DE708A4119B097CEBCA9656F6D91527AA84F8C5EEF00B6210696C2D5A"
Last-Modified: Fri, 03 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12837
Expires: Sun, 05 Feb 2023 15:57:02 GMT
Date: Sun, 05 Feb 2023 12:23:05 GMT
Connection: keep-alive
preroll.hostave3.net/notifications/zeropixel.png
200 OK 42 B URL HTTP/2 preroll.hostave3.net/notifications/zeropixel.png
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /notifications/zeropixel.png HTTP/1.1
Host: preroll.hostave3.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://564cc73ffe.ed9b93b5ee.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:05 GMT
content-type: image/png
content-length: 42
last-modified: Tue, 11 Sep 2018 08:40:52 GMT
etag: "5b977f94-2a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 5382048
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kNMe7Yr0j6GsH%2BsMHzaSf22OQCTGnuotU2GsE9keAPxWzQUa9VEzoK0R3gPdQ3%2B1MyinZDnw2q0kxiTgANlC%2BvmFKW8BfUs6SUveX5o%2BiASw%2F8jdHBfJbx458tKit2hz9EQYOt6EIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 794b9d827fdd23f4-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash f66c6063daf95c7ed5d89f01f504cc51
8f5b659f255d50aac97ca2180f2b1e6a9e9be6c8
6f15c0e435c51b92fd3539f234885c33956a394fca8c8cfd3bb7701d869be6c2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4078
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:05 GMT
Last-Modified: Sun, 05 Feb 2023 11:15:07 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
kts.cvastico.com/in/kevents/?e_type=start&sid=49453&stype=slider&iab=IAB25&feed_id=0&uid=61a113beeb5c1307f0131429d929c04f&auction_id=24746814182132267&score=89.914857&response=json&user_id=13667&rchange=0
200 OK 0 B URL HTTP/2 kts.cvastico.com/in/kevents/?e_type=start&sid=49453&stype=slider&iab=IAB25&feed_id=0&uid=61a113beeb5c1307f0131429d929c04f&auction_id=24746814182132267&score=89.914857&response=json&user_id=13667&rchange=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/kevents/?e_type=start&sid=49453&stype=slider&iab=IAB25&feed_id=0&uid=61a113beeb5c1307f0131429d929c04f&auction_id=24746814182132267&score=89.914857&response=json&user_id=13667&rchange=0 HTTP/1.1
Host: kts.cvastico.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 05 Feb 2023 12:23:05 GMT
content-type: text/xml
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin:
set-cookie: 1226.0=1; expires=Mon, 06 Feb 2023 12:23:05 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
vast.yomeno.xyz/wrapper?katds_ep=1M7saRHidx6WyxJ-xNDtIDPXYj3otls8YUhyxjhJtuEuBv5ZN6P3qLp1gB6jjoVicHPgfZF0Kl-ApJy3jC26yJko02kxx1oe2lQp7X2i_U7OakPcc6SRRgRU-UxvLDThI5zciNhOODF5f7atZndi7ZZTOZ_fXI-2xFm80gN9D8pgLXI43reLaRyO-AqsfDNNVxeFQr3n6rHg_07IqtPZQdNuP9Cq6P6iVegLRq0tnjHFd_u1xFS9pIZyodb3biQeS9-PwtIvaELajfedSSzuisGRvEU8NPqyq69A7XjLFSQ08T9lPwtLDpnZgjBrUItQKu7-eA1NYBICd8YBoj2oazbsGNNwoaxOR5zEKbZE1m9lPo7ECRwBrad6j2lYOAdKJO7TkPAVPH0ISoHGYw6ySkOs0M7TGSNqExqFn4QXYkmXjD5mYx_p-gkqd85QgkhqKziYL_CKKVSWYn33zoKql_03Xp7m2w6-iTbWCRvzCDBqa4USYbAn8qhQ2y2ysjNYzNOT1-fjKATEP8xA54ZjDe7MfjY6qatR0dHlUQu1HYNAsRyikHWOAPPv4XgWq-ioF54iZZakbhTHl-SDQRNKe1wbfCjjewacEWG9ZPrMhICNjdEZvRlIzNekF8NCAXWKdrYpKg9qkqk94u5oElSikyPNuVBxvD8hpBdvDI-KiSbC74pczEeDCi2FSbcs6OqoS6uQUj_7W_0Yso6OmV_GrgWcjiw_Ebug8E900jNg12No6BXnBRFRjgcy-fFt8_3EKh4QaW1pczorSAZRMBGgrYf7WLzODXTf0nKX7JqxQKpZEn4TS-rc0OureO3q8-nJvqFUDB8dLorJmbG138tQdJ-Cr1f9hFLNUqrVena37Yg44qH2M1ltwJSYwJK-9CGb4aVTQipLR4u08itj95gdNepjOgnwh5fTvMyxTI3PJlW_cll9WdKjvGk67Z24tfWyIO9fJh4q5yUzwvg3GHekVxJyGZlIWMMPpSeefyYmejkkx_hsZdH5Vea1vKLWLgXDuZCeMZTMl4_OsX9qYMqnSJPdHeBXZdPuHz81o_xYx2OvcZfVwsyGa0mql6dcP6qaPiZ2ImPDipBq4AXb9t6EFusypvf2koAFcF9HEhMAaVBzxzBiTl2202q6_EHM0zKrUb7AtpzvXU633goUIYx8-fkYFgDK0i6OgGo0rXo_YU7jFaFoW22hUXb-2M-R9OxDjle-2fwEpkaDTZJ_PX-Er2sPiamHJgLrJ9-S7o-Z3lEeUxAKAvB_bW35Qyg4Hv2g_eR5i_LRCreGJIfEfxlCDfNkv-Qjpk0-FVcpCI1iDnf3efzo5mJGXw0NGFCztPM
200 OK 718 B URL HTTP/2 vast.yomeno.xyz/wrapper?katds_ep=1M7saRHidx6WyxJ-xNDtIDPXYj3otls8YUhyxjhJtuEuBv5ZN6P3qLp1gB6jjoVicHPgfZF0Kl-ApJy3jC26yJko02kxx1oe2lQp7X2i_U7OakPcc6SRRgRU-UxvLDThI5zciNhOODF5f7atZndi7ZZTOZ_fXI-2xFm80gN9D8pgLXI43reLaRyO-AqsfDNNVxeFQr3n6rHg_07IqtPZQdNuP9Cq6P6iVegLRq0tnjHFd_u1xFS9pIZyodb3biQeS9-PwtIvaELajfedSSzuisGRvEU8NPqyq69A7XjLFSQ08T9lPwtLDpnZgjBrUItQKu7-eA1NYBICd8YBoj2oazbsGNNwoaxOR5zEKbZE1m9lPo7ECRwBrad6j2lYOAdKJO7TkPAVPH0ISoHGYw6ySkOs0M7TGSNqExqFn4QXYkmXjD5mYx_p-gkqd85QgkhqKziYL_CKKVSWYn33zoKql_03Xp7m2w6-iTbWCRvzCDBqa4USYbAn8qhQ2y2ysjNYzNOT1-fjKATEP8xA54ZjDe7MfjY6qatR0dHlUQu1HYNAsRyikHWOAPPv4XgWq-ioF54iZZakbhTHl-SDQRNKe1wbfCjjewacEWG9ZPrMhICNjdEZvRlIzNekF8NCAXWKdrYpKg9qkqk94u5oElSikyPNuVBxvD8hpBdvDI-KiSbC74pczEeDCi2FSbcs6OqoS6uQUj_7W_0Yso6OmV_GrgWcjiw_Ebug8E900jNg12No6BXnBRFRjgcy-fFt8_3EKh4QaW1pczorSAZRMBGgrYf7WLzODXTf0nKX7JqxQKpZEn4TS-rc0OureO3q8-nJvqFUDB8dLorJmbG138tQdJ-Cr1f9hFLNUqrVena37Yg44qH2M1ltwJSYwJK-9CGb4aVTQipLR4u08itj95gdNepjOgnwh5fTvMyxTI3PJlW_cll9WdKjvGk67Z24tfWyIO9fJh4q5yUzwvg3GHekVxJyGZlIWMMPpSeefyYmejkkx_hsZdH5Vea1vKLWLgXDuZCeMZTMl4_OsX9qYMqnSJPdHeBXZdPuHz81o_xYx2OvcZfVwsyGa0mql6dcP6qaPiZ2ImPDipBq4AXb9t6EFusypvf2koAFcF9HEhMAaVBzxzBiTl2202q6_EHM0zKrUb7AtpzvXU633goUIYx8-fkYFgDK0i6OgGo0rXo_YU7jFaFoW22hUXb-2M-R9OxDjle-2fwEpkaDTZJ_PX-Er2sPiamHJgLrJ9-S7o-Z3lEeUxAKAvB_bW35Qyg4Hv2g_eR5i_LRCreGJIfEfxlCDfNkv-Qjpk0-FVcpCI1iDnf3efzo5mJGXw0NGFCztPM
IP
Hash 09c684ff32a61e66ffe6b352c5f1729f
1bfe838e7056f83e5d68214d6a041d5b72a6d24c
83303857c0ed5678c1ad9c0eb647b44a17ea557cb46f4bcfc60551b1441c66d0
GET /wrapper?katds_ep=1M7saRHidx6WyxJ-xNDtIDPXYj3otls8YUhyxjhJtuEuBv5ZN6P3qLp1gB6jjoVicHPgfZF0Kl-ApJy3jC26yJko02kxx1oe2lQp7X2i_U7OakPcc6SRRgRU-UxvLDThI5zciNhOODF5f7atZndi7ZZTOZ_fXI-2xFm80gN9D8pgLXI43reLaRyO-AqsfDNNVxeFQr3n6rHg_07IqtPZQdNuP9Cq6P6iVegLRq0tnjHFd_u1xFS9pIZyodb3biQeS9-PwtIvaELajfedSSzuisGRvEU8NPqyq69A7XjLFSQ08T9lPwtLDpnZgjBrUItQKu7-eA1NYBICd8YBoj2oazbsGNNwoaxOR5zEKbZE1m9lPo7ECRwBrad6j2lYOAdKJO7TkPAVPH0ISoHGYw6ySkOs0M7TGSNqExqFn4QXYkmXjD5mYx_p-gkqd85QgkhqKziYL_CKKVSWYn33zoKql_03Xp7m2w6-iTbWCRvzCDBqa4USYbAn8qhQ2y2ysjNYzNOT1-fjKATEP8xA54ZjDe7MfjY6qatR0dHlUQu1HYNAsRyikHWOAPPv4XgWq-ioF54iZZakbhTHl-SDQRNKe1wbfCjjewacEWG9ZPrMhICNjdEZvRlIzNekF8NCAXWKdrYpKg9qkqk94u5oElSikyPNuVBxvD8hpBdvDI-KiSbC74pczEeDCi2FSbcs6OqoS6uQUj_7W_0Yso6OmV_GrgWcjiw_Ebug8E900jNg12No6BXnBRFRjgcy-fFt8_3EKh4QaW1pczorSAZRMBGgrYf7WLzODXTf0nKX7JqxQKpZEn4TS-rc0OureO3q8-nJvqFUDB8dLorJmbG138tQdJ-Cr1f9hFLNUqrVena37Yg44qH2M1ltwJSYwJK-9CGb4aVTQipLR4u08itj95gdNepjOgnwh5fTvMyxTI3PJlW_cll9WdKjvGk67Z24tfWyIO9fJh4q5yUzwvg3GHekVxJyGZlIWMMPpSeefyYmejkkx_hsZdH5Vea1vKLWLgXDuZCeMZTMl4_OsX9qYMqnSJPdHeBXZdPuHz81o_xYx2OvcZfVwsyGa0mql6dcP6qaPiZ2ImPDipBq4AXb9t6EFusypvf2koAFcF9HEhMAaVBzxzBiTl2202q6_EHM0zKrUb7AtpzvXU633goUIYx8-fkYFgDK0i6OgGo0rXo_YU7jFaFoW22hUXb-2M-R9OxDjle-2fwEpkaDTZJ_PX-Er2sPiamHJgLrJ9-S7o-Z3lEeUxAKAvB_bW35Qyg4Hv2g_eR5i_LRCreGJIfEfxlCDfNkv-Qjpk0-FVcpCI1iDnf3efzo5mJGXw0NGFCztPM HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pornlaundry.com/
Origin: https://pornlaundry.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: text/xml;charset=UTF-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: Accept-Encoding, *
report-to: {"url":"https://kts.cvastico.com/in/kevents/?e_type=heavy-ad\u0026sid=49454\u0026feed_id=0\u0026stype=slider\u0026iab=IAB25\u0026uid=61a113beeb5c1307f0131429d929c04f\u0026auction_id=16785501679553740809\u0026score=76.046693\u0026response=json\u0026user_id=13667\u0026rchange=1","max_age":86401}
access-control-allow-credentials: true
access-control-allow-origin: https://pornlaundry.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
content-encoding: gzip
X-Firefox-Spdy: h2
btds.zog.link/in/va?spot_id=55207&view=1&tag_ab=c
200 OK 2 B URL HTTP/2 btds.zog.link/in/va?spot_id=55207&view=1&tag_ab=c
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /in/va?spot_id=55207&view=1&tag_ab=c HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javtv.to
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 05 Feb 2023 12:23:05 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
set-cookie: 1840.0=1; expires=Mon, 06 Feb 2023 12:23:05 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 815aec6528b6bd6e96a53eb773820edb
becc005a5b04f908b2e329652e6243c80542fe37
15355338f872f60ff9484695e0d6ed1092c3b81922c05bee87779031f1d500e3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4192
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 12:23:05 GMT
Last-Modified: Sun, 05 Feb 2023 11:13:13 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 280
kts.cvastico.com/in/kevents/?e_type=start&sid=49454&stype=slider&iab=IAB25&feed_id=0&uid=61a113beeb5c1307f0131429d929c04f&auction_id=16785501679553740809&score=76.046693&response=json&user_id=13667&rchange=1
200 OK 0 B URL HTTP/2 kts.cvastico.com/in/kevents/?e_type=start&sid=49454&stype=slider&iab=IAB25&feed_id=0&uid=61a113beeb5c1307f0131429d929c04f&auction_id=16785501679553740809&score=76.046693&response=json&user_id=13667&rchange=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/kevents/?e_type=start&sid=49454&stype=slider&iab=IAB25&feed_id=0&uid=61a113beeb5c1307f0131429d929c04f&auction_id=16785501679553740809&score=76.046693&response=json&user_id=13667&rchange=1 HTTP/1.1
Host: kts.cvastico.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pornlaundry.com/
Cookie: 1226.0=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 05 Feb 2023 12:23:05 GMT
content-type: text/xml
content-length: 0
access-control-allow-origin:
access-control-allow-credentials: true
set-cookie: 1226.0=1; expires=Mon, 06 Feb 2023 12:23:05 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 13bfcb9d7a1e5ff7c0d8844223135917
3cf66ccffc4c3abfbaeeea64a179aa85bbecf4c2
5d68b78683dfc4c09918ed99aea9493d2be77869d061e290df3912fb0ac1111f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 12:23:05 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 15:56:19 GMT
Expires: Sat, 11 Feb 2023 15:56:18 GMT
Etag: "3cf66ccffc4c3abfbaeeea64a179aa85bbecf4c2"
Cache-Control: max-age=530592,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 794b9d821c15b523-OSL
lcdn.tsyndicate.com/images/e/b/cc21f27f25d6086c2f948e6d43ccc4bbc6f33c/300x250.jpg
200 OK 5.8 kB URL HTTP/2 lcdn.tsyndicate.com/images/e/b/cc21f27f25d6086c2f948e6d43ccc4bbc6f33c/300x250.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 300x250, components 3\012- data
Hash f0e00b422480b34c0d1d1fdadbb0cc91
63840d3169c9659f969f9d8b444b53c8f7da7c23
05f6355a8b6db5d11784be35e5d7cd58c92a873af9d60d8ec4f64ce0db3ebaa0
GET /images/e/b/cc21f27f25d6086c2f948e6d43ccc4bbc6f33c/300x250.jpg HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://564cc73ffe.ed9b93b5ee.com/
Cookie: ts_uid=b41e0314-0f68-4332-bbaa-7c84c673e7b5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:05 GMT
content-type: image/jpeg
content-length: 5845
last-modified: Wed, 01 Feb 2023 07:19:05 GMT
server: nginx
x-robots-tag: noindex, nofollow
content-encoding: gzip
vary: Accept-Encoding
etag: W/"63da1269-1744"
age: 363630
accept-ranges: bytes
X-Firefox-Spdy: h2
0f6e7d3222.ba33938e50.com/in/multy
200 OK 16 kB URL HTTP/2 0f6e7d3222.ba33938e50.com/in/multy
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with very long lines (16430), with no line terminators
Hash 766061e87c9b877c60436b51b9332445
7eba9e2ec0e798585282ff87ba205c9fdb57e7ee
372f1bea0850a38b9d31675973b661b27398b505201cf2aac283cd8dbefcbb9c
POST /in/multy HTTP/1.1
Host: 0f6e7d3222.ba33938e50.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1209
Origin: https://tsyndicate.com
Connection: keep-alive
Referer: https://tsyndicate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 05 Feb 2023 12:23:05 GMT
content-type: application/json
content-length: 16430
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
vast.yomeno.xyz/vast
200 OK 20 kB IP
Hash 8ccd03a82c35909bd8c8e8ca0d37043c
41373872abe1ca455778ce12d703760744faae92
99ae5a32ceda1fa5fe609662fd45cc8a04dd6f3aaee2dc6cb3ed20b32bb09618
POST /vast HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1142
Origin: https://javtv.to
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: Accept-Encoding, *
access-control-allow-credentials: true
access-control-allow-origin: https://javtv.to
access-control-expose-headers: Content-Length,Content-Range
content-encoding: gzip
X-Firefox-Spdy: h2
0f6e7d3222.ba33938e50.com/in/show/?mid=4917217079103724493&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=488767309&sid=974478649&cid=13433&price=0.0031&is_cpm=0&cpm=0&ecpm=0.395425526730656&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=1&ver=8.24.1&ver_c=&refdom=tsyndicate.com&hostname=auc-inpage-hz-3-c&site_id=3119658&spot_id=19658&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-02-05&is_native=2&auction_queue=0&burl=KTq5TIbdoiGYSj7bXsMbejKeQIdaGvQ2r8UbxIuuxqXAcmXY_EBF-w&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5319658&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.03198283081786318&placement_type_id=&skin_test=0&verify_hash=465d024c6ae276ac9ff3d18267f602af&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D488767309%26spot_id%3D19658%26is_adult%3D1%26p%3Dhttps%253A%252F%252Ftsyndicate.com%252F%26idzone%3D0%26sid%3D1546&ml=&tag_ab=d&original_bid=0.0031&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=AJv6aTEwXMVHqvQ1V8nqm_7Ru2nIz0_PxcvQLQvUeYJNWgAE_VPepYWSY6G32cWiXLod-ENVVX6KsPppWDIBVMZr90luf1I-50rkUDuyq-4GPUJu_bCmDqfEQUnx0sfamKPhDdD_Eilp6EiuLgIt93JebLKNFvS-82YHVoFVZKRo23mQbg&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=4&vertical_id=0&real_bid=0.0027264499999999996&pr=javtv.to&user_keywords=&auc_type=1&aid=3335&ext_cid=0&device_theme=light&keywords=&label_ids=4,83,89,0&conditions=dch_ip,tz_offset&need_redirect_show=0&mlf=1&cpa=2cfcb3e9-8f5f-403a-bad3-9dcaa830d50a&mlc=1&format=social-scale-b_r-embed
200 OK 0 B URL HTTP/2 0f6e7d3222.ba33938e50.com/in/show/?mid=4917217079103724493&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=488767309&sid=974478649&cid=13433&price=0.0031&is_cpm=0&cpm=0&ecpm=0.395425526730656&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=1&ver=8.24.1&ver_c=&refdom=tsyndicate.com&hostname=auc-inpage-hz-3-c&site_id=3119658&spot_id=19658&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-02-05&is_native=2&auction_queue=0&burl=KTq5TIbdoiGYSj7bXsMbejKeQIdaGvQ2r8UbxIuuxqXAcmXY_EBF-w&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5319658&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.03198283081786318&placement_type_id=&skin_test=0&verify_hash=465d024c6ae276ac9ff3d18267f602af&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D488767309%26spot_id%3D19658%26is_adult%3D1%26p%3Dhttps%253A%252F%252Ftsyndicate.com%252F%26idzone%3D0%26sid%3D1546&ml=&tag_ab=d&original_bid=0.0031&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=AJv6aTEwXMVHqvQ1V8nqm_7Ru2nIz0_PxcvQLQvUeYJNWgAE_VPepYWSY6G32cWiXLod-ENVVX6KsPppWDIBVMZr90luf1I-50rkUDuyq-4GPUJu_bCmDqfEQUnx0sfamKPhDdD_Eilp6EiuLgIt93JebLKNFvS-82YHVoFVZKRo23mQbg&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=4&vertical_id=0&real_bid=0.0027264499999999996&pr=javtv.to&user_keywords=&auc_type=1&aid=3335&ext_cid=0&device_theme=light&keywords=&label_ids=4,83,89,0&conditions=dch_ip,tz_offset&need_redirect_show=0&mlf=1&cpa=2cfcb3e9-8f5f-403a-bad3-9dcaa830d50a&mlc=1&format=social-scale-b_r-embed
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=4917217079103724493&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=488767309&sid=974478649&cid=13433&price=0.0031&is_cpm=0&cpm=0&ecpm=0.395425526730656&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=1&ver=8.24.1&ver_c=&refdom=tsyndicate.com&hostname=auc-inpage-hz-3-c&site_id=3119658&spot_id=19658&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-02-05&is_native=2&auction_queue=0&burl=KTq5TIbdoiGYSj7bXsMbejKeQIdaGvQ2r8UbxIuuxqXAcmXY_EBF-w&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5319658&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.03198283081786318&placement_type_id=&skin_test=0&verify_hash=465d024c6ae276ac9ff3d18267f602af&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D488767309%26spot_id%3D19658%26is_adult%3D1%26p%3Dhttps%253A%252F%252Ftsyndicate.com%252F%26idzone%3D0%26sid%3D1546&ml=&tag_ab=d&original_bid=0.0031&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=AJv6aTEwXMVHqvQ1V8nqm_7Ru2nIz0_PxcvQLQvUeYJNWgAE_VPepYWSY6G32cWiXLod-ENVVX6KsPppWDIBVMZr90luf1I-50rkUDuyq-4GPUJu_bCmDqfEQUnx0sfamKPhDdD_Eilp6EiuLgIt93JebLKNFvS-82YHVoFVZKRo23mQbg&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=4&vertical_id=0&real_bid=0.0027264499999999996&pr=javtv.to&user_keywords=&auc_type=1&aid=3335&ext_cid=0&device_theme=light&keywords=&label_ids=4,83,89,0&conditions=dch_ip,tz_offset&need_redirect_show=0&mlf=1&cpa=2cfcb3e9-8f5f-403a-bad3-9dcaa830d50a&mlc=1&format=social-scale-b_r-embed HTTP/1.1
Host: 0f6e7d3222.ba33938e50.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 05 Feb 2023 12:23:05 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
0f6e7d3222.ba33938e50.com/in/show/?mid=4917217079103724493&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=488767309&sid=974478649&cid=12822&price=0.00066&is_cpm=0&cpm=0&ecpm=0.006842220785033603&crid=&crtid=b9fd333d96713f0a77f0785f16a2be90&tcid=0&out_id=0&ver=8.24.1&ver_c=&refdom=tsyndicate.com&hostname=auc-inpage-hz-3-c&site_id=3119658&spot_id=19658&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1675671784&created_at=2023-02-05&is_native=1&auction_queue=0&burl=D-KaRrO_He4bHihtCDgillvxKl6fXjYESxktPNub4oYmuvX32qdPFQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=3119658&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=ce907f2c394b3ec9a5c6a06f6f7c0895f4699e55a1cbe1cab376ca739bd37c49&exp=1440&resp_type=&iabcat=IAB25-3&min_cpm=0.00301960154395382&placement_type_id=&skin_test=0&verify_hash=27a45a4d772d71e689166e688e891530&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D488767309%26spot_id%3D19658%26is_adult%3D1%26p%3Dhttps%253A%252F%252Ftsyndicate.com%252F%26idzone%3D0%26sid%3D1546&ml=&tag_ab=d&original_bid=0.00066&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=fiCcTpQskjOigMgCCQ8PsW5NOPTN0h34yWd5YYia9EfoatgxUmGCnHEHcQASGOB2OX2dy7tcR6ClI4V78jqL5pNCUYyFkhZfV2FN7dt-78b7yHcMzFcCo-hDoF98YNqc2rcTDsrtEuli15tNiz_iQrDnzL4S3fpqz9JD1tjqRLUFCdurnYAtnnHPOJfoTvj0EZG5Z7IuFIImHfWJyKqSPTovZiFlyEwqbHZuC1vQAFFtFtjAVwf2WyQ4gHRtnkH0sgFe6UKDjtr0mCLKnvh4BilbQQIjzlCWfv5MJToVVlsY1perFBfwEl7UBqatRoD56H0D&image_url=https%3A%2F%2Fcdn.adx1.com%2F177cbed865ace90cd245763dadef8805.jpeg&skin_id=4&vertical_id=5&real_bid=0.0004996859999999999&pr=javtv.to&user_keywords=&auc_type=1&aid=3251&ext_cid=0&device_theme=light&keywords=&label_ids=106,4,101,5&conditions=dch_ip,tz_offset&need_redirect_show=0&cpa=546a5bf9-3fcf-4c00-b800-96ffdb670b1b&format=social-scale-b_r-embed
200 OK 0 B URL HTTP/2 0f6e7d3222.ba33938e50.com/in/show/?mid=4917217079103724493&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=488767309&sid=974478649&cid=12822&price=0.00066&is_cpm=0&cpm=0&ecpm=0.006842220785033603&crid=&crtid=b9fd333d96713f0a77f0785f16a2be90&tcid=0&out_id=0&ver=8.24.1&ver_c=&refdom=tsyndicate.com&hostname=auc-inpage-hz-3-c&site_id=3119658&spot_id=19658&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1675671784&created_at=2023-02-05&is_native=1&auction_queue=0&burl=D-KaRrO_He4bHihtCDgillvxKl6fXjYESxktPNub4oYmuvX32qdPFQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=3119658&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=ce907f2c394b3ec9a5c6a06f6f7c0895f4699e55a1cbe1cab376ca739bd37c49&exp=1440&resp_type=&iabcat=IAB25-3&min_cpm=0.00301960154395382&placement_type_id=&skin_test=0&verify_hash=27a45a4d772d71e689166e688e891530&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D488767309%26spot_id%3D19658%26is_adult%3D1%26p%3Dhttps%253A%252F%252Ftsyndicate.com%252F%26idzone%3D0%26sid%3D1546&ml=&tag_ab=d&original_bid=0.00066&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=fiCcTpQskjOigMgCCQ8PsW5NOPTN0h34yWd5YYia9EfoatgxUmGCnHEHcQASGOB2OX2dy7tcR6ClI4V78jqL5pNCUYyFkhZfV2FN7dt-78b7yHcMzFcCo-hDoF98YNqc2rcTDsrtEuli15tNiz_iQrDnzL4S3fpqz9JD1tjqRLUFCdurnYAtnnHPOJfoTvj0EZG5Z7IuFIImHfWJyKqSPTovZiFlyEwqbHZuC1vQAFFtFtjAVwf2WyQ4gHRtnkH0sgFe6UKDjtr0mCLKnvh4BilbQQIjzlCWfv5MJToVVlsY1perFBfwEl7UBqatRoD56H0D&image_url=https%3A%2F%2Fcdn.adx1.com%2F177cbed865ace90cd245763dadef8805.jpeg&skin_id=4&vertical_id=5&real_bid=0.0004996859999999999&pr=javtv.to&user_keywords=&auc_type=1&aid=3251&ext_cid=0&device_theme=light&keywords=&label_ids=106,4,101,5&conditions=dch_ip,tz_offset&need_redirect_show=0&cpa=546a5bf9-3fcf-4c00-b800-96ffdb670b1b&format=social-scale-b_r-embed
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=4917217079103724493&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=488767309&sid=974478649&cid=12822&price=0.00066&is_cpm=0&cpm=0&ecpm=0.006842220785033603&crid=&crtid=b9fd333d96713f0a77f0785f16a2be90&tcid=0&out_id=0&ver=8.24.1&ver_c=&refdom=tsyndicate.com&hostname=auc-inpage-hz-3-c&site_id=3119658&spot_id=19658&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1675671784&created_at=2023-02-05&is_native=1&auction_queue=0&burl=D-KaRrO_He4bHihtCDgillvxKl6fXjYESxktPNub4oYmuvX32qdPFQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=3119658&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=ce907f2c394b3ec9a5c6a06f6f7c0895f4699e55a1cbe1cab376ca739bd37c49&exp=1440&resp_type=&iabcat=IAB25-3&min_cpm=0.00301960154395382&placement_type_id=&skin_test=0&verify_hash=27a45a4d772d71e689166e688e891530&score=0&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D488767309%26spot_id%3D19658%26is_adult%3D1%26p%3Dhttps%253A%252F%252Ftsyndicate.com%252F%26idzone%3D0%26sid%3D1546&ml=&tag_ab=d&original_bid=0.00066&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=fiCcTpQskjOigMgCCQ8PsW5NOPTN0h34yWd5YYia9EfoatgxUmGCnHEHcQASGOB2OX2dy7tcR6ClI4V78jqL5pNCUYyFkhZfV2FN7dt-78b7yHcMzFcCo-hDoF98YNqc2rcTDsrtEuli15tNiz_iQrDnzL4S3fpqz9JD1tjqRLUFCdurnYAtnnHPOJfoTvj0EZG5Z7IuFIImHfWJyKqSPTovZiFlyEwqbHZuC1vQAFFtFtjAVwf2WyQ4gHRtnkH0sgFe6UKDjtr0mCLKnvh4BilbQQIjzlCWfv5MJToVVlsY1perFBfwEl7UBqatRoD56H0D&image_url=https%3A%2F%2Fcdn.adx1.com%2F177cbed865ace90cd245763dadef8805.jpeg&skin_id=4&vertical_id=5&real_bid=0.0004996859999999999&pr=javtv.to&user_keywords=&auc_type=1&aid=3251&ext_cid=0&device_theme=light&keywords=&label_ids=106,4,101,5&conditions=dch_ip,tz_offset&need_redirect_show=0&cpa=546a5bf9-3fcf-4c00-b800-96ffdb670b1b&format=social-scale-b_r-embed HTTP/1.1
Host: 0f6e7d3222.ba33938e50.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 05 Feb 2023 12:23:05 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
0f6e7d3222.ba33938e50.com/in/show/?mid=822005862247011705&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1113419871&sid=2197616319&cid=13433&price=0.0031&is_cpm=0&cpm=0&ecpm=0.09506638713019451&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=0&ver=8.24.1&ver_c=&refdom=javtv.to&hostname=auc-inpage-hz-0-a&site_id=3119660&spot_id=19660&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-02-05&is_native=2&auction_queue=0&burl=jHqF4LWUMGyuBw2HJ_OOCOsTFWc4UvTswCpm11E4CuuBU8N6mTYh9w&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5319660&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.01441204336802118&placement_type_id=&skin_test=0&verify_hash=0a1fa1f1097ba12948b4935fc33689e5&score=58.05950273191691&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1113419871%26spot_id%3D19660%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fjavtv.to%252F%26idzone%3D0%26sid%3D1886&ml=&tag_ab=c&original_bid=0.0031&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=pm77j37jElIFeEojKAMLpxoy8Uw-uu1NZEZK0c9WFE4_Oytu32MIrn9ql1Z5BXXqm0lspXT31L2dqiB0IFOPdKsc1LC7gG8lkARDmRAdglHLRjNy4J4Y1m2kMwkQRX3ZzPVcIqA2CjwzOrD6SkbGPKVwZWIaj0HfANCIUzNhMlFmnQXzug&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=1&vertical_id=0&real_bid=0.0027264499999999996&pr=&user_keywords=&auc_type=1&aid=3335&ext_cid=0&device_theme=light&keywords=Japanese,Adult&label_ids=4,83,89,0&conditions=dch_ip,tz_offset&need_redirect_show=0&mlf=1&cpa=a6432e20-af27-42f6-b0cf-007e9a96b3d6&format=compact-slide-m_r-body
200 OK 0 B URL HTTP/2 0f6e7d3222.ba33938e50.com/in/show/?mid=822005862247011705&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1113419871&sid=2197616319&cid=13433&price=0.0031&is_cpm=0&cpm=0&ecpm=0.09506638713019451&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=0&ver=8.24.1&ver_c=&refdom=javtv.to&hostname=auc-inpage-hz-0-a&site_id=3119660&spot_id=19660&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-02-05&is_native=2&auction_queue=0&burl=jHqF4LWUMGyuBw2HJ_OOCOsTFWc4UvTswCpm11E4CuuBU8N6mTYh9w&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5319660&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.01441204336802118&placement_type_id=&skin_test=0&verify_hash=0a1fa1f1097ba12948b4935fc33689e5&score=58.05950273191691&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1113419871%26spot_id%3D19660%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fjavtv.to%252F%26idzone%3D0%26sid%3D1886&ml=&tag_ab=c&original_bid=0.0031&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=pm77j37jElIFeEojKAMLpxoy8Uw-uu1NZEZK0c9WFE4_Oytu32MIrn9ql1Z5BXXqm0lspXT31L2dqiB0IFOPdKsc1LC7gG8lkARDmRAdglHLRjNy4J4Y1m2kMwkQRX3ZzPVcIqA2CjwzOrD6SkbGPKVwZWIaj0HfANCIUzNhMlFmnQXzug&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=1&vertical_id=0&real_bid=0.0027264499999999996&pr=&user_keywords=&auc_type=1&aid=3335&ext_cid=0&device_theme=light&keywords=Japanese,Adult&label_ids=4,83,89,0&conditions=dch_ip,tz_offset&need_redirect_show=0&mlf=1&cpa=a6432e20-af27-42f6-b0cf-007e9a96b3d6&format=compact-slide-m_r-body
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=822005862247011705&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1113419871&sid=2197616319&cid=13433&price=0.0031&is_cpm=0&cpm=0&ecpm=0.09506638713019451&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=0&ver=8.24.1&ver_c=&refdom=javtv.to&hostname=auc-inpage-hz-0-a&site_id=3119660&spot_id=19660&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-02-05&is_native=2&auction_queue=0&burl=jHqF4LWUMGyuBw2HJ_OOCOsTFWc4UvTswCpm11E4CuuBU8N6mTYh9w&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5319660&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.01441204336802118&placement_type_id=&skin_test=0&verify_hash=0a1fa1f1097ba12948b4935fc33689e5&score=58.05950273191691&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1113419871%26spot_id%3D19660%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fjavtv.to%252F%26idzone%3D0%26sid%3D1886&ml=&tag_ab=c&original_bid=0.0031&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=pm77j37jElIFeEojKAMLpxoy8Uw-uu1NZEZK0c9WFE4_Oytu32MIrn9ql1Z5BXXqm0lspXT31L2dqiB0IFOPdKsc1LC7gG8lkARDmRAdglHLRjNy4J4Y1m2kMwkQRX3ZzPVcIqA2CjwzOrD6SkbGPKVwZWIaj0HfANCIUzNhMlFmnQXzug&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=1&vertical_id=0&real_bid=0.0027264499999999996&pr=&user_keywords=&auc_type=1&aid=3335&ext_cid=0&device_theme=light&keywords=Japanese,Adult&label_ids=4,83,89,0&conditions=dch_ip,tz_offset&need_redirect_show=0&mlf=1&cpa=a6432e20-af27-42f6-b0cf-007e9a96b3d6&format=compact-slide-m_r-body HTTP/1.1
Host: 0f6e7d3222.ba33938e50.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 05 Feb 2023 12:23:05 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
0f6e7d3222.ba33938e50.com/in/show/?mid=822005862247011705&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1113419871&sid=2197616319&cid=13433&price=0.0031&is_cpm=0&cpm=0&ecpm=0.09506638713019451&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=1&ver=8.24.1&ver_c=&refdom=javtv.to&hostname=auc-inpage-hz-0-a&site_id=3119660&spot_id=19660&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-02-05&is_native=2&auction_queue=0&burl=0sr4DQqz9V3_u0ZSQ7W3AGGPyhhcWLS6YxXUQB-ex66kN4HG9bXaFQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5319660&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.01441204336802118&placement_type_id=&skin_test=0&verify_hash=0a1fa1f1097ba12948b4935fc33689e5&score=58.05950273191691&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1113419871%26spot_id%3D19660%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fjavtv.to%252F%26idzone%3D0%26sid%3D1886&ml=&tag_ab=c&original_bid=0.0031&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=_MftYPTRjYKmfJZBOEmGwx3ZHFk7LDXZaQxHqJ-4LJjp94irIO6Fz5vTX-9MVvmv0JxSFxP_f2Nv8a6L6yVKU8gSnTy6-bui8g0Uw7PnXRNf0gJJR2ow-9PkcXpwVFEW5-Q_3E2fsrizFk3VBoTutZhppS3dDQ7NkCzK-Ntlw-qtvOTjIA&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=1&vertical_id=0&real_bid=0.0027264499999999996&pr=&user_keywords=&auc_type=1&aid=3335&ext_cid=0&device_theme=light&keywords=Japanese,Adult&label_ids=83,89,0,4&conditions=dch_ip,tz_offset&need_redirect_show=0&mlf=1&cpa=f228b71c-afe9-4756-9d37-a9d89b5d6c11&mlc=1&format=compact-slide-m_r-body
200 OK 0 B URL HTTP/2 0f6e7d3222.ba33938e50.com/in/show/?mid=822005862247011705&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1113419871&sid=2197616319&cid=13433&price=0.0031&is_cpm=0&cpm=0&ecpm=0.09506638713019451&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=1&ver=8.24.1&ver_c=&refdom=javtv.to&hostname=auc-inpage-hz-0-a&site_id=3119660&spot_id=19660&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-02-05&is_native=2&auction_queue=0&burl=0sr4DQqz9V3_u0ZSQ7W3AGGPyhhcWLS6YxXUQB-ex66kN4HG9bXaFQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5319660&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.01441204336802118&placement_type_id=&skin_test=0&verify_hash=0a1fa1f1097ba12948b4935fc33689e5&score=58.05950273191691&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1113419871%26spot_id%3D19660%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fjavtv.to%252F%26idzone%3D0%26sid%3D1886&ml=&tag_ab=c&original_bid=0.0031&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=_MftYPTRjYKmfJZBOEmGwx3ZHFk7LDXZaQxHqJ-4LJjp94irIO6Fz5vTX-9MVvmv0JxSFxP_f2Nv8a6L6yVKU8gSnTy6-bui8g0Uw7PnXRNf0gJJR2ow-9PkcXpwVFEW5-Q_3E2fsrizFk3VBoTutZhppS3dDQ7NkCzK-Ntlw-qtvOTjIA&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=1&vertical_id=0&real_bid=0.0027264499999999996&pr=&user_keywords=&auc_type=1&aid=3335&ext_cid=0&device_theme=light&keywords=Japanese,Adult&label_ids=83,89,0,4&conditions=dch_ip,tz_offset&need_redirect_show=0&mlf=1&cpa=f228b71c-afe9-4756-9d37-a9d89b5d6c11&mlc=1&format=compact-slide-m_r-body
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=822005862247011705&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=1113419871&sid=2197616319&cid=13433&price=0.0031&is_cpm=0&cpm=0&ecpm=0.09506638713019451&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=1&ver=8.24.1&ver_c=&refdom=javtv.to&hostname=auc-inpage-hz-0-a&site_id=3119660&spot_id=19660&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-02-05&is_native=2&auction_queue=0&burl=0sr4DQqz9V3_u0ZSQ7W3AGGPyhhcWLS6YxXUQB-ex66kN4HG9bXaFQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=5319660&adblock=0&auction_host=&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.01441204336802118&placement_type_id=&skin_test=0&verify_hash=0a1fa1f1097ba12948b4935fc33689e5&score=58.05950273191691&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1113419871%26spot_id%3D19660%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fjavtv.to%252F%26idzone%3D0%26sid%3D1886&ml=&tag_ab=c&original_bid=0.0031&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=_MftYPTRjYKmfJZBOEmGwx3ZHFk7LDXZaQxHqJ-4LJjp94irIO6Fz5vTX-9MVvmv0JxSFxP_f2Nv8a6L6yVKU8gSnTy6-bui8g0Uw7PnXRNf0gJJR2ow-9PkcXpwVFEW5-Q_3E2fsrizFk3VBoTutZhppS3dDQ7NkCzK-Ntlw-qtvOTjIA&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=1&vertical_id=0&real_bid=0.0027264499999999996&pr=&user_keywords=&auc_type=1&aid=3335&ext_cid=0&device_theme=light&keywords=Japanese,Adult&label_ids=83,89,0,4&conditions=dch_ip,tz_offset&need_redirect_show=0&mlf=1&cpa=f228b71c-afe9-4756-9d37-a9d89b5d6c11&mlc=1&format=compact-slide-m_r-body HTTP/1.1
Host: 0f6e7d3222.ba33938e50.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 05 Feb 2023 12:23:05 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
go.xlivrdr.com/api/models/vast?campaignId=165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af&campaignType=smartpop&creativeId=1aa4022af61bfad6ec7c637003dfb79b6edb7465c731eac0e6955245fc823c00&duration=00%3A00%3A30&endpoint=room&iterationId=397613&masterSmartpopId=2683&memberId=ooc4ASOpttrpmldVdTdRZXO6VzqpbXUzOodTK6V0rpXT1UU0uldK6V0zpXSuldK6Z0rpXTOc62maqq6ymlwgkB9mcGxFx6h_c50rpXSuldK6V0rpXSuD7A--&p1=4581534&ruleId=157&skipOffset=00%3A00%3A05&smartpopId=3564&sourceId=4886410&tag=-girls%2Findian&userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&variationId=30208&videosList=oil-show11
200 OK 93 kB URL HTTP/2 go.xlivrdr.com/api/models/vast?campaignId=165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af&campaignType=smartpop&creativeId=1aa4022af61bfad6ec7c637003dfb79b6edb7465c731eac0e6955245fc823c00&duration=00%3A00%3A30&endpoint=room&iterationId=397613&masterSmartpopId=2683&memberId=ooc4ASOpttrpmldVdTdRZXO6VzqpbXUzOodTK6V0rpXT1UU0uldK6V0zpXSuldK6Z0rpXTOc62maqq6ymlwgkB9mcGxFx6h_c50rpXSuldK6V0rpXSuD7A--&p1=4581534&ruleId=157&skipOffset=00%3A00%3A05&smartpopId=3564&sourceId=4886410&tag=-girls%2Findian&userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&variationId=30208&videosList=oil-show11
IP
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (2096), with no line terminators
Hash 93e28286c6ea1c36fa2f06da3d17bdb0
d2ced603373b650f4e9bc06e2de9dd725e8402a0
9e69717eeaf8d9fd7cceab053c2d2f93d0c0afd3da931f967e4e7974b76f4213
GET /api/models/vast?campaignId=165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af&campaignType=smartpop&creativeId=1aa4022af61bfad6ec7c637003dfb79b6edb7465c731eac0e6955245fc823c00&duration=00%3A00%3A30&endpoint=room&iterationId=397613&masterSmartpopId=2683&memberId=ooc4ASOpttrpmldVdTdRZXO6VzqpbXUzOodTK6V0rpXT1UU0uldK6V0zpXSuldK6Z0rpXTOc62maqq6ymlwgkB9mcGxFx6h_c50rpXSuldK6V0rpXSuD7A--&p1=4581534&ruleId=157&skipOffset=00%3A00%3A05&smartpopId=3564&sourceId=4886410&tag=-girls%2Findian&userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&variationId=30208&videosList=oil-show11 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pornlaundry.com
Referer: https://pornlaundry.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:05 GMT
content-type: text/xml; charset=utf-8
access-control-allow-origin: https://pornlaundry.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28uukSkGJRy5UBr1MAvzNuwf2BatF5L24KkztjW4c; SameSite=None; Secure; path=/; expires=Mon, 06-Feb-23 11:23:05 GMT; HttpOnly
server: cloudflare
cf-ray: 794b9d829e160b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ee84724fee05276447a330ddd36f3167
32090bcb8777c1639f88b4234af85d69fa19aca7
f573b83a259df22d75d1d52e8b490b5f0233d02c11b2fa5c113837f0f282c974
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F573B83A259DF22D75D1D52E8B490B5F0233D02C11B2FA5C113837F0F282C974"
Last-Modified: Sat, 04 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5343
Expires: Sun, 05 Feb 2023 13:52:08 GMT
Date: Sun, 05 Feb 2023 12:23:05 GMT
Connection: keep-alive
eu.karoon.xyz/metrics/save.img?event=impressions&bid-id=v2-1675599784661-7-9306-1192626-57cc5664-3e61-368a-5d79-633907683762&img=https%3A%2F%2Fcdn.adx1.com%2F177cbed865ace90cd245763dadef8805.jpeg&cpa=d98a437a-4900-4d09-8998-3d7ba3f44af8&format=social-scale-b_r-embed
302 Found 0 B URL HTTP/2 eu.karoon.xyz/metrics/save.img?event=impressions&bid-id=v2-1675599784661-7-9306-1192626-57cc5664-3e61-368a-5d79-633907683762&img=https%3A%2F%2Fcdn.adx1.com%2F177cbed865ace90cd245763dadef8805.jpeg&cpa=d98a437a-4900-4d09-8998-3d7ba3f44af8&format=social-scale-b_r-embed
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrics/save.img?event=impressions&bid-id=v2-1675599784661-7-9306-1192626-57cc5664-3e61-368a-5d79-633907683762&img=https%3A%2F%2Fcdn.adx1.com%2F177cbed865ace90cd245763dadef8805.jpeg&cpa=d98a437a-4900-4d09-8998-3d7ba3f44af8&format=social-scale-b_r-embed HTTP/1.1
Host: eu.karoon.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: openresty/1.15.8.3
date: Sun, 05 Feb 2023 12:23:05 GMT
content-length: 0
location: https://cdn.adx1.com/177cbed865ace90cd245763dadef8805.jpeg
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6c7f95e419565c8061605bf870765189
8fae35a53fb6f0bb3d05b367b13ce4e6144bfb8d
98663630e9c3014ebdbc6d66fdbed49306e621b5c183de6af70337d8bf8cd04c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98663630E9C3014EBDBC6D66FDBED49306E621B5C183DE6AF70337D8BF8CD04C"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1621
Expires: Sun, 05 Feb 2023 12:50:06 GMT
Date: Sun, 05 Feb 2023 12:23:05 GMT
Connection: keep-alive
static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp?mlf=1&cpa=daabf8d4-d624-44ec-bedb-5c8c4edad968&format=compact-slide-m_r-body
200 OK 790 B URL HTTP/2 static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp?mlf=1&cpa=daabf8d4-d624-44ec-bedb-5c8c4edad968&format=compact-slide-m_r-body
IP
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 65156a660e465299370ebd90d84aa461
12ff60b17f579a77e42a8be7b6b1892fc71be33d
e3b2784385cd128d5a6dfdec7f4be2147d6b57fa66c1a36c61c085aaf27f9e18
GET /creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp?mlf=1&cpa=daabf8d4-d624-44ec-bedb-5c8c4edad968&format=compact-slide-m_r-body HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 05 Feb 2023 12:23:05 GMT
content-type: image/webp
content-length: 790
last-modified: Tue, 24 Nov 2020 14:20:43 GMT
etag: "5fbd16bb-316"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp
200 OK 790 B URL HTTP/2 static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp
IP
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 65156a660e465299370ebd90d84aa461
12ff60b17f579a77e42a8be7b6b1892fc71be33d
e3b2784385cd128d5a6dfdec7f4be2147d6b57fa66c1a36c61c085aaf27f9e18
GET /creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 05 Feb 2023 12:23:05 GMT
content-type: image/webp
content-length: 790
last-modified: Tue, 24 Nov 2020 14:20:43 GMT
etag: "5fbd16bb-316"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp?mlf=1&cpa=44300465-e467-47be-95ce-1268a927d67a&mlc=1&format=compact-slide-m_r-body
200 OK 790 B URL HTTP/2 static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp?mlf=1&cpa=44300465-e467-47be-95ce-1268a927d67a&mlc=1&format=compact-slide-m_r-body
IP
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 65156a660e465299370ebd90d84aa461
12ff60b17f579a77e42a8be7b6b1892fc71be33d
e3b2784385cd128d5a6dfdec7f4be2147d6b57fa66c1a36c61c085aaf27f9e18
GET /creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp?mlf=1&cpa=44300465-e467-47be-95ce-1268a927d67a&mlc=1&format=compact-slide-m_r-body HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 05 Feb 2023 12:23:05 GMT
content-type: image/webp
content-length: 790
last-modified: Tue, 24 Nov 2020 14:20:43 GMT
etag: "5fbd16bb-316"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp?mlf=1&cpa=e850c455-a4f3-4882-9940-3ba59a3b9cef&mlc=1&format=social-scale-b_r-embed
200 OK 790 B URL HTTP/2 static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp?mlf=1&cpa=e850c455-a4f3-4882-9940-3ba59a3b9cef&mlc=1&format=social-scale-b_r-embed
IP
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 65156a660e465299370ebd90d84aa461
12ff60b17f579a77e42a8be7b6b1892fc71be33d
e3b2784385cd128d5a6dfdec7f4be2147d6b57fa66c1a36c61c085aaf27f9e18
GET /creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp?mlf=1&cpa=e850c455-a4f3-4882-9940-3ba59a3b9cef&mlc=1&format=social-scale-b_r-embed HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 05 Feb 2023 12:23:06 GMT
content-type: image/webp
content-length: 790
last-modified: Tue, 24 Nov 2020 14:20:43 GMT
etag: "5fbd16bb-316"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.adx1.com/177cbed865ace90cd245763dadef8805.jpeg
200 OK 19 kB URL HTTP/2 cdn.adx1.com/177cbed865ace90cd245763dadef8805.jpeg
IP
File type JPEG image data, baseline, precision 8, 192x192, components 3\012- data
Hash 5a99a9007be38445ffdfdbfef3866bf5
00b101cb63ea8aaac0de4c4af8c7ac5bbf8455fb
b9ee7a723a5c9cea09029060301bbb7c0dc0f4338df7edb9f80ebb455d952c6a
GET /177cbed865ace90cd245763dadef8805.jpeg HTTP/1.1
Host: cdn.adx1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty/1.15.8.3
date: Sun, 05 Feb 2023 12:23:06 GMT
content-type: image/jpeg
content-length: 19067
last-modified: Sun, 13 Nov 2022 16:29:15 GMT
etag: "63711b5b-4a7b"
expires: Sun, 05 Feb 2023 16:34:44 GMT
cache-control: max-age=1209600
accept-ranges: bytes
X-Firefox-Spdy: h2
adxadserv.com/px/heartbeat/v1?pv_uid=a2d5b031-29a9-4230-aed5-b5224c71635c&t_op=5.333&p_nn=adxad-rtb&fpid_sa=1675599822632&fpid=bc43f01a151639d4c69739dcaca30e3b&feid_sa=1675599822632&sid_sa=1675599822632&feid=c94fbcf946eca7adc7d7a8d0544c87af&sid=ef73cc15f5368ffdc21bc6851c2c1a46&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=tsyndicate.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=16&dm=-1&dt=2&ed=0&sr=5497558139882&fb=10384
200 OK 0 B URL HTTP/1.1 adxadserv.com/px/heartbeat/v1?pv_uid=a2d5b031-29a9-4230-aed5-b5224c71635c&t_op=5.333&p_nn=adxad-rtb&fpid_sa=1675599822632&fpid=bc43f01a151639d4c69739dcaca30e3b&feid_sa=1675599822632&sid_sa=1675599822632&feid=c94fbcf946eca7adc7d7a8d0544c87af&sid=ef73cc15f5368ffdc21bc6851c2c1a46&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=tsyndicate.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=16&dm=-1&dt=2&ed=0&sr=5497558139882&fb=10384
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /px/heartbeat/v1?pv_uid=a2d5b031-29a9-4230-aed5-b5224c71635c&t_op=5.333&p_nn=adxad-rtb&fpid_sa=1675599822632&fpid=bc43f01a151639d4c69739dcaca30e3b&feid_sa=1675599822632&sid_sa=1675599822632&feid=c94fbcf946eca7adc7d7a8d0544c87af&sid=ef73cc15f5368ffdc21bc6851c2c1a46&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=tsyndicate.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=16&dm=-1&dt=2&ed=0&sr=5497558139882&fb=10384 HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1
Origin: https://ads.adxadserv.com
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 05 Feb 2023 12:23:07 GMT
Content-Length: 0
Connection: keep-alive
adxadserv.com/px/heartbeat/v1?pv_uid=7c57b531-d7a3-456e-8c8d-bf1a708c6410&t_op=5.371&p_nn=adxad-rtb&fpid_sa=1675599822632&fpid=bc43f01a151639d4c69739dcaca30e3b&feid_sa=1675599822632&sid_sa=1675599822632&feid=c94fbcf946eca7adc7d7a8d0544c87af&sid=ef73cc15f5368ffdc21bc6851c2c1a46&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=tsyndicate.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=16&dm=-1&dt=2&ed=0&sr=5497558139882&fb=10384
200 OK 0 B URL HTTP/1.1 adxadserv.com/px/heartbeat/v1?pv_uid=7c57b531-d7a3-456e-8c8d-bf1a708c6410&t_op=5.371&p_nn=adxad-rtb&fpid_sa=1675599822632&fpid=bc43f01a151639d4c69739dcaca30e3b&feid_sa=1675599822632&sid_sa=1675599822632&feid=c94fbcf946eca7adc7d7a8d0544c87af&sid=ef73cc15f5368ffdc21bc6851c2c1a46&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=tsyndicate.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=16&dm=-1&dt=2&ed=0&sr=5497558139882&fb=10384
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /px/heartbeat/v1?pv_uid=7c57b531-d7a3-456e-8c8d-bf1a708c6410&t_op=5.371&p_nn=adxad-rtb&fpid_sa=1675599822632&fpid=bc43f01a151639d4c69739dcaca30e3b&feid_sa=1675599822632&sid_sa=1675599822632&feid=c94fbcf946eca7adc7d7a8d0544c87af&sid=ef73cc15f5368ffdc21bc6851c2c1a46&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=tsyndicate.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=16&dm=-1&dt=2&ed=0&sr=5497558139882&fb=10384 HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1
Origin: https://ads.adxadserv.com
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 05 Feb 2023 12:23:07 GMT
Content-Length: 0
Connection: keep-alive
mc.yandex.ru/watch/64815175?wmode=7&page-url=https%3A%2F%2Fembedsb.com%2Fe%2F1ydjsq0uab2b.html%3Fposter%3Dhttps%3A%2F%2Fcdn.javtv.to%2Fdata%2Fgigp-32.jpg&page-ref=https%3A%2F%2Fjavtv.to%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A650%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1385578819340%3Ahid%3A323220226%3Az%3A0%3Ai%3A20230205122348%3Aet%3A1675599828%3Arn%3A475398807%3Arqn%3A1%3Au%3A1675599825143740310%3Aw%3A730x411%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C404%2C0%2C916%2C916%2C1%2C815%3Aco%3A0%3Ans%3A1675599824206%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675599828%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 419 B URL HTTP/2 mc.yandex.ru/watch/64815175?wmode=7&page-url=https%3A%2F%2Fembedsb.com%2Fe%2F1ydjsq0uab2b.html%3Fposter%3Dhttps%3A%2F%2Fcdn.javtv.to%2Fdata%2Fgigp-32.jpg&page-ref=https%3A%2F%2Fjavtv.to%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A650%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1385578819340%3Ahid%3A323220226%3Az%3A0%3Ai%3A20230205122348%3Aet%3A1675599828%3Arn%3A475398807%3Arqn%3A1%3Au%3A1675599825143740310%3Aw%3A730x411%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C404%2C0%2C916%2C916%2C1%2C815%3Aco%3A0%3Ans%3A1675599824206%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675599828%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash da98060d3b2b049e5291a5cbc1969871
7d4ab703e7fb4a013d6bfceffb94fb840d96eb9e
02171dcf494369080d4fb4a2dace0bba42a8e3611e1714577ad68eadebc71ca2
GET /watch/64815175?wmode=7&page-url=https%3A%2F%2Fembedsb.com%2Fe%2F1ydjsq0uab2b.html%3Fposter%3Dhttps%3A%2F%2Fcdn.javtv.to%2Fdata%2Fgigp-32.jpg&page-ref=https%3A%2F%2Fjavtv.to%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A650%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1385578819340%3Ahid%3A323220226%3Az%3A0%3Ai%3A20230205122348%3Aet%3A1675599828%3Arn%3A475398807%3Arqn%3A1%3Au%3A1675599825143740310%3Aw%3A730x411%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C404%2C0%2C916%2C916%2C1%2C815%3Aco%3A0%3Ans%3A1675599824206%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675599828%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://embedsb.com
Connection: keep-alive
Referer: https://embedsb.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/64815175/1?wmode=7&page-url=https%3A%2F%2Fembedsb.com%2Fe%2F1ydjsq0uab2b.html%3Fposter%3Dhttps%3A%2F%2Fcdn.javtv.to%2Fdata%2Fgigp-32.jpg&page-ref=https%3A%2F%2Fjavtv.to%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A650%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1385578819340%3Ahid%3A323220226%3Az%3A0%3Ai%3A20230205122348%3Aet%3A1675599828%3Arn%3A475398807%3Arqn%3A1%3Au%3A1675599825143740310%3Aw%3A730x411%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C404%2C0%2C916%2C916%2C1%2C815%3Aco%3A0%3Ans%3A1675599824206%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675599828%3At%3A&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Sun, 05 Feb 2023 12:23:07 GMT
access-control-allow-origin: https://embedsb.com
set-cookie: yabs-sid=1640255271675599787; Path=/; SameSite=None; Secure
i=kDnKCEQcVLMZgthBM1LhgHk7D4qwXZzItDxNhL96hS4jmjJySuz+Sf6kHbymLxdqdFjdfeOycHfucvWWFwn+vLNbp/k=; Expires=Wed, 02-Feb-2033 12:23:05 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=7944711221675599787; Expires=Mon, 05-Feb-2024 12:23:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=7944711221675599787; Expires=Mon, 05-Feb-2024 12:23:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707135787.yc.1675599787#1707135787.yrts.1675599787#1707135787.yrtsi.1675599787; Expires=Mon, 05-Feb-2024 12:23:07 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 05-Feb-2023 12:23:07 GMT
last-modified: Sun, 05-Feb-2023 12:23:07 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
tsyndicate.com/iframes2/bd3dbcc920a44cdfa6fe494590c64d15.html?
200 OK 0 B URL HTTP/2 tsyndicate.com/iframes2/bd3dbcc920a44cdfa6fe494590c64d15.html?
IP
ASN #24940 Hetzner Online GmbH
GET /iframes2/bd3dbcc920a44cdfa6fe494590c64d15.html? HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:01 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
x-request-id: b359abb5de499f6d
set-cookie: ts_uid=41252dac-ebf6-409b-b0c7-b8925bd0670a; expires=Sat, 05 Aug 2023 12:23:01 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
tsyndicate.com/iframes2/efdd202c6e9f4552a5e217ec394b044a.html?
200 OK 0 B URL HTTP/2 tsyndicate.com/iframes2/efdd202c6e9f4552a5e217ec394b044a.html?
IP
ASN #24940 Hetzner Online GmbH
GET /iframes2/efdd202c6e9f4552a5e217ec394b044a.html? HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:01 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
x-request-id: 988348602da08004
set-cookie: ts_uid=59aeb456-cdf8-4bd9-9b3c-8cc42ba55647; expires=Sat, 05 Aug 2023 12:23:01 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
static.javhdhello.com/h5/files/16514/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Ffaec45e5-c3cb-4b38-b158-2fd2c0bf1489%3Fcv1%3Dd58fda7d-a54f-11ed-93df-e2e38133f3a0%26cv10%3Dexim_adxad_stub1_300x250_%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D623d833161d6e27cf559bde1%26cv5%3D623d831361d6e2739a0c4ca4%26cv6%3Den%26cv7%3D300x250%2B-%2Bjavpro.cc%2B-%2BNTVA%2B%2528mobile%252C%2Bdesktop%2529%26cv8%3DFirefox%26cv9%3D62957d2861d6e234545d1b71%26externalId%3Dd58fda7d-a54f-11ed-93df-e2e38133f3a0%26p%3DeyJiIjoyNzgzMjcsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjQsInAiOjEsInMiOjI1MzMzfQ
200 OK 0 B URL HTTP/2 static.javhdhello.com/h5/files/16514/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Ffaec45e5-c3cb-4b38-b158-2fd2c0bf1489%3Fcv1%3Dd58fda7d-a54f-11ed-93df-e2e38133f3a0%26cv10%3Dexim_adxad_stub1_300x250_%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D623d833161d6e27cf559bde1%26cv5%3D623d831361d6e2739a0c4ca4%26cv6%3Den%26cv7%3D300x250%2B-%2Bjavpro.cc%2B-%2BNTVA%2B%2528mobile%252C%2Bdesktop%2529%26cv8%3DFirefox%26cv9%3D62957d2861d6e234545d1b71%26externalId%3Dd58fda7d-a54f-11ed-93df-e2e38133f3a0%26p%3DeyJiIjoyNzgzMjcsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjQsInAiOjEsInMiOjI1MzMzfQ
IP
ASN #60068 Datacamp Limited
GET /h5/files/16514/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Ffaec45e5-c3cb-4b38-b158-2fd2c0bf1489%3Fcv1%3Dd58fda7d-a54f-11ed-93df-e2e38133f3a0%26cv10%3Dexim_adxad_stub1_300x250_%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D623d833161d6e27cf559bde1%26cv5%3D623d831361d6e2739a0c4ca4%26cv6%3Den%26cv7%3D300x250%2B-%2Bjavpro.cc%2B-%2BNTVA%2B%2528mobile%252C%2Bdesktop%2529%26cv8%3DFirefox%26cv9%3D62957d2861d6e234545d1b71%26externalId%3Dd58fda7d-a54f-11ed-93df-e2e38133f3a0%26p%3DeyJiIjoyNzgzMjcsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjQsInAiOjEsInMiOjI1MzMzfQ HTTP/1.1
Host: static.javhdhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r.trackwilltrk.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:02 GMT
content-type: text/html
last-modified: Tue, 27 Dec 2022 14:38:03 GMT
etag: W/"63ab034b-ca4"
expires: Tue, 07 Mar 2023 12:23:02 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-accel-expires: @1678191782
server: CDN77-Turbo
x-77-nzt: AblMCQ3l4huh
x-77-nzt-ray: c0a4cc28760551c2a69fdf631d8ab12c
x-cache: MISS
x-77-pop: stockholmSE
x-77-cache: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
ads.adxadserv.com/ad?spotid=6295840561d6e234530f4025&type=300x250&output=html&extra1=0&ref=https%3A//javtv.to/&dt=1675599822224&screen=1280x1024&tags=
200 OK 0 B URL HTTP/2 ads.adxadserv.com/ad?spotid=6295840561d6e234530f4025&type=300x250&output=html&extra1=0&ref=https%3A//javtv.to/&dt=1675599822224&screen=1280x1024&tags=
IP
ASN #39572 DataWeb Global Group B.V.
GET /ad?spotid=6295840561d6e234530f4025&type=300x250&output=html&extra1=0&ref=https%3A//javtv.to/&dt=1675599822224&screen=1280x1024&tags= HTTP/1.1
Host: ads.adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:02 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache
X-Firefox-Spdy: h2
creative.xlrdr.com/widgets/v4/Universal/main.33831b792a3809ba493a.css
200 OK 0 B URL HTTP/2 creative.xlrdr.com/widgets/v4/Universal/main.33831b792a3809ba493a.css
IP
GET /widgets/v4/Universal/main.33831b792a3809ba493a.css HTTP/1.1
Host: creative.xlrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xlrdr.com/widgets/v4/Universal?tag=girls&modelsLanguage=en&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300x250_ased_adx_st_dt_en&creativeId=300x250_ased_adx_st_dt_en&responsive=0&hideButton=1&hideTitle=1&userId=2ff61e17e3557af46fe2d3810f37b5c411b3fbc3852006cff0fa2d8d6e4a6f7d&autoplay=all&autoplayForce=1&showModal=signup&memberId={clickid}
Cookie: __cflb=04dToQvE4FPLng5Mz6amGAT9NT3YTLKVwN8C7mk7Cx
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:03 GMT
content-type: text/css
last-modified: Tue, 31 Jan 2023 09:52:08 GMT
etag: W/"63d8e4c8-3403"
expires: Sun, 05 Feb 2023 12:23:06 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 2
vary: Accept-Encoding
server: cloudflare
cf-ray: 794b9d741e44b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
api.cloudembed.net/javla/updateView
200 OK 0 B URL HTTP/2 api.cloudembed.net/javla/updateView
IP
POST /javla/updateView HTTP/1.1
Host: api.cloudembed.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 9
Origin: https://javtv.to
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9EpG1o6lAhw1klp0VhjpRbLFzJFgAo4NZ1kKh7aQrN6OdhzO%2Bxaw%2BpqmXGuI91vsp9BIb5lJZw%2FXx86w%2BLRjDiLUEIw0A51FolpgRCRf82TQm2tWj4Jc6sd4v7R5nm6tjjXgfNE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794b9d7b0a64b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.tynt.com/tc.js
200 OK 0 B IP
GET /tc.js HTTP/1.1
Host: cdn.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:03 GMT
content-type: application/javascript
last-modified: Tue, 10 Jan 2023 20:39:00 GMT
vary: Accept-Encoding
etag: W/"63bdcce4-4571"
content-encoding: gzip
cf-cache-status: HIT
age: 199007
expires: Wed, 08 Feb 2023 12:23:03 GMT
cache-control: public, max-age=259200
server: cloudflare
cf-ray: 794b9d73ed100b69-OSL
X-Firefox-Spdy: h2
js.wpshsdk.com/npc/sdk/push.m.js?v=1
200 OK 0 B URL HTTP/2 js.wpshsdk.com/npc/sdk/push.m.js?v=1
IP
ASN #39572 DataWeb Global Group B.V.
GET /npc/sdk/push.m.js?v=1 HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 26 Jan 2023 12:22:57 GMT
etag: W/"63d270a1-f96f"
content-encoding: gzip
expires: Sun, 05 Feb 2023 12:28:04 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
ads.adxadserv.com/ad?spotid=62957d2861d6e234545d1b71&type=300x250&output=html&extra1=0&ref=https%3A//javtv.to/&dt=1675599822412&screen=1280x1024&tags=
200 OK 0 B URL HTTP/2 ads.adxadserv.com/ad?spotid=62957d2861d6e234545d1b71&type=300x250&output=html&extra1=0&ref=https%3A//javtv.to/&dt=1675599822412&screen=1280x1024&tags=
IP
ASN #39572 DataWeb Global Group B.V.
GET /ad?spotid=62957d2861d6e234545d1b71&type=300x250&output=html&extra1=0&ref=https%3A//javtv.to/&dt=1675599822412&screen=1280x1024&tags= HTTP/1.1
Host: ads.adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:02 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache
X-Firefox-Spdy: h2
mc7clurd09pla4nrtat7ion.com/get/1909590?zoneid=1909590&jp=_clglqg8kdnodvhsnxw6uuw&nojs=0&ix=0&abvar=30&t=0&x=801&y=801&wcks=0&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=7709636481127125
200 OK 0 B URL HTTP/2 mc7clurd09pla4nrtat7ion.com/get/1909590?zoneid=1909590&jp=_clglqg8kdnodvhsnxw6uuw&nojs=0&ix=0&abvar=30&t=0&x=801&y=801&wcks=0&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=7709636481127125
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /get/1909590?zoneid=1909590&jp=_clglqg8kdnodvhsnxw6uuw&nojs=0&ix=0&abvar=30&t=0&x=801&y=801&wcks=0&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=7709636481127125 HTTP/1.1
Host: mc7clurd09pla4nrtat7ion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:02 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=230205072387a463cc230949a3aa1c1e608c; Path=/; Expires=Mon, 05 Feb 2024 12:23:02 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
waust.at/small.js
200 OK 0 B IP
GET /small.js HTTP/1.1
Host: waust.at
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:01 GMT
content-type: application/x-javascript
last-modified: Thu, 12 Jan 2023 17:19:44 GMT
etag: W/"63c04130-2170"
expires: Mon, 06 Feb 2023 11:33:12 GMT
cache-control: max-age=86400
access-control-allow-origin: *
cf-cache-status: HIT
age: 2989
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hHLKqBS17M5%2BWA8yiPhSvMYb8SvNz9oT4%2FRlLOb5Q4Oh2OV1feugQI1bSewuEL8ckOAK5o8sf8esd4m%2B5P3fcBNIotFMqygRtdN2mzyOnlMcNu6enXdg0EM4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 794b9d676bd80b45-OSL
content-encoding: br
X-Firefox-Spdy: h2
embedsb.com/js/jquery/jquery.min.js?v=1
200 OK 0 B URL HTTP/2 embedsb.com/js/jquery/jquery.min.js?v=1
IP
GET /js/jquery/jquery.min.js?v=1 HTTP/1.1
Host: embedsb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://embedsb.com/e/1ydjsq0uab2b.html?poster=https://cdn.javtv.to/data/gigp-32.jpg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 07 Dec 2022 21:33:03 GMT
etag: W/"6391068f-13f75"
expires: Thu, 09 Feb 2023 22:41:13 GMT
cache-control: max-age=604800
access-control-allow-origin: *
cf-cache-status: HIT
age: 222110
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SyMCkoPnwWEyngsMhri2ncPeGvn5uCzq861sQqfy966NE4yLDqLVjgWPukqM%2FI9loAYLd4SLZkbGRREfK8D3SjUVYTlwoKXxlO7197N73lOgJvEBGI8XyzG4omyIKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 794b9d7c9fb8b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cuddlethehyena.com/get/1909981?zoneid=1909981&jp=_clrcnksnhv9rqa0le4bdx2&nojs=0&ix=0&abvar=1&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=672762063299603
200 OK 0 B URL HTTP/2 cuddlethehyena.com/get/1909981?zoneid=1909981&jp=_clrcnksnhv9rqa0le4bdx2&nojs=0&ix=0&abvar=1&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=672762063299603
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /get/1909981?zoneid=1909981&jp=_clrcnksnhv9rqa0le4bdx2&nojs=0&ix=0&abvar=1&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=672762063299603 HTTP/1.1
Host: cuddlethehyena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:01 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2302050723d0e41ccda4c94f6095f7ea39fe; Path=/; Expires=Mon, 05 Feb 2024 12:23:01 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
564cc73ffe.ed9b93b5ee.com/get/?go=1&data=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
200 OK 0 B URL HTTP/2 564cc73ffe.ed9b93b5ee.com/get/?go=1&data=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
IP
ASN #24940 Hetzner Online GmbH
GET /get/?go=1&data=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 HTTP/1.1
Host: 564cc73ffe.ed9b93b5ee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.0
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
static.javhdhello.com/h5/files/video/6519-14405-300x250.medium.mp4
206 Partial Content 0 B URL HTTP/2 static.javhdhello.com/h5/files/video/6519-14405-300x250.medium.mp4
IP
ASN #60068 Datacamp Limited
GET /h5/files/video/6519-14405-300x250.medium.mp4 HTTP/1.1
Host: static.javhdhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://static.javhdhello.com/h5/files/16514/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Ffaec45e5-c3cb-4b38-b158-2fd2c0bf1489%3Fcv1%3Dd58fda7d-a54f-11ed-93df-e2e38133f3a0%26cv10%3Dexim_adxad_stub1_300x250_%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D623d833161d6e27cf559bde1%26cv5%3D623d831361d6e2739a0c4ca4%26cv6%3Den%26cv7%3D300x250%2B-%2Bjavpro.cc%2B-%2BNTVA%2B%2528mobile%252C%2Bdesktop%2529%26cv8%3DFirefox%26cv9%3D62957d2861d6e234545d1b71%26externalId%3Dd58fda7d-a54f-11ed-93df-e2e38133f3a0%26p%3DeyJiIjoyNzgzMjcsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjQsInAiOjEsInMiOjI1MzMzfQ
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 05 Feb 2023 12:23:02 GMT
content-type: video/mp4
content-length: 529848
last-modified: Tue, 23 Aug 2022 14:31:41 GMT
etag: "6304e4cd-815b8"
expires: Fri, 26 Aug 2022 15:43:23 GMT
cache-control: max-age=86400
access-control-allow-origin: *
x-accel-expires: @1675646520
server: CDN77-Turbo
x-77-nzt: AblMCQ3LSAP/7poAAA
x-77-nzt-ray: c0a4cc28760551c2a69fdf6383afbf35
x-cache: HIT
x-age: 39662
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-529847/529848
X-Firefox-Spdy: h2
t.dtscout.com/pv/?_a=v&_h=javtv.to&_ss=5jzef2cbvq&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=2sm1&_cb=_dtspv.c
200 OK 0 B URL HTTP/2 t.dtscout.com/pv/?_a=v&_h=javtv.to&_ss=5jzef2cbvq&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=2sm1&_cb=_dtspv.c
IP
GET /pv/?_a=v&_h=javtv.to&_ss=5jzef2cbvq&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=2sm1&_cb=_dtspv.c HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Cookie: m=1; oa=1; df=1675599782
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:02 GMT
content-type: application/javascript
x-t: 0.139
x-c: 0
expires: Sun, 05 Feb 2023 12:23:01 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0SrM9YagurU%2BgXx66IymNPBohVjtUXVM%2FlYMcmcjD7vjGy%2Bv%2BDg8YPGq5SYYUjD7x4E8tCInSd5%2FRxkDnsWKOPulxTVs%2FefFgqonI31cb1Vu8HhJ51YmPHIAhUlT3vE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 794b9d70ac500a44-ARN
content-encoding: br
X-Firefox-Spdy: h2
sltvhyjthx.com/aas/r45d/vki/1910056/tghr.js
200 OK 0 B URL HTTP/2 sltvhyjthx.com/aas/r45d/vki/1910056/tghr.js
IP
Analyzer Verdict Alert fortinet Phishing
GET /aas/r45d/vki/1910056/tghr.js HTTP/1.1
Host: sltvhyjthx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:01 GMT
content-type: application/javascript
last-modified: Tue, 31 Jan 2023 12:41:59 GMT
vary: Accept-Encoding
etag: W/"63d90c97-1213d"
x-js-ab1: var4
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
tsyndicate.com/iframes2/31827df62019449ba8a92a14af4d7414.html?
200 OK 0 B URL HTTP/2 tsyndicate.com/iframes2/31827df62019449ba8a92a14af4d7414.html?
IP
ASN #24940 Hetzner Online GmbH
GET /iframes2/31827df62019449ba8a92a14af4d7414.html? HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:01 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
x-request-id: c4a44e72c4339ac7
set-cookie: ts_uid=b41e0314-0f68-4332-bbaa-7c84c673e7b5; expires=Sat, 05 Aug 2023 12:23:01 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
embedsb.com/css/app.v1.5.css
200 OK 0 B URL HTTP/2 embedsb.com/css/app.v1.5.css
IP
GET /css/app.v1.5.css HTTP/1.1
Host: embedsb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://embedsb.com/e/1ydjsq0uab2b.html?poster=https://cdn.javtv.to/data/gigp-32.jpg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: text/css
last-modified: Sat, 23 Oct 2021 03:04:46 GMT
etag: W/"61737bce-2d43"
expires: Sat, 11 Feb 2023 11:29:32 GMT
cache-control: max-age=604800
access-control-allow-origin: *
cf-cache-status: HIT
age: 89612
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F0ew8dABMoxAnTMpIGvnNkr0vF%2FnG90oCjyTVbdXQAYxTpYKpqabBuw0pLpTiKuJ236eK%2BrD%2Fb8ngjll90wdReGAyYcGJz9P9nf7PLGOkJwf%2FVwlRH1vNhGon6gFWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 794b9d7c9fb5b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
vlcdn.tsyndicate.com/videos/b/6/fe6ebb77e983d293aabe947fa7c7d78f9d4ec7/640x360.mp4
206 Partial Content 0 B URL HTTP/2 vlcdn.tsyndicate.com/videos/b/6/fe6ebb77e983d293aabe947fa7c7d78f9d4ec7/640x360.mp4
IP
GET /videos/b/6/fe6ebb77e983d293aabe947fa7c7d78f9d4ec7/640x360.mp4 HTTP/1.1
Host: vlcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=b41e0314-0f68-4332-bbaa-7c84c673e7b5; bfq=APeIECNCx5YZMWjMwDFDRhcWIsYU3BLjoYgyE2PYuFHDBg4bMXDU6NJH
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 206 Partial Content
date: Sun, 05 Feb 2023 12:23:05 GMT
content-type: video/mp4
content-length: 1121203
etag: "60a63e68-111bb3"
last-modified: Thu, 20 May 2021 10:48:08 GMT
server: nginx
access-control-allow-origin: *
vary: Accept-Encoding
access-control-allow-methods: HEAD,GET,OPTIONS
access-control-expose-headers: Server,Range,Content-Length,Content-Range
access-control-allow-headers: *
access-control-max-age: 31536000
access-control-allow-credentials: true
age: 6210173
content-range: bytes 0-1121202/1121203
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400,700,900&subset=latin-ext
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400,700,900&subset=latin-ext
IP
GET /css?family=Roboto:400,700,900&subset=latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 Feb 2023 12:23:01 GMT
date: Sun, 05 Feb 2023 12:23:01 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tsyndicate.com/iframes2/e94de54bcb394dfeb7e5cb07bab4ac44.html?
200 OK 0 B URL HTTP/2 tsyndicate.com/iframes2/e94de54bcb394dfeb7e5cb07bab4ac44.html?
IP
ASN #24940 Hetzner Online GmbH
GET /iframes2/e94de54bcb394dfeb7e5cb07bab4ac44.html? HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javtv.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:01 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
x-request-id: 6f272323d5f65257
set-cookie: ts_uid=ae43c32e-25e1-434c-9c14-ca5e19f3e04f; expires=Sat, 05 Aug 2023 12:23:01 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
tsyndicate.com/do2/115a7ad9b4a44b7bb11ebd7702db5311/vast?subid=1472530868&categories=,
200 OK 0 B URL HTTP/2 tsyndicate.com/do2/115a7ad9b4a44b7bb11ebd7702db5311/vast?subid=1472530868&categories=,
IP
ASN #24940 Hetzner Online GmbH
GET /do2/115a7ad9b4a44b7bb11ebd7702db5311/vast?subid=1472530868&categories=, HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tsyndicate.com/iframes2/97ca4c176fa543bab7b13942ae9265d5.html?
Connection: keep-alive
Cookie: ts_uid=b41e0314-0f68-4332-bbaa-7c84c673e7b5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 12:23:05 GMT
content-type: application/xml; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
x-vast: 3.0
x-request-id: 70aab68398fc9b4e
set-cookie: ts_uid=b41e0314-0f68-4332-bbaa-7c84c673e7b5; expires=Sat, 05 Aug 2023 12:23:05 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCx5YZMWjMwDFDRhcWIsYU3BLjoYgyE2PYuFHDBg4bMXDU6NJH; expires=Mon, 06 Feb 2023 12:23:05 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
vast.yomeno.xyz/vast
200 OK 0 B IP
POST /vast HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 573
Origin: https://tsyndicate.com
Connection: keep-alive
Referer: https://tsyndicate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 05 Feb 2023 12:23:04 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: Accept-Encoding, *
access-control-allow-credentials: true
access-control-allow-origin: https://tsyndicate.com
access-control-expose-headers: Content-Length,Content-Range
content-encoding: gzip
X-Firefox-Spdy: h2
104.21.233.166
45.133.44.25
93.184.220.29
94.130.198.6
185.98.53.2
23.36.76.226
77.88.21.119
185.76.9.19
149.6.163.14