www2.javhdporn.net/video/mvsd-284/
301 Moved Permanently 0 B URL HTTP/1.1 www2.javhdporn.net/video/mvsd-284/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /video/mvsd-284/ HTTP/1.1
Host: www2.javhdporn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 29 Jan 2023 16:08:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 29 Jan 2023 17:08:12 GMT
Location: https://www2.javhdporn.net/video/mvsd-284/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qBRxysTZnE3tuQY%2FX538iDLwlibXJm1mDO%2FEF6%2FzQmKey4ROBSk1HVR%2BrfqN5U%2BJji2u3SJCXqB2O9LKE%2BQ%2FyNHm4LUuEyM%2FE83CsZz3DS6IVd5ukzF0e3rAZHuDvw%2Fn8Na7vaw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791339a62ce77729-LHR
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13386
Expires: Sun, 29 Jan 2023 19:51:18 GMT
Date: Sun, 29 Jan 2023 16:08:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81dd5c5cc5b3278876cb44dcb520a60f
c0511a59e9eccdcdda98717b87c89c5d59974808
41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15802
Expires: Sun, 29 Jan 2023 20:31:34 GMT
Date: Sun, 29 Jan 2023 16:08:12 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 29 Jan 2023 15:43:08 GMT
content-type: application/json
age: 1504
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 302c7548412192add063ad6c8b99cf3b
e5d178931a27db036ce8daae302594d3ff7050b8
fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8588
Expires: Sun, 29 Jan 2023 18:31:20 GMT
Date: Sun, 29 Jan 2023 16:08:12 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: LLriAmC+q4GLeaIpcmATrnm2e+TCGSmpm9Dey21uTo/JMCqdJnuKanxMEjfRZR+da8+wqu+twyrRsfCHBTJT/A==
x-amz-request-id: P3N38YMTCPJRTE60
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 29 Jan 2023 15:21:26 GMT
age: 2806
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 16:08:12 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery.touchswipe/1.6.18/jquery.touchSwipe.min.js?ver=1.6.18
200 OK 4.5 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery.touchswipe/1.6.18/jquery.touchSwipe.min.js?ver=1.6.18
IP
File type ASCII text, with very long lines (20000)
Hash 78f8315b49be7a02d6a78017242db059
a0c1f6e82322e1b5628fadd08b692ed72b26a400
94f2bcf31a6b927a8ee6ac97b8c395a49a68a37ad0cd5174c68e4776640362c8
GET /ajax/libs/jquery.touchswipe/1.6.18/jquery.touchSwipe.min.js?ver=1.6.18 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:13 GMT
content-type: application/javascript; charset=utf-8
content-length: 4497
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-4fbc"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 25901049
expires: Fri, 19 Jan 2024 16:08:13 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dCDM%2F1cYb5oRtUSbM8IefRqURcQYfnUS8nIYnMrFJApBGJrLktwk3DY%2FZdNPIUNBveg%2BiiwoQWgATXZ7v%2F7D1mYa6AiV2mldH4d9J70XCGb1O3vj5Q8AO7zqHnZKZ40qOZ36Y3Ev"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 791339aa9efbb51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www2.javhdporn.net/video/mvsd-284/
200 OK 95 kB URL HTTP/2 www2.javhdporn.net/video/mvsd-284/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5988), with CRLF, LF line terminators
Hash 2eaa4cb2b44b4dff872b88e7b532f032
a2e7dd5c2523ddabc1ed88a0fc5eae918e0baf36
66c0bf8e90aea734192d09c00ccc0055d6ecf90a1df4a147561357107f536345
GET /video/mvsd-284/ HTTP/1.1
Host: www2.javhdporn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:13 GMT
content-type: text/html; charset=UTF-8
cf-ray: 791339a86d32d170-LHR
cache-control: max-age=14400
last-modified: Sun, 29 Jan 2023 12:53:54 GMT
link: <https://www2.javhdporn.net/wp-json/>; rel="https://api.w.org/", <https://www2.javhdporn.net/wp-json/wp/v2/posts/300993>; rel="alternate"; type="application/json", <https://www2.javhdporn.net/?p=300993>; rel=shortlink
vary: Accept-Encoding
cf-cache-status: HIT
cf-apo-via: tcache
cf-edge-cache: cache,platform=wordpress
x-frame-options: SAMEORIGIN
x-rocket-nginx-serving-static: No
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TV3HTm97536S34NwucZLwW%2BjL4zZ4QWLwH%2B9weduUHGq%2F3LenhoHDe9VbF2K%2F7EdBsu5%2BDG4ATrJbp%2F%2FVJymT5g%2Bn6rxvXPGX5dMtt1odfKlCWx7goVNTPrJqWID%2FSublO%2Fb1wI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js?ver=2.0.8
200 OK 5.1 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js?ver=2.0.8
IP
File type ASCII text, with very long lines (17660)
Hash abe1df98b6ab4644bd567e6669d0da03
27e3bf22ef08b7ca0090721ed31b4f921d278e7c
cd40ba7dbf63d67511c0fd56b7e5327dbedb43d15c439d79a8aacb6377059540
GET /ajax/libs/postscribe/2.0.8/postscribe.min.js?ver=2.0.8 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:13 GMT
content-type: application/javascript; charset=utf-8
content-length: 5117
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03faa-45f4"
last-modified: Mon, 04 May 2020 16:15:38 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3877645
expires: Fri, 19 Jan 2024 16:08:13 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vnnLtn5%2F0fYlaWB1Nf1sj0KeyamRQTn248iOhT%2BhSj4%2FbZuOtXnPBlNgAA1a7P7VMeY6oIXKtYBZhqryKKvAoRzFXa7sGRz71sGlvWMxvpxRlgodtKZup0FkB5zG6ibv%2B391XrIK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 791339aaaf23b51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.6.1/js/bootstrap.bundle.min.js
200 OK 19 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.6.1/js/bootstrap.bundle.min.js
IP
File type ASCII text, with very long lines (65299)
Hash 1a13bc8c737c460770523dd3d5de3d6c
9af98c366118aedef97ff8bab501cf3282f9325c
9e1c252fd945713e10d1ba7470ea24950c34cde439ac15fbc55180a2b971cdca
GET /ajax/libs/twitter-bootstrap/4.6.1/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:13 GMT
content-type: application/javascript; charset=utf-8
content-length: 19418
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "617ac9de-4bda"
last-modified: Thu, 28 Oct 2021 16:03:42 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2069904
expires: Fri, 19 Jan 2024 16:08:13 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1GtUUiWkydaIH0%2BGf81D4Xzy6RKStXTtcU6YfJJhpXOUneUIAbTbUg4jyvPfPpOydLTps7ydjX8PGTmllGOShWSMWTXlIsLDB4ZIg6DnmlGEMyQJoZBOxmdfbp1aRPW%2BjjBSWROP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 791339aabf46b51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bab8a4c1e6bb2e6c9cc00222eef1235d
1a5dd108e9f9aaf33bc048b0097a9f510d295cad
fd182297a143655a9142e3ee5bbafefd76ca974094f43fb695611f6876f3ab63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 16:08:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8c630e9bbc930d1c367efa81b67be3f7
ec536695531d40a813d99a06271c7c2d698d51d3
39ca0a60c3e2e85712757ead0830d0da82beac1e4f44b6e90243e5ca9326bf4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 16:08:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js?ver=1.12.4
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js?ver=1.12.4
IP
File type ASCII text, with very long lines (32077)
Hash fd2b58574f9637ba7ef639267349d848
6eda5ea93f549ceb5693f6f1c038893fa56a510d
75627d4b97e5e6294a8f88f5eeaf9b616696dc8600db9701c47ef05f067880ec
GET /ajax/libs/jquery/1.12.4/jquery.min.js?ver=1.12.4 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 04:52:46 GMT
expires: Fri, 26 Jan 2024 04:52:46 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 299727
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-124653024-9
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-124653024-9
IP
File type ASCII text, with very long lines (1759)
Hash 7d9fe57117ff79012830980615c6beb7
06670cd61d03990dc43cc6bf47c7b7211dd263e4
be941cd92400072c267147f596fca56d1f2637a4a7f2a439f554cd2fe8d47b79
GET /gtag/js?id=UA-124653024-9 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 29 Jan 2023 16:08:13 GMT
expires: Sun, 29 Jan 2023 16:08:13 GMT
cache-control: private, max-age=900
last-modified: Sun, 29 Jan 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44097
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8c630e9bbc930d1c367efa81b67be3f7
ec536695531d40a813d99a06271c7c2d698d51d3
39ca0a60c3e2e85712757ead0830d0da82beac1e4f44b6e90243e5ca9326bf4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 16:08:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bab8a4c1e6bb2e6c9cc00222eef1235d
1a5dd108e9f9aaf33bc048b0097a9f510d295cad
fd182297a143655a9142e3ee5bbafefd76ca974094f43fb695611f6876f3ab63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 16:08:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 29 Jan 2023 15:49:04 GMT
age: 1149
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14357
Expires: Sun, 29 Jan 2023 20:07:30 GMT
Date: Sun, 29 Jan 2023 16:08:13 GMT
Connection: keep-alive
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sun, 29 Jan 2023 15:46:59 GMT
expires: Sun, 29 Jan 2023 17:46:59 GMT
cache-control: public, max-age=7200
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
age: 1274
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img.pornfhd.com/logo.png
200 OK 9.3 kB IP
File type PNG image data, 200 x 54, 8-bit/color RGBA, non-interlaced\012- data
Hash 9ff0d1d6c8d06fb6df20b0a5324e44cb
757172f42b56af3a911b649db7ef3b1f2935f8ed
ca4e382270b2f47b9c9202db56147766ac4923cfcb2e6b840ca8c5f2fe24280e
GET /logo.png HTTP/1.1
Host: img.pornfhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:13 GMT
content-type: image/png
last-modified: Mon, 15 Feb 2021 15:38:47 GMT
vary: Accept-Encoding
etag: W/"602a9587-2457"
expires: Tue, 21 Dec 2021 02:22:17 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 740486
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zqwscA%2BShE4wWfzQKJNoeC9quPAbtOu3SGsWqWjyKFLRGz6raSoxXUiwTSdEjCa2ShjfoKvlrAoHapdil0IWrb2Eou6cWD68ONvS%2B85xJlski3YIwcphZcIJ%2Fkmpk%2BnTCvg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791339ac4e1c7761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 12 kB URL HTTP/1.1 push.services.mozilla.com/
IP
Hash ad25c6daf4d9f381c6ebb64dee6439d2
56ad78024b0074497de94771fbc8e4b0be32933d
2cd9f2b117c4346300f171b1066e243b43628bfc25c27589d5b75f5a2d980506
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5SoLAocuiwxC0b05g1xCUQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: S6Y1VEt+hztSsbH6FTZ8v+a4gpU=
ocsp.sectigo.com/
200 OK 471 B IP
Hash 3a8009a5341494164af095f1d6da2135
88c78ab8317a5ed3471a7ea9373b324bfbcc2247
6923c67f06351d02fd0a0400dcfdc9e7f31e785d8003f176ac8a14c8fb1f161c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 16:08:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 02:35:30 GMT
Expires: Sat, 04 Feb 2023 02:35:29 GMT
Etag: "88c78ab8317a5ed3471a7ea9373b324bfbcc2247"
Cache-Control: max-age=469035,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 791339af0ebcb4ee-OSL
poweredby.jads.co/js/jads.js
301 Moved Permanently 178 B URL HTTP/1.1 poweredby.jads.co/js/jads.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 29 Jan 2023 16:08:13 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
poweredby.jads.co/js/jads2.js
200 OK 1.7 kB URL HTTP/1.1 poweredby.jads.co/js/jads2.js
IP
File type ASCII text, with very long lines (3758), with no line terminators
Hash 558e1b61fc513016183a3812938e79fb
5f72ea61a2aad8f7a0956321d3fd8524db70eddf
a79f8c0aabfc2d1d45e4df2a86ca9172d292b08987f7a9d5c10bd10abf3aef54
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www2.javhdporn.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Jan 2023 16:08:14 GMT
Content-Type: application/x-javascript
Last-Modified: Mon, 21 Nov 2022 05:24:20 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"637b0b84-eae"
Content-Encoding: gzip
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 454502672758775c49a8e29724b83ddf
b5f5924538426bed6bf074cb0d3951b15ce73ef6
213d06d028ca546aae30ae0f39ab243ca6727179a5e4b6efeda62a9dcb810506
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "213D06D028CA546AAE30AE0F39AB243CA6727179A5E4B6EFEDA62A9DCB810506"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15172
Expires: Sun, 29 Jan 2023 20:21:06 GMT
Date: Sun, 29 Jan 2023 16:08:14 GMT
Connection: keep-alive
go.xlviiirdr.com/smartpop/b12dbba4a74f1f286b44c367348434fcb52005247fbe29388c0f42e2bb53542e?userId=a857d671ed2ee3f67e327d7a3d55455ceef35f57922f8f8f71c52e413accec69
302 Found 0 B URL HTTP/2 go.xlviiirdr.com/smartpop/b12dbba4a74f1f286b44c367348434fcb52005247fbe29388c0f42e2bb53542e?userId=a857d671ed2ee3f67e327d7a3d55455ceef35f57922f8f8f71c52e413accec69
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smartpop/b12dbba4a74f1f286b44c367348434fcb52005247fbe29388c0f42e2bb53542e?userId=a857d671ed2ee3f67e327d7a3d55455ceef35f57922f8f8f71c52e413accec69 HTTP/1.1
Host: go.xlviiirdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 29 Jan 2023 16:08:14 GMT
content-length: 0
location: https://creative.xlirdr.com/widgets/Player?autoplay=all&autoplayForce=all&campaignId=b12dbba4a74f1f286b44c367348434fcb52005247fbe29388c0f42e2bb53542e&campaignType=smartpop&creativeId=9d1e7de94c9852b91e149dd135c0f31676824fa6327f94440e0cb99789281fe1&iterationId=164961&masterSmartpopId=0&quality=240p&ruleId=0&showModal=signup&smartpopId=5094&tag=girls%2Fchinese&userId=a857d671ed2ee3f67e327d7a3d55455ceef35f57922f8f8f71c52e413accec69&variationId=27486
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: DYNAMIC
set-cookie: _var=63662521.27486; Path=/; HttpOnly; SameSite=Strict
__cflb=02DiuDfsBaY2bRYJiCeScBLPeXxw9eeb9t4KhgpC26Wur; SameSite=None; Secure; path=/; expires=Mon, 30-Jan-23 15:08:14 GMT; HttpOnly
server: cloudflare
cf-ray: 791339b05a93b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 454502672758775c49a8e29724b83ddf
b5f5924538426bed6bf074cb0d3951b15ce73ef6
213d06d028ca546aae30ae0f39ab243ca6727179a5e4b6efeda62a9dcb810506
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "213D06D028CA546AAE30AE0F39AB243CA6727179A5E4B6EFEDA62A9DCB810506"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15172
Expires: Sun, 29 Jan 2023 20:21:06 GMT
Date: Sun, 29 Jan 2023 16:08:14 GMT
Connection: keep-alive
video.ktkjmp.com/adsbygoogle.js
200 OK 16 B URL HTTP/2 video.ktkjmp.com/adsbygoogle.js
IP
Hash 3d7f7a60216d40dea48e495fef6903c9
fecdb5184f55cf012563d78940eb97b10b9cc99b
96d83ac9f20fc0b88404f307f135e212642e02d6ea295c96b28aed0d771a224f
GET /adsbygoogle.js HTTP/1.1
Host: video.ktkjmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlirdr.com/
Origin: https://creative.xlirdr.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:14 GMT
content-type: application/javascript
content-length: 16
x-amz-id-2: lcNIxMaAofF7Fv+CenZmpGJJrSUFrD74EH/RfdAjL9Jhx1+3B0JyXF3qWYdsiZqTewxi/ePstns=
x-amz-request-id: 3YWB4S6N4MZ3W6PX
last-modified: Thu, 10 Mar 2022 13:52:07 GMT
etag: "3d7f7a60216d40dea48e495fef6903c9"
x-amz-meta-s3cmd-attrs: atime:1646920284/ctime:1646920283/gid:20/gname:staff/md5:3d7f7a60216d40dea48e495fef6903c9/mode:33188/mtime:1646920283/uid:501/uname:mikhailchubar
x-amz-version-id: eIgLIBoMMcsEXtxOH6UDjWyfAquRpkIG
access-control-allow-origin: https://creative.xlirdr.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: HIT
age: 5465
expires: Sun, 29 Jan 2023 20:08:14 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 791339b1fb66b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img.strpst.com/thumbs/1675008421/89104597
200 OK 52 kB URL HTTP/2 img.strpst.com/thumbs/1675008421/89104597
IP
Hash cfc579e2babf3e574714bd4a23006c57
a91032ae4a4c0715177be3e678d4d4e45dbde632
8071c04a4b6bc316b3330367fc49e6c0d5bf529763c899bc8d50932fe334fff1
GET /thumbs/1675008421/89104597 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xlirdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:14 GMT
content-type: image/jpeg
content-length: 51225
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET
access-control-allow-origin: *
cf-bgj: imgq:100,h2pri
cf-polished: origSize=53147, status=webp_bigger
etag: "4ba76d1e867167bde580cce456a4c87c"
last-modified: Sun, 29 Jan 2023 16:06:47 GMT
cf-cache-status: HIT
age: 52
expires: Sun, 29 Jan 2023 16:38:14 GMT
cache-control: public, max-age=1800
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 791339b338a61c0a-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
go.xlirdr.com/config?url=https%3A%2F%2Fcreative.xlirdr.com%2Fwidgets%2FPlayer%3Fautoplay%3Dall%26autoplayForce%3Dall%26campaignId%3Db12dbba4a74f1f286b44c367348434fcb52005247fbe29388c0f42e2bb53542e%26campaignType%3Dsmartpop%26creativeId%3D9d1e7de94c9852b91e149dd135c0f31676824fa6327f94440e0cb99789281fe1%26iterationId%3D164961%26masterSmartpopId%3D0%26quality%3D240p%26ruleId%3D0%26showModal%3Dsignup%26smartpopId%3D5094%26tag%3Dgirls%252Fchinese%26userId%3Da857d671ed2ee3f67e327d7a3d55455ceef35f57922f8f8f71c52e413accec69%26variationId%3D27486
200 OK 3.1 kB URL HTTP/2 go.xlirdr.com/config?url=https%3A%2F%2Fcreative.xlirdr.com%2Fwidgets%2FPlayer%3Fautoplay%3Dall%26autoplayForce%3Dall%26campaignId%3Db12dbba4a74f1f286b44c367348434fcb52005247fbe29388c0f42e2bb53542e%26campaignType%3Dsmartpop%26creativeId%3D9d1e7de94c9852b91e149dd135c0f31676824fa6327f94440e0cb99789281fe1%26iterationId%3D164961%26masterSmartpopId%3D0%26quality%3D240p%26ruleId%3D0%26showModal%3Dsignup%26smartpopId%3D5094%26tag%3Dgirls%252Fchinese%26userId%3Da857d671ed2ee3f67e327d7a3d55455ceef35f57922f8f8f71c52e413accec69%26variationId%3D27486
IP
File type ASCII text, with very long lines (4543), with no line terminators
Hash 7ca4fa79ae2bcbe7adbeb62e759e9de2
bcc4ba887957940fd744f1979b729331a1fe7365
ccbeb599012b7d7cfb0795d9918487bfa533fd349959e94ef64685b78bfde1d3
GET /config?url=https%3A%2F%2Fcreative.xlirdr.com%2Fwidgets%2FPlayer%3Fautoplay%3Dall%26autoplayForce%3Dall%26campaignId%3Db12dbba4a74f1f286b44c367348434fcb52005247fbe29388c0f42e2bb53542e%26campaignType%3Dsmartpop%26creativeId%3D9d1e7de94c9852b91e149dd135c0f31676824fa6327f94440e0cb99789281fe1%26iterationId%3D164961%26masterSmartpopId%3D0%26quality%3D240p%26ruleId%3D0%26showModal%3Dsignup%26smartpopId%3D5094%26tag%3Dgirls%252Fchinese%26userId%3Da857d671ed2ee3f67e327d7a3d55455ceef35f57922f8f8f71c52e413accec69%26variationId%3D27486 HTTP/1.1
Host: go.xlirdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlirdr.com/
Origin: https://creative.xlirdr.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:14 GMT
content-type: application/json
access-control-allow-origin: *
last-modified: Sun, 29 Jan 2023 15:35:56 GMT
cf-cache-status: HIT
age: 162
vary: Accept-Encoding
server: cloudflare
cf-ray: 791339b1ed23b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6adb6ed1b3863435ad8ca83d956b4d30
499ce533a6ce75b851f1dc8f6bcef471aaa74706
953caaf440bbfa5f3ec1b34030b9b98c9612106eaba32ce95489b0d799fe8424
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "953CAAF440BBFA5F3EC1B34030B9B98C9612106EABA32CE95489B0D799FE8424"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15477
Expires: Sun, 29 Jan 2023 20:26:11 GMT
Date: Sun, 29 Jan 2023 16:08:14 GMT
Connection: keep-alive
liaisondegreedaughters.com/11/61/29/1161294bdf84d07019f576208d7911a6.js
200 OK 13 kB URL HTTP/1.1 liaisondegreedaughters.com/11/61/29/1161294bdf84d07019f576208d7911a6.js
IP
File type ASCII text, with very long lines (37159), with no line terminators
Hash d68cbf3d9c296e1efc50dede896e455e
a93a73b8b838d80985999c1b052589a78edf8d72
fdf0481865497e136e03a1d7f5b787071a3832ddf82536415682dd35b1792403
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /11/61/29/1161294bdf84d07019f576208d7911a6.js HTTP/1.1
Host: liaisondegreedaughters.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 29 Jan 2023 16:08:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 48c24658a784652b69d0b0e932253b40
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
asg.phukienthoitranggiare.com/api/spots/259953?host=www2.javhdporn.net&ev=197&wh=939&ww=1280&uuid=
200 OK 764 B URL HTTP/2 asg.phukienthoitranggiare.com/api/spots/259953?host=www2.javhdporn.net&ev=197&wh=939&ww=1280&uuid=
IP
ASN #24940 Hetzner Online GmbH
Hash 57e64671b3e6715bcf59decb5f65948d
8e889579e3505850669393151812573c8af1c653
4c914570624729d2c0373621faf569dc3adfa8f77879f1a595fd857098e7c256
GET /api/spots/259953?host=www2.javhdporn.net&ev=197&wh=939&ww=1280&uuid= HTTP/1.1
Host: asg.phukienthoitranggiare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 16:08:13 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
set-cookie: nauid=tqHNwHhAeij8e5QalJnD; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4292
Expires: Sun, 29 Jan 2023 17:19:47 GMT
Date: Sun, 29 Jan 2023 16:08:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4292
Expires: Sun, 29 Jan 2023 17:19:47 GMT
Date: Sun, 29 Jan 2023 16:08:15 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4c77437e3a7361861aed8bfecbfe6bd6
fefd238c13c0fdfb7d964c90fcc8a8cbbf953034
282d15c443cb6232ae0a30046a0dc24360617355a4651cdba59b11e6f7313d8a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5594
x-amzn-requestid: a13a8181-5783-42c1-9fda-1fcf8db4f0f9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVpetFv-oAMF_Kg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d222c4-68165b34525ca2a054f0b505;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 06:50:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: rJbdYq3bZDatEVvC83VR5WiWOFwNwVZEB16ez21KdnQJJrgJ-yKPCg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 14:55:48 GMT
age: 4347
etag: "fefd238c13c0fdfb7d964c90fcc8a8cbbf953034"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3be81f83687ddb6c93d3ff3c09a9dba2
50a48e737310d3f31840db4301b25927fbcc12c5
e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9167
x-amzn-requestid: f644ca78-a07a-43d1-96e4-95bcdecff7fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPGLfFtOIAMFp7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf83e2-202ca7160544acd24259bd5d;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:08:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xRwqrWS66l4qJfg2HnGphN1dbrIUod9XKW3zTk_-Km9AQRPyV2UqWg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 20:46:16 GMT
age: 69719
etag: "50a48e737310d3f31840db4301b25927fbcc12c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0e90c9d5521358d2754bbad686a2e9c1
013349b8f38535bae1e197d5d96d86d17d5a1ef0
47bb6aa901220aeab3800d1ea88eb456cfe3ea337f12c059d9549fa6bd8064ab
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=165510
Date: Sun, 29 Jan 2023 16:08:15 GMT
Etag: "63d67516-1d7"
Expires: Tue, 31 Jan 2023 14:06:45 GMT
Last-Modified: Sun, 29 Jan 2023 13:31:02 GMT
Server: ECS (nyb/1D1F)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -T95P3vkLWETRhD-6_dV6Tvpg_sPI05V508jnwnOlAF01P3tJY-CXA==
Age: 2143
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4205d8106659e00fff1cbe9262918b8c
ab4f6528594a1725934727dc7d834c028a79c609
31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hAzO-IMqc1CFpiBAlRl8seIYL9UonyrBMATibovyFq5kEuaweY_VyA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 21:56:46 GMT
age: 65489
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce27f1aa-8d31-4110-a47f-73de0b95926d.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce27f1aa-8d31-4110-a47f-73de0b95926d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 10a6491e2c1dfde68c7cd7297e70700f
d0f195319825a6d3e5e50ad15b2fcab27cb65896
4d9353d5874e5ea03c25e1562db5f479c222a48db526fdd10ede7c2e6a4dd874
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce27f1aa-8d31-4110-a47f-73de0b95926d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11470
x-amzn-requestid: 62d61967-9380-4ca9-b11a-531425dbd2ae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fIf6WFgAIAMF6gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cce042-6d9fe51029094b7f37c0a648;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 07:05:38 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rUIvvkZQ028ey3klplI-x9oZFugon5HsAWT-SN2GQo5hBeBJWqoMAg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 04:01:15 GMT
age: 43620
etag: "d0f195319825a6d3e5e50ad15b2fcab27cb65896"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf6aeac1-fd74-4724-86b5-f0e86d98c915.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf6aeac1-fd74-4724-86b5-f0e86d98c915.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43c4a8e963936a8064dbd2bd3c67b905
8508727c97127c98b886833af28b3470306216c2
070c29fe7c0a227029483d675eac863904ab6b291467acdf62167f4845699c21
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf6aeac1-fd74-4724-86b5-f0e86d98c915.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8652
x-amzn-requestid: 21c734f0-cd73-4691-812e-7cd3908f8f89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fRbH4HtPIAMFUGA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d07232-291e20fb41c53db7664d04b2;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 00:05:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: j2zDtHz3pZLHJKG3-PaITyUzHOQBEELzuDIt7sbB8X_B10OxG394tg==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 06:49:29 GMT
age: 33526
etag: "8508727c97127c98b886833af28b3470306216c2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21dfd3ff-6ef1-481d-b7af-d5f7eb830cde.jpeg
200 OK 3.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21dfd3ff-6ef1-481d-b7af-d5f7eb830cde.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 801d4d643e2fe5f23a2dcaa77c133ab8
b4a01701d16b84047d7c62d5ffa5165865042c57
f4f6a4902c0703b901271a0360c7ebbdb33fe85a68203e10639ae655b2bbe004
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21dfd3ff-6ef1-481d-b7af-d5f7eb830cde.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3203
x-amzn-requestid: 50873744-cce9-4788-9f05-9e66ba943b2f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fFEd_HBwoAMF-Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cb8126-7e5f1963639215cb43992cd5;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 06:07:34 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ho5pTWplXBixyAs_iFwd0VPitF4IjOYaCNa_XdQ-BFH7kTuDIsca0g==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 22:03:16 GMT
age: 65099
etag: "b4a01701d16b84047d7c62d5ffa5165865042c57"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 2d682ec437a251ad78645e826046b218
8fe9d81a9d8171b8660346666be9e5ebd1bc9b0e
c54419e6bcea6f5377968c0ec3cf187ebbc3f5e0a08ac7062068530807257046
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www2.javhdporn.net
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:15 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www2.javhdporn.net
access-control-allow-credentials: true
set-cookie: uid_id2=90324334-571c-4902-93be-7bca37b79046:1:1; expires=Wed, 26 Jan 2033 16:08:15 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash fe9f043829a5e5d593356b06e2ccd32d
5e77c92839918ba4506feedc700daf144976d62e
d68aa5c4b46df86722d0cb059c7379b7ee7bf7a34d97351959032444d6830446
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "D68AA5C4B46DF86722D0CB059C7379B7EE7BF7A34D97351959032444D6830446"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12143
Expires: Sun, 29 Jan 2023 19:30:38 GMT
Date: Sun, 29 Jan 2023 16:08:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b41889a40c2434e798ead100af7f479c
31a230fb16c1d5e68f98dcd2bc3511f512b7062d
eade5dcbf67a429ddb4860226d57b68f630ec5e3b3ffe5fc610c63000a67a895
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EADE5DCBF67A429DDB4860226D57B68F630EC5E3B3FFE5FC610C63000A67A895"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6168
Expires: Sun, 29 Jan 2023 17:51:03 GMT
Date: Sun, 29 Jan 2023 16:08:15 GMT
Connection: keep-alive
ads.adxadserv.com/ad?spotid=62e294ed61d6e24c01635c17&type=300x250&output=html&extra1=0&ref=https%3A//www2.javhdporn.net/video/mvsd-284/&dt=1675008503213&screen=1280x1024&tags=
200 OK 1.7 kB URL HTTP/2 ads.adxadserv.com/ad?spotid=62e294ed61d6e24c01635c17&type=300x250&output=html&extra1=0&ref=https%3A//www2.javhdporn.net/video/mvsd-284/&dt=1675008503213&screen=1280x1024&tags=
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (579)
Hash 530341b5080a2adbabb0858ff3b5a377
b3fa9c8ad996129b0a696c059c29caca5e1cdfce
e13f841b66b3469d702e4d562994ef0226c9eae355eadbdcfac084f2e150f41a
GET /ad?spotid=62e294ed61d6e24c01635c17&type=300x250&output=html&extra1=0&ref=https%3A//www2.javhdporn.net/video/mvsd-284/&dt=1675008503213&screen=1280x1024&tags= HTTP/1.1
Host: ads.adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 16:08:15 GMT
content-type: text/html; charset=utf-8
content-length: 1654
cache-control: no-cache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e16c429b9b6ac299d1ac7dbc971b0754
ff47d00c9b485c44b75cc0383e651f3cb0708156
1adf53bf34a7f32f1c08f656a2304424712fb723d417f3fb5d313fa3bde0428f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1ADF53BF34A7F32F1C08F656A2304424712FB723D417F3FB5D313FA3BDE0428F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18010
Expires: Sun, 29 Jan 2023 21:08:25 GMT
Date: Sun, 29 Jan 2023 16:08:15 GMT
Connection: keep-alive
r.trackwilltrk.com/s1/6a00fe35-8151-4945-954c-376afd3df93b?externalId=232bdec6-9fef-11ed-93df-e2e38133f3a0&cv1=232bdec6-9fef-11ed-93df-e2e38133f3a0&cv2=0c1c5c30286e1db21a741e4b62c8b6e4&cv3=desktop&cv4=62e383b461d6e2197e222e81&cv5=62e3800961d6e26273250a26&cv6=en&cv7=NTVB&cv8=Firefox&cv9=62e294ed61d6e24c01635c17&cv10=1
200 OK 953 B URL HTTP/1.1 r.trackwilltrk.com/s1/6a00fe35-8151-4945-954c-376afd3df93b?externalId=232bdec6-9fef-11ed-93df-e2e38133f3a0&cv1=232bdec6-9fef-11ed-93df-e2e38133f3a0&cv2=0c1c5c30286e1db21a741e4b62c8b6e4&cv3=desktop&cv4=62e383b461d6e2197e222e81&cv5=62e3800961d6e26273250a26&cv6=en&cv7=NTVB&cv8=Firefox&cv9=62e294ed61d6e24c01635c17&cv10=1
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (757)
Hash f33cddcda01739ed1448e9f9ba17350d
604a7b9e3e9e4a984b89788b1b92b898d6ed53f4
689578f3fba6c61911ecea23ad5683d962d1177ca1ace8fd9631c305c98f38cb
GET /s1/6a00fe35-8151-4945-954c-376afd3df93b?externalId=232bdec6-9fef-11ed-93df-e2e38133f3a0&cv1=232bdec6-9fef-11ed-93df-e2e38133f3a0&cv2=0c1c5c30286e1db21a741e4b62c8b6e4&cv3=desktop&cv4=62e383b461d6e2197e222e81&cv5=62e3800961d6e26273250a26&cv6=en&cv7=NTVB&cv8=Firefox&cv9=62e294ed61d6e24c01635c17&cv10=1 HTTP/1.1
Host: r.trackwilltrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 29 Jan 2023 16:08:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 953
Connection: close
Set-Cookie: uid=MMLVQpbtM; Path=/; Domain=trackwilltrk.com; Expires=Mon, 30 Jan 2023 16:08:15 GMT; HttpOnly
X-Request-Id: bfe7b84b-70a2-455d-8448-f9f78281aa1a
adxadserv.com/ascripts/pxl.js
200 OK 78 kB URL HTTP/1.1 adxadserv.com/ascripts/pxl.js
IP
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (36114)
Hash 8348b78d100940ba1808a8e9b93f2e94
c2aa612dc3256c9f235dcfc6e330d0ecaf957768
9c983adf86ebc949957bdf55d524dfa278a79bea8d13f2efa9512c6dd37b86f5
GET /ascripts/pxl.js HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 29 Jan 2023 16:08:15 GMT
Content-Type: application/javascript
Content-Length: 77806
Connection: keep-alive
Last-Modified: Fri, 25 Sep 2020 09:55:41 GMT
ETag: "5f6dbe9d-12fee"
Expires: Sun, 29 Jan 2023 14:15:44 GMT
Cache-Control: max-age=86400, public
X-77-NZT: AblMCgrY5cP/XhoAAA
X-77-NZT-Ray: 2109d110c4893520ef99d663ff4aa924
X-Cache: HIT
X-Age: 6750
X-77-POP: amsterdamNL
X-77-Cache: HIT
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a459eedb73942864f93a9aa9f05fed5f
507c68d1bb29951411a8655f979c673cc8b4036a
a2169da610b85f19f53330c5431ce46b733f2dc4d6492d144b5e9959812e5d29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A2169DA610B85F19F53330C5431CE46B733F2DC4D6492D144B5E9959812E5D29"
Last-Modified: Sun, 29 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3377
Expires: Sun, 29 Jan 2023 17:04:32 GMT
Date: Sun, 29 Jan 2023 16:08:15 GMT
Connection: keep-alive
adxadserv.com/px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D62e294ed61d6e24c01635c17%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fwww2.javhdporn.net%252Fvideo%252Fmvsd-284%252F%2526dt%253D1675008503213%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fwww2.javhdporn.net%252F&d_r=1&d_s=1280x1024&d_w=300x250&t_s=1675008503467&t_i=1675008503475&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=8bdcc962-a930-4363-a372-500f05807f1f&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=232bdec6-9fef-11ed-93df-e2e38133f3a0&spid=62e294ed61d6e24c01635c17&fpid_sa=1675008503475&fpid=&feid_sa=1675008503475&sid_sa=1675008503475&feid=d377077c3ede120920179e6df3218b75&sid=1c334866d9bc5eb6f1ca74729c181fc7&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www2.javhdporn.net&s_rst=1&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.32
200 OK 0 B URL HTTP/1.1 adxadserv.com/px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D62e294ed61d6e24c01635c17%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fwww2.javhdporn.net%252Fvideo%252Fmvsd-284%252F%2526dt%253D1675008503213%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fwww2.javhdporn.net%252F&d_r=1&d_s=1280x1024&d_w=300x250&t_s=1675008503467&t_i=1675008503475&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=8bdcc962-a930-4363-a372-500f05807f1f&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=232bdec6-9fef-11ed-93df-e2e38133f3a0&spid=62e294ed61d6e24c01635c17&fpid_sa=1675008503475&fpid=&feid_sa=1675008503475&sid_sa=1675008503475&feid=d377077c3ede120920179e6df3218b75&sid=1c334866d9bc5eb6f1ca74729c181fc7&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www2.javhdporn.net&s_rst=1&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.32
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/event/v1?e_t=pageview&url=https%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D62e294ed61d6e24c01635c17%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttps%25253A%252F%252Fwww2.javhdporn.net%252Fvideo%252Fmvsd-284%252F%2526dt%253D1675008503213%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fwww2.javhdporn.net%252F&d_r=1&d_s=1280x1024&d_w=300x250&t_s=1675008503467&t_i=1675008503475&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=8bdcc962-a930-4363-a372-500f05807f1f&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=232bdec6-9fef-11ed-93df-e2e38133f3a0&spid=62e294ed61d6e24c01635c17&fpid_sa=1675008503475&fpid=&feid_sa=1675008503475&sid_sa=1675008503475&feid=d377077c3ede120920179e6df3218b75&sid=1c334866d9bc5eb6f1ca74729c181fc7&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www2.javhdporn.net&s_rst=1&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.32 HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 29 Jan 2023 16:08:15 GMT
Content-Length: 0
Connection: keep-alive
static.javhdhello.com/h5/files/overlay/1602-overlay-preview.png
200 OK 1.5 kB URL HTTP/2 static.javhdhello.com/h5/files/overlay/1602-overlay-preview.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 7083a71bc40e5d85670940c518cacca2
a2caeb7c6ca3960af2881434fb0df0c2241d7288
7c4049c76ecd35b05855df0c6ce7e1157213d9fb92c3b2b05ebf9b5d9bdff03a
GET /h5/files/overlay/1602-overlay-preview.png HTTP/1.1
Host: static.javhdhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhdhello.com/h5/files/16578/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Fcfab7283-f490-492c-abe3-d751a999c748%3Fcv1%3D232bdec6-9fef-11ed-93df-e2e38133f3a0%26cv10%3D1%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D62e383b461d6e2197e222e81%26cv5%3D62e3800961d6e26273250a26%26cv6%3Den%26cv7%3DNTVB%26cv8%3DFirefox%26cv9%3D62e294ed61d6e24c01635c17%26externalId%3D232bdec6-9fef-11ed-93df-e2e38133f3a0%26p%3DeyJiIjoyNzg2MDIsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3NTk0fQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:15 GMT
content-type: image/png
content-length: 1546
last-modified: Wed, 20 Apr 2022 13:56:48 GMT
etag: "62601120-60a"
expires: Tue, 23 May 2023 11:04:49 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684839889
server: CDN77-Turbo
x-77-nzt: AblMCRRh5K//ni9LAQ
x-77-nzt-ray: af585630ee11bbf9ef99d663e04ad237
x-cache: HIT
x-age: 21704606
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
static.javhdhello.com/h5/files/overlay/1602-overlay.png
200 OK 1.8 kB URL HTTP/2 static.javhdhello.com/h5/files/overlay/1602-overlay.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash f4403fc07b7c414db6ec613317885035
457d3e8f9e9fb0456292efdbd5f18b318e804ea7
00ffbfa9483f4a6e8b85b6ab368a9547cf29e54c1aeb2bfcf81f34ec2bf50ee7
GET /h5/files/overlay/1602-overlay.png HTTP/1.1
Host: static.javhdhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhdhello.com/h5/files/16578/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Fcfab7283-f490-492c-abe3-d751a999c748%3Fcv1%3D232bdec6-9fef-11ed-93df-e2e38133f3a0%26cv10%3D1%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D62e383b461d6e2197e222e81%26cv5%3D62e3800961d6e26273250a26%26cv6%3Den%26cv7%3DNTVB%26cv8%3DFirefox%26cv9%3D62e294ed61d6e24c01635c17%26externalId%3D232bdec6-9fef-11ed-93df-e2e38133f3a0%26p%3DeyJiIjoyNzg2MDIsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3NTk0fQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:15 GMT
content-type: image/png
content-length: 1839
last-modified: Wed, 20 Apr 2022 13:56:47 GMT
etag: "6260111f-72f"
expires: Tue, 23 May 2023 11:04:49 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684839889
server: CDN77-Turbo
x-77-nzt: AblMCRQcVCz/ni9LAQ
x-77-nzt-ray: af585630ee11bbf9ef99d663f487d637
x-cache: HIT
x-age: 21704606
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
static.javhdhello.com/h5/files/button/29-button.png
200 OK 733 B URL HTTP/2 static.javhdhello.com/h5/files/button/29-button.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 82a66a2d222379716ca9a03ff50d8f42
ae43d917ff791f9172edc527baa6266416182aaa
cc5da7b40e498d30bf5eaae43e59cae32202737076422676489dd8d3030803de
GET /h5/files/button/29-button.png HTTP/1.1
Host: static.javhdhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhdhello.com/h5/files/16578/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Fcfab7283-f490-492c-abe3-d751a999c748%3Fcv1%3D232bdec6-9fef-11ed-93df-e2e38133f3a0%26cv10%3D1%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D62e383b461d6e2197e222e81%26cv5%3D62e3800961d6e26273250a26%26cv6%3Den%26cv7%3DNTVB%26cv8%3DFirefox%26cv9%3D62e294ed61d6e24c01635c17%26externalId%3D232bdec6-9fef-11ed-93df-e2e38133f3a0%26p%3DeyJiIjoyNzg2MDIsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3NTk0fQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:15 GMT
content-type: image/png
content-length: 733
last-modified: Tue, 22 Dec 2015 18:41:22 GMT
etag: "56799952-2dd"
expires: Tue, 23 May 2023 11:04:49 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684839889
server: CDN77-Turbo
x-77-nzt: AblMCRSEViL/ni9LAQ
x-77-nzt-ray: af585630ee11bbf9ef99d66357eedb37
x-cache: HIT
x-age: 21704606
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
experimentalconcerningsuck.com/sbar.json?key=1161294bdf84d07019f576208d7911a6&uuid=90324334-571c-4902-93be-7bca37b79046%3A1%3A1
200 OK 4.4 kB URL HTTP/1.1 experimentalconcerningsuck.com/sbar.json?key=1161294bdf84d07019f576208d7911a6&uuid=90324334-571c-4902-93be-7bca37b79046%3A1%3A1
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (6273), with no line terminators
Hash a850ad5eabf06737990501e0da3a178f
8f2dea7f14740fbbf53ba093f4f5939231382e00
37285476f5fe3f63603b3b219b9708f6219ff3be3f0da39687088d7e3b2cfd2a
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=1161294bdf84d07019f576208d7911a6&uuid=90324334-571c-4902-93be-7bca37b79046%3A1%3A1 HTTP/1.1
Host: experimentalconcerningsuck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www2.javhdporn.net
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 29 Jan 2023 16:08:16 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www2.javhdporn.net
Access-Control-Allow-Origin: https://www2.javhdporn.net
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17363410; expires=Mon, 30 Jan 2023 16:08:15 GMT; secure; SameSite=None
uid_id2=90324334-571c-4902-93be-7bca37b79046:1:1; expires=Sun, 05 Feb 2023 16:08:15 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 30 Jan 2023 16:08:16 GMT; secure; SameSite=None
uncs=1; expires=Mon, 30 Jan 2023 16:08:16 GMT; secure; SameSite=None
pdhtkv29=true; expires=Mon, 30 Jan 2023 16:08:16 GMT; secure; SameSite=None
uncs29=1; expires=Mon, 30 Jan 2023 16:08:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c7771f9500fd657b504f15b4e6f4e1e1
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a8c7d643345c758c0a3783247673240
1e1a992fd5791306b0c08c374c1183f1dd4bc014
b39ebd5c6d18a8c27756a62119d34ed6f0269751c89ed7a9ba9069ed11f10b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B39EBD5C6D18A8C27756A62119D34ED6F0269751C89ED7A9BA9069ED11F10B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12101
Expires: Sun, 29 Jan 2023 19:29:57 GMT
Date: Sun, 29 Jan 2023 16:08:16 GMT
Connection: keep-alive
experimentalconcerningsuck.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQYgcRRStjomIuajkIhhowYOCO6me7pneNsKSGCPBmMQkmqtVXdW7le3paqq6pycLQjQg8SJj8KC33jdJFjWKAU%2BKKB0vsiCkBWUR96B48GYQvCozO7j4ofv%2FX%2B8f3nv%2Fv7VebhOKkm2deUmvqTRlh3od6j55QWVCV9Y9dd71aIcedi%2BorB8cdkfTnxk%2B49Fehz7lviDjVX2oSz1KPeq5x5WRiR4dmqFQ%2Ba3I60S0E3Q7Xi%2FAyPy%2Ft6UDyxyI4TZ5BEq0%2B1a%2Buw0VN8gGnx2TdrXQ%2BdPPD8qUFdpgKDZeyVYzXWUY7JaJcZBkG%2FNpaNsS8v4e6GxjrgB6eH2qAFy1xPnJA8825jTBhzd2mPIUMgMX%2B1ENG8i0gWINYn0FStwlQCxw6jSywc1T2lTs0g7KpmhL9v79F1TVkr2%2FHEA2%2BPRoqkbuOZ2WhdKZxSipoUYN1HKDvLyDYs2Bqu4gLt6EEgTZoIYSW09E1O8Gvh8s9EIvXggi2l2IfC4XQh4zP%2BRhRIP%2BzBqlGqikQSrHYNZBOf2UgzJxUOYOBmLLZb0ooTRMeOL7i0Ecx74fx73FvugJP1hMKMp4yn2MIh8jTseIzWXk5jJW1bW7vcdaQq5dhCm%2FgV2pYYUDWxAMRY1KElSWoGIElSKoCoJqWN8Qqe3a%2BqZIbcm9ee7Os19PdLG8zm7oYllmZD3fJg9PjXMeuNdiVW65ntf3ulHARbIYCBpSL0p6Yb9LF0UYeR7rw6oayu6ZyV1TLTnw60HkqiV7Dt8DZw1s2iBWD4GVB8GqSdilYCuTYJFiLfvkIhuuiFybrJPJAkLXyIu9KC456%2Bk2eXS2wWdffwcy3lz68o1Xb33%2Bz8uITY3c1LioviVYTq9OzuqKXD%2BrK0tun84LNVBrbLrdcwUr5L6PXpSXKm3EiWN2%2FOGReApMy1vnpS1OskyobNmSj48qIaQ5rk0syVcn7AXJz5R25WhpsjI%2Feea54ycGuZHWKp01YKolZPtnxKol%2Bx98fHa57nsNlGlgyhqDcpPMA0o3iPPLsPnm0hff%2F3H%2F1%2F3fYDWBSXdneO6gKuuJ6fLdx1QRpHK3Z7yGlZtL9e%2BvHXk7PAku%2FzNk3V7FsnHAiiuzex2aGsO0BkvHsOV9kyI3m0s%2F%2BLMAT50JT41znacmfXfHXKu2XNlLaCJpV%2FIk4knIqIiSIOIs8mTIe8xDYdv4xw%2F%2B%2FBcAAP%2F%2FAQAA%2F%2F9A1NlXkQQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 experimentalconcerningsuck.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQYgcRRStjomIuajkIhhowYOCO6me7pneNsKSGCPBmMQkmqtVXdW7le3paqq6pycLQjQg8SJj8KC33jdJFjWKAU%2BKKB0vsiCkBWUR96B48GYQvCozO7j4ofv%2FX%2B8f3nv%2Fv7VebhOKkm2deUmvqTRlh3od6j55QWVCV9Y9dd71aIcedi%2BorB8cdkfTnxk%2B49Fehz7lviDjVX2oSz1KPeq5x5WRiR4dmqFQ%2Ba3I60S0E3Q7Xi%2FAyPy%2Ft6UDyxyI4TZ5BEq0%2B1a%2Buw0VN8gGnx2TdrXQ%2BdPPD8qUFdpgKDZeyVYzXWUY7JaJcZBkG%2FNpaNsS8v4e6GxjrgB6eH2qAFy1xPnJA8825jTBhzd2mPIUMgMX%2B1ENG8i0gWINYn0FStwlQCxw6jSywc1T2lTs0g7KpmhL9v79F1TVkr2%2FHEA2%2BPRoqkbuOZ2WhdKZxSipoUYN1HKDvLyDYs2Bqu4gLt6EEgTZoIYSW09E1O8Gvh8s9EIvXggi2l2IfC4XQh4zP%2BRhRIP%2BzBqlGqikQSrHYNZBOf2UgzJxUOYOBmLLZb0ooTRMeOL7i0Ecx74fx73FvugJP1hMKMp4yn2MIh8jTseIzWXk5jJW1bW7vcdaQq5dhCm%2FgV2pYYUDWxAMRY1KElSWoGIElSKoCoJqWN8Qqe3a%2BqZIbcm9ee7Os19PdLG8zm7oYllmZD3fJg9PjXMeuNdiVW65ntf3ulHARbIYCBpSL0p6Yb9LF0UYeR7rw6oayu6ZyV1TLTnw60HkqiV7Dt8DZw1s2iBWD4GVB8GqSdilYCuTYJFiLfvkIhuuiFybrJPJAkLXyIu9KC456%2Bk2eXS2wWdffwcy3lz68o1Xb33%2Bz8uITY3c1LioviVYTq9OzuqKXD%2BrK0tun84LNVBrbLrdcwUr5L6PXpSXKm3EiWN2%2FOGReApMy1vnpS1OskyobNmSj48qIaQ5rk0syVcn7AXJz5R25WhpsjI%2Feea54ycGuZHWKp01YKolZPtnxKol%2Bx98fHa57nsNlGlgyhqDcpPMA0o3iPPLsPnm0hff%2F3H%2F1%2F3fYDWBSXdneO6gKuuJ6fLdx1QRpHK3Z7yGlZtL9e%2BvHXk7PAku%2FzNk3V7FsnHAiiuzex2aGsO0BkvHsOV9kyI3m0s%2F%2BLMAT50JT41znacmfXfHXKu2XNlLaCJpV%2FIk4knIqIiSIOIs8mTIe8xDYdv4xw%2F%2B%2FBcAAP%2F%2FAQAA%2F%2F9A1NlXkQQAAA%3D%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSQYgcRRStjomIuajkIhhowYOCO6me7pneNsKSGCPBmMQkmqtVXdW7le3paqq6pycLQjQg8SJj8KC33jdJFjWKAU%2BKKB0vsiCkBWUR96B48GYQvCozO7j4ofv%2FX%2B8f3nv%2Fv7VebhOKkm2deUmvqTRlh3od6j55QWVCV9Y9dd71aIcedi%2BorB8cdkfTnxk%2B49Fehz7lviDjVX2oSz1KPeq5x5WRiR4dmqFQ%2Ba3I60S0E3Q7Xi%2FAyPy%2Ft6UDyxyI4TZ5BEq0%2B1a%2Buw0VN8gGnx2TdrXQ%2BdPPD8qUFdpgKDZeyVYzXWUY7JaJcZBkG%2FNpaNsS8v4e6GxjrgB6eH2qAFy1xPnJA8825jTBhzd2mPIUMgMX%2B1ENG8i0gWINYn0FStwlQCxw6jSywc1T2lTs0g7KpmhL9v79F1TVkr2%2FHEA2%2BPRoqkbuOZ2WhdKZxSipoUYN1HKDvLyDYs2Bqu4gLt6EEgTZoIYSW09E1O8Gvh8s9EIvXggi2l2IfC4XQh4zP%2BRhRIP%2BzBqlGqikQSrHYNZBOf2UgzJxUOYOBmLLZb0ooTRMeOL7i0Ecx74fx73FvugJP1hMKMp4yn2MIh8jTseIzWXk5jJW1bW7vcdaQq5dhCm%2FgV2pYYUDWxAMRY1KElSWoGIElSKoCoJqWN8Qqe3a%2BqZIbcm9ee7Os19PdLG8zm7oYllmZD3fJg9PjXMeuNdiVW65ntf3ulHARbIYCBpSL0p6Yb9LF0UYeR7rw6oayu6ZyV1TLTnw60HkqiV7Dt8DZw1s2iBWD4GVB8GqSdilYCuTYJFiLfvkIhuuiFybrJPJAkLXyIu9KC456%2Bk2eXS2wWdffwcy3lz68o1Xb33%2Bz8uITY3c1LioviVYTq9OzuqKXD%2BrK0tun84LNVBrbLrdcwUr5L6PXpSXKm3EiWN2%2FOGReApMy1vnpS1OskyobNmSj48qIaQ5rk0syVcn7AXJz5R25WhpsjI%2Feea54ycGuZHWKp01YKolZPtnxKol%2Bx98fHa57nsNlGlgyhqDcpPMA0o3iPPLsPnm0hff%2F3H%2F1%2F3fYDWBSXdneO6gKuuJ6fLdx1QRpHK3Z7yGlZtL9e%2BvHXk7PAku%2FzNk3V7FsnHAiiuzex2aGsO0BkvHsOV9kyI3m0s%2F%2BLMAT50JT41znacmfXfHXKu2XNlLaCJpV%2FIk4knIqIiSIOIs8mTIe8xDYdv4xw%2F%2B%2FBcAAP%2F%2FAQAA%2F%2F9A1NlXkQQAAA%3D%3D HTTP/1.1
Host: experimentalconcerningsuck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Cookie: u_pl=17363410; uid_id2=90324334-571c-4902-93be-7bca37b79046:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 29 Jan 2023 16:08:16 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c5b629172ae6d112e01b62d83be633e5
Strict-Transport-Security: max-age=0; includeSubdomains
static.javhdhello.com/h5/files/video/36-17551-300x250.medium.mp4
206 Partial Content 296 kB URL HTTP/2 static.javhdhello.com/h5/files/video/36-17551-300x250.medium.mp4
IP
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 296 kB (295795 bytes)
Hash 188ac398d85e8995cf5b139f99fed4ad
9172cd872a9139806a5356e023bf6267ac065156
233c5dbe2927f646f8e5b63602d09536d74d115a7c245fa420fbd54644aebd16
GET /h5/files/video/36-17551-300x250.medium.mp4 HTTP/1.1
Host: static.javhdhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://static.javhdhello.com/h5/files/16578/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Fcfab7283-f490-492c-abe3-d751a999c748%3Fcv1%3D232bdec6-9fef-11ed-93df-e2e38133f3a0%26cv10%3D1%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D62e383b461d6e2197e222e81%26cv5%3D62e3800961d6e26273250a26%26cv6%3Den%26cv7%3DNTVB%26cv8%3DFirefox%26cv9%3D62e294ed61d6e24c01635c17%26externalId%3D232bdec6-9fef-11ed-93df-e2e38133f3a0%26p%3DeyJiIjoyNzg2MDIsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3NTk0fQ
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 29 Jan 2023 16:08:15 GMT
content-type: video/mp4
content-length: 772102
last-modified: Wed, 19 Oct 2022 09:58:33 GMT
etag: "634fca49-bc806"
expires: Sat, 22 Oct 2022 12:04:28 GMT
cache-control: max-age=86400
access-control-allow-origin: *
x-accel-expires: @1675092854
server: CDN77-Turbo
x-77-nzt: AblMCRSZcF3/+QcAAA
x-77-nzt-ray: af585630ee11bbf9ef99d66377bab93a
x-cache: HIT
x-age: 2041
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-772101/772102
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 92150eb32d9db49422cf29f24536530f
ee14343bc6797e6e4004aa93002e20e82ede365f
a3d92b83c5e18e8b559d0830a26ef62410a5922a213a1508ebb9f177ebdb8f51
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "A3D92B83C5E18E8B559D0830A26EF62410A5922A213A1508EBB9F177EBDB8F51"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14792
Expires: Sun, 29 Jan 2023 20:14:48 GMT
Date: Sun, 29 Jan 2023 16:08:16 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 92150eb32d9db49422cf29f24536530f
ee14343bc6797e6e4004aa93002e20e82ede365f
a3d92b83c5e18e8b559d0830a26ef62410a5922a213a1508ebb9f177ebdb8f51
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "A3D92B83C5E18E8B559D0830A26EF62410A5922A213A1508EBB9F177EBDB8F51"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14792
Expires: Sun, 29 Jan 2023 20:14:48 GMT
Date: Sun, 29 Jan 2023 16:08:16 GMT
Connection: keep-alive
cdn.creative-bars1.com/sb/notifications/software/us/ios/desk-new-big/js/script.js
200 OK 692 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/software/us/ios/desk-new-big/js/script.js
IP
Hash 90e47837f9236a1d9391da93ce076f58
0e55c42698179ec507ff45123b271517975ef2a5
9923091986edd432db80463aec558de5033d38b9076d75b7f5b5ed3eb907cb55
GET /sb/notifications/software/us/ios/desk-new-big/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www2.javhdporn.net
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:16 GMT
content-type: application/javascript
last-modified: Wed, 17 Feb 2021 11:44:05 GMT
etag: W/"602d0185-183"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2355029
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7%2F8XEGTnHMsWdr4hW2EEcqhkqvc6HAm%2Bxc7bPME3onwKXHdzKxD84gTSIwhveHBMvhdSoD7Yxr4hFCcXiGqXjaklQjH2VybE9rVHASz%2FGysC%2FrqzMzsnHpiUmhfXtXstas%2FAzqiavJBg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791339bf6fb123e7-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 92150eb32d9db49422cf29f24536530f
ee14343bc6797e6e4004aa93002e20e82ede365f
a3d92b83c5e18e8b559d0830a26ef62410a5922a213a1508ebb9f177ebdb8f51
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "A3D92B83C5E18E8B559D0830A26EF62410A5922A213A1508EBB9F177EBDB8F51"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14792
Expires: Sun, 29 Jan 2023 20:14:48 GMT
Date: Sun, 29 Jan 2023 16:08:16 GMT
Connection: keep-alive
cdn.cloudimagesb.com/si/0c/cb/18/0ccb18abb013933bb5b928dbf7793f9d/1674718319.png
200 OK 75 kB URL HTTP/2 cdn.cloudimagesb.com/si/0c/cb/18/0ccb18abb013933bb5b928dbf7793f9d/1674718319.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 9ca08a47fb34de4369167546c3507a86
b0bcb3b6b04c701790442c1cd158b222576ce44c
2a0d15f8ea65f60953d010e4111cab3fe482f7cccaa7aa38e7ddf28c4ae3dedb
GET /si/0c/cb/18/0ccb18abb013933bb5b928dbf7793f9d/1674718319.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:16 GMT
content-type: image/png
content-length: 75166
server: nginx/1.17.6
last-modified: Thu, 26 Jan 2023 07:32:08 GMT
etag: "63d22c78-1259e"
expires: Tue, 31 Jan 2023 16:08:16 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
poweredby.jads.co/adshow.php?adzone=863030
200 OK 1.5 kB URL HTTP/1.1 poweredby.jads.co/adshow.php?adzone=863030
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (416), with CRLF, LF line terminators
Hash 27af549d9ef93857d8ac70a894a405e6
041ddb524e531b356d51defed5c0b657e35e67c3
0c0e44ba61cd28a7c62d7ab183e244b5252b70dc20dba833e3c0408f2a1b7ee3
GET /adshow.php?adzone=863030 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Jan 2023 16:08:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=7269e2df1110173798e342854cc7bd56; expires=Mon, 29-Jan-2024 16:08:14 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps50289=1; expires=Mon, 30-Jan-2023 16:08:16 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjEzODkyMTU7aToxNjc1MjY3Njk0O30%3D; expires=Wed, 01-Feb-2023 16:08:14 GMT; Max-Age=259198; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Wed, 01-Feb-2023 16:08:14 GMT; Max-Age=259198; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
i.jads.co/network/user81419/50289-1654836996-0658613001654836996.gif
200 OK 225 kB URL HTTP/2 i.jads.co/network/user81419/50289-1654836996-0658613001654836996.gif
IP
File type GIF image data, version 89a, 728 x 90\012- data
Size 225 kB (224766 bytes)
Hash 4f1fc32aa682f7639c7ab92469282eb8
e9d3d0e0fcc103c26b70dc007341f0a1722697ed
20f56b6db21a44c49a0a91750723bf50ca5a34e10cd6323273577b36e8f2fad6
GET /network/user81419/50289-1654836996-0658613001654836996.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=7269e2df1110173798e342854cc7bd56; imps50289=1; juicy_data_1=YToxOntpOjEzODkyMTU7aToxNjc1MjY3Njk0O30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:16 GMT
etag: "1654836996"
cache-control: max-age=11425609
content-length: 224766
content-type: image/gif
last-modified: Fri, 10 Jun 2022 04:56:36 GMT
accept-ranges: bytes
x-hw: 1675008496.dop014.sk1.t,1675008496.cds066.sk1.hn,1675008496.cds253.sk1.c
X-Firefox-Spdy: h2
go.xlirdr.com/thumbs/view
200 OK 100 kB URL HTTP/2 go.xlirdr.com/thumbs/view
IP
File type JSON data\012- , ASCII text
Hash 5d6da783a746c4b9ae1e357064370cd5
9149ef5ddd20a8ff150d38bb6b8def4f974be788
519de28c069bb6dcec2417b6a2841da861af15c9421e23d82a7e3e7f4b075426
POST /thumbs/view HTTP/1.1
Host: go.xlirdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xlirdr.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://creative.xlirdr.com
Content-Length: 81
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:14 GMT
content-type: application/json
access-control-allow-origin: *
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28uukSkGJRy5UBr1XYMARUwdYFVsfkXgyy9V9o9b2; SameSite=None; Secure; path=/; expires=Mon, 30-Jan-23 15:08:14 GMT; HttpOnly
server: cloudflare
cf-ray: 791339b3af9ab4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
experimentalconcerningsuck.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSujomIuajkIhhowYOCO6n%2BmelpIyyJMRKMSUyiuVpdVb1b2Z6upqp7erMgRAMSL7IGD3rr%2FSbJokYx4EkRpeNFFoS0oCziHhQP3gyCV2VmFxcfdL%2F36nuH7%2Fvee2ut2iIUFds885JeUVnGDvV71H3ygsqFrq176rzr0R497F5Q%2BSA87C5Pf2b8jEf7PfqU%2B4LkS%2FqQTz1KPeq5x5WRqV4%2BNEOhilux14tpL%2FR7Xj%2FEsvl%2FbysHljkQ4y3yCJTo9i1%2BdxuKt8hHnx2TdqnUxdPPj6qMldpgLNZfyZdyXecY7ZapcZDm6zvT0LYj5P090Pn6jgLo8fWpAiSqI85PHpJ8fYcmkvGNbaZJBpkjEftRj1vIrIViLbi%2BAiXuEoALnDqNfHTzlDY1u7SNsinakb1%2F%2FwVVd2TvLweQjz49mqll95zOqlLp3GI5baCWW6iFFkV1B%2BWKA1XfAS%2FfhBIE%2BaiBEptPxDTwwyAI5%2FqRx%2BfCmPpzcZDIuSjhLIiSKKbhYGaNUi1U2iKTq2DWQTX9lIMqdVAVDkZi02X9OKU0SpM0CIYh5zwIOO8PB6IvgnCYUlR8yn0VZbEKnq2Cm8sozGUsqWt3%2B491hFy7CFN9A7vYwAoHtiQYiwa1JKgtQc0IakVQlwT1uLkhMuvb5qbIbJV4O9nfyUEz0eXCGruhywWZk7Viizw8Nc554F6HJbnpet7A8%2BMwEekwFDSiXpz2o4FPhyKKPY8NYFUDZffM5K6ojhz49SAK1ZE9h%2B8hYS1s1oKrh8Cqg2D1JPIp2OIkHFKs5J9cZONFUWiT93JZQugGRbkX5SVnLdsij842%2BOzr70Dyjfkv33j11uf%2FvAxuGhSmwUX1LcFCdnVyVtfk%2BlldW3L7dFGqkVph0%2B2eK1kp9330orxUayNOHLOrHx7hU2Ba3jovbXmS5ULlC5Z8fFQJIc1xbbgkX52wF2RyprKLRyuTV8XJM88dPzEqjLRW6bwFUx0hWz%2BDq47sf%2FDx2eW677VQpoWpGoyqDbITULoFLy7DFhvzX3z%2Fx%2F1fD36D1QQm251JCgd11UyMn%2Bw%2BZoogk7s9SxpYuTHf%2FP7akbejk0jkf4as2atYMA5YeWV2r2PTYJw1YNkqbHXfpCzMxvwPwSyQZM4kyYxzPclM9u62uVZtun0vlMNkGHEhEsmFF%2FnBMKDUFyKMYunFKG3Hf%2Fzgz38BAAD%2F%2FwEAAP%2F%2FVNxXsZEEAAA%3D
200 OK 7 B URL HTTP/1.1 experimentalconcerningsuck.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSujomIuajkIhhowYOCO6n%2BmelpIyyJMRKMSUyiuVpdVb1b2Z6upqp7erMgRAMSL7IGD3rr%2FSbJokYx4EkRpeNFFoS0oCziHhQP3gyCV2VmFxcfdL%2F36nuH7%2Fvee2ut2iIUFds885JeUVnGDvV71H3ygsqFrq176rzr0R497F5Q%2BSA87C5Pf2b8jEf7PfqU%2B4LkS%2FqQTz1KPeq5x5WRqV4%2BNEOhilux14tpL%2FR7Xj%2FEsvl%2FbysHljkQ4y3yCJTo9i1%2BdxuKt8hHnx2TdqnUxdPPj6qMldpgLNZfyZdyXecY7ZapcZDm6zvT0LYj5P090Pn6jgLo8fWpAiSqI85PHpJ8fYcmkvGNbaZJBpkjEftRj1vIrIViLbi%2BAiXuEoALnDqNfHTzlDY1u7SNsinakb1%2F%2FwVVd2TvLweQjz49mqll95zOqlLp3GI5baCWW6iFFkV1B%2BWKA1XfAS%2FfhBIE%2BaiBEptPxDTwwyAI5%2FqRx%2BfCmPpzcZDIuSjhLIiSKKbhYGaNUi1U2iKTq2DWQTX9lIMqdVAVDkZi02X9OKU0SpM0CIYh5zwIOO8PB6IvgnCYUlR8yn0VZbEKnq2Cm8sozGUsqWt3%2B491hFy7CFN9A7vYwAoHtiQYiwa1JKgtQc0IakVQlwT1uLkhMuvb5qbIbJV4O9nfyUEz0eXCGruhywWZk7Viizw8Nc554F6HJbnpet7A8%2BMwEekwFDSiXpz2o4FPhyKKPY8NYFUDZffM5K6ojhz49SAK1ZE9h%2B8hYS1s1oKrh8Cqg2D1JPIp2OIkHFKs5J9cZONFUWiT93JZQugGRbkX5SVnLdsij842%2BOzr70Dyjfkv33j11uf%2FvAxuGhSmwUX1LcFCdnVyVtfk%2BlldW3L7dFGqkVph0%2B2eK1kp9330orxUayNOHLOrHx7hU2Ba3jovbXmS5ULlC5Z8fFQJIc1xbbgkX52wF2RyprKLRyuTV8XJM88dPzEqjLRW6bwFUx0hWz%2BDq47sf%2FDx2eW677VQpoWpGoyqDbITULoFLy7DFhvzX3z%2Fx%2F1fD36D1QQm251JCgd11UyMn%2Bw%2BZoogk7s9SxpYuTHf%2FP7akbejk0jkf4as2atYMA5YeWV2r2PTYJw1YNkqbHXfpCzMxvwPwSyQZM4kyYxzPclM9u62uVZtun0vlMNkGHEhEsmFF%2FnBMKDUFyKMYunFKG3Hf%2Fzgz38BAAD%2F%2FwEAAP%2F%2FVNxXsZEEAAA%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSujomIuajkIhhowYOCO6n%2BmelpIyyJMRKMSUyiuVpdVb1b2Z6upqp7erMgRAMSL7IGD3rr%2FSbJokYx4EkRpeNFFoS0oCziHhQP3gyCV2VmFxcfdL%2F36nuH7%2Fvee2ut2iIUFds885JeUVnGDvV71H3ygsqFrq176rzr0R497F5Q%2BSA87C5Pf2b8jEf7PfqU%2B4LkS%2FqQTz1KPeq5x5WRqV4%2BNEOhilux14tpL%2FR7Xj%2FEsvl%2FbysHljkQ4y3yCJTo9i1%2BdxuKt8hHnx2TdqnUxdPPj6qMldpgLNZfyZdyXecY7ZapcZDm6zvT0LYj5P090Pn6jgLo8fWpAiSqI85PHpJ8fYcmkvGNbaZJBpkjEftRj1vIrIViLbi%2BAiXuEoALnDqNfHTzlDY1u7SNsinakb1%2F%2FwVVd2TvLweQjz49mqll95zOqlLp3GI5baCWW6iFFkV1B%2BWKA1XfAS%2FfhBIE%2BaiBEptPxDTwwyAI5%2FqRx%2BfCmPpzcZDIuSjhLIiSKKbhYGaNUi1U2iKTq2DWQTX9lIMqdVAVDkZi02X9OKU0SpM0CIYh5zwIOO8PB6IvgnCYUlR8yn0VZbEKnq2Cm8sozGUsqWt3%2B491hFy7CFN9A7vYwAoHtiQYiwa1JKgtQc0IakVQlwT1uLkhMuvb5qbIbJV4O9nfyUEz0eXCGruhywWZk7Viizw8Nc554F6HJbnpet7A8%2BMwEekwFDSiXpz2o4FPhyKKPY8NYFUDZffM5K6ojhz49SAK1ZE9h%2B8hYS1s1oKrh8Cqg2D1JPIp2OIkHFKs5J9cZONFUWiT93JZQugGRbkX5SVnLdsij842%2BOzr70Dyjfkv33j11uf%2FvAxuGhSmwUX1LcFCdnVyVtfk%2BlldW3L7dFGqkVph0%2B2eK1kp9330orxUayNOHLOrHx7hU2Ba3jovbXmS5ULlC5Z8fFQJIc1xbbgkX52wF2RyprKLRyuTV8XJM88dPzEqjLRW6bwFUx0hWz%2BDq47sf%2FDx2eW677VQpoWpGoyqDbITULoFLy7DFhvzX3z%2Fx%2F1fD36D1QQm251JCgd11UyMn%2Bw%2BZoogk7s9SxpYuTHf%2FP7akbejk0jkf4as2atYMA5YeWV2r2PTYJw1YNkqbHXfpCzMxvwPwSyQZM4kyYxzPclM9u62uVZtun0vlMNkGHEhEsmFF%2FnBMKDUFyKMYunFKG3Hf%2Fzgz38BAAD%2F%2FwEAAP%2F%2FVNxXsZEEAAA%3D HTTP/1.1
Host: experimentalconcerningsuck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Cookie: u_pl=17363410; uid_id2=90324334-571c-4902-93be-7bca37b79046:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 29 Jan 2023 16:08:16 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1b943fa4bf97d8090900370c3dd9118d
Strict-Transport-Security: max-age=0; includeSubdomains
experimentalconcerningsuck.com/pixel/sbs?c=1
200 OK 0 B URL HTTP/1.1 experimentalconcerningsuck.com/pixel/sbs?c=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: experimentalconcerningsuck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Cookie: u_pl=17363410; uid_id2=90324334-571c-4902-93be-7bca37b79046:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 29 Jan 2023 16:08:17 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
poweredby.jads.co/adshow.php?adzone=847494
200 OK 1.7 kB URL HTTP/1.1 poweredby.jads.co/adshow.php?adzone=847494
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1332), with CRLF, LF line terminators
Hash 42d03dc4786e918044a8d791b76845cf
43c1e278ea77f722e2f14a7c368ccf170bedc85f
b03e37cd54aa2c341fc4b9f576dc0b908c83c748286d0244be8c41216ad2457b
GET /adshow.php?adzone=847494 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Jan 2023 16:08:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=7269e2df1110173798e342854cc7bd56; expires=Mon, 29-Jan-2024 16:08:14 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YTowOnt9; expires=Wed, 01-Feb-2023 16:08:14 GMT; Max-Age=259196; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Wed, 01-Feb-2023 16:08:14 GMT; Max-Age=259196; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
i.jads.co/1x1.gif
200 OK 43 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /1x1.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=7269e2df1110173798e342854cc7bd56; imps50289=1; juicy_data_1=YTowOnt9; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:19 GMT
etag: "1457030838"
cache-control: max-age=12216767
content-length: 43
content-type: image/gif
last-modified: Thu, 03 Mar 2016 18:47:18 GMT
accept-ranges: bytes
x-hw: 1675008499.dop014.sk1.t,1675008499.cds066.sk1.hn,1675008499.cds264.sk1.c
X-Firefox-Spdy: h2
r.trackwilltrk.com/s1/00a26e53-ecaf-4074-8bee-f672958649fe?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=126401&cv4=252407&cv5=847494&cv6=
200 OK 818 B URL HTTP/1.1 r.trackwilltrk.com/s1/00a26e53-ecaf-4074-8bee-f672958649fe?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=126401&cv4=252407&cv5=847494&cv6=
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (622)
Hash b80a0a933df751bad84f03fba84e0e34
c6c06a8f404ca24c51b4a8d5ea8798d89f85178c
640da8e1bc7e30aa7eb586480ec3b7ff354aab65c6a13f8a2bc989d165129595
GET /s1/00a26e53-ecaf-4074-8bee-f672958649fe?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=126401&cv4=252407&cv5=847494&cv6= HTTP/1.1
Host: r.trackwilltrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poweredby.jads.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 29 Jan 2023 16:08:19 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 818
Connection: close
Set-Cookie: uid=GMM61Mbap; Path=/; Domain=trackwilltrk.com; Expires=Mon, 30 Jan 2023 16:08:19 GMT; HttpOnly
X-Request-Id: 5c022ef1-16f1-4c51-8701-feb85e6dba41
static.javhdhello.com/h5/files/video/3849-30453-300x250.medium.mp4
206 Partial Content 432 kB URL HTTP/2 static.javhdhello.com/h5/files/video/3849-30453-300x250.medium.mp4
IP
ASN #60068 Datacamp Limited
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size 432 kB (431883 bytes)
Hash 1c6cc0e006fbcbe3ea94216b9bc0dcef
fe8ee7a562043af39d0b9422eb09ee7bcd26a4a3
2de8221645cf78c35fa8dd9396999c833b46ec732af49b87655349f9c1f4c42e
GET /h5/files/video/3849-30453-300x250.medium.mp4 HTTP/1.1
Host: static.javhdhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://static.javhdhello.com/h5/files/15970/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Ff05f0809-755f-4570-b3a2-fa8be883cea3%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D252407%26cv5%3D847494%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzc0NTEsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjIxOTQwfQ
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 29 Jan 2023 16:08:19 GMT
content-type: video/mp4
content-length: 431883
last-modified: Mon, 07 Feb 2022 07:42:29 GMT
etag: "6200cd65-6970b"
expires: Tue, 24 May 2022 11:04:49 GMT
cache-control: max-age=86400
access-control-allow-origin: *
x-accel-expires: @1675080838
server: CDN77-Turbo
x-77-nzt: AblMCRQkJuD/7TYAAA
x-77-nzt-ray: af585630ee11bbf9f399d663f0fc2432
x-cache: HIT
x-age: 14061
x-77-pop: stockholmSE
x-77-cache: HIT
content-range: bytes 0-431882/431883
X-Firefox-Spdy: h2
adxadserv.com/px/heartbeat/v1?pv_uid=8bdcc962-a930-4363-a372-500f05807f1f&t_op=5.321&p_nn=adxad-rtb&fpid_sa=1675008503475&fpid=bc43f01a151639d4c69739dcaca30e3b&feid_sa=1675008503475&sid_sa=1675008503475&feid=d377077c3ede120920179e6df3218b75&sid=1c334866d9bc5eb6f1ca74729c181fc7&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www2.javhdporn.net&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=16&dm=-1&dt=2&ed=0&sr=5497558139882&fb=10384
200 OK 0 B URL HTTP/1.1 adxadserv.com/px/heartbeat/v1?pv_uid=8bdcc962-a930-4363-a372-500f05807f1f&t_op=5.321&p_nn=adxad-rtb&fpid_sa=1675008503475&fpid=bc43f01a151639d4c69739dcaca30e3b&feid_sa=1675008503475&sid_sa=1675008503475&feid=d377077c3ede120920179e6df3218b75&sid=1c334866d9bc5eb6f1ca74729c181fc7&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www2.javhdporn.net&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=16&dm=-1&dt=2&ed=0&sr=5497558139882&fb=10384
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /px/heartbeat/v1?pv_uid=8bdcc962-a930-4363-a372-500f05807f1f&t_op=5.321&p_nn=adxad-rtb&fpid_sa=1675008503475&fpid=bc43f01a151639d4c69739dcaca30e3b&feid_sa=1675008503475&sid_sa=1675008503475&feid=d377077c3ede120920179e6df3218b75&sid=1c334866d9bc5eb6f1ca74729c181fc7&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=www2.javhdporn.net&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=16&dm=-1&dt=2&ed=0&sr=5497558139882&fb=10384 HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1
Origin: https://ads.adxadserv.com
Connection: keep-alive
Referer: https://ads.adxadserv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 29 Jan 2023 16:08:20 GMT
Content-Length: 0
Connection: keep-alive
static.javhdhello.com/h5/files/15970/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Ff05f0809-755f-4570-b3a2-fa8be883cea3%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D252407%26cv5%3D847494%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzc0NTEsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjIxOTQwfQ
200 OK 0 B URL HTTP/2 static.javhdhello.com/h5/files/15970/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Ff05f0809-755f-4570-b3a2-fa8be883cea3%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D252407%26cv5%3D847494%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzc0NTEsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjIxOTQwfQ
IP
ASN #60068 Datacamp Limited
GET /h5/files/15970/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Ff05f0809-755f-4570-b3a2-fa8be883cea3%3Fcost%3D%257BcostPlaceholder%257D%26cv1%3D%257BdynamicCON%257D%26cv2%3DNO%26cv3%3D126401%26cv4%3D252407%26cv5%3D847494%26cv6%3D%26externalId%3D%257BextPlaceholder%257D%26p%3DeyJiIjoyNzc0NTEsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjIxOTQwfQ HTTP/1.1
Host: static.javhdhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r.trackwilltrk.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:19 GMT
content-type: text/html
last-modified: Tue, 27 Dec 2022 15:24:11 GMT
etag: W/"63ab0e1b-ca4"
expires: Thu, 23 Feb 2023 22:29:17 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-accel-expires: @1677191357
server: CDN77-Turbo
x-77-nzt: AblMCRToL2r/Nj4GAA
x-77-nzt-ray: af585630ee11bbf9f399d663d421d22f
x-cache: HIT
x-age: 409142
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
pics.pornfhd.com/digital/video/mvsd00284/mvsd00284pl.jpg
200 OK 0 B URL HTTP/2 pics.pornfhd.com/digital/video/mvsd00284/mvsd00284pl.jpg
IP
GET /digital/video/mvsd00284/mvsd00284pl.jpg HTTP/1.1
Host: pics.pornfhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:13 GMT
content-type: image/jpeg
last-modified: Wed, 16 Dec 2015 08:51:38 GMT
vary: Accept-Encoding
etag: W/"5671261a-2bc57"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 78855
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EVnuYk2PP3APTK4AVDVUdbbdqWvFW97aDirnqQ8lH9kHbUmfBKlS4l0Aeq89q%2FTFov6aVZC7ckNFmtxC3af%2BI70A6CUJbWuSejzGEwLXFhKTWONSL%2BSERGFLLyg2o92Bey8F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791339ab4cae7761-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.adxadserv.com/js/adb.js
200 OK 0 B URL HTTP/2 static.adxadserv.com/js/adb.js
IP
ASN #60068 Datacamp Limited
GET /js/adb.js HTTP/1.1
Host: static.adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:15 GMT
content-type: application/javascript
last-modified: Tue, 24 Mar 2020 11:15:59 GMT
etag: W/"5e79ebef-532"
x-accel-expires: @1676019679
server: CDN77-Turbo
x-77-nzt: AblMCQ2LGyn/EGQAAA
x-77-nzt-ray: c0a4cc28474367f5ef99d6635ff5e70b
x-cache: HIT
x-age: 25616
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
img.pornfhd.com/favicon.ico
200 OK 0 B URL HTTP/2 img.pornfhd.com/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: img.pornfhd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:13 GMT
content-type: image/x-icon
last-modified: Thu, 05 Dec 2019 06:45:00 GMT
vary: Accept-Encoding
etag: W/"5de8a76c-3c2e"
expires: Wed, 05 Jan 2022 09:39:02 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 1491973
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4PuMj57vfj3ao69F%2F2WVmbdE7bwrZ2nqnf4PnP3WnygPnAOCo12exyWyPzWe4lrbBTaz9jcrxTE0Ss9qYUWFDi7ArIdmQZqn1z70RkJEahoxt2IwhAENBaCQSfaktFhERto%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791339ac8e947761-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
asg.phukienthoitranggiare.com/YgA4qA3.js
200 OK 0 B URL HTTP/2 asg.phukienthoitranggiare.com/YgA4qA3.js
IP
ASN #24940 Hetzner Online GmbH
GET /YgA4qA3.js HTTP/1.1
Host: asg.phukienthoitranggiare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www2.javhdporn.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 16:08:13 GMT
content-type: application/javascript
last-modified: Thu, 17 Nov 2022 11:24:59 GMT
etag: W/"63761a0b-29e8b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
vary: Accept-Encoding, Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 487e313569291f74bde8bb30db9e6efa.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: XDfxW3crNpbzT4GOw32fOepRYC4-rOZ_kcI3WyH0GN-cOgsXsRo0wg==
age: 5913506
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
creative.xlirdr.com/widgets/Player?autoplay=all&autoplayForce=all&campaignId=b12dbba4a74f1f286b44c367348434fcb52005247fbe29388c0f42e2bb53542e&campaignType=smartpop&creativeId=9d1e7de94c9852b91e149dd135c0f31676824fa6327f94440e0cb99789281fe1&iterationId=164961&masterSmartpopId=0&quality=240p&ruleId=0&showModal=signup&smartpopId=5094&tag=girls%2Fchinese&userId=a857d671ed2ee3f67e327d7a3d55455ceef35f57922f8f8f71c52e413accec69&variationId=27486
200 OK 0 B URL HTTP/2 creative.xlirdr.com/widgets/Player?autoplay=all&autoplayForce=all&campaignId=b12dbba4a74f1f286b44c367348434fcb52005247fbe29388c0f42e2bb53542e&campaignType=smartpop&creativeId=9d1e7de94c9852b91e149dd135c0f31676824fa6327f94440e0cb99789281fe1&iterationId=164961&masterSmartpopId=0&quality=240p&ruleId=0&showModal=signup&smartpopId=5094&tag=girls%2Fchinese&userId=a857d671ed2ee3f67e327d7a3d55455ceef35f57922f8f8f71c52e413accec69&variationId=27486
IP
GET /widgets/Player?autoplay=all&autoplayForce=all&campaignId=b12dbba4a74f1f286b44c367348434fcb52005247fbe29388c0f42e2bb53542e&campaignType=smartpop&creativeId=9d1e7de94c9852b91e149dd135c0f31676824fa6327f94440e0cb99789281fe1&iterationId=164961&masterSmartpopId=0&quality=240p&ruleId=0&showModal=signup&smartpopId=5094&tag=girls%2Fchinese&userId=a857d671ed2ee3f67e327d7a3d55455ceef35f57922f8f8f71c52e413accec69&variationId=27486 HTTP/1.1
Host: creative.xlirdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www2.javhdporn.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:14 GMT
content-type: text/html
last-modified: Tue, 24 Jan 2023 03:06:30 GMT
expires: Sun, 29 Jan 2023 16:08:20 GMT
cache-control: max-age=10
strict-transport-security: max-age=15768000
pragma: public
report-to: { "endpoints":[{ "url": "https://go.stripchat.com/report" }], "group": "default", "max_age": 1048576 }
cf-cache-status: HIT
set-cookie: __cflb=0H28uukSkGJRy5UBr1XYMARUwdYFVsfkXgyy9V9o9b2; SameSite=None; Secure; path=/; expires=Mon, 30-Jan-23 15:08:14 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 791339b0ba0bb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
asg.phukienthoitranggiare.com/api/settings/259953
200 OK 0 B URL HTTP/2 asg.phukienthoitranggiare.com/api/settings/259953
IP
ASN #24940 Hetzner Online GmbH
GET /api/settings/259953 HTTP/1.1
Host: asg.phukienthoitranggiare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www2.javhdporn.net/
Origin: https://www2.javhdporn.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 16:08:13 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
static.javhdhello.com/h5/files/16578/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Fcfab7283-f490-492c-abe3-d751a999c748%3Fcv1%3D232bdec6-9fef-11ed-93df-e2e38133f3a0%26cv10%3D1%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D62e383b461d6e2197e222e81%26cv5%3D62e3800961d6e26273250a26%26cv6%3Den%26cv7%3DNTVB%26cv8%3DFirefox%26cv9%3D62e294ed61d6e24c01635c17%26externalId%3D232bdec6-9fef-11ed-93df-e2e38133f3a0%26p%3DeyJiIjoyNzg2MDIsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3NTk0fQ
200 OK 0 B URL HTTP/2 static.javhdhello.com/h5/files/16578/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Fcfab7283-f490-492c-abe3-d751a999c748%3Fcv1%3D232bdec6-9fef-11ed-93df-e2e38133f3a0%26cv10%3D1%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D62e383b461d6e2197e222e81%26cv5%3D62e3800961d6e26273250a26%26cv6%3Den%26cv7%3DNTVB%26cv8%3DFirefox%26cv9%3D62e294ed61d6e24c01635c17%26externalId%3D232bdec6-9fef-11ed-93df-e2e38133f3a0%26p%3DeyJiIjoyNzg2MDIsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3NTk0fQ
IP
ASN #60068 Datacamp Limited
GET /h5/files/16578/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Fcfab7283-f490-492c-abe3-d751a999c748%3Fcv1%3D232bdec6-9fef-11ed-93df-e2e38133f3a0%26cv10%3D1%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D62e383b461d6e2197e222e81%26cv5%3D62e3800961d6e26273250a26%26cv6%3Den%26cv7%3DNTVB%26cv8%3DFirefox%26cv9%3D62e294ed61d6e24c01635c17%26externalId%3D232bdec6-9fef-11ed-93df-e2e38133f3a0%26p%3DeyJiIjoyNzg2MDIsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3NTk0fQ HTTP/1.1
Host: static.javhdhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r.trackwilltrk.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:15 GMT
content-type: text/html
last-modified: Tue, 27 Dec 2022 14:32:39 GMT
etag: W/"63ab0207-ca0"
expires: Tue, 28 Feb 2023 16:08:15 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-accel-expires: @1677600495
server: CDN77-Turbo
x-77-nzt: AblMCRS42Qyh
x-77-nzt-ray: af585630ee11bbf9ef99d663a3899e2f
x-cache: MISS
x-77-pop: stockholmSE
x-77-cache: MISS
content-encoding: gzip
X-Firefox-Spdy: h2
static.javhdhello.com/h5/files/css/style.css
200 OK 0 B URL HTTP/2 static.javhdhello.com/h5/files/css/style.css
IP
ASN #60068 Datacamp Limited
GET /h5/files/css/style.css HTTP/1.1
Host: static.javhdhello.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.javhdhello.com/h5/files/16578/300x250.html?targetUrl=http%3A%2F%2Fr.trackwilltrk.com%2Fc1%2Fcfab7283-f490-492c-abe3-d751a999c748%3Fcv1%3D232bdec6-9fef-11ed-93df-e2e38133f3a0%26cv10%3D1%26cv2%3D0c1c5c30286e1db21a741e4b62c8b6e4%26cv3%3Ddesktop%26cv4%3D62e383b461d6e2197e222e81%26cv5%3D62e3800961d6e26273250a26%26cv6%3Den%26cv7%3DNTVB%26cv8%3DFirefox%26cv9%3D62e294ed61d6e24c01635c17%26externalId%3D232bdec6-9fef-11ed-93df-e2e38133f3a0%26p%3DeyJiIjoyNzg2MDIsImJoIjoyNTAsImJ3IjozMDAsImYiOjEsIm8iOjEsInAiOjEsInMiOjI3NTk0fQ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 16:08:15 GMT
content-type: text/css
last-modified: Wed, 25 May 2016 08:29:12 GMT
etag: W/"57456258-7bd"
expires: Tue, 23 May 2023 11:04:49 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-accel-expires: @1684839889
server: CDN77-Turbo
x-77-nzt: AblMCRQZRrr/ni9LAQ
x-77-nzt-ray: af585630ee11bbf9ef99d6637d11cd37
x-cache: HIT
x-age: 21704606
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
104.21.233.141
142.250.74.110
185.94.236.244
23.36.76.226
3.120.47.42
135.181.208.216
185.76.9.14