r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6064
Expires: Mon, 05 Sep 2022 07:33:01 GMT
Date: Mon, 05 Sep 2022 05:51:57 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 05 Sep 2022 05:24:34 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: uiALHb4Ws_oVyk2CkJGsi-dk5c90GY14-McRnD5DLFksU5vYtEELHg==
Age: 1643
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Sep 2022 01:15:19 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tbKRXmFD8AqbTm_0tvjHPkACBrRmcibdC067ebNhSKllZR-O-60FgA==
age: 16600
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 05:51:57 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Mon, 05 Sep 2022 05:38:16 GMT
Cache-Control: max-age=3600
Expires: Mon, 05 Sep 2022 06:15:05 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: IblRYZpAR8kDAfrX1x09W6Mn_H3yEpcn60vkSQep-8aOn1-SBgcaBQ==
Age: 821
xxxfree.watch/aria-valencia-tiny-labor-day/
301 Moved Permanently 0 B URL HTTP/1.1 xxxfree.watch/aria-valencia-tiny-labor-day/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aria-valencia-tiny-labor-day/ HTTP/1.1
Host: xxxfree.watch
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 05 Sep 2022 05:51:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 05 Sep 2022 06:51:57 GMT
Location: https://xxxfree.watch/aria-valencia-tiny-labor-day/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1%2BZGYiCKP6oeymVaSIoVaAhBqdlRJxZPAZeokYoEKSCnsyxJlvUDbAt2cJz0xanF%2F53xfpNpATBz1iCVrCDiciuELoRY9ioKaccqUS3NfUogicFvDFJMPG7WBpDz7fX0"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 745cb232fadb7713-LHR
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 471 B IP
Hash 77d035f38a45e8a1ec30d5fe9611880b
01cf34de95257da64dac90edf5a86203f1160271
7dc687d6bb1679ba5567e58b4f8c1e78766e7ee36273ba7f62068c595d57f7f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6357
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 05:51:58 GMT
Last-Modified: Mon, 05 Sep 2022 04:06:01 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 279 B IP
Hash 67a96920cc1e0285dd02543de4967eeb
15d87339111a13adbd968ab5eb95476894344c5d
67edb9ae30f9173f79cfa521627c4b4934db025339963db63deef1fe262983bc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5710
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 05:51:58 GMT
Last-Modified: Mon, 05 Sep 2022 04:16:49 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 194d72d26ddeaa8a8a266839eb707300
86427a0db92a3b4bd2690ad361109559c7212992
ab77f42ccfa0c649217777139f0d14a6742039596ee37a045c5fe96e7ca32338
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 05:51:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
vjs.zencdn.net/7.8.4/video-js.css?ver=7.8.4
200 OK 11 kB URL HTTP/2 vjs.zencdn.net/7.8.4/video-js.css?ver=7.8.4
IP
File type Unicode text, UTF-8 text, with very long lines (5844)
Hash 9f703c1d1b064f5e72d8dba3484e868f
008cc8c438c57c51cc20bb4cb3e6452a287aaa8f
a1a9f6ebf0e40976737eeb1b6c544d462e5e444fcc8f59ab044833e2737c05e0
GET /7.8.4/video-js.css?ver=7.8.4 HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Wed, 08 Jul 2020 20:29:36 GMT
etag: "397a94bb87dfd0a64ba4d3d502912e4a"
cache-control: public, max-age=31536000
content-type: text/css; charset=utf-8
content-encoding: gzip
date: Mon, 05 Sep 2022 05:51:58 GMT
x-served-by: cache-bma1648-BMA
x-cache: HIT
x-cache-hits: 29352
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 10738
X-Firefox-Spdy: h2
a.realsrv.com/nativeads-v2.js
200 OK 16 kB URL HTTP/1.1 a.realsrv.com/nativeads-v2.js
IP
File type C source, ASCII text, with very long lines (58917), with no line terminators
Hash 4fed24b05715a4123ff52b5bc128522b
6a3a08eb3da52fb6e303b9f1a33a56db987df4aa
f1bf20f90647fd8743e606ed47ea1ee6c191b93f54860e0b86597761b1b520c1
GET /nativeads-v2.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 05:51:58 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 16534
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"24dfeeaabc29e5aaefc73f319e2"
X-HW: 1662357118.dop219.sk1.t,1662357118.cds018.sk1.shn,1662357118.cds018.sk1.c
Access-Control-Allow-Origin: *, *
www.googletagmanager.com/gtag/js?id=UA-62001516-1
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-62001516-1
IP
File type ASCII text, with very long lines (1615)
Hash 86d20e66d72740eaed5d6817a0fb4379
a095d2ef39cded9a6add27af64f68b7e9c7ed9bd
4a76edff9568866c6e352d266ed92e3b104495bb6400d93aada000f7cc436a09
GET /gtag/js?id=UA-62001516-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Sep 2022 05:51:58 GMT
expires: Mon, 05 Sep 2022 05:51:58 GMT
cache-control: private, max-age=900
last-modified: Mon, 05 Sep 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 41827
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: vva4NnyY3HYM9dQPCSMY4A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: mLZc0u8gfg+XAqgwJnIg/NU1zn0=
unpkg.com/@silvermine/videojs-quality-selector@1.2.4/dist/js/silvermine-videojs-quality-selector.min.js
200 OK 8.8 kB URL HTTP/2 unpkg.com/@silvermine/videojs-quality-selector@1.2.4/dist/js/silvermine-videojs-quality-selector.min.js
IP
File type ASCII text, with very long lines (23113)
Hash 0e561833d0319c0eade1e63ec24e5597
7cb0ca04d2205eea332ef7efb047439c85d541db
f6bf4a9017f0ad39ef38d79ef3074968c9bc8f0f6c5bcbb632f85d788ce44938
GET /@silvermine/videojs-quality-selector@1.2.4/dist/js/silvermine-videojs-quality-selector.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xxxfree.watch/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:51:58 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"5acc-q2POJTFsNAdkUTsA1IhV3IUmXP0"
via: 1.1 fly.io
fly-request-id: 01F3YGTF8JRQD6FT3WSZ9G9XWN
cf-cache-status: HIT
age: 11667886
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 745cb235c98b0b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
a.realsrv.com/iframe.php?idzone=4673696&size=300x100
200 OK 1.3 kB URL HTTP/1.1 a.realsrv.com/iframe.php?idzone=4673696&size=300x100
IP
File type HTML document, ASCII text
Hash e4a1a0deb57f90b0b0c87a482048851f
edff78483fd9937e8bdcb4463fec3dbfaa2de066
c9f9cca6f2a03fd01d3a40415893806ed15b3bc072837198e443877c67af27c8
GET /iframe.php?idzone=4673696&size=300x100 HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 05:51:58 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 1347
Content-Type: text/html; charset=UTF-8
Accept-Ranges: bytes
Server: nginx
Cache-Control: max-age=10800
X-HW: 1662357118.dop219.sk1.t,1662357118.cds018.sk1.shn,1662357118.dop219.sk1.t,1662357118.cds235.sk1.c
Access-Control-Allow-Origin: *, *
a.realsrv.com/iframe.php?idzone=4673696&size=300x100
200 OK 1.3 kB URL HTTP/1.1 a.realsrv.com/iframe.php?idzone=4673696&size=300x100
IP
File type HTML document, ASCII text
Hash e4a1a0deb57f90b0b0c87a482048851f
edff78483fd9937e8bdcb4463fec3dbfaa2de066
c9f9cca6f2a03fd01d3a40415893806ed15b3bc072837198e443877c67af27c8
GET /iframe.php?idzone=4673696&size=300x100 HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 05:51:58 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 1347
Content-Type: text/html; charset=UTF-8
Accept-Ranges: bytes
Server: nginx
Cache-Control: max-age=10800
X-HW: 1662357118.dop219.sk1.t,1662357118.cds018.sk1.shn,1662357118.dop219.sk1.t,1662357118.cds235.sk1.c
Access-Control-Allow-Origin: *, *
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash db06a437c8cb99d47995d52c7871188a
2594f4f24ca700b0455c5a898d810d6c497c3df1
10b827d9053c88c7edd678fd1c38623b7de0dc2424c0a55efd1560b05e3cfb1d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "10B827D9053C88C7EDD678FD1C38623B7DE0DC2424C0A55EFD1560B05E3CFB1D"
Last-Modified: Sun, 04 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7537
Expires: Mon, 05 Sep 2022 07:57:35 GMT
Date: Mon, 05 Sep 2022 05:51:58 GMT
Connection: keep-alive
a.realsrv.com/iframe.php?idzone=4672840&size=300x250
200 OK 1.3 kB URL HTTP/1.1 a.realsrv.com/iframe.php?idzone=4672840&size=300x250
IP
File type HTML document, ASCII text
Hash 2cbeb5c7ec92a5a82e6a2e67357f5ab5
e0c43290d166eb31012d76fed55b2c972a24f0ea
f0be57483b108bae49fcbee4659816b1784d73eb002037b53806588223ed79fe
GET /iframe.php?idzone=4672840&size=300x250 HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 05:51:58 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 1347
Content-Type: text/html; charset=UTF-8
Accept-Ranges: bytes
Server: nginx
Cache-Control: max-age=10800
X-HW: 1662357118.dop219.sk1.t,1662357118.cds018.sk1.shn,1662357118.dop219.sk1.t,1662357118.cds015.sk1.c
Access-Control-Allow-Origin: *, *
www.cdn4ads.com/carto.min.js
200 OK 33 kB URL HTTP/2 www.cdn4ads.com/carto.min.js
IP
ASN #60068 Datacamp Limited
File type HTML document, ASCII text, with very long lines (1568), with CRLF line terminators
Hash 8f3385940ae781093220e4e62409cbcc
05149e9064b673bf360715551a9edc8e9b5ee1b9
e2d9a8e4519b41eec79f3b1de851e56c2cad51697724b776cd5a78a009a860e0
GET /carto.min.js HTTP/1.1
Host: www.cdn4ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xxxfree.watch
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:51:58 GMT
content-type: application/x-javascript
alt-svc: quic="185.76.9.20:443"; ma=2592000; v="44,43,39"
expires: Sun, 11 Sep 2022 21:56:29 GMT
access-control-allow-origin: *
link: <https://cdn4ads.com/>;rel=preconnect,<https://c.adsco.re/>;rel=preconnect,<https://adsco.re/>;rel=preconnect
cache-control: public, max-age=604800
x-accel-expires: @1662933389
server: CDN77-Turbo
x-77-nzt: AblMCRSY2Tn/cW8AAA
x-77-nzt-ray: 6pVe7b2JGEY
x-cache: HIT
x-age: 28529
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
syndication.realsrv.com/splash.php?native-settings=1&idzone=4673694&cookieconsent=true&p=https%3A%2F%2Fxxxfree.watch%2Faria-valencia-tiny-labor-day%2F
200 OK 6.6 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?native-settings=1&idzone=4673694&cookieconsent=true&p=https%3A%2F%2Fxxxfree.watch%2Faria-valencia-tiny-labor-day%2F
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (12950), with no line terminators
Hash b7ee1e3f73fea9d2e0ef3359deb829bd
33d80a6886bf9c903039975616ea6010818afb21
d9ca981768dda4c10a206e2fb46c3b5e4dcfbdc2a8822430f661186204b45d0d
GET /splash.php?native-settings=1&idzone=4673694&cookieconsent=true&p=https%3A%2F%2Fxxxfree.watch%2Faria-valencia-tiny-labor-day%2F HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xxxfree.watch
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 05:51:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://xxxfree.watch
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A31%3A%2263158e7e892462.6521814385994750%22%3B%7D; expires=Wed, 04 Sep 2024 05:51:58 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
impressions=mxmssbsanxgxaraaxosbageicxbmsboenxgxaaosselcsgeialeblerenxgxarmeomobrgeimxmbasacnxgxaraaoasaageicxbmsbcenxgxaaossrbbageialeblecenxgxaralsbsaxgeimxmbasmbnxgxaraaolroageioslmrxbrnxgxaaosellbbgeicxbmsbocnxgxaaoocoxcogeimsclxcabnxgxaramcssbcgeicxbmsbxcnxgxaaosclmcogeialbserxenxgxaaxbsccmxgeioslmrxlrnxgxaaosxbcmogeimscamxrbnxgxaramxrbclgeimsclxreenxgxaramcssbcgeimxmssbrenxgxaramcsmccgeicraxcrebnxgxarmcrsxcxgeislsarosxnxgxaaosselcsgeicmexsleonxgxarabcxolegeioslmrxbmnxgxaaosrmxxbgeirsxcecsenxgxarabbcraxgeialbserebnxgxaaoomcaccgeioslmroemnxgxaaossrccogeicmexsblcnxgxarmrcmolageiaaoboxbonxgxaralmcosrgeiamxmbxbonxgxaralsbsolgeimscamxccnxgxaralsbsaxgeiaaoabboonxgxarmeomobrgeislsaroornxgxaaxollooxgeimooxbxeanxgxarmescrbbgeirsxcecsbnxgxarmelblebgeicmexslxcnxgxarmcbccrbgeicraxcrocnxgxarmsoerxxgeicraxcclanxgxarmxmcmmcgeicmexslecnxgxarmsembabgeicraxcreanxgxarmaarabageirsxcecccnxgxarmoocmexgeicraxcrxanxgxarmarlrxmgeialbserxonxgxaaoobreargeimcelelronxgxarbsrmlaageirsxcecxanxgxarbccmbcsgeirbabxabbnxgxaaosclmcogeicmeecrxcnxgxarmbexrmogeicmeecclonxgxarmorasemgeialbsereanxgxaaxsosbblgeicmexslxonxgxarmcxcaregeicaxsscmbnxgxaaxbsccmxgeicmeexcaenxgxarmcxsxcageimcelelrcnxgxarmcxsxcageimcelelcenxgxarmcxsxcageimcoexclonxgxarmcxsxcageialbserecnxgxaaoecxelogeicmeeccbcnxgxarmcarxemgeicmexsblenxgxarmarlrxmgeimcoexaabnxgxaaeosmmecgeimcoexasbnxgxaaeosmmecgeicmeecrecnxgxarmrxsamageicraxcroonxgxarmrasloageicmexrxxonxgxarmaarabageimcoexaxonxgxarbblarblgeicaormbbenxgxarlexsrrageimcebllronxgxarmarlrxmgeirbabxalenxgxarmabbsmmgeicraxcroenxgxarmbexrmogeirsxcecsonxgxarmbrrcsegeimcoexxlonxgxarbsasblxgeimcoexasanxgxaaoecxelogeiroeaablbnxgxarlrlxmeegeimcoexarenxgxarlcbxlxageimcoexabbnxgxarbxeocasgeimcoexrlonxgxarbblarblgeimooxbelbnxgxarbexxealgeirsxcecebnxgxarbsasblxgeimcoexrlcnxgxarlcbxlxageimcoexaaanxgxarlcbxlxageirsxcecxenxgxarbxxxolxgeiraaoxbbcnxgxarbellsrxgeimcelelcanxgxaaxarbxxegeioslmrxlsnxgxaaosclmcogeicaormbmanxgxaaxxlcxbmgeicaormlxcnxgxarbobbbbmgeicaormbbanxgxaaeoxexsxgeicaormlxanxgxarbobbbbmgeimcelelranxgxarbsrmlaageimcersrocnxgxarbsasblxgeimcoexaxcnxgxarbcslxbcgeisaeeasslnxgxaaoomsarogeimcersxbenxgxaaxacacesgeimcersxacnxgxarbroammrgeicaormloenxgxaaeoxexsxgeimcersoeenxgxarbroammrgeimcelelaanxgxarbrboxregeimcelelbenxgxarbrboxregeimcoexaxbnxgxaaoecxelogeimcoexamenxgxarbblarblgeimcoexabanxgxarbblarblgeimcoexacanxgxarbblarblgeimcoexaoonxgxarblslrsxgeimcclsxbcnxgxaaeosmmecgeimcclsoeonxgxaaoxbsallgeicaormleanxgxaaxxemrecgeimcclsebcnxgxarlexorssgeimcclsxmenxgxaaeoaolesgeimcclossbnxgxaaelalbbbgeimcclsxlenxgxaaoosmroegeimcclsxsonxgxaaexxllbrgeimcclsxxcnxgxarlalasssgeimcclsxlanxgxaaemmeambgeimcclsxscnxgxaaoeorrelgeicaormbmbnxgxaaemaolsbgeimcclselcnxgxarleomllegeimccloscenxgxaaersaolbgeimcclsxaanxgxarlesreebgeimcclselanxgxaaebsleobgeimcclsebbnxgxarlcbxlxageicaormbmcnxgxarloeaexageicaormlxonxgxarlmbxoosgeiclsmrrrenxgxarloalasrgeiclsmarcanxgxarloalasrgeiclsmrbronxgxarloalasrgeimcclsxronxgxaaxarbxxegeimcclsxmanxgxaaexxsoasgeimcclossanxgxaaexxllbrgeimcclsxaonxgxaaosrmxxbgeimcoexasonxgxarlcbxlxageimcclsxabnxgxarlreooaageimcclosscnxgxaaoxbsallgeimcclsxlbnxgxaaxbsaslsgeimcclsxbbnxgxarlalasssgeicaormbbonxgxaaeoxexsxgeimcclsxcanxgxaaxxcmeaegeimcclsxmbnxgxaaeebrxsegeimcclsxxonxgxaaxobsolageimcclsxsbnxgxaaxlomxrlgeimcclsxcbnxgxaaexxllbrgeimcclsxmonxgxaaexoembogeimcclsxconxgxaaosrmxxbgeimcclselenxgxaaesmsscageimcclsxmcnxgxaaeosmmecgeimcoexacbnxgxaaoecxelogeimcclsxbanxgxaaeoaolesgeimcclsebanxgxaaesobbblgeimcclsxxanxgxaaesalmmsgeimcclsxacnxgxaaxlcabocgeimcoexcccnxgxaaecebcslgeimcclsxocnxgxaaesmsscageimcclsxbenxgxaaesalmlageimcclsxsenxgxaaeassbmlgeimcclsxrenxgxaaesmsscageimcclosccnxgxaaecexaasgeimcclsxobnxgxaaoxbsabcgeimcelelsanxgxaaecebcslgeimcelelmanxgxaaecebcslgeimcclsxlonxgxaaoxbsallgeimcclsxlcnxgxaaxsxrlcsgeimcclosconxgxaaoobxxlxgeimrerbboanxgxaaemsosmogeicaormlxenxgxaaoomsarogeicaormbbcnxgxaaoomsarogeimrscomecnxgxaaxeeaxaegeimcclsxsanxgxaaosrmxxbgeimcrxsbobnxgxaaosxbcmogeimcoexsacnxgxaaxxcmeaegeimrscomeenxgxaaxsbxmrcgeimrcrbrxenxgxaaxrxelsbgeimcersxlbnxgxaaxacacesgeimcelelrenxgxaaxarbxxegeimrerbbsbnxgxaaoxasxrcgeimrerbbccnxgxaaoeemarogeimrerbmlenxgxaaxlocooageimccloscanxgxaaxlslrergeimrerbmlanxgxaaoeemarogeiclsmrbocnxgxaaooxbxsrgeiclsmrrccnxgxaaooxbxsrgeiclsmrmocnxgxaaooxbxsrgeiccmblmmonxgxaaosxbcmogeiccmblmmbnxgxaaosrmxxbgeimclsaoxbnbgxaaoomxxxcgxcceimrrbosxbnxsgxaaoomxxxcgxcceimeembescnsgxaaoomoerogxcceimxcbrxbenxgxaaoomosaogxcceimcssmlrencgxaaoomomaogxcceimrracoaenxgxaaoomomaogxcceimrxccosancgxaaoomolcmgxcceicxexraernxgxaaoomsemmgxcceimrxccosbnogxaaoomsemmgxcceiallxlmscnxgxaaoomsarogxcceialblcxmenxgxaaoomsarsgxcceimocbmmmcnxgxaaoomsarsgxcceimocbmmmenxgxaaoomsarsgxcceiallxlmoenxgxaaoomsarsgxcceimexxlrbenxgxaaoomsarsgxcceimxeoxsbencgxaaoomcaccgxcceimxlbmxlcnogxaaoomcaccgxcceimrrboraenogxaaoomrmcegxcceimrrcrrbbnxegxaaoomrmcxgxcceimrracoranxgxaaoomrmcxgxcceimrsreamonsgxaaoommrxagxcceimrsreamansgxaaoommmoagxcceimxlbmoscnogxaaoomlxsagxcceimxomsmconxgxaaoomllscgxcceimrcaeesbnrgxaaoobemesgxcceiaaxcabaonxgxaaoobemecgxcceimrrascacnxgxaaoobemecgxcceimcssmlronsgxaaoobemecgxcceimclobexbnxgxaaoobemergxcceimxxerreonxgxaaoobxxlxgxcceiccmblmmanxgxaaossrccogeimeelaclonsgxaaoobxxlogxcceimcoaxmxcncgxaaoobxxlogxcceiccblrxrbnxgxaaoobxcxsgxcceiccblrxaanxgxaaoobxcxsgxcceialbbebsanxgxaaoobxcxcgxcceimxlbmxbbnogxaaoobsobegxcceimrrcrrlencgxaaoobsmlrgxcceimoobcomonxgxaaoobsbsbgxcceimoobcobenxgxaaoobsbsbgxcceimrorsroanxgxaaoobcmragxcceimrxccoscnogxaaoobrrcxgxcceimrrcrrlonmgxaaoobaxamgxcceicrasmsrcnxgxaaoobamrlgxcceiarmcbbbbnxgxaaoolelamgxcceimxcbrxcbnxgxaaoolrxsegxcceimcoaxmxoncgxaaoollrosgxcceimememseonxgxaaoollrorgxcceimxlbmosanogxaaoseolllgxcceimcssxmscnxgxaaosecoxrgxcceiaxbscbconxgxaaosemlcegxcceimrrascmanxgxaaoselemsgxcceimxlbmoobnogxaaoselemsgxcceislmbecesnxgxaaosellbbgxoaeimxxerreanxgxaaosellbbgxcceimrxsscxcnsgxaaosxeeasgxcceimrxaaxxbnxgxaaosxexmxgxcceiceecmorsnxgxaaosxexmxgxcceicloaxxoenxgxaaosxemxmgxcceimcrxeoccnxgxaaosxemxlgxcceimcrxeomcnxgxaaosxemxlgxcceimcrxeoacnxgxaaosxemxlgxcceimcrxeoaenxgxaaosxemxlgxcceimcrxeocbnxgxaaosxemxlgxcceimcrxeobenxgxaaosxemoegxcceimcrxeorcnxgxaaosxemoegxcceimcrxeosbnxgxaaosxemoegxcceimcrxeoaanxgxaaosxemoegxcceimocbmmbenxgxaaosxemoegxcceimrcmxlaonxgxaaosxemoegxcceimrsreaboncgxaaosxxmrogxcceimrsreambnsgxaaosxxmrogxcceimrcaoaoanrgxaaosxorxagxcceimrracoaonxgxaaosxsebogxcceimeembeconxgxaaosxsocagxcceimrracorcnxgxaaosxclaogxcceimocolroansgxaaosxrxmcgxcceimxlbmosonogxaaosxrxmcgxcceixaoosscrnxgxaaosxasosgxcceialaroxrcnxgxaaosxboaegxcceicbbmelmcnxgxaaosxbcmogxcceimxeemblenxgxaaosxbcmsgxcceimrrascmbnxgxaaosoexssgxcceimraeecxanxgxaaosoexssgxcceimxeemleenogxaaosoexssgxcceimraeecxbnxgxaaosoxsrogxcceimorolaronxgxaaosoxsrogxcceiaaxcamlenxgxaaosoclrxgxcceimxlbmxlenogxaaosorbsrgxcceimrrrommenxgxaaosorbsrgxcceimxxrecsanxgxaaosoalsbgxcceimxlbmoconogxaaosoalsbgxcceimrrasxmonxgxaaosomrmogxcceimrcmxlaanxgxaaosobsslgxcceimrrbosxcnsgxaaosobsslgxcceixaoossalnxgxaaosserbbgxcceialrexeoonxgxaaosserbbgxcceimxxerrxenxgxaaosselcsgxcceialbbebrenxgxaaosselcsgxcceimocolrocnogxaaossxmxcgxcceimeembesonxgxaaossocacgxcceicmarxbbonsgxaaossocacgxcceimcscroconxgxaaossocacgxcceicrcorbccnxgxaaossocargxcceicxexraxxnxgxaaossocargxcceimrrasxbonxgxaaosssobmgxcceimxeemblanxgxaaosssobmgxcceimrrasxbenxgxaaosssobmgxcceimrrasxmcnxgxaaosscslmgxcceimrrascaanxgxaaosscaxbgxcceimxlbalcenogxaaosscaxbgxcceimcssmlrcnsgxaaossrccogxcceimrrascmonxgxaaossrccogxcceimxlbmxlonogxaaossrcccgxcceimxeoxsacnogxaaossrcccgxcceimrrascabnxgxaaossrrcrgxcceimxlbalsbnogxaaossrbbrgxcceimrrascaonxgxaaossrbbagxcceiclarsaeenxgxaaoscoxoogxcceicloaxxmenxgxaaoscsaebgxcceimxlbmosenogxaaoscsaebgxcceimrxccosenogxaaoscrloogxcceicloaxxacnxgxaaoscrlrsgxcceimrsreaabnxgxaaoscleamgxcceimrrascaenxgxaaosclmcogxcceislmbeslrnxgxaaosclmcogxoaeimrrascmcnxgxaaosrerxcgxcceimxcbrxlonxgxaaosroexsgxcceialbbebsbnxgxaaosroexsgxcceimsacexoonxgxaaosroexsgxcceicxmecmcanxgxaaosroossgxcceicloaxxmonxgxaaosrsasrgxcceimexexabbnxgxaaosrsasagxcceimcorllcanxgxaaosrrabsgxcceimrcaoxbanxgxaaosracccgxcceicloaecoanxgxaaosracccgxcceimraeelaanxgxaaosramoxgxcceiabxoaelonxgxaaosramoxgxcceimraeelabnxgxaaosramosgxcceimxxerrecnxgxaaosrmxxbgxcceimcoexaebnxgxaaosrmxxbge; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4673694%7C71987230%7C100644%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4673694%7C71105504%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4673694%7C74493142%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4673694%7C74201608%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4673694%7C74493162%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4673694%7C74493136%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4673694%7C23975187%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
Content-Encoding: gzip
dood.wf/e/7fkllhb1oso19vtnx48t2r81rxkt26vw
302 Found 0 B URL HTTP/2 dood.wf/e/7fkllhb1oso19vtnx48t2r81rxkt26vw
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /e/7fkllhb1oso19vtnx48t2r81rxkt26vw HTTP/1.1
Host: dood.wf
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 05 Sep 2022 05:51:58 GMT
content-length: 0
set-cookie: lang=1; domain=.dood.wf; path=/
referer=; domain=.dood.wf; path=/; expires=Mon, 05-Sep-2022 05:52:58 GMT
location: /e/ozgq13ocwfrqikbogfy9q5hpsgzbo1t
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IEULUJsKuapTsxa3Q9e6GCzK3VmLLvKzm52u44bcCcAnxU9nuX44uhIfP%2BISc%2BLkuQ%2BuzddRm6c%2Fo5bmiTaRc6R9oBCJBtmj4Ya9QBdaU3oqSd9FQz9p3Bk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 745cb2371c17b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
syndication.realsrv.com/splash.php?native-settings=1&idzone=4673694&cookieconsent=true&p=https%3A%2F%2Fxxxfree.watch%2Faria-valencia-tiny-labor-day%2F
200 OK 6.8 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?native-settings=1&idzone=4673694&cookieconsent=true&p=https%3A%2F%2Fxxxfree.watch%2Faria-valencia-tiny-labor-day%2F
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (13476), with no line terminators
Hash 1d7284417383a0800cdff2da37eecf24
22a6a1119d91c2dc815b88923582f82a337d91c1
4722cdf86a92665bc4e6d6369adc7c6859cd57c58a28eac0cd82d70a0e0fb4b4
GET /splash.php?native-settings=1&idzone=4673694&cookieconsent=true&p=https%3A%2F%2Fxxxfree.watch%2Faria-valencia-tiny-labor-day%2F HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xxxfree.watch
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 05:51:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://xxxfree.watch
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263158e7e961209.447640083253448876%22%3B%7D; expires=Wed, 04 Sep 2024 05:51:58 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4673694%7C41873820%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4673694%7C23975207%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4673694%7C69830506%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4673694%7C74201682%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4673694%7C74493112%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4673694%7C74493142%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4673694%7C74493138%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
Content-Encoding: gzip
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash db06a437c8cb99d47995d52c7871188a
2594f4f24ca700b0455c5a898d810d6c497c3df1
10b827d9053c88c7edd678fd1c38623b7de0dc2424c0a55efd1560b05e3cfb1d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "10B827D9053C88C7EDD678FD1C38623B7DE0DC2424C0A55EFD1560B05E3CFB1D"
Last-Modified: Sun, 04 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7537
Expires: Mon, 05 Sep 2022 07:57:35 GMT
Date: Mon, 05 Sep 2022 05:51:58 GMT
Connection: keep-alive
syndication.realsrv.com/splash.php?native-settings=1&idzone=4713906&cookieconsent=true&p=https%3A%2F%2Fxxxfree.watch%2Faria-valencia-tiny-labor-day%2F
200 OK 6.2 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?native-settings=1&idzone=4713906&cookieconsent=true&p=https%3A%2F%2Fxxxfree.watch%2Faria-valencia-tiny-labor-day%2F
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with very long lines (13446), with no line terminators
Hash 0f321629c04398374dc8aa7298df5302
23373122bff19750d1367ab2a05a0c29f810b244
876bfd7fc733dc7f987882e269b525a90e522e8fcddf93381bb5b0206fcb8d85
GET /splash.php?native-settings=1&idzone=4713906&cookieconsent=true&p=https%3A%2F%2Fxxxfree.watch%2Faria-valencia-tiny-labor-day%2F HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xxxfree.watch
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 05:51:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://xxxfree.watch
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263158e7e9fcfe4.488710922826942232%22%3B%7D; expires=Wed, 04 Sep 2024 05:51:58 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4713906%7C74493128%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4713906%7C23975187%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4713906%7C74493146%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
Content-Encoding: gzip
syndication.realsrv.com/splash.php?native-settings=1&idzone=4713906&cookieconsent=true&p=https%3A%2F%2Fxxxfree.watch%2Faria-valencia-tiny-labor-day%2F
200 OK 4.1 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?native-settings=1&idzone=4713906&cookieconsent=true&p=https%3A%2F%2Fxxxfree.watch%2Faria-valencia-tiny-labor-day%2F
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (7669), with no line terminators
Hash 458f377319f87327fbdcbbaa169b44d6
27520967a29e89789d4a1ae1f67c6f99b9e18645
20ddb463bebd88739f7bbf12775d14f3caabbc6b6931282cfc4525c5ee4afc36
GET /splash.php?native-settings=1&idzone=4713906&cookieconsent=true&p=https%3A%2F%2Fxxxfree.watch%2Faria-valencia-tiny-labor-day%2F HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xxxfree.watch
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 05:51:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://xxxfree.watch
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263158e7ea1bea9.929328741683983945%22%3B%7D; expires=Wed, 04 Sep 2024 05:51:58 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
impressions=mxmssbsanxgxaraaxosbageicxbmsboenxgxaaosselcsgeialeblerenxgxarmeomobrgeimxmbasacnxgxaraaoasaageicxbmsbcenxgxaaossrbbageialeblecenxgxaralsbsaxgeimxmbasmbnxgxaraaolroageioslmrxbrnxgxaaosellbbgeicxbmsbocnxgxaaoocoxcogeimsclxcabnxgxaramcssbcgeicxbmsbxcnxgxaaosclmcogeialbserxenxgxaaxbsccmxgeioslmrxlrnxgxaaosxbcmogeimscamxrbnxgxaramxrbclgeimsclxreenxgxaramcssbcgeimxmssbrenxgxaramcsmccgeicraxcrebnxgxarmcrsxcxgeislsarosxnxgxaaosselcsgeicmexsleonxgxarabcxolegeioslmrxbmnxgxaaosrmxxbgeirsxcecsenxgxarabbcraxgeialbserebnxgxaaoomcaccgeioslmroemnxgxaaossrccogeicmexsblcnxgxarmrcmolageiaaoboxbonxgxaralmcosrgeiamxmbxbonxgxaralsbsolgeimscamxccnxgxaralsbsaxgeiaaoabboonxgxarmeomobrgeislsaroornxgxaaxollooxgeimooxbxeanxgxarmescrbbgeirsxcecsbnxgxarmelblebgeicmexslxcnxgxarmcbccrbgeicraxcrocnxgxarmsoerxxgeicraxcclanxgxarmxmcmmcgeicmexslecnxgxarmsembabgeicraxcreanxgxarmaarabageirsxcecccnxgxarmoocmexgeicraxcrxanxgxarmarlrxmgeialbserxonxgxaaoobreargeimcelelronxgxarbsrmlaageirsxcecxanxgxarbccmbcsgeirbabxabbnxgxaaosclmcogeicmeecrxcnxgxarmbexrmogeicmeecclonxgxarmorasemgeialbsereanxgxaaxsosbblgeicmexslxonxgxarmcxcaregeicaxsscmbnxgxaaxbsccmxgeicmeexcaenxgxarmcxsxcageimcelelrcnxgxarmcxsxcageimcelelcenxgxarmcxsxcageimcoexclonxgxarmcxsxcageialbserecnxgxaaoecxelogeicmeeccbcnxgxarmcarxemgeicmexsblenxgxarmarlrxmgeimcoexaabnxgxaaeosmmecgeimcoexasbnxgxaaeosmmecgeicmeecrecnxgxarmrxsamageicraxcroonxgxarmrasloageicmexrxxonxgxarmaarabageimcoexaxonxgxarbblarblgeicaormbbenxgxarlexsrrageimcebllronxgxarmarlrxmgeirbabxalenxgxarmabbsmmgeicraxcroenxgxarmbexrmogeirsxcecsonxgxarmbrrcsegeimcoexxlonxgxarbsasblxgeimcoexasanxgxaaoecxelogeiroeaablbnxgxarlrlxmeegeimcoexarenxgxarlcbxlxageimcoexabbnxgxarbxeocasgeimcoexrlonxgxarbblarblgeimooxbelbnxgxarbexxealgeirsxcecebnxgxarbsasblxgeimcoexrlcnxgxarlcbxlxageimcoexaaanxgxarlcbxlxageirsxcecxenxgxarbxxxolxgeiraaoxbbcnxgxarbellsrxgeimcelelcanxgxaaxarbxxegeioslmrxlsnxgxaaosrmxxbgeicaormbmanxgxaaxxlcxbmgeicaormlxcnxgxarbobbbbmgeicaormbbanxgxaaeoxexsxgeicaormlxanxgxarbobbbbmgeimcelelranxgxarbsrmlaageimcersrocnxgxarbsasblxgeimcoexaxcnxgxarbcslxbcgeisaeeasslnxgxaaoomsarogeimcersxbenxgxaaxacacesgeimcersxacnxgxarbroammrgeicaormloenxgxaaeoxexsxgeimcersoeenxgxarbroammrgeimcelelaanxgxarbrboxregeimcelelbenxgxarbrboxregeimcoexaxbnxgxaaoecxelogeimcoexamenxgxarbblarblgeimcoexabanxgxarbblarblgeimcoexacanxgxarbblarblgeimcoexaoonxgxarblslrsxgeimcclsxbcnxgxaaeosmmecgeimcclsoeonxgxaaoxbsallgeicaormleanxgxaaxxemrecgeimcclsebcnxgxarlexorssgeimcclsxmenxgxaaeoaolesgeimcclossbnxgxaaelalbbbgeimcclsxlenxgxaaoosmroegeimcclsxsonxgxaaexxllbrgeimcclsxxcnxgxarlalasssgeimcclsxlanxgxaaemmeambgeimcclsxscnxgxaaosrmxxbgeicaormbmbnxgxaaemaolsbgeimcclselcnxgxarleomllegeimccloscenxgxaaersaolbgeimcclsxaanxgxarlesreebgeimcclselanxgxaaebsleobgeimcclsebbnxgxarlcbxlxageicaormbmcnxgxarloeaexageicaormlxonxgxarlmbxoosgeiclsmrrrenxgxarloalasrgeiclsmarcanxgxarloalasrgeiclsmrbronxgxarloalasrgeimcclsxronxgxaaxarbxxegeimcclsxmanxgxaaexxsoasgeimcclossanxgxaaexxllbrgeimcclsxaonxgxaaosrmxxbgeimcoexasonxgxarlcbxlxageimcclsxabnxgxarlreooaageimcclosscnxgxaaoxbsallgeimcclsxlbnxgxaaxbsaslsgeimcclsxbbnxgxarlalasssgeicaormbbonxgxaaeoxexsxgeimcclsxcanxgxaaxxcmeaegeimcclsxmbnxgxaaeebrxsegeimcclsxxonxgxaaxobsolageimcclsxsbnxgxaaxlomxrlgeimcclsxcbnxgxaaexxllbrgeimcclsxmonxgxaaexoembogeimcclsxconxgxaaosrmxxbgeimcclselenxgxaaesmsscageimcclsxmcnxgxaaeosmmecgeimcoexacbnxgxaaoecxelogeimcclsxbanxgxaaeoaolesgeimcclsebanxgxaaesobbblgeimcclsxxanxgxaaesalmmsgeimcclsxacnxgxaaxlcabocgeimcoexcccnxgxaaecebcslgeimcclsxocnxgxaaesmsscageimcclsxbenxgxaaesalmlageimcclsxsenxgxaaeassbmlgeimcclsxrenxgxaaesmsscageimcclosccnxgxaaecexaasgeimcclsxobnxgxaaoxbsabcgeimcelelsanxgxaaecebcslgeimcelelmanxgxaaecebcslgeimcclsxlonxgxaaoxbsallgeimcclsxlcnxgxaaxsxrlcsgeimcclosconxgxaaoobxxlxgeimrerbboanxgxaaemsosmogeicaormlxenxgxaaoomsarogeicaormbbcnxgxaaoomsarogeimrscomecnxgxaaxeeaxaegeimcclsxsanxgxaaosrmxxbgeimcrxsbobnxgxaaosxbcmogeimcoexsacnxgxaaxxcmeaegeimrscomeenxgxaaxsbxmrcgeimrcrbrxenxgxaaxrxelsbgeimcersxlbnxgxaaxacacesgeimcelelrenxgxaaxarbxxegeimrerbbsbnxgxaaoxasxrcgeimrerbbccnxgxaaoeemarogeimrerbmlenxgxaaxlocooageimccloscanxgxaaxlslrergeimrerbmlanxgxaaoeemarogeiclsmrbocnxgxaaooxbxsrgeiclsmrrccnxgxaaooxbxsrgeiclsmrmocnxgxaaooxbxsrgeiccmblmmonxgxaaosrmxxbgeiccmblmmbnxgxaaosrmxxbgeimclsaoxbnbgxaaoomxxxcgxcceimrrbosxbnxsgxaaoomxxxcgxcceimeembescnsgxaaoomoerogxcceimxcbrxbenxgxaaoomosaogxcceimcssmlrencgxaaoomomaogxcceimrracoaenxgxaaoomomaogxcceimrxccosancgxaaoomolcmgxcceicxexraernxgxaaoomsemmgxcceimrxccosbnogxaaoomsemmgxcceiallxlmscnxgxaaoomsarogxcceialblcxmenxgxaaoomsarsgxcceimocbmmmcnxgxaaoomsarsgxcceimocbmmmenxgxaaoomsarsgxcceiallxlmoenxgxaaoomsarsgxcceimexxlrbenxgxaaoomsarsgxcceimxeoxsbencgxaaoomcaccgxcceimxlbmxlcnogxaaoomcaccgxcceimrrboraenogxaaoomrmcegxcceimrrcrrbbnxegxaaoomrmcxgxcceimrracoranxgxaaoomrmcxgxcceimrsreamonsgxaaoommrxagxcceimrsreamansgxaaoommmoagxcceimxlbmoscnogxaaoomlxsagxcceimxomsmconxgxaaoomllscgxcceimrcaeesbnrgxaaoobemesgxcceiaaxcabaonxgxaaoobemecgxcceimrrascacnxgxaaoobemecgxcceimcssmlronsgxaaoobemecgxcceimclobexbnxgxaaoobemergxcceimxxerreonxgxaaoobxxlxgxcceiccmblmmanxgxaaossrccogeimeelaclonsgxaaoobxxlogxcceimcoaxmxcncgxaaoobxxlogxcceiccblrxrbnxgxaaoobxcxsgxcceiccblrxaanxgxaaoobxcxsgxcceialbbebsanxgxaaoobxcxcgxcceimxlbmxbbnogxaaoobsobegxcceimrrcrrlenrgxaaoobsmlrgxcceimoobcomonxgxaaoobsbsbgxcceimoobcobenxgxaaoobsbsbgxcceimrorsroanxgxaaoobcmragxcceimrxccoscnogxaaoobrrcxgxcceimrrcrrlonmgxaaoobaxamgxcceicrasmsrcnxgxaaoobamrlgxcceiarmcbbbbnxgxaaoolelamgxcceimxcbrxcbnxgxaaoolrxsegxcceimcoaxmxoncgxaaoollrosgxcceimememseonxgxaaoollrorgxcceimxlbmosanogxaaoseolllgxcceimcssxmscnxgxaaosecoxrgxcceiaxbscbconxgxaaosemlcegxcceimrrascmanxgxaaoselemsgxcceimxlbmoobnogxaaoselemsgxcceislmbecesnxgxaaosellbbgxoaeimxxerreanxgxaaosellbbgxcceimrxsscxcnsgxaaosxeeasgxcceimrxaaxxbnxgxaaosxexmxgxcceiceecmorsnxgxaaosxexmxgxcceicloaxxoenxgxaaosxemxmgxcceimcrxeoccnxgxaaosxemxlgxcceimcrxeomcnxgxaaosxemxlgxcceimcrxeoacnxgxaaosxemxlgxcceimcrxeoaenxgxaaosxemxlgxcceimcrxeocbnxgxaaosxemxlgxcceimcrxeobenxgxaaosxemoegxcceimcrxeorcnxgxaaosxemoegxcceimcrxeosbnxgxaaosxemoegxcceimcrxeoaanxgxaaosxemoegxcceimocbmmbenxgxaaosxemoegxcceimrcmxlaonxgxaaosxemoegxcceimrsreaboncgxaaosxxmrogxcceimrsreambnsgxaaosxxmrogxcceimrcaoaoanrgxaaosxorxagxcceimrracoaonxgxaaosxsebogxcceimeembeconxgxaaosxsocagxcceimrracorcnxgxaaosxclaogxcceimocolroansgxaaosxrxmcgxcceimxlbmosonogxaaosxrxmcgxcceixaoosscrnxgxaaosxasosgxcceialaroxrcnxgxaaosxboaegxcceicbbmelmcnxgxaaosxbcmogxcceimxeemblenxgxaaosxbcmsgxcceimrrascmbnxgxaaosoexssgxcceimraeecxanxgxaaosoexssgxcceimxeemleenogxaaosoexssgxcceimraeecxbnxgxaaosoxsrogxcceimorolaronxgxaaosoxsrogxcceiaaxcamlenxgxaaosoclrxgxcceimxlbmxlenogxaaosorbsrgxcceimrrrommenxgxaaosorbsrgxcceimxxrecsanxgxaaosoalsbgxcceimxlbmoconogxaaosoalsbgxcceimrrasxmonxgxaaosomrmogxcceimrcmxlaanxgxaaosobsslgxcceimrrbosxcnsgxaaosobsslgxcceixaoossalnxgxaaosserbbgxcceialrexeoonxgxaaosserbbgxcceimxxerrxenxgxaaosselcsgxcceialbbebrenxgxaaosselcsgxcceimocolrocnogxaaossxmxcgxcceimeembesonxgxaaossocacgxcceicmarxbbonsgxaaossocacgxcceimcscroconxgxaaossocacgxcceicrcorbccnxgxaaossocargxcceicxexraxxnxgxaaossocargxcceimrrasxbonxgxaaosssobmgxcceimxeemblanxgxaaosssobmgxcceimrrasxbenxgxaaosssobmgxcceimrrasxmcnxgxaaosscslmgxcceimrrascaanxgxaaosscaxbgxcceimxlbalcenogxaaosscaxbgxcceimcssmlrcnsgxaaossrccogxcceimrrascmonxgxaaossrccogxcceimxlbmxlonogxaaossrcccgxcceimxeoxsacnogxaaossrcccgxcceimrrascabnxgxaaossrrcrgxcceimxlbalsbnogxaaossrbbrgxcceimrrascaonxgxaaossrbbagxcceiclarsaeenxgxaaoscoxoogxcceicloaxxmenxgxaaoscsaebgxcceimxlbmosenogxaaoscsaebgxcceimrxccosenogxaaoscrloogxcceicloaxxacnxgxaaoscrlrsgxcceimrsreaabnxgxaaoscleamgxcceimrrascaenxgxaaosclmcogxcceislmbeslrnxgxaaosclmcogxoaeimrrascmcnxgxaaosrerxcgxcceimxcbrxlonxgxaaosroexsgxcceialbbebsbnxgxaaosroexsgxcceimsacexoonxgxaaosroexsgxcceicxmecmcanxgxaaosroossgxcceicloaxxmonxgxaaosrsasrgxcceimexexabbnxgxaaosrsasagxcceimcorllcanxgxaaosrrabsgxcceimrcaoxbanxgxaaosracccgxcceicloaecoanxgxaaosracccgxcceimraeelaanxgxaaosramoxgxcceiabxoaelonxgxaaosramoxgxcceimraeelabnxgxaaosramosgxcceimxxerrecnxgxaaosrmxxbgxcceimcoexaebnxgxaaosrmxxbge; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4713906%7C23975193%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4713906%7C75545590%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4713906%7C74493134%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C5caef51bef0b4ae67434d5658ac317c0%7C0%7Cxxxfree.watch%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Sep 2022 05:51:58 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
Content-Encoding: gzip
pornjustx.com/e/T0tpbmJLS1BFR0NnbXRTTmZyZWVqdz09
200 OK 32 kB URL HTTP/2 pornjustx.com/e/T0tpbmJLS1BFR0NnbXRTTmZyZWVqdz09
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8357)
Hash d8ec6860c9c23c93485cd41f76c2dc6b
7fed1e3c7d6a1c6116450158d1b4279462bf8664
2faa35c0a5b43f6546cb17b18b1c72a974c7779d64056bdb2e6e6effa33639bc
GET /e/T0tpbmJLS1BFR0NnbXRTTmZyZWVqdz09 HTTP/1.1
Host: pornjustx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:51:58 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-robots-tag: 'none, noindex, nofollow, noarchive, nosnippet, noodp, notranslate, noimageindex'
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
p3p: policyref="http://www.example.com/w3c/p3p.xml", CP="CURa ADMa DEVa CONo HISa OUR IND DSP ALL COR"
link: <//pornjustx.com>; rel=preconnect; crossorigin, <//global.stun.twilio.com>; rel=dns-prefetch; crossorigin, <//counter.yadro.ru>; rel=preconnect; crossorigin, <//imasdk.googleapis.com>; rel=preconnect; crossorigin, <//stun2.l.google.com>; rel=dns-prefetch; crossorigin, <//unpkg.com>; rel=preconnect; crossorigin, <//mc.yandex.ru>; rel=preconnect; crossorigin, <//cdn.jsdelivr.net>; rel=preconnect; crossorigin, <//signal.netu.tv>; rel=dns-prefetch; crossorigin,<//wws.commentsengine.com>; rel=dns-prefetch; crossorigin, <//www.gstatic.com>; rel=preconnect; crossorigin, <//imasdk.googleapis.com>; rel=preconnect; crossorigin, <//storage.googleapis.com>; rel=preconnect; crossorigin, <//www.google.com>; rel=preconnect; crossorigin,<//deliver.vkcdnservice.com>; rel=preconnect; crossorigin, <//deliver.vkcdnservice.com>; rel=preconnect; crossorigin,<//vkcdnservice.appspot.com.storage.googleapis.com>; rel=preconnect; crossorigin, <//www.google.com>; rel=preconnect; crossorigin, <//www.recaptcha.net>; rel=preconnect; crossorigin, <//cdnjs.cloudflare.com>; rel=preconnect; crossorigin
x-origin-location: player
cache-control: public, stale-if-error=30, max-age=30
x-cache-status-inferno: MISS
x-inferno-location: player
x-inferno-limit-req: PASSED
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jAmiU%2FN7g3aoTSz0UVu4nkfd%2BUtWYAVgHS6%2FmsAdVwD0OB7he45y%2BUkWUwscIxyoFrq4bN7uaAv63%2BP7oCNS2l7%2BKVZLX%2Fc0bgyYj8UO2FGREcOYCwMi25VIvaJmetrS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 745cb236e9a9b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
syndication.realsrv.com/v1/api.php
200 OK 1.0 kB URL HTTP/1.1 syndication.realsrv.com/v1/api.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (1399), with no line terminators
Hash 989a0e2efbd42c3e95d520af5af3327b
9d4831345e5608ea8b0f33aca4936707a73ccf4b
8c91969b71c4125496048fb907bb7d96b9e93fe7090d5a35c60fd50ce1ae8262
POST /v1/api.php HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 278
Origin: https://a.realsrv.com
Connection: keep-alive
Referer: https://a.realsrv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 05:51:58 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://a.realsrv.com
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
syndication.realsrv.com/v1/api.php
200 OK 1.0 kB URL HTTP/1.1 syndication.realsrv.com/v1/api.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (1402), with no line terminators
Hash ae6ca640d0bf3981d76ed60c1dcbac05
05d3387532239d128db7df3c63bcc5870632010d
b58d16a823b4cbeff806a48546970373d52f1d1b916f5b1abfce9e92656b44cf
POST /v1/api.php HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 278
Origin: https://a.realsrv.com
Connection: keep-alive
Referer: https://a.realsrv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 05:51:58 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://a.realsrv.com
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
syndication.realsrv.com/v1/api.php
200 OK 1.0 kB URL HTTP/1.1 syndication.realsrv.com/v1/api.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (1389), with no line terminators
Hash 3ef44e1ea5d8da225d24df3549f888b7
869836a221c57ef449f0528db315e3f043c322cd
c3756bd58b99ce5e2ea47e39193d4e68266307c2257742b51d88a10fee8c1f08
POST /v1/api.php HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 278
Origin: https://a.realsrv.com
Connection: keep-alive
Referer: https://a.realsrv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 05:51:58 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://a.realsrv.com
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
unpkg.com/progressbar.js@1.1.0/dist/progressbar.min.js
200 OK 9.2 kB URL HTTP/2 unpkg.com/progressbar.js@1.1.0/dist/progressbar.min.js
IP
File type ASCII text, with very long lines (29325)
Hash 72eb288203e784e1c660b8f9bae510b5
494a58c4e885452e4a15010c45b7d64c239ad0a3
7fd5a40136f1dfc81786144eafa477062ede9a0e6b8ba48acd46a74d54013c05
GET /progressbar.js@1.1.0/dist/progressbar.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:51:58 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"7315-VGu3QlAvqjb4wruVTC8CgYdmBAQ"
via: 1.1 fly.io
fly-request-id: 01F3YGTHVETVB9B7TG2TW5GR8F
cf-cache-status: HIT
age: 11667882
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 745cb2386ba00b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e55281415ad2c89f8e871f59400c8dc1
bc7ca4131f13d89604161eb0641352670c28c033
1e9c57dbee44db8c9aab44449f9f0cb502a6d9f6473de439daf26414d0d2517a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 05:51:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.doodcdn.co/css/embed.css
200 OK 80 kB URL HTTP/2 i.doodcdn.co/css/embed.css
IP
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash 010e9740f2148647b93ae896d452119c
888e44accbd7e78a0654fd4eaf7541269d95e4e9
d33d9d5fc2eef77dd7cda0770e9bc8213f058f2ead19b7d9b7ed731bcd081a47
GET /css/embed.css HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:51:58 GMT
content-type: text/css
content-length: 79720
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: minify
cf-polished: origSize=79890
etag: "61d3187c-13812"
expires: Tue, 04 Oct 2022 08:04:15 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cf-cache-status: HIT
age: 27214
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9W2rp6eUjeZ9pYNe1isp2otCrzQmrvfM1kLcXvB3j7v57FrI1OIAAEub%2FDtNxplaYIaTKNJnnI5tsDBzxu%2Fy5Ss%2BpjFjipEA0f5tICZEKhGl2jjv2C%2BvukWIiwv9bQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 745cb2390f090afa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?render=explicit
200 OK 2.2 kB URL HTTP/2 www.google.com/recaptcha/api.js?render=explicit
IP
Hash 8cd32014513a7d532ad1f8277dfa3b7c
956af611b30cd6e8d743f67a8dac225976b6090a
4b3bfef6cbd9a9a8d94fb5d440727253f5f28b61b67ee53e8da350c2dcffb175
GET /recaptcha/api.js?render=explicit HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Mon, 05 Sep 2022 05:51:58 GMT
date: Mon, 05 Sep 2022 05:51:58 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 554
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 61b3d067e04ba469328b05dfc2f28550
28228f12db503f8ba9f6fe8910df61c3287c713b
8e643b51e4e859eecf4af4baacedf08b33a379c22697ae683f53a0bcf55bf4da
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "8E643B51E4E859EECF4AF4BAACEDF08B33A379C22697AE683F53A0BCF55BF4DA"
Last-Modified: Sat, 03 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2830
Expires: Mon, 05 Sep 2022 06:39:08 GMT
Date: Mon, 05 Sep 2022 05:51:58 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 420a6ffc72857f7132a9065de7c844a9
dee617384561d0790b72f096336b73ade7950579
c98bdc53f1f22291c4b954e9bd5f6432cfe3d5b24e3680b4ada3fc3a696e79d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 05:51:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
6.adsco.re/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xxxfree.watch
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:51:59 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://xxxfree.watch
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 745cb23a9bb8b4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
200 OK 29 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
Hash bff340e7b4ca026021f8557d354cfe94
1573dcaaa243290b1f347472d753673ef229e726
64089f30e659932f98bf27713621d8d4d2832b64a1fdafee512c57182607042e
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:51:59 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 7800823
expires: Sat, 26 Aug 2023 05:51:59 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B9gdqonqrA5Om7P4v8FlMAypFyJzr4RxPhsa1Y4ddyYgzv684KFDbFchFRHI%2F%2BhZfZa%2BRu6G7vPOhrI%2F0NliGfhNv2EbHTiAaClUXWuCg0b21e2KHzjJ8l9aXkzgGNoM1aYLuuIJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 745cb23acf62b518-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b3dc5774c42ac5f5ffdfc21e645f077d
dd6c2cb1848037d13871b5caf25a16b591d1889d
903404ae4683a020a0c7f9f91fd9bef70c7e021ada5d416c0af7ae19d77ddcc0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "903404AE4683A020A0C7F9F91FD9BEF70C7E021ADA5D416C0AF7AE19D77DDCC0"
Last-Modified: Sat, 03 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2976
Expires: Mon, 05 Sep 2022 06:41:35 GMT
Date: Mon, 05 Sep 2022 05:51:59 GMT
Connection: keep-alive
4.adsco.re/
200 OK 62 B IP
File type ASCII text, with no line terminators
Hash adde5febc7b5b6c2c759ec735cce83a0
77ec17be8a9970ff04663294d41c590d0d24fde4
ce2b9f2e5005195de7add565505005be6f2ef0d37521771e15106d1e1b9260ff
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://xxxfree.watch
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 05:51:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://xxxfree.watch
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
c8hdcslq2utx.l4.adsco.re/
200 OK 0 B URL HTTP/1.1 c8hdcslq2utx.l4.adsco.re/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: c8hdcslq2utx.l4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://xxxfree.watch
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 05:51:59 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Tue, 31 Jul 2018 22:16:15 GMT
Connection: close
ETag: "5b60dfaf-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
www.hiwoshote.pro/cda884/f265d2bd3ccc.js
200 OK 27 kB URL HTTP/2 www.hiwoshote.pro/cda884/f265d2bd3ccc.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 074f8dd5aa0f4bd6c6c505480a16ff90
e2c721e035f273a591ae4e04c0b948e7b9df0517
477e806fff1e4525388e60d3a16621c6523521d29c0ae79b096741e94ba0c6c4
GET /cda884/f265d2bd3ccc.js HTTP/1.1
Host: www.hiwoshote.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Origin: https://xxxfree.watch
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ucdn/1.22.0
date: Mon, 05 Sep 2022 05:51:58 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315356882, public
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsqzmAdmqk/B6ooG0EIWoxnf5jngzO4v15H/4XOXMHf5kCW9G0bgBQkxYucKEX6fKtb2yoUxnJLMA+vaS5pzPbmM
x-served-from: l1
x-vhostid: 124, 20876
content-encoding: br
X-Firefox-Spdy: h2
h4ahsm.cfeucdn.com/video_short.mp4
206 Partial Content 3.1 kB URL HTTP/1.1 h4ahsm.cfeucdn.com/video_short.mp4
IP
ASN #28753 Leaseweb Deutschland GmbH
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 639ec085afd48ff720cb1716bb09c075
04789db6677b1e59ae5b2c8c3b565f7ad8bf5c52
7e3c990c8c3e6ad1a07710e7032c1ff22975d6322937e80b0446a07de1b227cb
GET /video_short.mp4 HTTP/1.1
Host: h4ahsm.cfeucdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Origin: https://pornjustx.com
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
Date: Mon, 05 Sep 2022 05:51:58 GMT
Content-Type: video/mp4
Content-Length: 3078
Last-Modified: Sat, 03 Apr 2021 21:17:34 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "6068db6e-c06"
server: YouTube Frontend Proxy
Expires: Wed, 05 Oct 2022 05:51:58 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Origin,Range
Access-Control-Expose-Headers: Content-Range,Content-Length,ETag
Content-Range: bytes 0-3077/3078
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0361f0338085c829f08bcc47678ff1db
dd58a48985773dca8b3f82d3599b273bae3de6b3
c4ece1ae02dae4362ddaab7b520dac597e71d7293a0ef939b9e07d8fbf1e2018
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C4ECE1AE02DAE4362DDAAB7B520DAC597E71D7293A0EF939B9E07D8FBF1E2018"
Last-Modified: Sat, 03 Sep 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10991
Expires: Mon, 05 Sep 2022 08:55:10 GMT
Date: Mon, 05 Sep 2022 05:51:59 GMT
Connection: keep-alive
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Mon, 05 Sep 2022 04:41:12 GMT
expires: Mon, 05 Sep 2022 06:41:12 GMT
cache-control: public, max-age=7200
age: 4247
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 369d1d8e8eb4ffa76b1073aae88ab558
7aedafd4dc1bc70f96c37d5600314eb1a9a9152f
c65bf3ce1ddc70216a20228d18cd0cf232651eed0b6f92215c302d5dd452ce94
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C65BF3CE1DDC70216A20228D18CD0CF232651EED0B6F92215C302D5DD452CE94"
Last-Modified: Sat, 03 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7097
Expires: Mon, 05 Sep 2022 07:50:16 GMT
Date: Mon, 05 Sep 2022 05:51:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd189bdf5fc0703efed76f9898c4d651
28274e250ddf9f5a3df1601c0d29d1d325f18179
f7ac147429d0add821c08b789926e138e3669e2025b24d4a9613104cccb7c056
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7AC147429D0ADD821C08B789926E138E3669E2025B24D4A9613104CCCB7C056"
Last-Modified: Sun, 04 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18180
Expires: Mon, 05 Sep 2022 10:54:59 GMT
Date: Mon, 05 Sep 2022 05:51:59 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3958546039b436bd448017432b45c949
45aadab2339c0718b57200a1b2849073c04f08f5
903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 05:51:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s10.histats.com/js15_as.js
200 OK 4.4 kB URL HTTP/2 s10.histats.com/js15_as.js
IP
File type HTML document, ASCII text, with very long lines (11440), with no line terminators
Hash ed192092c129db6123a3397855f42619
067e9b8e26cf6246eb84c6b9cf3da0c192ce7b3e
998fff486a7fb38b6ed445edc36c9b317b70950cd39efcf4012ca641312fcee1
GET /js15_as.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:44:38 GMT
etag: "-375139978"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 103813762
content-type: application/javascript; charset=UTF-8
content-encoding: br
x-cdn-pop: rbx1
x-cdn-pop-ip: 51.254.41.128/25
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4364
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js
200 OK 158 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js
IP
File type HTML document, ASCII text, with very long lines (579)
Size 158 kB (158056 bytes)
Hash d63a69f898e1d00cfc7c871744ded8c4
e166540eccb571c95c8c1135c2168cf5df306991
ed7892ca1498d6dfc0ff8b354ab8c409eed81b1fa77b427467815d0c7f45021c
GET /recaptcha/releases/duyHVVR9Brf6N2GewjkPRfsA/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dood.wf
Connection: keep-alive
Referer: https://dood.wf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 158056
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 21:31:14 GMT
expires: Sat, 02 Sep 2023 21:31:14 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Sep 2022 18:40:58 GMT
content-type: text/javascript
age: 202845
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3958546039b436bd448017432b45c949
45aadab2339c0718b57200a1b2849073c04f08f5
903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 05:51:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
alleviatepracticableaddicted.com/a6/b0/b8/a6b0b8925d9b3a4154c035c24b4ed97e.js
200 OK 11 kB URL HTTP/1.1 alleviatepracticableaddicted.com/a6/b0/b8/a6b0b8925d9b3a4154c035c24b4ed97e.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (32153), with no line terminators
Hash d2d445923490dcd7278013c2e5019f9c
917f909e1e1af17e93b6376a64f40c563f39afd9
f236ef5571faaad2c0f90783eeeaa999ed67dca882a3ff6c26535f498f3475f5
Analyzer Verdict Alert quad9 Sinkholed
GET /a6/b0/b8/a6b0b8925d9b3a4154c035c24b4ed97e.js HTTP/1.1
Host: alleviatepracticableaddicted.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Mon, 05 Sep 2022 05:51:59 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 44a9e2e9e23f3b71ee70b3b8a000c741
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
c8hdcslq2utx.n4.adsco.re/
200 OK 0 B URL HTTP/1.1 c8hdcslq2utx.n4.adsco.re/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: c8hdcslq2utx.n4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://xxxfree.watch
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 05:51:59 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:32:42 GMT
Connection: close
ETag: "5b5f2f9a-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5641
Expires: Mon, 05 Sep 2022 07:26:00 GMT
Date: Mon, 05 Sep 2022 05:51:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5641
Expires: Mon, 05 Sep 2022 07:26:00 GMT
Date: Mon, 05 Sep 2022 05:51:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5641
Expires: Mon, 05 Sep 2022 07:26:00 GMT
Date: Mon, 05 Sep 2022 05:51:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5641
Expires: Mon, 05 Sep 2022 07:26:00 GMT
Date: Mon, 05 Sep 2022 05:51:59 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe013b89a-59b7-4bdf-8ed4-bbf5fdcbccbe.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe013b89a-59b7-4bdf-8ed4-bbf5fdcbccbe.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f310cf841fc88141f5e14d6c73e2d67
e0cd950b33882be4e4ff76d392648823e0d4ebe7
6bac58b0fa14de14754093383f9875059c10706ffaf01eda8718a71624bb3f7b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe013b89a-59b7-4bdf-8ed4-bbf5fdcbccbe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5825
x-amzn-requestid: 65a3ff9f-d3fe-416e-a9a1-767b8add6b68
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey3Ex2IAMF7Xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-00da48525f5bdad776b62fa6;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 23NoJI_4ogUWyNzMsJgWbYQ-TGUs7lgH3IXSxEWZEWQRmNV5OaHqYQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 21:45:28 GMT
age: 29191
etag: "e0cd950b33882be4e4ff76d392648823e0d4ebe7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F404ac7e7-f8ba-4b04-b736-5cab0995739f.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F404ac7e7-f8ba-4b04-b736-5cab0995739f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8a5ed2a9c430f2f02da773c400d096e0
618252c5082ccfeeb8bc92aecba4485c48ac4206
948158a29f15f5f5ab45f541b665269d43bfc1e3b444ee4ecb9ba715d5b616d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F404ac7e7-f8ba-4b04-b736-5cab0995739f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11003
x-amzn-requestid: 29b9c3bc-4b10-44ed-9bc0-111a672c1d25
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XqpJpGjxoAMFzSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630dbbd7-1547b64d2fc3052e510f6218;Sampled=0
x-amzn-remapped-date: Tue, 30 Aug 2022 07:27:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: TGpnDyF8_8hy5bs5denuqKSMzLl98Oz7YHx4MAOMr_Ah-POktYDXSA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 22:03:42 GMT
age: 28097
etag: "618252c5082ccfeeb8bc92aecba4485c48ac4206"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 30bf854fd3e27e2313a3d26fc43b9990
032acf1bfb0c8e2cbce8f2ff4d2964424b044951
7641be64dd25487edf4f845d1fbb0b07daa80fa8fb58863dd09081d9d169bd13
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8469
x-amzn-requestid: de0e8998-4a52-4651-bcd6-3068c50193b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey2Eq4oAMFZlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-15da44d87bf486cb1738fe18;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: nqxzicnkQPrjStpPaMIZAukyjtUBQaXfuxWzIs77YGDyJmnirlMsxw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 21:54:51 GMT
age: 28628
etag: "032acf1bfb0c8e2cbce8f2ff4d2964424b044951"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0c070a1-cfda-4086-99d7-f4d72a7f9d8f.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0c070a1-cfda-4086-99d7-f4d72a7f9d8f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9d19ae40ba0a61c69d0bbc87ed8da454
064232b77c890404a294500597e562b3945453be
a2d2bfe5d44394511949665e36492706dd655a46198bf7ae555033eedfa46d83
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0c070a1-cfda-4086-99d7-f4d72a7f9d8f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6486
x-amzn-requestid: 94ff7301-4895-4fad-81db-a2774c8db061
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X3OeaFDYIAMFQBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312c45c-450abb734f447a2c2db18aae;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 03:05:00 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: PuxGNBXMMm2SeJckWUMNQfuKBX6IbhwaIyGPuDGjnRI6C5YIor9flQ==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 03:43:50 GMT
age: 7689
etag: "064232b77c890404a294500597e562b3945453be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1944c2a5-23d6-45f7-ab9f-78685b5e5be8.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1944c2a5-23d6-45f7-ab9f-78685b5e5be8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e1556a0afcd327679e471ac6373ca29f
15ac095f9a744d85d7054d6c48af8a3f9ec9fc3a
d3537c985a20cf69290064fbd46778a6fbe6604cb6b37b272c8058142f02ffdf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1944c2a5-23d6-45f7-ab9f-78685b5e5be8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4452
x-amzn-requestid: 882486d7-8cdc-4986-8562-6ec196c2a8e0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xt-dIFk7IAMFs4A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630f1120-5a4edfae33e2ef3f133e22f6;Sampled=0
x-amzn-remapped-date: Wed, 31 Aug 2022 07:43:28 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: AbTFZ3Y-e5K4Ljph7Qn-Xhl0jk1VpgDxs0djpD3IMpppsAEadePgfQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 05:46:11 GMT
age: 348
etag: "15ac095f9a744d85d7054d6c48af8a3f9ec9fc3a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0855d1b6-f16d-4dd0-9fde-a9453425f201.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0855d1b6-f16d-4dd0-9fde-a9453425f201.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c96c8c1d4fe4a550a59dd4ba09843a7c
99ece60b2c12ebc34512a58c886c997e273ad1ad
78157b35e481a8d31e3fbdf60d01332ae97a4bb939235e8ba566b1bd4e1d8d7b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0855d1b6-f16d-4dd0-9fde-a9453425f201.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7431
x-amzn-requestid: 0953983e-8c57-49ae-9b52-fe127c73a4a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XaH8IGUmIAMFY1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6307204d-06266aa31b508580324f07ab;Sampled=0
x-amzn-remapped-date: Thu, 25 Aug 2022 07:10:05 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: NkadqENBWW1-qAK4_05zp0mUJ7lBApClnUDaojmgPEzZuiOZQ2lXsQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 04:19:32 GMT
age: 5547
etag: "99ece60b2c12ebc34512a58c886c997e273ad1ad"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b9feb46fa45798097db51399f15aeb3c
448fb06f3908b0e0356a3e23afe7df3d57596e71
633010155901ded18b89a1a20f7fd665aadc6ae09bcf0660967a33c836d2b76d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 05 Sep 2022 05:51:59 GMT
Last-Modified: Mon, 05 Sep 2022 05:09:38 GMT
Server: ECS (nyb/1D12)
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: VqM41NIbMOQwh8P6OioFOALC7SdbVoMyFB4dgGpkpclhCdJ41vPd7g==
Age: 2541
adsco.re/p
200 OK 171 B IP
File type ASCII text, with no line terminators
Hash 059d45bcd4498fd289f3677286f82e6c
092396275dad0465ac84557857b6c2ce92344033
a4e1b7f3eba9e8602f64f360a3fb8c8bed8710456b06decc19170b89dba53e20
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 1803
Origin: https://xxxfree.watch
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 05:51:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
AS-P-4: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Access-Control-Allow-Origin: https://xxxfree.watch
Access-Control-Allow-Credentials: true
AS-P-5: OK
AS-P-6: OK
AS-P-7: OK
AS-P-8: OK
AS-P-9: OK
AS-P-A: OK
AS-P-B: OK
AS-P-C: OK
AS-P-D: OK
AS-P-E: OK
AS-P-F: OK
AS-P-G: OK
AS-P-H: OK
Content-Encoding: gzip
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash ec09aa0af85244be9a210171e1059ff5
97134908e26c99f518be4c6b4cc942359e003d6c
cd82410846b194c46b2f948a2c955a130b5fc5ec94a68dc64976e46caebff77d
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pornjustx.com
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:51:59 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://pornjustx.com
access-control-allow-credentials: true
set-cookie: uid_id2=a0839135-4f69-4229-9412-25f4e723095f:2:1; expires=Thu, 02 Sep 2032 05:51:59 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bb272a8a26430d723256be3a414a4180
f985f3797c094f5352685b3967fe21a0a0f5b318
f82273c69abddc3e9d716628b00375a2de3f3589f700523b1493ad8e1051ae39
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F82273C69ABDDC3E9D716628B00375A2DE3F3589F700523B1493AD8E1051AE39"
Last-Modified: Sat, 03 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7589
Expires: Mon, 05 Sep 2022 07:58:28 GMT
Date: Mon, 05 Sep 2022 05:51:59 GMT
Connection: keep-alive
s4.histats.com/stats/0.php?2972094&@f16&@g1&@h1&@i1&@j1662357115318&@k0&@l1&@mAria%20Valencia%20-%20Tiny%20Labor%20Day%20-%20WatchXXXFree%20Porn%20Tube&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:57972827&@b3:1662357115&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fxxxfree.watch%2Faria-valencia-tiny-labor-day%2F&@w
200 OK 50 B URL HTTP/1.1 s4.histats.com/stats/0.php?2972094&@f16&@g1&@h1&@i1&@j1662357115318&@k0&@l1&@mAria%20Valencia%20-%20Tiny%20Labor%20Day%20-%20WatchXXXFree%20Porn%20Tube&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:57972827&@b3:1662357115&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fxxxfree.watch%2Faria-valencia-tiny-labor-day%2F&@w
IP
File type ASCII text, with no line terminators
Hash d91e38402599187a506cda134a3ce2a8
47dd9ac343c42cdd866de4693aeb8b271b68a782
25587e69a64912a6012433716a7bc0ab26fb0746b4c8c7c31fce59ce1aa4d39d
GET /stats/0.php?2972094&@f16&@g1&@h1&@i1&@j1662357115318&@k0&@l1&@mAria%20Valencia%20-%20Tiny%20Labor%20Day%20-%20WatchXXXFree%20Porn%20Tube&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:57972827&@b3:1662357115&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fxxxfree.watch%2Faria-valencia-tiny-labor-day%2F&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 05:51:59 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 50
Connection: close
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0633ce31575611e72496f10899ff5c76
af79a8d931935207af176ae667c5c5f2bbf6e490
2dc0910e842c8cfd555712cdef87deaa71667368fa4514a21a5a7403d8e52cd4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2DC0910E842C8CFD555712CDEF87DEAA71667368FA4514A21A5A7403D8E52CD4"
Last-Modified: Sun, 04 Sep 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5047
Expires: Mon, 05 Sep 2022 07:16:07 GMT
Date: Mon, 05 Sep 2022 05:52:00 GMT
Connection: keep-alive
c8hdcslq2utx.s4.adsco.re/
200 OK 0 B URL HTTP/1.1 c8hdcslq2utx.s4.adsco.re/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: c8hdcslq2utx.s4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://xxxfree.watch
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 05:52:00 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:38:01 GMT
Connection: close
ETag: "5b5f30d9-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
ocsp.sectigo.com/
200 OK 472 B IP
Hash 5c8f737cd8716f974b3fe7b1641e99d6
34768317bd638e0a5f86ebf960beae98818d1f0e
185137b4c53c778859dbcb2740657aa4f0994a056b85a87460986a55a144eed9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 05:52:00 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 03 Sep 2022 01:50:03 GMT
Expires: Sat, 10 Sep 2022 01:50:02 GMT
Etag: "34768317bd638e0a5f86ebf960beae98818d1f0e"
Cache-Control: max-age=416881,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 745cb2419f27b518-OSL
speechfountaindigestion.com/0a/6e/9a/0a6e9a96058c7f39edbf4999920d05a3.js
200 OK 29 kB URL HTTP/1.1 speechfountaindigestion.com/0a/6e/9a/0a6e9a96058c7f39edbf4999920d05a3.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash f596229d99d3a490b8440d6708139b75
c5a491ad5daa33b9fb1ab2817db685f1bfa2fbc1
0eb9a5cbdaa57186a66c02e89b060c3e926b8e4549ec3c8787a788ee17ff99fa
Analyzer Verdict Alert quad9 Sinkholed
GET /0a/6e/9a/0a6e9a96058c7f39edbf4999920d05a3.js HTTP/1.1
Host: speechfountaindigestion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 05 Sep 2022 05:52:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0acc3072ec60542b31189817d7c54aa1
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash ec09aa0af85244be9a210171e1059ff5
97134908e26c99f518be4c6b4cc942359e003d6c
cd82410846b194c46b2f948a2c955a130b5fc5ec94a68dc64976e46caebff77d
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pornjustx.com
Connection: keep-alive
Referer: https://pornjustx.com/
Cookie: uid_id2=a0839135-4f69-4229-9412-25f4e723095f:2:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:00 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://pornjustx.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
zap.buzz/vqlWwD8
302 Found 936 B IP
Hash e13473c6412221ec880be9b703ec924c
5cb0cdf16d59ce3cf0e7faa8702b6e84846b2f31
116e443f66d28c2c58a2ffe81673d9f8f5e49249db0030844185c1a5f858aa3d
GET /vqlWwD8 HTTP/1.1
Host: zap.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 05 Sep 2022 05:52:00 GMT
content-type: text/html; charset=utf-8
location: https://q.xmlrtb.com/r?fid=k2mHN2AHw88
vary: Cookie
set-cookie: session=eyJfcGVybWFuZW50Ijp0cnVlfQ.YxWOgA.BtgxtM6QnHAIJGBqoES5YD2YWqM; Expires=Mon, 05 Sep 2022 06:22:00 GMT; HttpOnly; Path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i6D2m9Ugzkz8FH5%2BXmdiQFVkUMjLwZaFowrWFP7DLgZW%2BV1dEpKJ4bKoazr03s86QqWC7DyRpx%2FSD65lqvEMyl6xojVU5ZG%2BS2hIIYt7i6f5yxNPZH8JuiyOSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 745cb23fdfc9b529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
xml.poprtb.com/redirect?feed=457657&auth=p12tC3&pubid=152420
302 Found 0 B URL HTTP/1.1 xml.poprtb.com/redirect?feed=457657&auth=p12tC3&pubid=152420
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?feed=457657&auth=p12tC3&pubid=152420 HTTP/1.1
Host: xml.poprtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 05 Sep 2022 05:52:00 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Age: 0
Location: https://www.youtube.com/watch?v=UbikLe1eZsI
Pragma: no-cache
zap.buzz/lxAR5ZJ
302 Found 2.7 kB IP
Hash f4d6b7dbe68e5e2ac25d5ac0630b1415
d7c67fbb8eea535d0b88fdee6e5a88c146cde504
4abab2ae889532c40a2828926edfa14a53ce0781b91bae6df9393f7fea27eb29
GET /lxAR5ZJ HTTP/1.1
Host: zap.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 05 Sep 2022 05:52:00 GMT
content-type: text/html; charset=utf-8
location: https://q.cachegorilla.com/r?fid=B79SGewuO6N
vary: Cookie
set-cookie: session=eyJfcGVybWFuZW50Ijp0cnVlfQ.YxWOgA.BtgxtM6QnHAIJGBqoES5YD2YWqM; Expires=Mon, 05 Sep 2022 06:22:00 GMT; HttpOnly; Path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7KSnrI39ffCCE%2Ba1nw3DRUoQ0WSf%2FqzFlW9K1FPiS0%2BTcd4X2mk%2B8ZDama6Rib6NO%2FUz1%2Bfnu2a3iOHrHM9ZxOCBUAbEJpITDcyMWp%2BPjQSJhCpXAPter1dY1A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 745cb23fdfceb529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 420a6ffc72857f7132a9065de7c844a9
dee617384561d0790b72f096336b73ade7950579
c98bdc53f1f22291c4b954e9bd5f6432cfe3d5b24e3680b4ada3fc3a696e79d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 05:52:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ee81d1d48b5cd5781532cfe7f8d9e286
186cc7fe871af7d315945130deb0ba53d22daaa9
100708c9901c231ca7ffbb488b6e7336613d84a071848fd3eb0b218f7b682cfc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "100708C9901C231CA7FFBB488B6E7336613D84A071848FD3EB0B218F7B682CFC"
Last-Modified: Sun, 04 Sep 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8627
Expires: Mon, 05 Sep 2022 08:15:48 GMT
Date: Mon, 05 Sep 2022 05:52:01 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash ce8cea2f2f024a4eee0401aac681c7bd
97f6e25c4054d46f61b1a183cf7efcdbf4982298
c6edcb641cb643133eb1aa66d52742ee22817b88899de4edbea6053e317e2ac8
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "C6EDCB641CB643133EB1AA66D52742EE22817B88899DE4EDBEA6053E317E2AC8"
Last-Modified: Fri, 02 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8276
Expires: Mon, 05 Sep 2022 08:09:57 GMT
Date: Mon, 05 Sep 2022 05:52:01 GMT
Connection: keep-alive
reapinject.com/pixel/purst?dl=0&th=0&sc=0&rs=2191&rd=2191&fd=1077&bv=22.8.v.2&tmpl=136
200 OK 1.2 kB URL HTTP/1.1 reapinject.com/pixel/purst?dl=0&th=0&sc=0&rs=2191&rd=2191&fd=1077&bv=22.8.v.2&tmpl=136
IP
ASN #39572 DataWeb Global Group B.V.
Hash a19def99dac55e8419452722fd0f5654
4fea64f084b802cf76b841643c2311a128162065
c24d8b4412c346dc1c8fed30be606c0829fe7906346adfcffca435aa14de5ec8
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=2191&rd=2191&fd=1077&bv=22.8.v.2&tmpl=136 HTTP/1.1
Host: reapinject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Mon, 05 Sep 2022 05:52:01 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash ec09aa0af85244be9a210171e1059ff5
97134908e26c99f518be4c6b4cc942359e003d6c
cd82410846b194c46b2f948a2c955a130b5fc5ec94a68dc64976e46caebff77d
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pornjustx.com
Connection: keep-alive
Referer: https://pornjustx.com/
Cookie: uid_id2=a0839135-4f69-4229-9412-25f4e723095f:2:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://pornjustx.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash ec09aa0af85244be9a210171e1059ff5
97134908e26c99f518be4c6b4cc942359e003d6c
cd82410846b194c46b2f948a2c955a130b5fc5ec94a68dc64976e46caebff77d
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pornjustx.com
Connection: keep-alive
Referer: https://pornjustx.com/
Cookie: uid_id2=a0839135-4f69-4229-9412-25f4e723095f:2:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://pornjustx.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 7c4e2bba6bee091c96d60f6517e94721
35ae4c28dd99b92bf968b525c76c089859b40d30
ac49fe48096bd981334867b35cc4f9af753559f78d00e0c5ef2d8b2524ae0e20
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 05:52:01 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 23:22:12 GMT
Expires: Sun, 11 Sep 2022 23:22:11 GMT
Etag: "35ae4c28dd99b92bf968b525c76c089859b40d30"
Cache-Control: max-age=580809,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 745cb246ac61b518-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash e2c0dcf0184c0900e655bc8904911c97
b0875a8a80f5898c51408c63a79704d2741977f3
72df5d0df5d0fc78e80f2f42c18ec07a00f9f2c4dbf722c2d457f4bfe993cac0
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 05:52:01 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 03 Sep 2022 04:42:37 GMT
Expires: Sat, 10 Sep 2022 04:42:36 GMT
Etag: "b0875a8a80f5898c51408c63a79704d2741977f3"
Cache-Control: max-age=427234,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 745cb247c8b30b69-OSL
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAAz1Oy07EMAz8FX5gI9ux8+AMV5AW7QekTSqQWCEVBD3Mx+MWsR4fxp6Rx0IiJ6onsjvie/MuqBwqBZXApnh6PkMZ27Yt6xjhp33Nr1AtagwRzcn9lmIUaMox1QSjAhNnnJCNVcVFNkSQQyyq7iwQMRLh8XLG5eXBF7UWhoMQiTYm8mGPhxDUOW37AYqjtzLlXMZQMpLOc5ZFmeau85h2I1pYR3v/XL/D/HE9co9Eztll+V8gskZRwYlvg8KLcMhvy9quA7j5/5CPCP9IdX9RWrSsPU29TVONKWZeaHSyZbLcqv0CTGgBVmMBAAA=
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAAz1Oy07EMAz8FX5gI9ux8+AMV5AW7QekTSqQWCEVBD3Mx+MWsR4fxp6Rx0IiJ6onsjvie/MuqBwqBZXApnh6PkMZ27Yt6xjhp33Nr1AtagwRzcn9lmIUaMox1QSjAhNnnJCNVcVFNkSQQyyq7iwQMRLh8XLG5eXBF7UWhoMQiTYm8mGPhxDUOW37AYqjtzLlXMZQMpLOc5ZFmeau85h2I1pYR3v/XL/D/HE9co9Eztll+V8gskZRwYlvg8KLcMhvy9quA7j5/5CPCP9IdX9RWrSsPU29TVONKWZeaHSyZbLcqv0CTGgBVmMBAAA=
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAAz1Oy07EMAz8FX5gI9ux8+AMV5AW7QekTSqQWCEVBD3Mx+MWsR4fxp6Rx0IiJ6onsjvie/MuqBwqBZXApnh6PkMZ27Yt6xjhp33Nr1AtagwRzcn9lmIUaMox1QSjAhNnnJCNVcVFNkSQQyyq7iwQMRLh8XLG5eXBF7UWhoMQiTYm8mGPhxDUOW37AYqjtzLlXMZQMpLOc5ZFmeau85h2I1pYR3v/XL/D/HE9co9Eztll+V8gskZRwYlvg8KLcMhvy9quA7j5/5CPCP9IdX9RWrSsPU29TVONKWZeaHSyZbLcqv0CTGgBVmMBAAA= HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://a.realsrv.com
Connection: keep-alive
Referer: https://a.realsrv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 05:52:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAAz1OQU7EMAz8Ch/YyHbGScMZriAt2gekbSqQWCEVBD3M40mLWI8PY8/IYxOzk5ST+J3ovfceWDQUCbCgDj49nwnltm3L2lr4qV/TK4EBrjRDTt3vKUYjUo6pJLoMdOtME7MrYF1UZ6R0mEdgZ0FEmYSPlzMvLw99Ucqg7BBGkU1F+rDH04ToXLb9gMQ212HMeWgN4mKzTtkWqEwzpjbuRtawtvr+uX6H6eN65B6JCu+y/S8YFdFgPOltAHsJD/ltWeu1kTf/H/IR0T8C9heluIwGt+It17HOhuJTXVLEPC65/AJbNekKYwEAAA==
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAAz1OQU7EMAz8Ch/YyHbGScMZriAt2gekbSqQWCEVBD3M40mLWI8PY8/IYxOzk5ST+J3ovfceWDQUCbCgDj49nwnltm3L2lr4qV/TK4EBrjRDTt3vKUYjUo6pJLoMdOtME7MrYF1UZ6R0mEdgZ0FEmYSPlzMvLw99Ucqg7BBGkU1F+rDH04ToXLb9gMQ212HMeWgN4mKzTtkWqEwzpjbuRtawtvr+uX6H6eN65B6JCu+y/S8YFdFgPOltAHsJD/ltWeu1kTf/H/IR0T8C9heluIwGt+It17HOhuJTXVLEPC65/AJbNekKYwEAAA==
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAAz1OQU7EMAz8Ch/YyHbGScMZriAt2gekbSqQWCEVBD3M40mLWI8PY8/IYxOzk5ST+J3ovfceWDQUCbCgDj49nwnltm3L2lr4qV/TK4EBrjRDTt3vKUYjUo6pJLoMdOtME7MrYF1UZ6R0mEdgZ0FEmYSPlzMvLw99Ucqg7BBGkU1F+rDH04ToXLb9gMQ212HMeWgN4mKzTtkWqEwzpjbuRtawtvr+uX6H6eN65B6JCu+y/S8YFdFgPOltAHsJD/ltWeu1kTf/H/IR0T8C9heluIwGt+It17HOhuJTXVLEPC65/AJbNekKYwEAAA== HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://a.realsrv.com
Connection: keep-alive
Referer: https://a.realsrv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 05:52:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAAz1O7UrEQAx8FV/gSr5319/6V+HkHqDdblHwOKii/TEP77bCZQLJJEMyQiInKifyB+JH75lReCg0mAzshpfXM4yxbduytjb8jt/1HRpBEhCxFF3voSqwSJKN4JShiV2DEcWJiTPYoaAOcTXbu4GIkzuC8Hw54/L21GelZEYHQYk2cepkdwAhWO9pO27MItSmyEukLDq3qdZZc7bqNpZ2CDEOaxs/v9afod6unVu3iUxh+2sP6SI5HO1QNhUTnPhODD0Ix/pjWcdrA+76f6TjUbdrtpcpUZ1YikSxOVXTNKpJSREzyUL0B9oqaolsAQAA
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAAz1O7UrEQAx8FV/gSr5319/6V+HkHqDdblHwOKii/TEP77bCZQLJJEMyQiInKifyB+JH75lReCg0mAzshpfXM4yxbduytjb8jt/1HRpBEhCxFF3voSqwSJKN4JShiV2DEcWJiTPYoaAOcTXbu4GIkzuC8Hw54/L21GelZEYHQYk2cepkdwAhWO9pO27MItSmyEukLDq3qdZZc7bqNpZ2CDEOaxs/v9afod6unVu3iUxh+2sP6SI5HO1QNhUTnPhODD0Ix/pjWcdrA+76f6TjUbdrtpcpUZ1YikSxOVXTNKpJSREzyUL0B9oqaolsAQAA
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAAz1O7UrEQAx8FV/gSr5319/6V+HkHqDdblHwOKii/TEP77bCZQLJJEMyQiInKifyB+JH75lReCg0mAzshpfXM4yxbduytjb8jt/1HRpBEhCxFF3voSqwSJKN4JShiV2DEcWJiTPYoaAOcTXbu4GIkzuC8Hw54/L21GelZEYHQYk2cepkdwAhWO9pO27MItSmyEukLDq3qdZZc7bqNpZ2CDEOaxs/v9afod6unVu3iUxh+2sP6SI5HO1QNhUTnPhODD0Ix/pjWcdrA+76f6TjUbdrtpcpUZ1YikSxOVXTNKpJSREzyUL0B9oqaolsAQAA HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://a.realsrv.com
Connection: keep-alive
Referer: https://a.realsrv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 05:52:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip
xml.popmonetizer.com/redirect?feed=453690&auth=51bnE2&pubid=150133
302 Found 371 B URL HTTP/1.1 xml.popmonetizer.com/redirect?feed=453690&auth=51bnE2&pubid=150133
IP
ASN #27257 WEBAIR-INTERNET
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 03c96eedadc14f12180f806ec61d58eb
31c588f9934d1722903ec432f0e9303a15e275e6
e65c528fc681523ff493a39724add4754bf5d4a1c15b504fcfc512bc5e3269ea
GET /redirect?feed=453690&auth=51bnE2&pubid=150133 HTTP/1.1
Host: xml.popmonetizer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://popxperts.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 05 Sep 2022 05:52:01 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Age: 0
Location: https://cadrctlnk.com/in/p/?spot_id=51475&cat=25&sub_id=335977926
Pragma: no-cache
s.w.org/images/core/emoji/14.0.0/svg/1f346.svg
200 OK 432 B URL HTTP/2 s.w.org/images/core/emoji/14.0.0/svg/1f346.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (432), with no line terminators
Hash f92a9f8821057c551982b659b268ed8e
6238f3b621be938ec83d96306647991cf8cec28f
6a51feacbc0c6653c8adf378b5bf03b10a82f8ff387674f6434d3ee9019416af
GET /images/core/emoji/14.0.0/svg/1f346.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: image/svg+xml
content-length: 432
last-modified: Tue, 12 Apr 2022 03:50:59 GMT
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn 2
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
s.w.org/images/core/emoji/14.0.0/svg/1f445.svg
200 OK 360 B URL HTTP/2 s.w.org/images/core/emoji/14.0.0/svg/1f445.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (360), with no line terminators
Hash 0d16121d9eae5745be9da0c730557d30
3e1f809012606a4df721569e690553ee85606dbb
7ba3e8cfbd718c54aeaf8b78b8487552f08f520d1d0653a18860f46d428074e9
GET /images/core/emoji/14.0.0/svg/1f445.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: image/svg+xml
content-length: 360
last-modified: Tue, 12 Apr 2022 03:47:50 GMT
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn 2
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/140058/b69b0ad953e27d2318d3b7783f89b2f03cac130e.webp
200 OK 9.6 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/140058/b69b0ad953e27d2318d3b7783f89b2f03cac130e.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 070a232d0b0e025bfc65d90c1f5ece91
b69b0ad953e27d2318d3b7783f89b2f03cac130e
bd774d7c7edcc81fd3f49a59ed1ef48868b2531bba2ee9762213e2b023f4c5de
GET /library/140058/b69b0ad953e27d2318d3b7783f89b2f03cac130e.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: image/webp
content-length: 9562
last-modified: Wed, 03 Nov 2021 11:53:34 GMT
etag: "6182783e-255a"
expires: Fri, 30 Jun 2023 11:09:49 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195383
server: CDN77-Turbo
x-77-nzt: AblMCQ2HiYf/yvBWAA
x-77-nzt-ray: eSN0DRl2Z+Q
x-cache: HIT
x-age: 5697738
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/802444/829cd26ee8f73baca4dedfe762897593489bff22.webp
200 OK 6.8 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/802444/829cd26ee8f73baca4dedfe762897593489bff22.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f019913fa1bcdd5dfe98af59ac49bbb2
829cd26ee8f73baca4dedfe762897593489bff22
66d870e5558d185796bbfb5dd24d4a3ad46a4042933e49e98567659746c230cf
GET /library/802444/829cd26ee8f73baca4dedfe762897593489bff22.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: image/webp
content-length: 6768
last-modified: Fri, 15 Jul 2022 11:08:07 GMT
etag: "62d14a97-1a70"
expires: Sat, 15 Jul 2023 11:44:54 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1689721389
server: CDN77-Turbo
x-77-nzt: AblMCQ3qnor/1Kc/AA
x-77-nzt-ray: cIb3qozB7q4
x-cache: HIT
x-age: 4171732
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1931a32d83e4feb5268887bcb07fcc1e
6fb75c21ced29544dd6d7c3b0ef79adf65718a39
d794fae0b82097a2e97af2f21b6c243832081f88036a2a56bbeeabb08790d88d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 05:52:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s3t3d2y8.afcdn.net/library/802424/5bbd3bc521c2c5db0ad1e994b1620873e5284ae4.webp
200 OK 13 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/802424/5bbd3bc521c2c5db0ad1e994b1620873e5284ae4.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2fe80e3fb8484a351fefba0f696c55e4
5bbd3bc521c2c5db0ad1e994b1620873e5284ae4
630a3626bffa089e1454f39769d35362b8a5bf933c032262dc4d1318f39dddb1
GET /library/802424/5bbd3bc521c2c5db0ad1e994b1620873e5284ae4.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: image/webp
content-length: 12994
last-modified: Wed, 29 Jun 2022 14:18:01 GMT
etag: "62bc5f19-32c2"
expires: Fri, 30 Jun 2023 14:57:18 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688224587
server: CDN77-Turbo
x-77-nzt: AblMCQ2pLlT/tn5WAA
x-77-nzt-ray: ARe+BjTI6qA
x-cache: HIT
x-age: 5668534
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 7e35600c4886ad47836a3a7333f1439e
61962d37ad03f0648bd502b0c226c4540bd966aa
97ed9791b88afbe7365aee1839bb6836c21d59198746c366e134c79a6ceff863
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1733
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 05:52:01 GMT
Last-Modified: Mon, 05 Sep 2022 05:23:08 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
s3t3d2y8.afcdn.net/library/802444/8d556f01a0a027fd5743a851458a0c2fa83388ba.webp
200 OK 6.3 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/802444/8d556f01a0a027fd5743a851458a0c2fa83388ba.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 08f0d637a8bece01677b78c56c3477b5
8d556f01a0a027fd5743a851458a0c2fa83388ba
07698e284ebdc9b08584215029b7bc35b2424b91f52e0a30c8e50bec44e59ad2
GET /library/802444/8d556f01a0a027fd5743a851458a0c2fa83388ba.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: image/webp
content-length: 6324
last-modified: Fri, 15 Jul 2022 11:08:07 GMT
etag: "62d14a97-18b4"
expires: Sat, 15 Jul 2023 11:43:20 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1689440333
server: CDN77-Turbo
x-77-nzt: AblMCQ19CBT/tPFDAA
x-77-nzt-ray: MrBcNS6gCU0
x-cache: HIT
x-age: 4452788
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/802444/bee1a93e7ac8dd15ceb1638af2852f7a1e27549b.webp
200 OK 9.1 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/802444/bee1a93e7ac8dd15ceb1638af2852f7a1e27549b.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7e91f293699a1f01f35c6d4c7ed2adb6
bee1a93e7ac8dd15ceb1638af2852f7a1e27549b
7b8c93b4e6b930e6244e8cfc3b8ed30a2ab5de2f78ee366a605e03964cc11b79
GET /library/802444/bee1a93e7ac8dd15ceb1638af2852f7a1e27549b.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: image/webp
content-length: 9148
last-modified: Fri, 15 Jul 2022 11:08:07 GMT
etag: "62d14a97-23bc"
expires: Sat, 15 Jul 2023 11:42:54 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1689883553
server: CDN77-Turbo
x-77-nzt: AblMCQ1u+hf/YC49AA
x-77-nzt-ray: XnwZ3QhkWwQ
x-cache: HIT
x-age: 4009568
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/448451/e2992aed94e3ab1b92e7eba60ec25912cdbe4f8b.mp4
206 Partial Content 11 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/448451/e2992aed94e3ab1b92e7eba60ec25912cdbe4f8b.mp4
IP
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 0362ca66d2648842761ab7e897210c2b
e2992aed94e3ab1b92e7eba60ec25912cdbe4f8b
6112e64eff0942f4a746c8840cc94ec23121f5fcc51fa1ac1523a38d05bfa124
GET /library/448451/e2992aed94e3ab1b92e7eba60ec25912cdbe4f8b.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://a.realsrv.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: video/mp4
content-length: 10631
last-modified: Tue, 09 Aug 2022 11:14:51 GMT
etag: "62f241ab-2987"
expires: Wed, 09 Aug 2023 11:37:57 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1691581153
server: CDN77-Turbo
x-77-nzt: AblMCQ04yu3/IEcjAA
x-77-nzt-ray: MQ6haXjdCr4
x-cache: HIT
x-age: 2311968
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-10630/10631
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/448451/e2992aed94e3ab1b92e7eba60ec25912cdbe4f8b.mp4
206 Partial Content 11 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/448451/e2992aed94e3ab1b92e7eba60ec25912cdbe4f8b.mp4
IP
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 0362ca66d2648842761ab7e897210c2b
e2992aed94e3ab1b92e7eba60ec25912cdbe4f8b
6112e64eff0942f4a746c8840cc94ec23121f5fcc51fa1ac1523a38d05bfa124
GET /library/448451/e2992aed94e3ab1b92e7eba60ec25912cdbe4f8b.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://a.realsrv.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: video/mp4
content-length: 10631
last-modified: Tue, 09 Aug 2022 11:14:51 GMT
etag: "62f241ab-2987"
expires: Wed, 09 Aug 2023 11:37:57 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1691581153
server: CDN77-Turbo
x-77-nzt: AblMCQ2nC63/IEcjAA
x-77-nzt-ray: bD8zBcN6SEA
x-cache: HIT
x-age: 2311968
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-10630/10631
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/366026/43c35669aea6adb2d7b41a79dbb407a74156e5f1.mp4
206 Partial Content 10 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/366026/43c35669aea6adb2d7b41a79dbb407a74156e5f1.mp4
IP
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 7784b86108b5501c39660e5c19e3bf06
43c35669aea6adb2d7b41a79dbb407a74156e5f1
20cb3b5dc47db843f30bbe415f7f6423cda6e6a7abd839b93c89ad85260b3ecc
GET /library/366026/43c35669aea6adb2d7b41a79dbb407a74156e5f1.mp4 HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://a.realsrv.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: video/mp4
content-length: 10177
last-modified: Mon, 14 Sep 2020 14:01:58 GMT
etag: "5f5f77d6-27c1"
expires: Fri, 30 Jun 2023 12:55:30 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195488
server: CDN77-Turbo
x-77-nzt: AblMCQ0T1fP/YfBWAA
x-77-nzt-ray: rOFPa9pcsX4
x-cache: HIT
x-age: 5697633
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-10176/10177
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/140058/d35401b29d0c4fd1079651c0fde2f01f97ec11a4.webp
200 OK 10 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/140058/d35401b29d0c4fd1079651c0fde2f01f97ec11a4.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash dca61ca44b9a87b631eb5200c12f234c
d35401b29d0c4fd1079651c0fde2f01f97ec11a4
bc0c8c5a132af93ccc2cfbc1784f2e67119a9c72e289b8ab502561e16be71b03
GET /library/140058/d35401b29d0c4fd1079651c0fde2f01f97ec11a4.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: image/webp
content-length: 10254
last-modified: Wed, 03 Nov 2021 11:53:34 GMT
etag: "6182783e-280e"
expires: Fri, 30 Jun 2023 11:13:36 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195317
server: CDN77-Turbo
x-77-nzt: AblMCQ3Bxir/DPFWAA
x-77-nzt-ray: KG/geIyDSck
x-cache: HIT
x-age: 5697804
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/692514/4f21adca1dfb82c3261a90a26301527507ed706a.webp
200 OK 7.0 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/692514/4f21adca1dfb82c3261a90a26301527507ed706a.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cd72b82dec36f9fe35a568a62e6a15a1
4f21adca1dfb82c3261a90a26301527507ed706a
17e170d5f29f67bd170fe209830d057a1c66a54528066a6226f195cd7b77423e
GET /library/692514/4f21adca1dfb82c3261a90a26301527507ed706a.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: image/webp
content-length: 6986
last-modified: Wed, 03 Nov 2021 21:07:03 GMT
etag: "6182f9f7-1b4a"
expires: Wed, 30 Aug 2023 14:57:41 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1693417070
server: CDN77-Turbo
x-77-nzt: AblMCQ3PhMb/k0MHAA
x-77-nzt-ray: BRDaHQVdsMA
x-cache: HIT
x-age: 476051
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/426059/99079d0f6cb7d4af79046a1997a8fb5bda975b9a.webp
200 OK 7.3 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/426059/99079d0f6cb7d4af79046a1997a8fb5bda975b9a.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d19b901d08f168e875deb682b1479041
99079d0f6cb7d4af79046a1997a8fb5bda975b9a
8acd21bcaeb5f036e33a470a3716b4dd9fa778e45a1e1d98e860716b2f407473
GET /library/426059/99079d0f6cb7d4af79046a1997a8fb5bda975b9a.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: image/webp
content-length: 7296
last-modified: Tue, 21 Jun 2022 13:52:47 GMT
etag: "62b1cd2f-1c80"
expires: Wed, 23 Aug 2023 14:23:51 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1692872294
server: CDN77-Turbo
x-77-nzt: AblMCQ3XQhj/m5MPAA
x-77-nzt-ray: 9UsLEUASOhs
x-cache: HIT
x-age: 1020827
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/802444/179ee3ab587e6094f27c3d5081fc701b07651398.webp
200 OK 4.5 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/802444/179ee3ab587e6094f27c3d5081fc701b07651398.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3a33d738939052a11a2ad76f9eade5d1
179ee3ab587e6094f27c3d5081fc701b07651398
fb72cfbb711af96a1abc7daab64778f7e9a21c0c5da3d5c6b07211e5f0ffb067
GET /library/802444/179ee3ab587e6094f27c3d5081fc701b07651398.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: image/webp
content-length: 4498
last-modified: Fri, 15 Jul 2022 11:08:07 GMT
etag: "62d14a97-1192"
expires: Sat, 15 Jul 2023 11:45:37 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1689450959
server: CDN77-Turbo
x-77-nzt: AblMCQ0K3fH/MshDAA
x-77-nzt-ray: 3Lzy121RbbU
x-cache: HIT
x-age: 4442162
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-62001516-1&cid=2021044760.1662357115&jid=1401606868&gjid=821505013&_gid=1310801533.1662357115&_u=YEBAAUAAAAAAAC~&z=1745322196
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-62001516-1&cid=2021044760.1662357115&jid=1401606868&gjid=821505013&_gid=1310801533.1662357115&_u=YEBAAUAAAAAAAC~&z=1745322196
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-62001516-1&cid=2021044760.1662357115&jid=1401606868&gjid=821505013&_gid=1310801533.1662357115&_u=YEBAAUAAAAAAAC~&z=1745322196 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://xxxfree.watch
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://xxxfree.watch
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 05 Sep 2022 05:52:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
speechfountaindigestion.com/ren.gif?sid=H4sIAAAAAAAC%2F1RS32scVRi90wYs%2BKJSHxSVfVTQzcz%2BXvtQjDESTJvaKgoien%2Ft5po7c6f3zt3Z5Cm0IH2S9T%2BYnE0aqkH0D2iRTaEPAaHjU6DmfxChTz7IboOrHwzfOXPOw%2Fm%2B7367609JCE9Plq%2BYbaU1XWxWw8qbn0fRpcqaSvywMuy0vmo1LlXs4N1uqxq%2BVflQ8k2zWAujMIzCqLKirOyZ4eJUhEoPu1G1G1YbtWrUbGBo%2F8%2BdD%2BBoADE4JS9BiXLhYXARik%2BQxD8vS7eZmfTtD2KvaWYsBuLg02QzMXmCeA57NkAvOThzw7jHKw9gkv1ZXJjBv0amShI8egCWHJyFBBvszXIyDZmAieeRDyaQegJFJ%2BDmNpR4TAAucHUdSXz3qrE53Xqm0qlakoWnf0HlJVn44yKS%2BKclrYaVG0b7TJnEYdgroIYTqP4EqT9Ctn0OKj8Cz25Bid%2FI4tM1JPHeutMGShSz2ZWaQPUm0HIE6gL46acC%2BF4AnwaIxUmFR1HUDgWnYafLeV20JWuJMKLtXkSjsNWB59N4I2TpCFyPwO0OUruDTTWC9b%2FCbRRwIoDLShJ8vIOBKJBLgtwR5JQgVwR5RpAPin2hXc0Vd4V2nkVnvXbW68XYZP1dum%2ByvkzIbnpKXpzuJbhw6xCb8qRCWyxknW6tKbqsThtRs8HDepPXGqwhRbct4VQB5c7NRt1WJXntfhWpKslzXz4Bo0dw%2BghcvQDqXwfNx%2B1aCLoxbnRCbCeHVHidvbNx82Y1MxCmQJotINsKdvUpeWV2n%2FqlJ5D8%2BPLX7Er5572%2FwW2B1Bb4Rj0k6Os74%2BsmJ3vXTe7IL%2BtppmK1Tae3u5HRTJ7%2F4SO5lRsrVpfd6N57fCpM4eEn0mVrNBEq6Tvy45ISQtoVY7kk91fdZ5Jd825jydvEp2vX3l9ZjVMrnVMmmYCqkpBHx%2BCqJBdEPnuWr7ovoOwE1heI%2FTE5KyhzBJ7uwKXz%2FM6ch9VzD0sD5L4Y2xqb%2F9SKQMs5p6yA%2Bw9nc7zr7qBv3wDNbiOJCwxsgYEuQPUIzp8fZ6k9vvx7fVZgOhgzbYM9pq3%2B%2FtlynTqptOv1kLa6zajdprLNGrVOrxUJSmuNVq3VonVkruQvf7fzDwAAAP%2F%2FAQAA%2F%2F%2Bu8qayYQQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 speechfountaindigestion.com/ren.gif?sid=H4sIAAAAAAAC%2F1RS32scVRi90wYs%2BKJSHxSVfVTQzcz%2BXvtQjDESTJvaKgoien%2Ft5po7c6f3zt3Z5Cm0IH2S9T%2BYnE0aqkH0D2iRTaEPAaHjU6DmfxChTz7IboOrHwzfOXPOw%2Fm%2B7367609JCE9Plq%2BYbaU1XWxWw8qbn0fRpcqaSvywMuy0vmo1LlXs4N1uqxq%2BVflQ8k2zWAujMIzCqLKirOyZ4eJUhEoPu1G1G1YbtWrUbGBo%2F8%2BdD%2BBoADE4JS9BiXLhYXARik%2BQxD8vS7eZmfTtD2KvaWYsBuLg02QzMXmCeA57NkAvOThzw7jHKw9gkv1ZXJjBv0amShI8egCWHJyFBBvszXIyDZmAieeRDyaQegJFJ%2BDmNpR4TAAucHUdSXz3qrE53Xqm0qlakoWnf0HlJVn44yKS%2BKclrYaVG0b7TJnEYdgroIYTqP4EqT9Ctn0OKj8Cz25Bid%2FI4tM1JPHeutMGShSz2ZWaQPUm0HIE6gL46acC%2BF4AnwaIxUmFR1HUDgWnYafLeV20JWuJMKLtXkSjsNWB59N4I2TpCFyPwO0OUruDTTWC9b%2FCbRRwIoDLShJ8vIOBKJBLgtwR5JQgVwR5RpAPin2hXc0Vd4V2nkVnvXbW68XYZP1dum%2ByvkzIbnpKXpzuJbhw6xCb8qRCWyxknW6tKbqsThtRs8HDepPXGqwhRbct4VQB5c7NRt1WJXntfhWpKslzXz4Bo0dw%2BghcvQDqXwfNx%2B1aCLoxbnRCbCeHVHidvbNx82Y1MxCmQJotINsKdvUpeWV2n%2FqlJ5D8%2BPLX7Er5572%2FwW2B1Bb4Rj0k6Os74%2BsmJ3vXTe7IL%2BtppmK1Tae3u5HRTJ7%2F4SO5lRsrVpfd6N57fCpM4eEn0mVrNBEq6Tvy45ISQtoVY7kk91fdZ5Jd825jydvEp2vX3l9ZjVMrnVMmmYCqkpBHx%2BCqJBdEPnuWr7ovoOwE1heI%2FTE5KyhzBJ7uwKXz%2FM6ch9VzD0sD5L4Y2xqb%2F9SKQMs5p6yA%2Bw9nc7zr7qBv3wDNbiOJCwxsgYEuQPUIzp8fZ6k9vvx7fVZgOhgzbYM9pq3%2B%2FtlynTqptOv1kLa6zajdprLNGrVOrxUJSmuNVq3VonVkruQvf7fzDwAAAP%2F%2FAQAA%2F%2F%2Bu8qayYQQAAA%3D%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RS32scVRi90wYs%2BKJSHxSVfVTQzcz%2BXvtQjDESTJvaKgoien%2Ft5po7c6f3zt3Z5Cm0IH2S9T%2BYnE0aqkH0D2iRTaEPAaHjU6DmfxChTz7IboOrHwzfOXPOw%2Fm%2B7367609JCE9Plq%2BYbaU1XWxWw8qbn0fRpcqaSvywMuy0vmo1LlXs4N1uqxq%2BVflQ8k2zWAujMIzCqLKirOyZ4eJUhEoPu1G1G1YbtWrUbGBo%2F8%2BdD%2BBoADE4JS9BiXLhYXARik%2BQxD8vS7eZmfTtD2KvaWYsBuLg02QzMXmCeA57NkAvOThzw7jHKw9gkv1ZXJjBv0amShI8egCWHJyFBBvszXIyDZmAieeRDyaQegJFJ%2BDmNpR4TAAucHUdSXz3qrE53Xqm0qlakoWnf0HlJVn44yKS%2BKclrYaVG0b7TJnEYdgroIYTqP4EqT9Ctn0OKj8Cz25Bid%2FI4tM1JPHeutMGShSz2ZWaQPUm0HIE6gL46acC%2BF4AnwaIxUmFR1HUDgWnYafLeV20JWuJMKLtXkSjsNWB59N4I2TpCFyPwO0OUruDTTWC9b%2FCbRRwIoDLShJ8vIOBKJBLgtwR5JQgVwR5RpAPin2hXc0Vd4V2nkVnvXbW68XYZP1dum%2ByvkzIbnpKXpzuJbhw6xCb8qRCWyxknW6tKbqsThtRs8HDepPXGqwhRbct4VQB5c7NRt1WJXntfhWpKslzXz4Bo0dw%2BghcvQDqXwfNx%2B1aCLoxbnRCbCeHVHidvbNx82Y1MxCmQJotINsKdvUpeWV2n%2FqlJ5D8%2BPLX7Er5572%2FwW2B1Bb4Rj0k6Os74%2BsmJ3vXTe7IL%2BtppmK1Tae3u5HRTJ7%2F4SO5lRsrVpfd6N57fCpM4eEn0mVrNBEq6Tvy45ISQtoVY7kk91fdZ5Jd825jydvEp2vX3l9ZjVMrnVMmmYCqkpBHx%2BCqJBdEPnuWr7ovoOwE1heI%2FTE5KyhzBJ7uwKXz%2FM6ch9VzD0sD5L4Y2xqb%2F9SKQMs5p6yA%2Bw9nc7zr7qBv3wDNbiOJCwxsgYEuQPUIzp8fZ6k9vvx7fVZgOhgzbYM9pq3%2B%2FtlynTqptOv1kLa6zajdprLNGrVOrxUJSmuNVq3VonVkruQvf7fzDwAAAP%2F%2FAQAA%2F%2F%2Bu8qayYQQAAA%3D%3D HTTP/1.1
Host: speechfountaindigestion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pornjustx.com/
Cookie: u_pl=17334956; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleca6b0b8925d9b3a4154c035c24b4ed97e=[3357660]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 05 Sep 2022 05:52:01 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5c47c029b62027aea219377d42ad8f8f
Strict-Transport-Security: max-age=0; includeSubdomains
s3t3d2y8.afcdn.net/library/759202/14cdf1353d64a64ee271f5211a0dc1e60cf6f0e6.webp
200 OK 7.8 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/759202/14cdf1353d64a64ee271f5211a0dc1e60cf6f0e6.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d207740399aab46e880de871c8aaed60
14cdf1353d64a64ee271f5211a0dc1e60cf6f0e6
2eeb7427375b10973a39daaccbc7adac1a143988e3fe2768ec7cacac8aa73c48
GET /library/759202/14cdf1353d64a64ee271f5211a0dc1e60cf6f0e6.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: image/webp
content-length: 7778
last-modified: Thu, 04 Nov 2021 11:46:24 GMT
etag: "6183c810-1e62"
expires: Fri, 30 Jun 2023 18:47:00 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195264
server: CDN77-Turbo
x-77-nzt: AblMCQ2vFZb/QfFWAA
x-77-nzt-ray: RFJ4gJsy3k0
x-cache: HIT
x-age: 5697857
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/676799/43cc0f34a7085743076083a29185a6d24ec79f8a.webp
200 OK 6.5 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/676799/43cc0f34a7085743076083a29185a6d24ec79f8a.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a7375e17e76259ef804acd4ce417e2da
43cc0f34a7085743076083a29185a6d24ec79f8a
0b2a5cff40ab5764f6c94a9bb88b8103e5c1bc8e54dc27f472bdb4fca12a37b7
GET /library/676799/43cc0f34a7085743076083a29185a6d24ec79f8a.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: image/webp
content-length: 6512
last-modified: Thu, 04 Nov 2021 10:09:28 GMT
etag: "6183b158-1970"
expires: Fri, 30 Jun 2023 14:50:48 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195410
server: CDN77-Turbo
x-77-nzt: AblMCQ0SE4X/r/BWAA
x-77-nzt-ray: nqbRjDzRIZA
x-cache: HIT
x-age: 5697711
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/692514/89fa982e4c20a05fc19a55d10547e1c8b1726b8f.webp
200 OK 9.6 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/692514/89fa982e4c20a05fc19a55d10547e1c8b1726b8f.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash fb8aa6b1f18a48da12e678884703bff7
89fa982e4c20a05fc19a55d10547e1c8b1726b8f
333da750e87296a6baaeb4ff75b080a8fb41ad3c7359d38502468327c8e8be03
GET /library/692514/89fa982e4c20a05fc19a55d10547e1c8b1726b8f.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: image/webp
content-length: 9608
last-modified: Wed, 03 Nov 2021 21:07:03 GMT
etag: "6182f9f7-2588"
expires: Wed, 30 Aug 2023 17:13:44 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1693416907
server: CDN77-Turbo
x-77-nzt: AblMCQ3mxVv/NkQHAA
x-77-nzt-ray: bztE8KWzQvw
x-cache: HIT
x-age: 476214
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1abf2e1f38de4e7ed3dc1158646d4e74
39136c771bf2df753ec344b6fccfd99e17357b28
0dfc835ba8616299b1817e622d1679b1a47292d507c160ba2b27cb04cd9c88e1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0DFC835BA8616299B1817E622D1679B1A47292D507C160BA2B27CB04CD9C88E1"
Last-Modified: Fri, 02 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3181
Expires: Mon, 05 Sep 2022 06:45:02 GMT
Date: Mon, 05 Sep 2022 05:52:01 GMT
Connection: keep-alive
www.youtube.com/watch?v=UbikLe1eZsI
200 OK 12 kB URL HTTP/2 www.youtube.com/watch?v=UbikLe1eZsI
IP
Hash bd2297d2137f5279ea448bc0e89c94ae
950d0f0cf9f80387ef58bf490dba6bce593a4c42
8843df0f0dec67cc8ef36c2b00a267f2484dbdc0d7fac806215f4ff8bfd1157b
GET /watch?v=UbikLe1eZsI HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 05 Sep 2022 05:52:00 GMT
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin-allow-popups; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=1rT_Sz5zDmc; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=; Domain=.youtube.com; Expires=Tue, 10-Dec-2019 05:52:00 GMT; Path=/; Secure; HttpOnly; SameSite=none
__Secure-YEC=CgtHU2toX2Zsb1NVTSiAndaYBg%3D%3D; Domain=.youtube.com; Expires=Thu, 05-Oct-2023 05:51:59 GMT; Path=/; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+379; expires=Wed, 04-Sep-2024 05:52:00 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1931a32d83e4feb5268887bcb07fcc1e
6fb75c21ced29544dd6d7c3b0ef79adf65718a39
d794fae0b82097a2e97af2f21b6c243832081f88036a2a56bbeeabb08790d88d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 05:52:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 472 B IP
Hash fee619d8b0d64a2a90f5385fd11c1698
1324aaba4cae46d88f0aee6c05de58fe04eefd1b
460d33676dfe19143e8330d22ec01bb8dcc59a5522bb0f0ff227b7694d8e85c3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 05:52:01 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 06:57:10 GMT
Expires: Sun, 11 Sep 2022 06:57:09 GMT
Etag: "1324aaba4cae46d88f0aee6c05de58fe04eefd1b"
Cache-Control: max-age=521707,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 745cb24a6853b518-OSL
cdn-s13.cfeucdn.com/flv/api/files/thumbs_new/2022/09/01/1662048953qka2j/1662048953qka2j-640x480-1.jpg
200 OK 71 kB URL HTTP/2 cdn-s13.cfeucdn.com/flv/api/files/thumbs_new/2022/09/01/1662048953qka2j/1662048953qka2j-640x480-1.jpg
IP
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 852x480, components 3\012- data
Hash 0e245c53a214bcfb401f0f31cd2e521d
d3f86abb3435ed48da0951a6eae18f08d6957593
7a4af347de25dd0990968affff208f871092c42d6ae0f0ee0c95ff48b6be2cb5
GET /flv/api/files/thumbs_new/2022/09/01/1662048953qka2j/1662048953qka2j-640x480-1.jpg HTTP/1.1
Host: cdn-s13.cfeucdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:54:35 GMT
content-type: image/jpeg
content-length: 71128
last-modified: Thu, 01 Sep 2022 16:23:06 GMT
etag: "6310dc6a-115d8"
server: cloudflare
expires: Tue, 12 Aug 2121 05:54:35 GMT
cache-control: max-age=3122064000, public
accept-ranges: bytes
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash bb22075867a180a59587c55e0facccb8
9af4960264c36cebebd5601a9a5a4fcc1b630c64
5d4e2ee6f555b320ef3e62390c1f3d8934f690e4f4d859cd19c015967f69a018
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "5D4E2EE6F555B320EF3E62390C1F3D8934F690E4F4D859CD19C015967F69A018"
Last-Modified: Mon, 05 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2477
Expires: Mon, 05 Sep 2022 06:33:18 GMT
Date: Mon, 05 Sep 2022 05:52:01 GMT
Connection: keep-alive
s.w.org/images/core/emoji/14.0.0/svg/1f929.svg
200 OK 977 B URL HTTP/2 s.w.org/images/core/emoji/14.0.0/svg/1f929.svg
IP
Hash 4de8ce392383876ecaf924a5b7f2f502
83029d6546b40e84015b3cbe40ab631b5993d6f9
996d916db09813e80f4aedc0d3e2f5e14816ddb11e6f8d15422b6d7a5eae47ee
GET /images/core/emoji/14.0.0/svg/1f929.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Tue, 12 Apr 2022 03:53:44 GMT
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn 2
x-content-type-options: nosniff
X-Firefox-Spdy: h2
cdn4ads.com/GH.asp?_=BAYAYxWOfwFjFY5_gAGBAsAAIEX0Qc4TAYeBQyCJ_8eqF-lL-_HIc5rl5eeih67kE1fvwQBHMEUCIB6PTzqFCEms-B9T_AE487Ku_TLtviVUgQ9LXoUNl95kAiEA0Dz63U5r8LLThDF7kSEazy1jZ5hKtNNIGIk6DgD795s&v=4&zJqCAUBm=4129487&minBid=&CcEXJZSa=0,0&VrTtMdkx=&WGbqyZlo=&s=1280,1024,1,1280,1024,0
200 OK 814 B URL HTTP/2 cdn4ads.com/GH.asp?_=BAYAYxWOfwFjFY5_gAGBAsAAIEX0Qc4TAYeBQyCJ_8eqF-lL-_HIc5rl5eeih67kE1fvwQBHMEUCIB6PTzqFCEms-B9T_AE487Ku_TLtviVUgQ9LXoUNl95kAiEA0Dz63U5r8LLThDF7kSEazy1jZ5hKtNNIGIk6DgD795s&v=4&zJqCAUBm=4129487&minBid=&CcEXJZSa=0,0&VrTtMdkx=&WGbqyZlo=&s=1280,1024,1,1280,1024,0
IP
File type ASCII text, with very long lines (1138), with no line terminators
Hash 278877079ceccf63bef75876a0b9884d
c00191ba234f75db7fccc4bf224ffc0f72a56669
2ef531b90398b3ec99604d6145cd0a46e4d0f04a2282efd88d2bafc8a02feac8
GET /GH.asp?_=BAYAYxWOfwFjFY5_gAGBAsAAIEX0Qc4TAYeBQyCJ_8eqF-lL-_HIc5rl5eeih67kE1fvwQBHMEUCIB6PTzqFCEms-B9T_AE487Ku_TLtviVUgQ9LXoUNl95kAiEA0Dz63U5r8LLThDF7kSEazy1jZ5hKtNNIGIk6DgD795s&v=4&zJqCAUBm=4129487&minBid=&CcEXJZSa=0,0&VrTtMdkx=&WGbqyZlo=&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: cdn4ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
asf: 6
cache-control: private, no-store, no-cache, must-revalidate, no-transform, max-age=0
pragma: no-cache
content-type: application/javascript; charset=utf-8
set-cookie: PP_CV=yes; expires=Mon, 05-Sep-2022 06:52:01 GMT; Max-Age=3600
fraudcheck=d96ec3f2c01070bdb4c58fc5c077712f; expires=Wed, 05-Oct-2022 05:52:01 GMT; Max-Age=2592000; path=/; domain=.popads.net
PopAds_CF_Pass=1; expires=Mon, 05-Sep-2022 11:52:01 GMT; Max-Age=21600
link: <https://free-cosmetics-online.com>;rel=preconnect
content-length: 814
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Sep 2022 05:52:01 GMT
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/7/css/animate.css
200 OK 5.2 kB URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/7/css/animate.css
IP
Hash 851ef23d8a9182cf81db3910fa647b75
69203654748a31c49378f6f416db5353201e7f2d
20b436581f716eda74c596e0aceea9026598567630239001cc27958dbd07296f
GET /sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/7/css/animate.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pornjustx.com
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: text/css
last-modified: Fri, 21 May 2021 10:10:46 GMT
etag: W/"60a78726-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2835564
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bmfOL4PMThCuh4deMkTpvSHApvlCW4pyT4QUupW13IVAFXRJaftV10Jn2sl0X4LObE0NKK9qOHUCqp9k4bVG6w%2FyPZcll9EbAsOeE7cuWcR1l09lNRuVRod8e5emvPYXhoo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 745cb24baa9f0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a73c40e0fed317f31e35a24d5b5e2d0d
fb19e9d403e37956762ebb527260576860161872
4a38f2cc8997dada402e2cce06bbd8776cbad2075b00696d00efa59ad5388644
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 05:52:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/7/index.html
200 OK 5.3 kB URL HTTP/2 cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/7/index.html
IP
Hash c83ad7315243c208d9977140290dfaa5
cbf3f7a1e43933f3330e12172c427f95854949e6
98f72da281e8bb416652bd86f1100752c6a5419cd00fd9e2cc206a3b7b4186d7
GET /sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/7/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pornjustx.com
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: text/html
last-modified: Tue, 01 Feb 2022 13:22:32 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 486289
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2p3ikaMpAx0E4Wn%2FK1KbrC1Qybs6m57r7Xo%2BVsXp1UMVClmwQFvJAE0kqKNDYypAm36im9PzlYhrCm8K7fPZE8vn6qAc2MYQMexSn6%2F1Ff%2BAdvZgONgio0IgbjxUivdQt1PA7L4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 745cb24a3e001bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
cadrctlnk.com/in/p/?spot_id=51475&cat=25&sub_id=335977926
200 OK 33 kB URL HTTP/2 cadrctlnk.com/in/p/?spot_id=51475&cat=25&sub_id=335977926
IP
Hash 74e7b963dd7216358e6aa328eb19053d
0d436ac1dfef108b72e57b7a4c1f5bbf4ccdd267
fd94615b13dc34579b1906aca4de4299ceca0bb29c3e7388baf644c30d45f699
Analyzer Verdict Alert quad9 Sinkholed
GET /in/p/?spot_id=51475&cat=25&sub_id=335977926 HTTP/1.1
Host: cadrctlnk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://popxperts.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: text/html; charset=UTF-8
pragma: no-cache
vary: Accept-Encoding, *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 1095.0=1; expires=Tue, 06 Sep 2022 05:52:01 GMT; path=/; secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
www.hiwoshote.pro/cda884/f265d2bd3ccc.js
200 OK 29 kB URL HTTP/2 www.hiwoshote.pro/cda884/f265d2bd3ccc.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash fa1cf3c1a991d329cc4bf5ba57de6f1e
0839fc8fd4e40ad309e6005de46fec2fd773147b
4854ff2c776996485fa79d93209ea2e792792c63a156a3a53a06ad404f447c17
GET /cda884/f265d2bd3ccc.js HTTP/1.1
Host: www.hiwoshote.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Origin: https://xxxfree.watch
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ucdn/1.22.0
date: Mon, 05 Sep 2022 05:51:58 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315356882, public
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsqzmAdmqk/B6ooG0EIWoxnf5jngzO4v15H/4XOXMHf5kCW9G0bgBQkxYucKEX6fKtb2yoUxnJLMA+vaS5pzPbmM
x-served-from: l1
x-vhostid: 124, 21324
content-encoding: br
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/7/css/style.css
200 OK 70 kB URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/7/css/style.css
IP
Hash 65fd986c593eafd0ba36d234dd828703
3e3fa11191b03c72aee9f3173620c3eba43d7f21
5addf06825b0e7d14a3a1ef736c9b3b17969c09b06e165468fe803bfe3860d27
GET /sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/7/css/style.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pornjustx.com
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: text/css
last-modified: Mon, 31 Jan 2022 14:46:40 GMT
etag: W/"61f7f650-2516"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2835564
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q1XOGwc7hwt2aHnQnsg2zANKnwR%2Fwq2nIFeJ4rXjAG%2B19vMUjulTxKL1zFbmfFMMLYy9TwlcLlUvxglGvl%2BWLv4HG5MeSdhn02PYr9nTIqkCfzppStRkMzeMnJSV5fBozes%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 745cb24b9a940b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
200 OK 2.9 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
Hash 27a6350fee581d218d9465a7412084a3
9394f121cd146b205c35fdc8ddbf3698f6a2197b
1e51bcd5ab57c90403b85c319a7c17670ca17661eadb4dbe867e08a05c468cdd
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 05 Sep 2022 05:52:02 GMT
date: Mon, 05 Sep 2022 05:52:02 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 80a630aaca3318cb690ea7c1e68e1b73
280347dd4fb4f86a75cc4a83942a20fab0995d27
4e50347db408d4fa75bbd658ad8f32340ba08ab7af2c734d0b3b9c72a61e294e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4E50347DB408D4FA75BBD658AD8F32340BA08AB7AF2C734D0B3B9C72A61E294E"
Last-Modified: Sat, 03 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14165
Expires: Mon, 05 Sep 2022 09:48:07 GMT
Date: Mon, 05 Sep 2022 05:52:02 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 6.5 kB IP
Hash 1736957d10cebdcc9a4a33c137e90d2d
ec1fa7294b956bc57ef6e864487696656d78575e
d7e847b29f76258ab40f14eeb676caff517e58fb876ad1a4eee0f7bdcbb50be8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 05:52:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
200 OK 9.9 kB IP
ASN #20940 Akamai International B.V.
Hash 500b4c1a6a72ce1455228923c23aed10
19c149d19e7ca1a3f8a5d05e9ed607b94286ddbf
accc28c770f66de2c3f98d0de105bfc469647900af8dd0e945af8e49e0923006
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "B5E15DEEB28FB33B992D15F8238EF71CE729DA13FFF6999144BAE7D026E9D21C"
Last-Modified: Fri, 02 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14912
Expires: Mon, 05 Sep 2022 10:00:34 GMT
Date: Mon, 05 Sep 2022 05:52:02 GMT
Connection: keep-alive
free-cosmetics-online.com/favicon.ico
404 Not Found 38 kB URL HTTP/2 free-cosmetics-online.com/favicon.ico
IP
File type ASCII text, with very long lines (17618)
Hash 4af85f8798110331fefe8f6a58d70a89
8cee6801441609e7100c4a98fa5f89cf75e9a496
2dabdec47224a70162f70e12736ad17ca2ed597b75ad1188c7bbfcb85dc13edb
GET /favicon.ico HTTP/1.1
Host: free-cosmetics-online.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Mon, 05 Sep 2022 05:52:02 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 110
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZY%2BWAR88UHNBsBOj6LVhSsHts4fTEx%2B4Zf0jr3yBMIklTh9VF%2F95a1Y%2FyffEzG4AGR2gOtCf17Mgg%2FdtxuFbsW2w5Ang6swV3J8MlY7L5RhsXO6zPu8G5cRlwi9JOqZZgxPc0czxJxf7UZ3Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 745cb24db8150b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=a0839135-4f69-4229-9412-25f4e723095f&eb=ecca27e85eb071c355aaa120865c0cc2&te=f7dfd0652d10ff8b14a5022fb9b430fe&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=1&pk=0a6e9a96058c7f39edbf4999920d05a3&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=5
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=a0839135-4f69-4229-9412-25f4e723095f&eb=ecca27e85eb071c355aaa120865c0cc2&te=f7dfd0652d10ff8b14a5022fb9b430fe&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=1&pk=0a6e9a96058c7f39edbf4999920d05a3&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=5
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=a0839135-4f69-4229-9412-25f4e723095f&eb=ecca27e85eb071c355aaa120865c0cc2&te=f7dfd0652d10ff8b14a5022fb9b430fe&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=1&pk=0a6e9a96058c7f39edbf4999920d05a3&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=5 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Mon, 05 Sep 2022 05:52:02 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 183a3995195c8e58aaf1cd27ae47037d
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=a0839135-4f69-4229-9412-25f4e723095f&eb=ecca27e85eb071c355aaa120865c0cc2&te=f7dfd0652d10ff8b14a5022fb9b430fe&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=1&pk=a6b0b8925d9b3a4154c035c24b4ed97e&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=5
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=a0839135-4f69-4229-9412-25f4e723095f&eb=ecca27e85eb071c355aaa120865c0cc2&te=f7dfd0652d10ff8b14a5022fb9b430fe&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=1&pk=a6b0b8925d9b3a4154c035c24b4ed97e&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=5
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=a0839135-4f69-4229-9412-25f4e723095f&eb=ecca27e85eb071c355aaa120865c0cc2&te=f7dfd0652d10ff8b14a5022fb9b430fe&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=1&pk=a6b0b8925d9b3a4154c035c24b4ed97e&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=5 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Mon, 05 Sep 2022 05:52:02 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a36271aad75099a409b2e54340e6cf03
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 945995bdb24c21f7b8ba0877b89962dc
a37bc7afbd7790d53f8f4934944fa88769868e21
725a30dbc64fc270316d1e6e029bc55e04aa443ad37318b79d50fc469ae73d34
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "725A30DBC64FC270316D1E6E029BC55E04AA443AD37318B79D50FC469AE73D34"
Last-Modified: Fri, 02 Sep 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6508
Expires: Mon, 05 Sep 2022 07:40:30 GMT
Date: Mon, 05 Sep 2022 05:52:02 GMT
Connection: keep-alive
www.revrtb.com/
200 OK 36 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (302)
Hash 56174b040624d5728fe7bec3aa04b579
395141505d2ab59395d61a884ff5623d5550cb76
91868630b0d3a8d7d0bb90b7f359727959fb0803eb8dd77fb1516360911923b5
GET / HTTP/1.1
Host: www.revrtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://popxperts.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: text/html; charset=utf-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iE%2Bj%2FdtaKMhlxeizTG5SaxpV%2BszQ0uAxhM5ogp9ioFx%2FKSmIUjuZMFo5Ec6%2Fq3szR%2F1E3eAp%2FNwVzVGtMYG5NA%2FxMnwYxWXc4aFRSVfQG3qUBerr5XTdtpeSvlJMNMIKlg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 745cb24abb18fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
4.adsco.re/
200 OK 4.6 kB IP
Hash 34c1bf105a3f995e57af1f8e67a46af9
061b7e67cc8b74aa098dc8d37fb5500a42e3e76c
1d9ef4879a4fd8262ed8207d6494217072c0ce092008133fbc5fe80731bf8b36
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 05:52:02 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
mcpuwpush.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxMDk1LCJ0eXBlIjoicG9wIiwic3BhY2VpZCI6MTA5NSwic3ViaWQiOiIzMzU5Nzc5MjYiLCJzcG90X2lkIjo1MTQ3NX19XSwic2l0ZSI6eyJpZCI6IjUxNDc1IiwicGFnZSI6Imh0dHBzOi8vcG9weHBlcnRzLmNvbS8ifSwiZGV2aWNlIjp7InciOjEyODAsImgiOjEwMjR9LCJ1c2VyIjp7ImlkIjoiOTMxZjhmM2UzY2FlZGVlMGEwMmZjYzkzMDVhZGMyMGMifSwiZXh0Ijp7ImR0IjoxNjYyMzU3MTE4MDI4fX0=
302 Found 0 B URL HTTP/2 mcpuwpush.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxMDk1LCJ0eXBlIjoicG9wIiwic3BhY2VpZCI6MTA5NSwic3ViaWQiOiIzMzU5Nzc5MjYiLCJzcG90X2lkIjo1MTQ3NX19XSwic2l0ZSI6eyJpZCI6IjUxNDc1IiwicGFnZSI6Imh0dHBzOi8vcG9weHBlcnRzLmNvbS8ifSwiZGV2aWNlIjp7InciOjEyODAsImgiOjEwMjR9LCJ1c2VyIjp7ImlkIjoiOTMxZjhmM2UzY2FlZGVlMGEwMmZjYzkzMDVhZGMyMGMifSwiZXh0Ijp7ImR0IjoxNjYyMzU3MTE4MDI4fX0=
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxMDk1LCJ0eXBlIjoicG9wIiwic3BhY2VpZCI6MTA5NSwic3ViaWQiOiIzMzU5Nzc5MjYiLCJzcG90X2lkIjo1MTQ3NX19XSwic2l0ZSI6eyJpZCI6IjUxNDc1IiwicGFnZSI6Imh0dHBzOi8vcG9weHBlcnRzLmNvbS8ifSwiZGV2aWNlIjp7InciOjEyODAsImgiOjEwMjR9LCJ1c2VyIjp7ImlkIjoiOTMxZjhmM2UzY2FlZGVlMGEwMmZjYzkzMDVhZGMyMGMifSwiZXh0Ijp7ImR0IjoxNjYyMzU3MTE4MDI4fX0= HTTP/1.1
Host: mcpuwpush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cadrctlnk.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.16.0
date: Mon, 05 Sep 2022 05:52:02 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://mcpuwpush.com/popunder/in/click/?mid=1665646441&pid=0&site=51475&sc=NO&usage_type=DCH&subid=335977926&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=popxperts.com&hostname=auc-popunder-hz-1&site_id=0&spot_id=51475&utm_source=&utm_medium=&utm_campaign=&utm_content=&expirationTimestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&burl=&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=&iabcat=&min_cpm=0.054127&placement_type_id=&skin_test=&verify_hash=&score=1&durl=&ml=&tag_ab=&original_bid=0&pop_type=0&space_id=1095&verify_hash=&real_bid=&skin_id=&vertical_id=&stratagem=&accel=0&gyr=0&iabcat=&url=https%3A%2F%2Fts.cvastico.com%2Fin%2F849%2F%3Fsource%3D335977926%26site_id%3D51475%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26idzone%3D0%26spot_id%3D51475%26mo%3D%26ve%3D%26ad_tags%3D%26p%3Dhttps%253A%252F%252Fpopxperts.com%252F%26sid%3D1095%26katds_labels%3D%26is_iframe%3D1%26btype%3D0%26score%3D1&pr=&bid_crid=&bid_cid=&ad_tags=&is_interstitial=0
X-Firefox-Spdy: h2
mcpuwpush.com/popunder/in/click/?mid=1665646441&pid=0&site=51475&sc=NO&usage_type=DCH&subid=335977926&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=popxperts.com&hostname=auc-popunder-hz-1&site_id=0&spot_id=51475&utm_source=&utm_medium=&utm_campaign=&utm_content=&expirationTimestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&burl=&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=&iabcat=&min_cpm=0.054127&placement_type_id=&skin_test=&verify_hash=&score=1&durl=&ml=&tag_ab=&original_bid=0&pop_type=0&space_id=1095&verify_hash=&real_bid=&skin_id=&vertical_id=&stratagem=&accel=0&gyr=0&iabcat=&url=https%3A%2F%2Fts.cvastico.com%2Fin%2F849%2F%3Fsource%3D335977926%26site_id%3D51475%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26idzone%3D0%26spot_id%3D51475%26mo%3D%26ve%3D%26ad_tags%3D%26p%3Dhttps%253A%252F%252Fpopxperts.com%252F%26sid%3D1095%26katds_labels%3D%26is_iframe%3D1%26btype%3D0%26score%3D1&pr=&bid_crid=&bid_cid=&ad_tags=&is_interstitial=0
302 Found 1.1 kB URL HTTP/2 mcpuwpush.com/popunder/in/click/?mid=1665646441&pid=0&site=51475&sc=NO&usage_type=DCH&subid=335977926&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=popxperts.com&hostname=auc-popunder-hz-1&site_id=0&spot_id=51475&utm_source=&utm_medium=&utm_campaign=&utm_content=&expirationTimestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&burl=&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=&iabcat=&min_cpm=0.054127&placement_type_id=&skin_test=&verify_hash=&score=1&durl=&ml=&tag_ab=&original_bid=0&pop_type=0&space_id=1095&verify_hash=&real_bid=&skin_id=&vertical_id=&stratagem=&accel=0&gyr=0&iabcat=&url=https%3A%2F%2Fts.cvastico.com%2Fin%2F849%2F%3Fsource%3D335977926%26site_id%3D51475%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26idzone%3D0%26spot_id%3D51475%26mo%3D%26ve%3D%26ad_tags%3D%26p%3Dhttps%253A%252F%252Fpopxperts.com%252F%26sid%3D1095%26katds_labels%3D%26is_iframe%3D1%26btype%3D0%26score%3D1&pr=&bid_crid=&bid_cid=&ad_tags=&is_interstitial=0
IP
ASN #24940 Hetzner Online GmbH
File type gzip compressed data, max compression\012- data
Hash 14391695e27f9c64a372fc5a7353c373
4494f8f852a503f8cf16a287960a0185b3c23530
5bdbe819f166a6ac43a920879b4e1195777cbbfaa198bf0eba93fe8f66b25652
GET /popunder/in/click/?mid=1665646441&pid=0&site=51475&sc=NO&usage_type=DCH&subid=335977926&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=popxperts.com&hostname=auc-popunder-hz-1&site_id=0&spot_id=51475&utm_source=&utm_medium=&utm_campaign=&utm_content=&expirationTimestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&burl=&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=&iabcat=&min_cpm=0.054127&placement_type_id=&skin_test=&verify_hash=&score=1&durl=&ml=&tag_ab=&original_bid=0&pop_type=0&space_id=1095&verify_hash=&real_bid=&skin_id=&vertical_id=&stratagem=&accel=0&gyr=0&iabcat=&url=https%3A%2F%2Fts.cvastico.com%2Fin%2F849%2F%3Fsource%3D335977926%26site_id%3D51475%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26idzone%3D0%26spot_id%3D51475%26mo%3D%26ve%3D%26ad_tags%3D%26p%3Dhttps%253A%252F%252Fpopxperts.com%252F%26sid%3D1095%26katds_labels%3D%26is_iframe%3D1%26btype%3D0%26score%3D1&pr=&bid_crid=&bid_cid=&ad_tags=&is_interstitial=0 HTTP/1.1
Host: mcpuwpush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cadrctlnk.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.16.0
date: Mon, 05 Sep 2022 05:52:02 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://ts.cvastico.com/in/849/?source=335977926&site_id=51475&utm1=&utm2=&utm3=&utm4=&idzone=0&spot_id=51475&mo=&ve=&ad_tags=&p=https%3A%2F%2Fpopxperts.com%2F&sid=1095&katds_labels=&is_iframe=1&btype=0&score=1
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 824023e27dd1b8691cb28e0ef3916b87
0536e3b0d66eb4a209a1475827b7412489191be1
a81a5915c40bd84a0ad56d26359f95028f0ee2cedbc1f284599c9102bf28fc4a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A81A5915C40BD84A0AD56D26359F95028F0EE2CEDBC1F284599C9102BF28FC4A"
Last-Modified: Sun, 04 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2250
Expires: Mon, 05 Sep 2022 06:29:32 GMT
Date: Mon, 05 Sep 2022 05:52:02 GMT
Connection: keep-alive
ts.cvastico.com/in/849/?source=335977926&site_id=51475&utm1=&utm2=&utm3=&utm4=&idzone=0&spot_id=51475&mo=&ve=&ad_tags=&p=https%3A%2F%2Fpopxperts.com%2F&sid=1095&katds_labels=&is_iframe=1&btype=0&score=1
302 Found 0 B URL HTTP/2 ts.cvastico.com/in/849/?source=335977926&site_id=51475&utm1=&utm2=&utm3=&utm4=&idzone=0&spot_id=51475&mo=&ve=&ad_tags=&p=https%3A%2F%2Fpopxperts.com%2F&sid=1095&katds_labels=&is_iframe=1&btype=0&score=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/849/?source=335977926&site_id=51475&utm1=&utm2=&utm3=&utm4=&idzone=0&spot_id=51475&mo=&ve=&ad_tags=&p=https%3A%2F%2Fpopxperts.com%2F&sid=1095&katds_labels=&is_iframe=1&btype=0&score=1 HTTP/1.1
Host: ts.cvastico.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cadrctlnk.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.20.1
date: Mon, 05 Sep 2022 05:52:02 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://kawunimy.com/bh3.VP0xPB3lpVvvblm/VnJMZYD_0i0uNTT/At5wNQTtE/0/LkTxQ/1oMKDukY1XMeTuUa?sId=335977926&tb=https%3A%2F%2Ftwinrdsyn.com%2Flink.engine%3Fz%3D54701%26guid%3D4615a138-1a30-4bf9-8e11-5e136021ca4b%26tid%3D335977926
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 849.830=1; expires=Tue, 06 Sep 2022 05:52:02 GMT; path=/; secure; SameSite=None
2565.0=1; expires=Tue, 06 Sep 2022 05:52:02 GMT; path=/; secure; SameSite=None
2467.0=1; expires=Tue, 06 Sep 2022 05:52:02 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
kawunimy.com/bh3.VP0xPB3lpVvvblm/VnJMZYD_0i0uNTT/At5wNQTtE/0/LkTxQ/1oMKDukY1XMeTuUa?sId=335977926&tb=https%3A%2F%2Ftwinrdsyn.com%2Flink.engine%3Fz%3D54701%26guid%3D4615a138-1a30-4bf9-8e11-5e136021ca4b%26tid%3D335977926
302 Found 0 B URL HTTP/2 kawunimy.com/bh3.VP0xPB3lpVvvblm/VnJMZYD_0i0uNTT/At5wNQTtE/0/LkTxQ/1oMKDukY1XMeTuUa?sId=335977926&tb=https%3A%2F%2Ftwinrdsyn.com%2Flink.engine%3Fz%3D54701%26guid%3D4615a138-1a30-4bf9-8e11-5e136021ca4b%26tid%3D335977926
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bh3.VP0xPB3lpVvvblm/VnJMZYD_0i0uNTT/At5wNQTtE/0/LkTxQ/1oMKDukY1XMeTuUa?sId=335977926&tb=https%3A%2F%2Ftwinrdsyn.com%2Flink.engine%3Fz%3D54701%26guid%3D4615a138-1a30-4bf9-8e11-5e136021ca4b%26tid%3D335977926 HTTP/1.1
Host: kawunimy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cadrctlnk.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Mon, 05 Sep 2022 05:52:02 GMT
content-type: text/html;charset=UTF-8
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform
x-frame-options: DENY
location: https://twinrdsyn.com/link.engine?z=54701&guid=4615a138-1a30-4bf9-8e11-5e136021ca4b&tid=335977926
referrer-policy: no-referrer
x-content-type-options: nosniff
X-Firefox-Spdy: h2
twinrdsyn.com/Redirect.eng?MediaSegmentId=31749&dcid=3_ctx_d14ca87d-6d9b-4864-a76e-6e24561528c7&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=ziQA8R9w37cDl_Q_aRCC_R3jPqywtIBBuXpeww6yTJFbvRy9PEcBwveIqIo-8FNXCTAyYoVBnVCQcaWCiLhL2BZGY3GN6WNzdNUkxEMNlSwajMvt5eCN8NumjdUYlv5FWgXPvbK5OL1bLUeUbIqOAv_6sPJMQ57C4kcYGqGNYTdH-1km4NXndTSfWAD1_HBRQvStzzZtul_miEdIVVgQEjYkY5VH_5-gUkqXprUvYr3jg8sFQ_plx683giHXSyFaWFNY8cewal_vd4xBOQvMkoF2GOdrMwK8xOY4GZzCsmgbmCbjw3GMj4BpCCXhAvpKlMD1Kee9xhN1x3dfzEGImyQZLi3Ad3GPv5BSgIRtxyiPIR1MNFZnmND-YoN5lpZJTps0JLiydeWsmySpk-jD5sC3GDNbdYyWfEQ6QJMTuLMFAv6KvGD9HDO3KP-CVE3VeHG_boE-sdPNcVQj4Y181WsFmJVGA63wefX7LkYXCx6PqishhRAkaOUSl99g3i_9jijY99WxW-xwjNowJHC9K7UIWDHkTScydytX5_IE_ucx-40Pd2Dkz0sISwL8NAllr8_tjzaogiC7ZnHqEWbsQfb4CnQ2DJPWSphSVvLpeQ42LD-b5keGWEavEhNSCPieNB1snJsm4pXBcLkAJQvwcAye1qcf0HaBcWDPqrH_J58d-9jRWRn9z1LH6N7TI-eoJBpz81pLFG6UhMYZjXTUZHgsf3vKo0QjqWx5LLI_M_2KjCo9_1Nl3K-D8XteYqcP7S5TWsjvUPxcKXmkXY7mQXw5TVt4y2CTi3ASvtoM_kKX6Kv1fijGjVHp6sLKnUk6ZvzPMPumwzbahOexvDX7-w3WyoED3VhD5qothkzZcjxy1cPGfefMr4LeDNKrrigVXVQISaF0Lp43X35CD4bmqysYkqN-1wpNLc5jiWQQtiYRW0xfxDoRqVcwponqnRu5BNdx-ZUYSYdR6nwhZgeS9Q2&kw=&mw=1024&mh=768
200 OK 447 B URL HTTP/2 twinrdsyn.com/Redirect.eng?MediaSegmentId=31749&dcid=3_ctx_d14ca87d-6d9b-4864-a76e-6e24561528c7&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=ziQA8R9w37cDl_Q_aRCC_R3jPqywtIBBuXpeww6yTJFbvRy9PEcBwveIqIo-8FNXCTAyYoVBnVCQcaWCiLhL2BZGY3GN6WNzdNUkxEMNlSwajMvt5eCN8NumjdUYlv5FWgXPvbK5OL1bLUeUbIqOAv_6sPJMQ57C4kcYGqGNYTdH-1km4NXndTSfWAD1_HBRQvStzzZtul_miEdIVVgQEjYkY5VH_5-gUkqXprUvYr3jg8sFQ_plx683giHXSyFaWFNY8cewal_vd4xBOQvMkoF2GOdrMwK8xOY4GZzCsmgbmCbjw3GMj4BpCCXhAvpKlMD1Kee9xhN1x3dfzEGImyQZLi3Ad3GPv5BSgIRtxyiPIR1MNFZnmND-YoN5lpZJTps0JLiydeWsmySpk-jD5sC3GDNbdYyWfEQ6QJMTuLMFAv6KvGD9HDO3KP-CVE3VeHG_boE-sdPNcVQj4Y181WsFmJVGA63wefX7LkYXCx6PqishhRAkaOUSl99g3i_9jijY99WxW-xwjNowJHC9K7UIWDHkTScydytX5_IE_ucx-40Pd2Dkz0sISwL8NAllr8_tjzaogiC7ZnHqEWbsQfb4CnQ2DJPWSphSVvLpeQ42LD-b5keGWEavEhNSCPieNB1snJsm4pXBcLkAJQvwcAye1qcf0HaBcWDPqrH_J58d-9jRWRn9z1LH6N7TI-eoJBpz81pLFG6UhMYZjXTUZHgsf3vKo0QjqWx5LLI_M_2KjCo9_1Nl3K-D8XteYqcP7S5TWsjvUPxcKXmkXY7mQXw5TVt4y2CTi3ASvtoM_kKX6Kv1fijGjVHp6sLKnUk6ZvzPMPumwzbahOexvDX7-w3WyoED3VhD5qothkzZcjxy1cPGfefMr4LeDNKrrigVXVQISaF0Lp43X35CD4bmqysYkqN-1wpNLc5jiWQQtiYRW0xfxDoRqVcwponqnRu5BNdx-ZUYSYdR6nwhZgeS9Q2&kw=&mw=1024&mh=768
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (334), with CRLF line terminators
Hash 0002b0c3870860cbf6be53c30baf6f44
e820fd848d9b8dfb2d91a7b98ceafa32fb89724b
7fae4aa55676da335a0b317dc772ba3e576c9130e5cf85f6cc057b7edb4cfbd1
GET /Redirect.eng?MediaSegmentId=31749&dcid=3_ctx_d14ca87d-6d9b-4864-a76e-6e24561528c7&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=ziQA8R9w37cDl_Q_aRCC_R3jPqywtIBBuXpeww6yTJFbvRy9PEcBwveIqIo-8FNXCTAyYoVBnVCQcaWCiLhL2BZGY3GN6WNzdNUkxEMNlSwajMvt5eCN8NumjdUYlv5FWgXPvbK5OL1bLUeUbIqOAv_6sPJMQ57C4kcYGqGNYTdH-1km4NXndTSfWAD1_HBRQvStzzZtul_miEdIVVgQEjYkY5VH_5-gUkqXprUvYr3jg8sFQ_plx683giHXSyFaWFNY8cewal_vd4xBOQvMkoF2GOdrMwK8xOY4GZzCsmgbmCbjw3GMj4BpCCXhAvpKlMD1Kee9xhN1x3dfzEGImyQZLi3Ad3GPv5BSgIRtxyiPIR1MNFZnmND-YoN5lpZJTps0JLiydeWsmySpk-jD5sC3GDNbdYyWfEQ6QJMTuLMFAv6KvGD9HDO3KP-CVE3VeHG_boE-sdPNcVQj4Y181WsFmJVGA63wefX7LkYXCx6PqishhRAkaOUSl99g3i_9jijY99WxW-xwjNowJHC9K7UIWDHkTScydytX5_IE_ucx-40Pd2Dkz0sISwL8NAllr8_tjzaogiC7ZnHqEWbsQfb4CnQ2DJPWSphSVvLpeQ42LD-b5keGWEavEhNSCPieNB1snJsm4pXBcLkAJQvwcAye1qcf0HaBcWDPqrH_J58d-9jRWRn9z1LH6N7TI-eoJBpz81pLFG6UhMYZjXTUZHgsf3vKo0QjqWx5LLI_M_2KjCo9_1Nl3K-D8XteYqcP7S5TWsjvUPxcKXmkXY7mQXw5TVt4y2CTi3ASvtoM_kKX6Kv1fijGjVHp6sLKnUk6ZvzPMPumwzbahOexvDX7-w3WyoED3VhD5qothkzZcjxy1cPGfefMr4LeDNKrrigVXVQISaF0Lp43X35CD4bmqysYkqN-1wpNLc5jiWQQtiYRW0xfxDoRqVcwponqnRu5BNdx-ZUYSYdR6nwhZgeS9Q2&kw=&mw=1024&mh=768 HTTP/1.1
Host: twinrdsyn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: IKSR={}; INF_DFL8=false; IUID=1d439cbe-cfb9-46af-b7aa-ca526e568345; ISSH=65BB7C; VMI=; IPLH=#{}; IPLH_Q=#[]; CHN=#[]; MSSH=#{}; MSRH=#{}; ILP=null; ILPLU=#1/1/0001 12:00:00 AM; ILEALC=#1/1/0001 12:00:00 AM; ILMPF=#False; IPMPLU=#; IPMUID=#; BSWUID=#; IBL=#[]; PZK={"P":"mxi/AREsutD9C/ZuUsZiH8Hmi8BAaXKAGG4YG1IuOqgvLJS/2V2zxNXdCxa4y92d","B":[106],"UD":1662356722}; IPLSH=#{}; IPLSH_Q=#[]; IZH=#{}; IZH_Q=#[]; IMCH=#{}; IMCH_Q=#[]; IMH=#{}; IMH_Q=#[]; ISH=#{"13909":[{"SId":"65BB7C","D":"22/9/4T22:52:3"}]}; ISH_Q=#[13909]; ISPH=#{}; ISPH_Q=#[]; ICH=#{}; ICH_Q=#[]
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:03 GMT
content-type: text/html; charset=utf-8
content-length: 447
cache-control: private, no-transform
access-control-allow-origin: *
set-cookie: IKSR={}; path=/; SameSite=None; secure
INF_DFL8=false; path=/; SameSite=None; secure
IUID=1d439cbe-cfb9-46af-b7aa-ca526e568345; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure
ISSH=65BB7C; path=/; SameSite=None; secure
VMI=d7e5e220-e6f0-42e5-9187-7ce5a570d0ac; path=/; SameSite=None; secure
IPLH=#{"49608":[{"SId":"65BB7C","D":"22/9/4T22:52:3"}]}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IPLH_Q=#[49608]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
CHN=#[]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Mon, 05-Sep-2022 09:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
PZK={"P":"mxi/AREsutD9C/ZuUsZiH8Hmi8BAaXKAGG4YG1IuOqgvLJS/2V2zxNXdCxa4y92d","B":[106],"UD":1662356722}; expires=Wed, 05-Oct-2022 05:52:03 GMT; path=/; SameSite=None; secure
IPLSH=#{}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH_Q=#[]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IZH=#{"54701":[{"SId":"65BB7C","D":"22/9/4T22:52:3"}]}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IZH_Q=#[54701]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH=#{}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH_Q=#[]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IMH=#{"55400":[{"SId":"65BB7C","D":"22/9/4T22:52:3"}]}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IMH_Q=#[55400]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"13909":[{"SId":"65BB7C","D":"22/9/4T22:52:3"}]}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[13909]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH=#{"13909":[{"SId":"65BB7C","D":"22/9/4T22:52:3"}]}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH_Q=#[13909]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
ICH=#{"27855":[{"SId":"65BB7C","D":"22/9/4T22:52:3"}]}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
ICH_Q=#[27855]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
x-powered-by: ASP.NET
p3p: CP="CAO PSA OUR IND"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sJ5CFktJYiEhSzpvxSfg1Y2faHrdXQ9qnP8H%2BiuPzDxat%2Bu0LUAFnz9LGXLQjaWjkVnxHqvefWSodRGXjKtw0jKCq7pdS2e%2BBuMcpTmpZBPzqii1a40Mn%2BzCpA1PJKg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 745cb25659431c06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s.w.org/images/core/emoji/14.0.0/svg/1f618.svg
200 OK 12 kB URL HTTP/2 s.w.org/images/core/emoji/14.0.0/svg/1f618.svg
IP
Hash 8e1593d461e6d59dcdcd2fccea746099
c13ad9d4072a122b619413d6cf2ed02ed9b33c02
d4a4877a931c182bfd29ad796b5f9353091dcf841421861db1cac0020eeae935
GET /images/core/emoji/14.0.0/svg/1f618.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Tue, 12 Apr 2022 03:47:26 GMT
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn 2
x-content-type-options: nosniff
X-Firefox-Spdy: h2
go.xlivrdr.com/?campaignId=dabb6fcfc914b53d4f2717e8258c73a936af485a3c9452d178eeda3800c00ad7&campaignType=smartpop&creativeId=b73e44f1723d4a1cbe0652884d8e2b7a927432cbdfeee10997ce0a11c37e2b46&iterationId=227650&masterSmartpopId=1603&memberId=300107a4-ba05-47c7-8eb2-238192f2bc31&p1=Promo%20Pop%20Straight%20Tier%201&p2=49608&p3=125296&ruleId=1&smartpopId=2031&sourceId=hdzog.com&trackOff=1&userId=0d0cdc753eed23068b893e6a636a40ccaadc69dc4a5ec7ee080ed62b15816646&variationId=28967
302 Found 0 B URL HTTP/2 go.xlivrdr.com/?campaignId=dabb6fcfc914b53d4f2717e8258c73a936af485a3c9452d178eeda3800c00ad7&campaignType=smartpop&creativeId=b73e44f1723d4a1cbe0652884d8e2b7a927432cbdfeee10997ce0a11c37e2b46&iterationId=227650&masterSmartpopId=1603&memberId=300107a4-ba05-47c7-8eb2-238192f2bc31&p1=Promo%20Pop%20Straight%20Tier%201&p2=49608&p3=125296&ruleId=1&smartpopId=2031&sourceId=hdzog.com&trackOff=1&userId=0d0cdc753eed23068b893e6a636a40ccaadc69dc4a5ec7ee080ed62b15816646&variationId=28967
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?campaignId=dabb6fcfc914b53d4f2717e8258c73a936af485a3c9452d178eeda3800c00ad7&campaignType=smartpop&creativeId=b73e44f1723d4a1cbe0652884d8e2b7a927432cbdfeee10997ce0a11c37e2b46&iterationId=227650&masterSmartpopId=1603&memberId=300107a4-ba05-47c7-8eb2-238192f2bc31&p1=Promo%20Pop%20Straight%20Tier%201&p2=49608&p3=125296&ruleId=1&smartpopId=2031&sourceId=hdzog.com&trackOff=1&userId=0d0cdc753eed23068b893e6a636a40ccaadc69dc4a5ec7ee080ed62b15816646&variationId=28967 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://twinrdsyn.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 05 Sep 2022 05:52:03 GMT
content-length: 0
location: https://stripchat.com/?affiliateId=050922hwtkthorhzu1q7by7kuwlglavhsbb9mqzh1tj4mpek9jq5ybiam556sa8w&campaignId=dabb6fcfc914b53d4f2717e8258c73a936af485a3c9452d178eeda3800c00ad7&p1=Promo+Pop+Straight+Tier+1&p2=49608&p3=125296&realDomain=go.xlivrdr.com&referrer=https%3A%2F%2Ftwinrdsyn.com%2F&sourceId=hdzog.com&stripbotVariation=NullWidget&userId=0d0cdc753eed23068b893e6a636a40ccaadc69dc4a5ec7ee080ed62b15816646
access-control-allow-origin: *
cf-cache-status: DYNAMIC
set-cookie: stripbotVariationName-StripcashTest16=NullWidget; Path=/; Domain=go.xlivrdr.com; Expires=Wed, 05 Oct 2022 05:52:03 GMT; Max-Age=2592000; Secure; SameSite=None
__cflb=02DiuDfsBaY2bRYJiCeSF4mw3pyDiW7pyPLkNvWXLepDz; SameSite=None; Secure; path=/; expires=Tue, 06-Sep-22 04:52:03 GMT; HttpOnly
server: cloudflare
cf-ray: 745cb25828eb0b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
counter.yadro.ru/hit?rhttps%3A//xxxfree.watch/;s1280*1024*24;uhttps%3A//pornjustx.com/e/T0tpbmJLS1BFR0NnbXRTTmZyZWVqdz09%23iss%3DOTEuOTAuNDIuMTU0;0.23632818488880492
200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit?rhttps%3A//xxxfree.watch/;s1280*1024*24;uhttps%3A//pornjustx.com/e/T0tpbmJLS1BFR0NnbXRTTmZyZWVqdz09%23iss%3DOTEuOTAuNDIuMTU0;0.23632818488880492
IP
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit?rhttps%3A//xxxfree.watch/;s1280*1024*24;uhttps%3A//pornjustx.com/e/T0tpbmJLS1BFR0NnbXRTTmZyZWVqdz09%23iss%3DOTEuOTAuNDIuMTU0;0.23632818488880492 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Mon, 05 Sep 2022 05:52:04 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Sat, 04 Sep 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash ed53ccabeb87e857917e83812d7b59f9
67535b9a34632b9b16ac22b5c0ed93cf34bc897f
2e561f4b2b43b4f062d35e4088695c2cf724b51c29c569bdb820aa1dda798d7f
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 05:52:04 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Fri, 09 Sep 2022 02:51:11 GMT
ETag: "67535b9a34632b9b16ac22b5c0ed93cf34bc897f"
Last-Modified: Mon, 05 Sep 2022 02:51:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 118
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 745cb259ae63b51d-OSL
mc.yandex.ru/metrika/tag.js
200 OK 72 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (681)
Hash 034d4604beaddff5783b9878fadfaee6
64d5e1e0dbbbd62d6a64349dd964763b7ab4cbea
f8a957ee3468693f465da61d899438a2b674369b80c9d5c9ffff1111a7091290
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 71985
date: Mon, 05 Sep 2022 05:52:04 GMT
access-control-allow-origin: *
etag: "6312122a-11931"
expires: Mon, 05 Sep 2022 06:52:04 GMT
last-modified: Fri, 02 Sep 2022 17:24:42 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 05 Sep 2022 05:52:04 GMT
access-control-allow-origin: *
etag: "6312122a-2b"
expires: Mon, 05 Sep 2022 06:52:04 GMT
accept-ranges: bytes
last-modified: Fri, 02 Sep 2022 17:24:42 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/54046198/1?wmode=7&page-url=https%3A%2F%2Fpornjustx.com%2Fe%2FT0tpbmJLS1BFR0NnbXRTTmZyZWVqdz09%23iss%3DOTEuOTAuNDIuMTU0&page-ref=https%3A%2F%2Fxxxfree.watch%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A313%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A1100859011970%3Ahid%3A1072729998%3Az%3A0%3Ai%3A20220905055200%3Aet%3A1662357120%3Arn%3A371275057%3Arqn%3A1%3Au%3A1662357120578007262%3Aw%3A884x500%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ans%3A1662357114312%3Ads%3A0%2C0%2C0%2C%2C1%2C0%2C%2C290%2C1%2C2872%2C2872%2C2%2C458%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662357120%3At%3AVideo%20player&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/54046198/1?wmode=7&page-url=https%3A%2F%2Fpornjustx.com%2Fe%2FT0tpbmJLS1BFR0NnbXRTTmZyZWVqdz09%23iss%3DOTEuOTAuNDIuMTU0&page-ref=https%3A%2F%2Fxxxfree.watch%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A313%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A1100859011970%3Ahid%3A1072729998%3Az%3A0%3Ai%3A20220905055200%3Aet%3A1662357120%3Arn%3A371275057%3Arqn%3A1%3Au%3A1662357120578007262%3Aw%3A884x500%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ans%3A1662357114312%3Ads%3A0%2C0%2C0%2C%2C1%2C0%2C%2C290%2C1%2C2872%2C2872%2C2%2C458%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662357120%3At%3AVideo%20player&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash adc0be25687c177ad302e0c502799bcf
2756288e8e0b07702cb7987df6f5963d2cf1d976
2cbbfff7796d6310c55a26f26b04570b7f6a46d2b9d2ed51df8e5d6d6b1399a3
GET /watch/54046198/1?wmode=7&page-url=https%3A%2F%2Fpornjustx.com%2Fe%2FT0tpbmJLS1BFR0NnbXRTTmZyZWVqdz09%23iss%3DOTEuOTAuNDIuMTU0&page-ref=https%3A%2F%2Fxxxfree.watch%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A313%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A1100859011970%3Ahid%3A1072729998%3Az%3A0%3Ai%3A20220905055200%3Aet%3A1662357120%3Arn%3A371275057%3Arqn%3A1%3Au%3A1662357120578007262%3Aw%3A884x500%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ans%3A1662357114312%3Ads%3A0%2C0%2C0%2C%2C1%2C0%2C%2C290%2C1%2C2872%2C2872%2C2%2C458%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662357120%3At%3AVideo%20player&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pornjustx.com
Referer: https://pornjustx.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Mon, 05 Sep 2022 05:52:04 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://pornjustx.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 05-Sep-2022 05:52:04 GMT
last-modified: Mon, 05-Sep-2022 05:52:04 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
dood.wf/e/ozgq13ocwfrqikbogfy9q5hpsgzbo1t
200 OK 0 B URL HTTP/2 dood.wf/e/ozgq13ocwfrqikbogfy9q5hpsgzbo1t
IP
GET /e/ozgq13ocwfrqikbogfy9q5hpsgzbo1t HTTP/1.1
Host: dood.wf
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xxxfree.watch/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:51:58 GMT
content-type: text/html; charset=UTF-8
expires: Sun, 04 Sep 2022 05:51:58 GMT
set-cookie: lang=1; domain=.dood.wf; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mChT67vciCL1r993QaTV156gPAa3xc6LfsqadEdKg3DXm8pw3unXo3UXy8cc%2Fl0q%2F1rxjuTSokl6iqOwQzixa6VgxLV6LVNsgz7WaXi7HrdSr6s4019DUW0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 745cb237aca3b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.hiwoshote.pro/cda884/f265d2bd3ccc.js
200 OK 0 B URL HTTP/2 www.hiwoshote.pro/cda884/f265d2bd3ccc.js
IP
GET /cda884/f265d2bd3ccc.js HTTP/1.1
Host: www.hiwoshote.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ucdn/1.22.0
date: Mon, 05 Sep 2022 05:51:58 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315356882, public
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsqzmAdmqk/B6ooG0EIWoxnf5jngzO4v15H/4XOXMHf5kCW9G0bgBQkxYucKEX6fKtb2yoUxnJLMA+vaS5pzPbmM
x-served-from: l1
x-vhostid: 124, 20766
content-encoding: br
X-Firefox-Spdy: h2
vjs.zencdn.net/7.8.4/video.min.js?ver=7.8.4
200 OK 0 B URL HTTP/2 vjs.zencdn.net/7.8.4/video.min.js?ver=7.8.4
IP
GET /7.8.4/video.min.js?ver=7.8.4 HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Wed, 08 Jul 2020 20:29:39 GMT
etag: "102cc1896541330762962b95fcb31f95"
cache-control: public, max-age=31536000
content-type: application/javascript; charset=utf-8
content-encoding: gzip
date: Mon, 05 Sep 2022 05:51:58 GMT
x-served-by: cache-bma1648-BMA
x-cache: HIT
x-cache-hits: 307
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 139307
X-Firefox-Spdy: h2
unpkg.com/jquery.cookie@1.4.1/jquery.cookie.js
200 OK 0 B URL HTTP/2 unpkg.com/jquery.cookie@1.4.1/jquery.cookie.js
IP
GET /jquery.cookie@1.4.1/jquery.cookie.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:51:58 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sun, 27 Apr 2014 20:04:54 GMT
etag: W/"c31-MeG8xM+AWiwv7iH0je0eWY9koqg"
via: 1.1 fly.io
fly-request-id: 01G75513388K1MR4R8RW1AYXTV-fra
cf-cache-status: HIT
age: 5400619
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 745cb2386ba20b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
s.w.org/images/core/emoji/14.0.0/svg/1f444.svg
200 OK 0 B URL HTTP/2 s.w.org/images/core/emoji/14.0.0/svg/1f444.svg
IP
GET /images/core/emoji/14.0.0/svg/1f444.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Tue, 12 Apr 2022 03:47:50 GMT
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn 2
x-content-type-options: nosniff
X-Firefox-Spdy: h2
mc.yandex.ru/watch/54046198?wmode=7&page-url=https%3A%2F%2Fpornjustx.com%2Fe%2FT0tpbmJLS1BFR0NnbXRTTmZyZWVqdz09%23iss%3DOTEuOTAuNDIuMTU0&page-ref=https%3A%2F%2Fxxxfree.watch%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A313%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A1100859011970%3Ahid%3A1072729998%3Az%3A0%3Ai%3A20220905055200%3Aet%3A1662357120%3Arn%3A371275057%3Arqn%3A1%3Au%3A1662357120578007262%3Aw%3A884x500%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ans%3A1662357114312%3Ads%3A0%2C0%2C0%2C%2C1%2C0%2C%2C290%2C1%2C2872%2C2872%2C2%2C458%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662357120%3At%3AVideo%20player&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/54046198?wmode=7&page-url=https%3A%2F%2Fpornjustx.com%2Fe%2FT0tpbmJLS1BFR0NnbXRTTmZyZWVqdz09%23iss%3DOTEuOTAuNDIuMTU0&page-ref=https%3A%2F%2Fxxxfree.watch%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A313%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A1100859011970%3Ahid%3A1072729998%3Az%3A0%3Ai%3A20220905055200%3Aet%3A1662357120%3Arn%3A371275057%3Arqn%3A1%3Au%3A1662357120578007262%3Aw%3A884x500%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ans%3A1662357114312%3Ads%3A0%2C0%2C0%2C%2C1%2C0%2C%2C290%2C1%2C2872%2C2872%2C2%2C458%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662357120%3At%3AVideo%20player&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP
GET /watch/54046198?wmode=7&page-url=https%3A%2F%2Fpornjustx.com%2Fe%2FT0tpbmJLS1BFR0NnbXRTTmZyZWVqdz09%23iss%3DOTEuOTAuNDIuMTU0&page-ref=https%3A%2F%2Fxxxfree.watch%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A313%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A1100859011970%3Ahid%3A1072729998%3Az%3A0%3Ai%3A20220905055200%3Aet%3A1662357120%3Arn%3A371275057%3Arqn%3A1%3Au%3A1662357120578007262%3Aw%3A884x500%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ans%3A1662357114312%3Ads%3A0%2C0%2C0%2C%2C1%2C0%2C%2C290%2C1%2C2872%2C2872%2C2%2C458%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662357120%3At%3AVideo%20player&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pornjustx.com
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/54046198/1?wmode=7&page-url=https%3A%2F%2Fpornjustx.com%2Fe%2FT0tpbmJLS1BFR0NnbXRTTmZyZWVqdz09%23iss%3DOTEuOTAuNDIuMTU0&page-ref=https%3A%2F%2Fxxxfree.watch%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A313%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A1100859011970%3Ahid%3A1072729998%3Az%3A0%3Ai%3A20220905055200%3Aet%3A1662357120%3Arn%3A371275057%3Arqn%3A1%3Au%3A1662357120578007262%3Aw%3A884x500%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ans%3A1662357114312%3Ads%3A0%2C0%2C0%2C%2C1%2C0%2C%2C290%2C1%2C2872%2C2872%2C2%2C458%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662357120%3At%3AVideo%20player&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Mon, 05 Sep 2022 05:52:04 GMT
access-control-allow-origin: https://pornjustx.com
set-cookie: yandexuid=2169437311662357124; Expires=Tue, 05-Sep-2023 05:52:04 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=2169437311662357124; Expires=Tue, 05-Sep-2023 05:52:04 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=100398611662357124; Path=/; SameSite=None; Secure
i=2KAU7bwws3k78toQMZ+tKT9q4e3QZcuFk1U+i6O/KnWd8AVpA2GnHAKVk1e/Q+wxyqhC0IuY1tSuWofPEMI2tcvswBM=; Expires=Thu, 02-Sep-2032 05:51:59 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1693893124.yrts.1662357124#1693893124.yrtsi.1662357124; Expires=Tue, 05-Sep-2023 05:52:04 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 05-Sep-2022 05:52:04 GMT
last-modified: Mon, 05-Sep-2022 05:52:04 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
zap.buzz/Jr1zAzZ
302 Found 0 B IP
GET /Jr1zAzZ HTTP/1.1
Host: zap.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 05 Sep 2022 05:52:00 GMT
content-type: text/html; charset=utf-8
location: https://xml.poprtb.com/redirect?feed=457657&auth=p12tC3&pubid=152420
vary: Cookie
set-cookie: session=eyJfcGVybWFuZW50Ijp0cnVlfQ.YxWOgA.BtgxtM6QnHAIJGBqoES5YD2YWqM; Expires=Mon, 05 Sep 2022 06:22:00 GMT; HttpOnly; Path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=avLqfkGof4QQ3VRu6xgIaVeGhtSMb8XuvM39dBwpwrnSf%2Fnv%2B1aQ82SJogm2j81oACPsbCvawozq7GvW28a23Huh3Q8vwfZ8fY39Zeh%2FpAr%2BEeGFIu4lYdZ1Tw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 745cb23fdfd4b529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
addresseepaper.com/sfp.js
200 OK 0 B URL HTTP/2 addresseepaper.com/sfp.js
IP
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: b38bbbff93ef0f4e4609f7bbfdbb9266
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Mon, 05 Sep 2022 05:52:00 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8NtutWov6CP5VE36Y1I0anaFF0nhqipz%2B4UeNteZGVIWJTRn6vk5ZTXeUCfQ2UZpu%2FETFLLlZYP9a37H8qzhDaQaXu8k05h5C8RxKZvJS0yPzKCgk7gRTYvjMzPCk0PLPNpNiiQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 745cb244dfe5dce7-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
watchxxxfree.xyz/wp-content/uploads/2019/03/logo2015-1-1.png
301 Moved Permanently 0 B URL HTTP/2 watchxxxfree.xyz/wp-content/uploads/2019/03/logo2015-1-1.png
IP
GET /wp-content/uploads/2019/03/logo2015-1-1.png HTTP/1.1
Host: watchxxxfree.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Mon, 05 Sep 2022 05:51:59 GMT
location: https://xxxfree.watch/wp-content/uploads/2019/03/logo2015-1-1.png
cache-control: max-age=3600
expires: Mon, 05 Sep 2022 06:51:59 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kLGi5sEwkaQf96okFTXMQVg3m2BbcgSosjKUjaw3NMDWcJCdUowzjIUwFDWWl1op%2BYmuyTGsyU1tuY%2Fdgj9Yn7eE%2BoAr1n5MUoeAOh1Ru9ARsrFFcI%2F6JmWqtvSR6YxSQFoj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 745cb23c48fd0b41-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
creepingbrings.com/sfp.js
200 OK 0 B URL HTTP/2 creepingbrings.com/sfp.js
IP
GET /sfp.js HTTP/1.1
Host: creepingbrings.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:51:59 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 8a332a355a6854cb5815d6066d8e7cce
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Mon, 05 Sep 2022 05:51:59 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LnxqkM8GFfLhbF3%2BYDNIcrjWRKj97QksF%2FlKHcFbACx9g4dnT1KwtKZ4JoLfB8tQq8Vc6ixhMO6IFTYVye3izqTv1Fg2x92zUAnFy8yWFsc9M0MtcQOKV59q69LdhErba58Z6Zk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 745cb23dcb27740f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
q.xmlrtb.com/r?fid=k2mHN2AHw88
302 Found 0 B URL HTTP/2 q.xmlrtb.com/r?fid=k2mHN2AHw88
IP
GET /r?fid=k2mHN2AHw88 HTTP/1.1
Host: q.xmlrtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 05 Sep 2022 05:52:00 GMT
location: https://popxperts.com/w3ar3w1n
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OUZMHPW%2FtBLNAowqQ0gKIwOeeYKOrl04mcXj5wDZepOmiVSHMAska9bRhlOSvVwFEb%2FIc2Dg%2BWA8IWTWInfB5YiZDsyllmkmOX1Wb18W4KM2epUsdnHDispVGR0wDLk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 745cb2405dd4b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
wysyshypti.pro/crD.9/6/bD2_5BlYSgWSQs9JNlDoEQzrN/TukQ2/MZCQ0p0oMrTIMz1/OYTEY-xw
200 OK 0 B URL HTTP/2 wysyshypti.pro/crD.9/6/bD2_5BlYSgWSQs9JNlDoEQzrN/TukQ2/MZCQ0p0oMrTIMz1/OYTEY-xw
IP
GET /crD.9/6/bD2_5BlYSgWSQs9JNlDoEQzrN/TukQ2/MZCQ0p0oMrTIMz1/OYTEY-xw HTTP/1.1
Host: wysyshypti.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 05:51:58 GMT
content-type: application/javascript
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform
access-control-allow-credentials: true
last-modified: Mon, 05 Sep 2022 05:51:58 GMT
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET
set-cookie: kadSlcJ=eyJ0aW1lU3RhbXAiOjE2NjIzMTI3NTEsInpvbmVzIjp7IjQxMzU5NjAiOls0MTM1OTYwLDIsMTY2MjM1NzExOF0sIjQyNTg5NTIiOls0MjU4OTUyLDEsMTY2MjMxMjc1MV0sIjQ0OTU4MDAiOls0NDk1ODAwLDEsMTY2MjMyMDI2NV0sIjQ1MTIwNTAiOls0NTEyMDUwLDEsMTY2MjI5ODM0Nl0sIjQ1MTMwMzgiOls0NTEzMDM4LDIsMTY2MjI3MzcwNF19fQ==; max-age=1693893118; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
c.adsco.re/
200 OK 0 B IP
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:51:59 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Thu, 06 Oct 2022 05:51:59 GMT
etag: W/"49EMMoGNl608re5Cihgheg=="
cf-cache-status: HIT
age: 461059
vary: Accept-Encoding
server: cloudflare
cf-ray: 745cb239cf8ab51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s.w.org/images/core/emoji/14.0.0/svg/1f4a6.svg
200 OK 0 B URL HTTP/2 s.w.org/images/core/emoji/14.0.0/svg/1f4a6.svg
IP
GET /images/core/emoji/14.0.0/svg/1f4a6.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Tue, 12 Apr 2022 03:50:59 GMT
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn 2
x-content-type-options: nosniff
X-Firefox-Spdy: h2
s.w.org/images/core/emoji/14.0.0/svg/1f525.svg
200 OK 0 B URL HTTP/2 s.w.org/images/core/emoji/14.0.0/svg/1f525.svg
IP
GET /images/core/emoji/14.0.0/svg/1f525.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 05:52:01 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Tue, 12 Apr 2022 03:53:43 GMT
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn 2
x-content-type-options: nosniff
X-Firefox-Spdy: h2
xxxfree.watch/aria-valencia-tiny-labor-day/
200 OK 0 B URL HTTP/2 xxxfree.watch/aria-valencia-tiny-labor-day/
IP
GET /aria-valencia-tiny-labor-day/ HTTP/1.1
Host: xxxfree.watch
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:51:58 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.30, PleskLin
last-modified: Sat, 03 Sep 2022 17:32:48 GMT
vary: Accept-Encoding
cache-control: max-age=0
expires: Mon, 05 Sep 2022 05:51:58 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u4MtXRMzIxT8WNCVKMucsTRpUn712Fy4p0GfL%2F7NR022XgSL%2F%2Fg%2FyL5uH00U%2Fmwo23ldwyyAcqi973Nr3j02ttIKx79qpelmAJ79v6JwzjEt0YPgzqKLbtBUzGjOWo5Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 745cb233e8d0e624-LHR
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
unpkg.com/@silvermine/videojs-quality-selector@1.2.4/dist/js/silvermine-videojs-quality-selector.min.js?ver=1.2.4
302 Found 0 B URL HTTP/2 unpkg.com/@silvermine/videojs-quality-selector@1.2.4/dist/js/silvermine-videojs-quality-selector.min.js?ver=1.2.4
IP
GET /@silvermine/videojs-quality-selector@1.2.4/dist/js/silvermine-videojs-quality-selector.min.js?ver=1.2.4 HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 05 Sep 2022 05:51:58 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
location: /@silvermine/videojs-quality-selector@1.2.4/dist/js/silvermine-videojs-quality-selector.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GC636J5S6Y8H69GZX8QKJE77-ams
cf-cache-status: HIT
age: 87
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 745cb23589650b06-OSL
X-Firefox-Spdy: h2
unpkg.com/jquery@2.2.4/dist/jquery.min.js
200 OK 0 B URL HTTP/2 unpkg.com/jquery@2.2.4/dist/jquery.min.js
IP
GET /jquery@2.2.4/dist/jquery.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pornjustx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:51:58 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Fri, 20 May 2016 17:24:42 GMT
etag: W/"14e4a-abtp4lyn1e8JNTF1hOYVPz/ZqIw"
via: 1.1 fly.io
fly-request-id: 01G754SVY4BFC19MXYRYRMED91-fra
cf-cache-status: HIT
age: 5400619
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 745cb2386ba10b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
wysyshypti.pro/crD.9/6/bD2_5BlYSgWSQs9JNlDoEQzrN/TukQ2/MZCQ0p0oMrTIMz1/OYTEY-xw
200 OK 0 B URL HTTP/2 wysyshypti.pro/crD.9/6/bD2_5BlYSgWSQs9JNlDoEQzrN/TukQ2/MZCQ0p0oMrTIMz1/OYTEY-xw
IP
GET /crD.9/6/bD2_5BlYSgWSQs9JNlDoEQzrN/TukQ2/MZCQ0p0oMrTIMz1/OYTEY-xw HTTP/1.1
Host: wysyshypti.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xxxfree.watch/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 05:51:58 GMT
content-type: application/javascript
vary: Accept-Encoding
pragma: no-cache
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: Content-Type
last-modified: Mon, 05 Sep 2022 05:51:58 GMT
access-control-allow-methods: GET
set-cookie: kadSlcJ=eyJ0aW1lU3RhbXAiOjE2NjIzMTI3NTEsInpvbmVzIjp7IjQxMzU5NjAiOls0MTM1OTYwLDEsMTY2MjM1NzExOF0sIjQyNTg5NTIiOls0MjU4OTUyLDEsMTY2MjMxMjc1MV0sIjQ0OTU4MDAiOls0NDk1ODAwLDEsMTY2MjMyMDI2NV0sIjQ1MTIwNTAiOls0NTEyMDUwLDEsMTY2MjI5ODM0Nl0sIjQ1MTMwMzgiOls0NTEzMDM4LDIsMTY2MjI3MzcwNF19fQ==; max-age=1693893118; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
twinrdsyn.com/link.engine?z=54701&guid=4615a138-1a30-4bf9-8e11-5e136021ca4b&tid=335977926
302 Found 0 B URL HTTP/2 twinrdsyn.com/link.engine?z=54701&guid=4615a138-1a30-4bf9-8e11-5e136021ca4b&tid=335977926
IP
GET /link.engine?z=54701&guid=4615a138-1a30-4bf9-8e11-5e136021ca4b&tid=335977926 HTTP/1.1
Host: twinrdsyn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 05 Sep 2022 05:52:03 GMT
content-type: text/html; charset=utf-8
location: https://twinrdsyn.com/Redirect.eng?MediaSegmentId=31749&dcid=3_ctx_d14ca87d-6d9b-4864-a76e-6e24561528c7&vmId=00000000-0000-0000-0000-000000000000&abr=false&timeZoneOffset=&v=ziQA8R9w37cDl_Q_aRCC_R3jPqywtIBBuXpeww6yTJFbvRy9PEcBwveIqIo-8FNXCTAyYoVBnVCQcaWCiLhL2BZGY3GN6WNzdNUkxEMNlSwajMvt5eCN8NumjdUYlv5FWgXPvbK5OL1bLUeUbIqOAv_6sPJMQ57C4kcYGqGNYTdH-1km4NXndTSfWAD1_HBRQvStzzZtul_miEdIVVgQEjYkY5VH_5-gUkqXprUvYr3jg8sFQ_plx683giHXSyFaWFNY8cewal_vd4xBOQvMkoF2GOdrMwK8xOY4GZzCsmgbmCbjw3GMj4BpCCXhAvpKlMD1Kee9xhN1x3dfzEGImyQZLi3Ad3GPv5BSgIRtxyiPIR1MNFZnmND-YoN5lpZJTps0JLiydeWsmySpk-jD5sC3GDNbdYyWfEQ6QJMTuLMFAv6KvGD9HDO3KP-CVE3VeHG_boE-sdPNcVQj4Y181WsFmJVGA63wefX7LkYXCx6PqishhRAkaOUSl99g3i_9jijY99WxW-xwjNowJHC9K7UIWDHkTScydytX5_IE_ucx-40Pd2Dkz0sISwL8NAllr8_tjzaogiC7ZnHqEWbsQfb4CnQ2DJPWSphSVvLpeQ42LD-b5keGWEavEhNSCPieNB1snJsm4pXBcLkAJQvwcAye1qcf0HaBcWDPqrH_J58d-9jRWRn9z1LH6N7TI-eoJBpz81pLFG6UhMYZjXTUZHgsf3vKo0QjqWx5LLI_M_2KjCo9_1Nl3K-D8XteYqcP7S5TWsjvUPxcKXmkXY7mQXw5TVt4y2CTi3ASvtoM_kKX6Kv1fijGjVHp6sLKnUk6ZvzPMPumwzbahOexvDX7-w3WyoED3VhD5qothkzZcjxy1cPGfefMr4LeDNKrrigVXVQISaF0Lp43X35CD4bmqysYkqN-1wpNLc5jiWQQtiYRW0xfxDoRqVcwponqnRu5BNdx-ZUYSYdR6nwhZgeS9Q2&kw=&mw=1024&mh=768
vary: Accept-Encoding
cache-control: private, no-transform
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
set-cookie: IKSR={}; path=/; SameSite=None; secure
INF_DFL8=false; path=/; SameSite=None; secure
IUID=1d439cbe-cfb9-46af-b7aa-ca526e568345; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure
ISSH=65BB7C; path=/; SameSite=None; secure
VMI=; path=/; SameSite=None; secure
IPLH=#{}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IPLH_Q=#[]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
CHN=#[]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Mon, 05-Sep-2022 09:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
PZK={"P":"mxi/AREsutD9C/ZuUsZiH8Hmi8BAaXKAGG4YG1IuOqgvLJS/2V2zxNXdCxa4y92d","B":[106],"UD":1662356722}; expires=Wed, 05-Oct-2022 05:52:03 GMT; path=/; SameSite=None; secure
IPLSH=#{}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IPLSH_Q=#[]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IZH=#{}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IZH_Q=#[]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH=#{}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IMCH_Q=#[]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IMH=#{}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
IMH_Q=#[]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"13909":[{"SId":"65BB7C","D":"22/9/4T22:52:3"}]}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[13909]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH=#{}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
ISPH_Q=#[]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
ICH=#{}; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
ICH_Q=#[]; expires=Sun, 05-Sep-2032 05:52:03 GMT; path=/; SameSite=None; secure; HttpOnly
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gT1AsPv4n3VJsZ13yTFbaKSfbuRuP%2FYgyk7iQ5rBE0QQd6MVtUVoF9Ezy6Zg%2FG7AvGBbR6SW7gpR%2BR5yiD5odNyiM91xpuOLjRa5Fwhq05V%2FuMYeSbeePQ0Qccrykl4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 745cb2529e841c06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stripchat.com/?affiliateId=050922hwtkthorhzu1q7by7kuwlglavhsbb9mqzh1tj4mpek9jq5ybiam556sa8w&campaignId=dabb6fcfc914b53d4f2717e8258c73a936af485a3c9452d178eeda3800c00ad7&p1=Promo+Pop+Straight+Tier+1&p2=49608&p3=125296&realDomain=go.xlivrdr.com&referrer=https%3A%2F%2Ftwinrdsyn.com%2F&sourceId=hdzog.com&stripbotVariation=NullWidget&userId=0d0cdc753eed23068b893e6a636a40ccaadc69dc4a5ec7ee080ed62b15816646
200 OK 0 B URL HTTP/2 stripchat.com/?affiliateId=050922hwtkthorhzu1q7by7kuwlglavhsbb9mqzh1tj4mpek9jq5ybiam556sa8w&campaignId=dabb6fcfc914b53d4f2717e8258c73a936af485a3c9452d178eeda3800c00ad7&p1=Promo+Pop+Straight+Tier+1&p2=49608&p3=125296&realDomain=go.xlivrdr.com&referrer=https%3A%2F%2Ftwinrdsyn.com%2F&sourceId=hdzog.com&stripbotVariation=NullWidget&userId=0d0cdc753eed23068b893e6a636a40ccaadc69dc4a5ec7ee080ed62b15816646
IP
GET /?affiliateId=050922hwtkthorhzu1q7by7kuwlglavhsbb9mqzh1tj4mpek9jq5ybiam556sa8w&campaignId=dabb6fcfc914b53d4f2717e8258c73a936af485a3c9452d178eeda3800c00ad7&p1=Promo+Pop+Straight+Tier+1&p2=49608&p3=125296&realDomain=go.xlivrdr.com&referrer=https%3A%2F%2Ftwinrdsyn.com%2F&sourceId=hdzog.com&stripbotVariation=NullWidget&userId=0d0cdc753eed23068b893e6a636a40ccaadc69dc4a5ec7ee080ed62b15816646 HTTP/1.1
Host: stripchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://twinrdsyn.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 05:52:04 GMT
content-type: text/html; charset=utf-8
content-security-policy-report-only: default-src 'self' *.stripchat.com data: blob: *.amplitude.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.stripcdn.com *.stripst.com *.stripst.dev *.strpst.com *.strwst.com *.doppiocdn.com *.doppiocdn.net *.doppiocdn.org *.trafficjunky.net main.exoclick.com tsyndicate.com *.hotjar.com *.hotjar.io;img-src 'self' * data: blob: android-webview-video-poster:;script-src 'self' *.stripchat.com data: 'unsafe-inline' 'unsafe-eval' blob: *.amplitude.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.hpyrdr.dev *.hytto.com *.lovense.com *.stripst.com *.stripst.dev *.strpst.com *.strwst.com *.trafficjunky.net cometmaster.com *.google.com platform.twitter.com main.exoclick.com tsyndicate.com wss://*.sc-apps.com www.googleadservices.com cdnjs.cloudflare.com/ajax/libs/fingerprintjs2/2.1.2/fingerprint2.min.js *.crowdin.com cdntechone.com *.dmskgo.com *.nktrdr.com *.ktkjmp.com *.xhamster.com *.llyjmp.com *.lxzrdr.com *.mdyjmp.com *.mgdjmp.com *.rdfxgo.com *.smljmp.com *.stripcash.com *.xxxjmp.com *.xxxivjmp.com *.xxxvjmp.com *.xxxvijmp.com *.xxxviijmp.com *.xxxviiijmp.com *.xlrdr.com *.xlirdr.com *.xliirdr.com *.xliiirdr.com *.xlivrdr.com *.xlvrdr.com *.xlvirdr.com *.xlviirdr.com *.xlviiirdr.com *.zybrdr.com;connect-src 'self' *.stripchat.com *.amplitude.com *.doubleclick.net *.flixstorage.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.hytto.com *.lovense.club *.lovense.club:34568 *.lovense.com *.stripcdn.com *.xhamsterlive.com *.xlivesex.com *.stripst.com *.stripst.dev *.strpst.com *.strwst.com *.doppiocdn.com *.doppiocdn.net *.doppiocdn.org syndication.twitter.com wss://*.stripchat.com wss://*.stripcdn.com wss://*.stripcdn.com:8090 wss://*.stripst.com wss://*.stripst.dev wss://*.strpst.com wss://*.strwst.com wss://*.doppiocdn.com wss://*.lovense.com wss://cometmaster.com wss://*.sc-apps.com *.crowdin.com crowdin.com datatechone.com *.dmskgo.com *.nktrdr.com *.ktkjmp.com *.xhamster.com *.llyjmp.com *.lxzrdr.com *.mdyjmp.com *.mgdjmp.com *.rdfxgo.com *.smljmp.com *.stripcash.com *.xxxjmp.com *.xxxivjmp.com *.xxxvjmp.com *.xxxvijmp.com *.xxxviijmp.com *.xxxviiijmp.com *.xlrdr.com *.xlirdr.com *.xliirdr.com *.xliiirdr.com *.xlivrdr.com *.xlvrdr.com *.xlvirdr.com *.xlviirdr.com *.xlviiirdr.com *.zybrdr.com;media-src 'self' *.stripchat.com data: blob: *.ahcdn.com *.stripcdn.com *.stripst.com *.stripst.dev *.strpst.com *.strwst.com *.doppiocdn.com *.doppiocdn.net *.doppiocdn.org;style-src 'self' *.stripchat.com 'unsafe-inline' *.googleapis.com *.hytto.com *.lovense.com *.stripcdn.com *.stripst.com *.stripst.dev *.strpst.com *.strwst.com *.tagmanager.google.com *.crowdin.com;frame-src * data:;report-uri /_csp
strict-transport-security: max-age=15768000
x-frame-options: deny
cf-cache-status: DYNAMIC
set-cookie: stripchat_com_guestId=0984fae82e903d2cabe995da863fd445b28f5242b1e3928699b95a7f98f2; expires=Sun, 04-Dec-2022 05:52:04 GMT; path=/; domain=stripchat.com; sameSite=None; secure; httponly
stripchat_com_firstVisit=2022-09-05T05%3A52%3A04Z; expires=Tue, 05-Sep-2023 05:52:04 GMT; path=/; domain=stripchat.com; httponly
stripchat_com_affiliateId=050922hwtkthorhzu1q7by7kuwlglavhsbb9mqzh1tj4mpek9jq5ybiam556sa8w; expires=Sun, 04-Dec-2022 05:52:04 GMT; path=/; domain=stripchat.com; sameSite=None; secure; httponly
ABTest_ab_25_tokens_instead_20_key=A; path=/; domain=stripchat.com; expires=Mon, 15 Jul 2024 00:00:00 GMT
ABTest_start_private_with_price_key=B; path=/; domain=stripchat.com; expires=Mon, 15 Jul 2024 00:00:00 GMT
__cflb=02DiuFntVtrkFMde1diFXc6auiQ5NotZn5mbm1N6KgcGU; SameSite=None; Secure; path=/; expires=Tue, 06-Sep-22 04:52:04 GMT; HttpOnly
server: cloudflare
cf-ray: 745cb25a7f13b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
172.64.175.10
104.17.167.186
46.105.201.240
94.130.197.134
23.36.76.226
50.7.214.74
151.101.86.217
87.250.251.119
185.200.116.90
93.184.220.29
198.27.80.143