r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7786cd9bd97e024b3a1d16215defaad2
786ddbb74b0b6bd9270622dbe0258d6caee407c1
9c297ccfd178eec7e472fb64a6b2e34d4c7a6dec32870f49982353e590196ba0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C297CCFD178EEC7E472FB64A6B2E34D4C7A6DEC32870F49982353E590196BA0"
Last-Modified: Mon, 14 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11622
Expires: Tue, 15 Nov 2022 10:45:35 GMT
Date: Tue, 15 Nov 2022 07:31:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8c15cef160d1514fc977ed4c4e97086c
ffe4ce3199658a1fc7a45d1607df40ef3911621d
db1a82d8a2bacc0257b87efec0c365c1b769700fa27ce928321e082505f1d72a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DB1A82D8A2BACC0257B87EFEC0C365C1B769700FA27CE928321E082505F1D72A"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9943
Expires: Tue, 15 Nov 2022 10:17:36 GMT
Date: Tue, 15 Nov 2022 07:31:53 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: DWHB6ttGzU5kkqd2R9f1URoSLXmGbl1mie8Aoahhprxx/eOX1g7kQiXL9ClHchTBfyCrYeuVjgA=
x-amz-request-id: MC5662FEFRSDAY69
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 15 Nov 2022 06:51:27 GMT
age: 2426
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 832aecaba9f06ee2d39d4d4bea65f13c
7195d6ffadfdbc6fc8e92c63ae28d4a3038a72dc
a437509314a97065de6c7b9e5e2b4b61f0234b45f5f5bf2649cbdf499577bfd3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1759
Cache-Control: max-age=98923
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:53 GMT
Etag: "637218f5-1d7"
Expires: Wed, 16 Nov 2022 11:00:36 GMT
Last-Modified: Mon, 14 Nov 2022 10:31:17 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4736bac84ca28f2b1e961159fb4ea098
1319612979f53896fcfeacd4215c2715d4951e4c
5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 15 Nov 2022 06:44:23 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2851
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 07:31:54 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
av.xvideos-dl.top/v/s:/hanjukb.com/vodplay/1303744.shtml/title/%E6%AF%8D%E4%BA%B2%E7%9A%84%E6%83%85%E4%BA%BA3%E4%B8%AD%E5%9B%BD%E6%AF%9B%E7%89%87%E5%85%8D%E8%B4%B9%E5%85%A8%E9%83%A8%E5%85%8D%E8%B4%B9%E8%A7%82%E7%9C%8B-%E6%92%AD%E6%94%BE-%E7%B2%BE%E6%B1%A1%E8%A7%86%E9%A2%91%20[7:57x406p]
200 OK 8.4 kB URL HTTP/1.1 av.xvideos-dl.top/v/s:/hanjukb.com/vodplay/1303744.shtml/title/%E6%AF%8D%E4%BA%B2%E7%9A%84%E6%83%85%E4%BA%BA3%E4%B8%AD%E5%9B%BD%E6%AF%9B%E7%89%87%E5%85%8D%E8%B4%B9%E5%85%A8%E9%83%A8%E5%85%8D%E8%B4%B9%E8%A7%82%E7%9C%8B-%E6%92%AD%E6%94%BE-%E7%B2%BE%E6%B1%A1%E8%A7%86%E9%A2%91%20[7:57x406p]
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9181), with CRLF line terminators
Hash 9500940b9e135758187710bfd8f0e14b
08310246198a8a2a50a12ca8dd2ac4c75e303889
beb79eb3b7a3aaf389c4107d2ad3aca0159f68751d36dd42b8ae30d5c4772b2d
GET /v/s:/hanjukb.com/vodplay/1303744.shtml/title/%E6%AF%8D%E4%BA%B2%E7%9A%84%E6%83%85%E4%BA%BA3%E4%B8%AD%E5%9B%BD%E6%AF%9B%E7%89%87%E5%85%8D%E8%B4%B9%E5%85%A8%E9%83%A8%E5%85%8D%E8%B4%B9%E8%A7%82%E7%9C%8B-%E6%92%AD%E6%94%BE-%E7%B2%BE%E6%B1%A1%E8%A7%86%E9%A2%91%20[7:57x406p] HTTP/1.1
Host: av.xvideos-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 15 Nov 2022 07:31:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Host,Accept-Encoding
pdo-line8: host-av.xvideos-dl.top127.0.0.1-myhost-av.xvideos-dl.top127.0.0.1/v/s://hanjukb.com/vodplay/1303744.shtml/title/%E6%AF%8D%E4%BA%B2%E7%9A%84%E6%83%85%E4%BA%BA3%E4%B8%AD%E5%9B%BD%E6%AF%9B%E7%89%87%E5%85%8D%E8%B4%B9%E5%85%A8%E9%83%A8%E5%85%8D%E8%B4%B9%E8%A7%82%E7%9C%8B-%E6%92%AD%E6%94%BE-%E7%B2%BE%E6%B1%A1%E8%A7%86%E9%A2%91%20%5b7:56x406p
phost: av.xvideos-dl.top
line1066: notjp--myhost-av.xvideos-dl.top-filteron-
pdo106: feedvid-, cachefileb-cacpdo9/50/99/a01c37, lfm-1-174, lmd-174, lud-91988, xfvlen-1201236, fsize-117730, played-1
pdophp-line405: -; cachetime- 1195.1231163602; ctime- 20221013114435
pdoline1584: sarray-0cn
pdoline1647: notjp-: fvkwcnt-6791
pdoline1651: notjp-: fvkwcnt-6791
pdo-line1935: $i-41$load-0.7590625
Cache-Control: max-age=142361, public
genre: genre=
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Proxy-Cache-5950: HIT
Xkey-5950: av./v/s:/hanjukb.com/vodplay/1303744.shtml-AB-av.xvideos-dl.top-av.xvideos-dl.top-cacpdo0---yes
X-Proxy-Cache-g-jp: HIT
Xkey-g-jp: av./v/s:/hanjukb.com/vodplay/1303744.shtml-AB-av.xvideos-dl.top--my_zone
ocsp.digicert.com/
200 OK 278 B IP
Hash c4ac88d29c67f9467e1c71d71b4b5a72
e9b68734f1b0d04aba576c8a43f9e570659d4c4f
bab0bc13db70ce4fdbf7f8c0e2b97e1822153a2f76b36e9bae90ae2ff6e958d5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3655
Cache-Control: max-age=150142
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:54 GMT
Etag: "6372d9a1-116"
Expires: Thu, 17 Nov 2022 01:14:16 GMT
Last-Modified: Tue, 15 Nov 2022 00:13:21 GMT
Server: ECS (amb/6BAE)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash c4ac88d29c67f9467e1c71d71b4b5a72
e9b68734f1b0d04aba576c8a43f9e570659d4c4f
bab0bc13db70ce4fdbf7f8c0e2b97e1822153a2f76b36e9bae90ae2ff6e958d5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5587
Cache-Control: max-age=152073
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:54 GMT
Etag: "6372d9a1-116"
Expires: Thu, 17 Nov 2022 01:46:27 GMT
Last-Modified: Tue, 15 Nov 2022 00:13:21 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash c4ac88d29c67f9467e1c71d71b4b5a72
e9b68734f1b0d04aba576c8a43f9e570659d4c4f
bab0bc13db70ce4fdbf7f8c0e2b97e1822153a2f76b36e9bae90ae2ff6e958d5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3655
Cache-Control: max-age=150142
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:54 GMT
Etag: "6372d9a1-116"
Expires: Thu, 17 Nov 2022 01:14:16 GMT
Last-Modified: Tue, 15 Nov 2022 00:13:21 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 278
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Retry-After, ETag, Alert, Expires, Backoff, Content-Type, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 15 Nov 2022 06:44:48 GMT
cache-control: public,max-age=3600
age: 2826
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3200044057cb585f1a435c0efece61c8
8305d5b5891288aa9996b4b4ca6fce2265413194
df45704534a24928e7659a6d8cd1b5ac9ffa9b224b02b34a2d6aed5ef69fd586
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4493
Cache-Control: max-age=96600
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:54 GMT
Etag: "63720535-1d7"
Expires: Wed, 16 Nov 2022 10:21:54 GMT
Last-Modified: Mon, 14 Nov 2022 09:07:01 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
cacrip.nakadashi.pw/AV4.us.jpg
200 OK 8.7 kB URL HTTP/1.1 cacrip.nakadashi.pw/AV4.us.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 307x82, components 3\012- data
Hash edfe007a6e5b3d268b2528f564b60b43
1644c8ef97c871079e07e5079d613af5cb94052f
bf5bb657f5e788af0c02b9b437d3f15bec91e27175e5a654e3d431fb6d063390
GET /AV4.us.jpg HTTP/1.1
Host: cacrip.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:54 GMT
Content-Type: image/jpeg
Content-Length: 8741
Connection: keep-alive
etag: "2225-5499bcea176c0"
access-control-allow-origin: *
cache-control: public, max-age=360000
x-proxy-cacher9: HIT
xkeyr9: cacrip./AV4.us.jpg-A-cacrip.nakadashi.pw-cacrip.nakadashi.pw-my_zone
x-proxy-cache-la2: HIT
xkey-la2: cacrip./AV4.us.jpg-A-cacrip.nakadashi.pw--my_zone
CF-Cache-Status: HIT
Age: 267040
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vSyUwI3JiOANND%2BLSy55Er9FBhQdzGrjX5hMTrRpZlo6Dg4Z7zEB0OP2IEBJEPs%2BtiMpK3h5ddQ7giF1LWVsW2yhQIn4XxTDwTJeNddWV%2BhOan3Lmf02kfrQsBiBSyvwCeHtEv0M"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a3c4f9f4077-LHR
alt-svc: h2=":443"; ma=60
comments.gazo.space/comments/embed.js?37
200 OK 6.7 kB URL HTTP/1.1 comments.gazo.space/comments/embed.js?37
IP
File type ASCII text, with very long lines (14022)
Hash 352c889af2cf2163a866e7e381ae9252
dba161ee742e83c96891e1c3fa8e9a6ecd88ab55
aca3691a6709b371e3dedde66943ed3a1b9a8d2b67734123916d74c1a82e510c
GET /comments/embed.js?37 HTTP/1.1
Host: comments.gazo.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:54 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=360000
Cf-Bgj: minify
Cf-Polished: origSize=20813
ETag: W/"514d-5e998fd344edc"
X-Proxy-Cache-Rip: HIT
XkeyRip: jcomments./comments/embed.js?37-A-comments.gazo.space--my_zone-yes
CF-Cache-Status: HIT
Age: 209790
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a60LeiI9MvVcavhi7o84fTkEaJ8nlerYTAt%2BWmDNlUFZ3D5V5Vg3IOChDkFfz2oBnjpGhtAXV7X0u7mqX0rak0%2BdaauiP7DiKzCnXne1z1OlAviRDf1WDyNvsNmf0gosCqFej9Xu"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a3c7ff67785-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js
200 OK 4.0 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js
IP
File type ASCII text, with very long lines (10613)
Hash 9653b380e66b38af571efdafa5763f0d
835aa2c117b6b3156a3b439ec302ffa268466c55
3181b9ecf39cca87ae50e71c715a2accc9787ac8655edf1d0fc5195bd688b38f
GET /ajax/libs/nosleep/0.11.0/NoSleep.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:54 GMT
content-type: application/javascript; charset=utf-8
content-length: 3953
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5ed16b69-29bf"
last-modified: Fri, 29 May 2020 20:07:05 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 25252592
expires: Sun, 05 Nov 2023 07:31:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uuw0tubQIhU%2B1gFSPd3Oag%2FLnuk7xvLa7ZPjrS3NM4pv4VJHLGxK4PHjbykAFNBPEZgFWxjQjkYcUrqWSxjV0K43l8wJH%2FB3C0enLUvCw2HlwrbwSUVULNQBPAJPjaiuPx7RAdSk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76a64a3cbb2bb4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b2d6aeeb303eaefc4cc6900e30da3b1b
4c3c027013211aa1b987006d0eb6c72f18c6a657
f542eab7c032d6c5f59710ee8993a01537e0fa2bf3882a6a699de85bba020999
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jsjs.gazo.space/index.php?js=very
200 OK 67 kB URL HTTP/2 jsjs.gazo.space/index.php?js=very
IP
File type ASCII text, with no line terminators
Hash 36b7908c7e04a0765cd1b7b05b195249
b5b7a3de012e8c0969a3ea642dec8ad0e4e5bb4b
bd7a96c3e0874bf6b314c4cb5cea891bfc011629124acb61967873650f874047
Analyzer Verdict Alert fortinet Phishing
GET /index.php?js=very HTTP/1.1
Host: jsjs.gazo.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:54 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
access-control-allow-headers: Cake
imghost: 240026512804c008ad763d1c3-h-jsjsgazospacmh--NO-rm2400cb003761024ac4655da/index.php?js=very
55nloadrate: 0.4759375
cache-control: max-age=360000, private
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JopDZYKBF1raUdt3159ha0ZO08aNS%2BjJFHl0R2S8nbN0LBQO04OGiMrlBU3z3jgZWKgNDgWx8c9X8PzY5yLTbip0TyjAE0f9i2q8zKu2ccKqhkrWn3uDfO7Exy5b1lUB1sk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a390aca891e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1af800aa2b326e8af0f2640db68a7a0d
4c617814f5c705737bf4bf111c53bf40bb932af5
594f573b6e73b1d385ae75a518c18a0bb833ac4a3f894fcea377096c756f8cc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 0f83cadc148d2ad7e53c91f6c4ee05bb
90035c5fffedf4b0f099465f6b929a030b46c92b
3f59aa77bbbed7760a9968af27d3c19ffddda021c948edf0bf0c0f828dd308ae
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Nov 2022 15:30:11 GMT
expires: Fri, 10 Nov 2023 15:30:11 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 403304
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash e25888cd286218a3cf5f5aa564796f1a
42abdf6bfaa64a87ef5a64272be27567f25ed31c
d81cea8ded8615f9de6d4c1688a7db4eabb95f4bb13201afada936d02d35ec21
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:55 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "DD8DFCCDC6DCF97E58E3C6ACBD9529C454E51F54"
Expires: Tue, 15 Nov 2022 18:00:00 GMT
Last-Modified: Tue, 15 Nov 2022 06:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 313
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a3d1f2fb4f7-OSL
www.googletagmanager.com/gtag/js?id=UA-620120-3
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-620120-3
IP
File type ASCII text, with very long lines (1921)
Hash 8d149717377f3f8c08f339d796fd598d
3add5302db4f1ced2607ab22cb31f62310bb20e6
883f2e24d1e2e1cabef9ba10e66b23ce64b932f7d896aa6461eaf49d8bb42f74
GET /gtag/js?id=UA-620120-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 15 Nov 2022 07:31:55 GMT
expires: Tue, 15 Nov 2022 07:31:55 GMT
cache-control: private, max-age=900
last-modified: Tue, 15 Nov 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43649
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
js.gazo.space/mycss/av4.css?3
200 OK 1.3 kB URL HTTP/1.1 js.gazo.space/mycss/av4.css?3
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 91947d93b00450de35830a7838c75b9e
f3cbeac747d7aaef471fa96214247686a1e43369
50d14f8c12ee897ab7e0d5279f10b937a3d06911682c0a555922b769d407899a
GET /mycss/av4.css?3 HTTP/1.1
Host: js.gazo.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:55 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
etag: W/"f05-5cc0d86532b3f"
access-control-allow-origin: *
access-control-allow-headers: Cake
cache-control: public, max-age=3600000
x-proxy-cache-r9: MISS
xkeyr9: jjs./mycss/av4.css?3-A-js.gazo.space--my_zone
x-proxy-cache-rip: HIT
xkeyrip: jjs./mycss/av4.css?3-A-js.gazo.space--my_zone-no
x-proxy-cache-la2: HIT
xkey-la2: jjs./mycss/av4.css?3-A-js.gazo.space--my_zone
CF-Cache-Status: HIT
Age: 249021
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0eS4pzCM6p4cIfYcGUAaDY0Uf%2Fy46yKhdI4SDUqPuabcjX9c4EFfoczXAGPhO34CURGVpFdT4MqHTcRFgN%2FUEVFbSg%2BpvBu8rxdIqoDOiPo5pVjFAaeJZBOvsN9PMbXC"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a3ccc367697-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2316d2d43aee9525cdb65b3eb2ff53a0
cad4229071cf919cb3471632ac4924cfd1a97431
99d5cce0549dbb29351735d3e15f9cde16b2ca18c57581c8110b2c54998fa28d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1af800aa2b326e8af0f2640db68a7a0d
4c617814f5c705737bf4bf111c53bf40bb932af5
594f573b6e73b1d385ae75a518c18a0bb833ac4a3f894fcea377096c756f8cc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: xrL4RNNAj4VzTjouMWJ4uQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 3RECdjWTFOhUJi2Q4bHgpeK1i4M=
ocsp.digicert.com/
200 OK 278 B IP
Hash 08cb146fa2f70704e0dadbc7b6c23d79
69edfe0abff4c478447147804b7faaa1f56db20f
869957ff4ba2a9c2b1d590a53cec34fbbdbe0a97fa64abf99250cb41fbc0bc5b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 811
Cache-Control: max-age=113796
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:55 GMT
Etag: "637256c4-116"
Expires: Wed, 16 Nov 2022 15:08:31 GMT
Last-Modified: Mon, 14 Nov 2022 14:55:00 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 278
cdn.sc.gl/videojs-hotkeys/latest/videojs.hotkeys.min.js
200 OK 1.8 kB URL HTTP/1.1 cdn.sc.gl/videojs-hotkeys/latest/videojs.hotkeys.min.js
IP
File type ASCII text, with very long lines (4505)
Hash 62df3c3b9c50eb48c9bdf36e310babf2
1f69b85084ccd0348dcd55fba839be4f271a591d
883898451b3b4a6a893b54c87b71fe23df90be071936330b23eb2cd6c4f49274
GET /videojs-hotkeys/latest/videojs.hotkeys.min.js HTTP/1.1
Host: cdn.sc.gl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:55 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 28 Aug 2022 02:39:12 GMT
Access-Control-Allow-Origin: *
Cache-Control: max-age=86400
CF-Cache-Status: HIT
Age: 4539
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hdILT6W6XHvTAojggiy13FK1oWgbxpAc4QO2Nq%2Fe5ScZq00icYW4%2FrstNzhVeUqNj0lkzjsaOhD5qQLDquXHnEH9numY0lDbEIT9Q9ssaOGyAc6PGoplRQJ5c4U%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a3e89aab527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 27a1efe2e98d495d26c56f24edcff358
46f446c1e3e6663da53c712ad75b06e893eab6dc
4af1494cf202c43e51be90fa790f222d88427efeda6c293991f37b38a2c830e3
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:55 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 19 Nov 2022 05:03:43 GMT
ETag: "46f446c1e3e6663da53c712ad75b06e893eab6dc"
Last-Modified: Tue, 15 Nov 2022 05:03:44 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3153
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a3ee908b4f7-OSL
ocsp.digicert.com/
200 OK 279 B IP
Hash ccce1e6444b1f25e05c13254b45d3fd9
64743a3be6dbf65b3ccc035ca2753e4fa09d1e98
6a6302e113de8837fda8cffd641ca4b70917c74877e2b6cbdd75ca7827f67f25
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2938
Cache-Control: max-age=95415
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:55 GMT
Etag: "637206a8-117"
Expires: Wed, 16 Nov 2022 10:02:10 GMT
Last-Modified: Mon, 14 Nov 2022 09:13:12 GMT
Server: ECS (amb/6BC2)
X-Cache: HIT
Content-Length: 279
vjs.zencdn.net/7.8.2/video.js
200 OK 420 kB URL HTTP/2 vjs.zencdn.net/7.8.2/video.js
IP
File type ASCII text, with very long lines (320)
Size 420 kB (419634 bytes)
Hash 7dbd36f0fcc384a6409db98b80a76dcc
ec256a308360d2b696d874373430c495fdd5b313
33fe4721a551fd6335c11c42d75e828acf4d15dd49de3d93d761d260b5403d47
GET /7.8.2/video.js HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 26 May 2020 21:39:10 GMT
etag: "52c53a33bb2cd149f293eb14fb22505d"
cache-control: public, max-age=31536000
content-type: application/javascript; charset=utf-8
content-encoding: gzip
date: Tue, 15 Nov 2022 07:31:55 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 4
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 419634
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash ccce1e6444b1f25e05c13254b45d3fd9
64743a3be6dbf65b3ccc035ca2753e4fa09d1e98
6a6302e113de8837fda8cffd641ca4b70917c74877e2b6cbdd75ca7827f67f25
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2938
Cache-Control: max-age=95415
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:55 GMT
Etag: "637206a8-117"
Expires: Wed, 16 Nov 2022 10:02:10 GMT
Last-Modified: Mon, 14 Nov 2022 09:13:12 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
mc.yandex.ru/watch/48140495/1?wmode=7&page-url=http%3A%2F%2Fav.xvideos-dl.top%2Fv%2Fs%3A%2Fhanjukb.com%2Fvodplay%2F1303744.shtml%2Ftitle%2F%25E6%25AF%258D%25E4%25BA%25B2%25E7%259A%2584%25E6%2583%2585%25E4%25BA%25BA3%25E4%25B8%25AD%25E5%259B%25BD%25E6%25AF%259B%25E7%2589%2587%25E5%2585%258D%25E8%25B4%25B9%25E5%2585%25A8%25E9%2583%25A8%25E5%2585%258D%25E8%25B4%25B9%25E8%25A7%2582%25E7%259C%258B-%25E6%2592%25AD%25E6%2594%25BE-%25E7%25B2%25BE%25E6%25B1%25A1%25E8%25A7%2586%25E9%25A2%2591%2520%5B7%3A57x406p%5D&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A12kwz5rkew6t6vin1zpu5w%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A596490328882%3Ahid%3A544744361%3Az%3A0%3Ai%3A20221115073155%3Aet%3A1668497515%3Ac%3A1%3Arn%3A415571806%3Arqn%3A1%3Au%3A1668497515857212711%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A99%2C257%2C263%2C8%2C-9%2C0%2C%2C%2C%2C%2C%2C%2C%3Ans%3A1668497513362%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668497515%3At%3A%E6%AF%8D%E4%BA%B2%E7%9A%84%E6%83%85%E4%BA%BA3%E4%B8%AD%E5%9B%BD%E6%AF%9B%E7%89%87%E5%85%8D%E8%B4%B9%E5%85%A8%E9%83%A8%E5%85%8D%E8%B4%B9%E8%A7%82%E7%9C%8B-%E6%92%AD%E6%94%BE-%E7%B2%BE%E6%B1%A1%E8%A7%86%E9%A2%91&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/48140495/1?wmode=7&page-url=http%3A%2F%2Fav.xvideos-dl.top%2Fv%2Fs%3A%2Fhanjukb.com%2Fvodplay%2F1303744.shtml%2Ftitle%2F%25E6%25AF%258D%25E4%25BA%25B2%25E7%259A%2584%25E6%2583%2585%25E4%25BA%25BA3%25E4%25B8%25AD%25E5%259B%25BD%25E6%25AF%259B%25E7%2589%2587%25E5%2585%258D%25E8%25B4%25B9%25E5%2585%25A8%25E9%2583%25A8%25E5%2585%258D%25E8%25B4%25B9%25E8%25A7%2582%25E7%259C%258B-%25E6%2592%25AD%25E6%2594%25BE-%25E7%25B2%25BE%25E6%25B1%25A1%25E8%25A7%2586%25E9%25A2%2591%2520%5B7%3A57x406p%5D&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A12kwz5rkew6t6vin1zpu5w%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A596490328882%3Ahid%3A544744361%3Az%3A0%3Ai%3A20221115073155%3Aet%3A1668497515%3Ac%3A1%3Arn%3A415571806%3Arqn%3A1%3Au%3A1668497515857212711%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A99%2C257%2C263%2C8%2C-9%2C0%2C%2C%2C%2C%2C%2C%2C%3Ans%3A1668497513362%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668497515%3At%3A%E6%AF%8D%E4%BA%B2%E7%9A%84%E6%83%85%E4%BA%BA3%E4%B8%AD%E5%9B%BD%E6%AF%9B%E7%89%87%E5%85%8D%E8%B4%B9%E5%85%A8%E9%83%A8%E5%85%8D%E8%B4%B9%E8%A7%82%E7%9C%8B-%E6%92%AD%E6%94%BE-%E7%B2%BE%E6%B1%A1%E8%A7%86%E9%A2%91&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 304b5a3fb24333dff7ee38577d528127
57da6787b41b7255d0ac7ea454938afa84ddaafd
893e8d4290e76fbaed62748bca592599973c73523923131f3b07dbff13d348f0
GET /watch/48140495/1?wmode=7&page-url=http%3A%2F%2Fav.xvideos-dl.top%2Fv%2Fs%3A%2Fhanjukb.com%2Fvodplay%2F1303744.shtml%2Ftitle%2F%25E6%25AF%258D%25E4%25BA%25B2%25E7%259A%2584%25E6%2583%2585%25E4%25BA%25BA3%25E4%25B8%25AD%25E5%259B%25BD%25E6%25AF%259B%25E7%2589%2587%25E5%2585%258D%25E8%25B4%25B9%25E5%2585%25A8%25E9%2583%25A8%25E5%2585%258D%25E8%25B4%25B9%25E8%25A7%2582%25E7%259C%258B-%25E6%2592%25AD%25E6%2594%25BE-%25E7%25B2%25BE%25E6%25B1%25A1%25E8%25A7%2586%25E9%25A2%2591%2520%5B7%3A57x406p%5D&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A12kwz5rkew6t6vin1zpu5w%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A596490328882%3Ahid%3A544744361%3Az%3A0%3Ai%3A20221115073155%3Aet%3A1668497515%3Ac%3A1%3Arn%3A415571806%3Arqn%3A1%3Au%3A1668497515857212711%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A99%2C257%2C263%2C8%2C-9%2C0%2C%2C%2C%2C%2C%2C%2C%3Ans%3A1668497513362%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668497515%3At%3A%E6%AF%8D%E4%BA%B2%E7%9A%84%E6%83%85%E4%BA%BA3%E4%B8%AD%E5%9B%BD%E6%AF%9B%E7%89%87%E5%85%8D%E8%B4%B9%E5%85%A8%E9%83%A8%E5%85%8D%E8%B4%B9%E8%A7%82%E7%9C%8B-%E6%92%AD%E6%94%BE-%E7%B2%BE%E6%B1%A1%E8%A7%86%E9%A2%91&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Referer: http://av.xvideos-dl.top/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Tue, 15 Nov 2022 07:31:55 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://av.xvideos-dl.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 15-Nov-2022 07:31:55 GMT
last-modified: Tue, 15-Nov-2022 07:31:55 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
page.myfile-host.info/myda.php
200 OK 0 B URL HTTP/1.1 page.myfile-host.info/myda.php
IP
ASN #7506 GMO Internet,Inc
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /myda.php HTTP/1.1
Host: page.myfile-host.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:56 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/7.4.20
X-Powered-By: PHP/7.4.20
Access-Control-Allow-Origin: *
Content-Length: 0
Connection: close
Content-Type: text/html; charset=utf-8
av.xvideos-dl.top//cacrip.nakadashi.pw/AV4.us.jpg
200 OK 2.4 kB URL HTTP/1.1 av.xvideos-dl.top//cacrip.nakadashi.pw/AV4.us.jpg
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1346), with CRLF, LF line terminators
Hash 1c7669efac7cd51e36a264fc5443b22a
f0f79babc33e2daf40359b4bff86762dbdff9bc8
8ba745a84f18fea9b9b3522594ea24ee2e2e638b43139977fb62e6eca1a2a831
GET //cacrip.nakadashi.pw/AV4.us.jpg HTTP/1.1
Host: av.xvideos-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 15 Nov 2022 07:31:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Host,Accept-Encoding
pdo-line8: host-av.xvideos-dl.top127.0.0.1-myhost-av.xvideos-dl.top127.0.0.1//cacrip.nakadashi.pw/AV4.us.jpg
phost: av.xvideos-dl.top
line1066: notjp--myhost-av.xvideos-dl.top-filteron-
line2430: notjp-//cacrip.nakadashi.pw/AV4.us.jpg-myhost-av.xvideos-dl.top-filteron-
Cache-Control: max-age=6260, public
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Proxy-Cache-5950: HIT
Xkey-5950: av.//cacrip.nakadashi.pw/AV4.us.jpg-A-av.xvideos-dl.top-av.xvideos-dl.top-cacpdo0---yes
X-Proxy-Cache-g-jp: HIT
Xkey-g-jp: av.//cacrip.nakadashi.pw/AV4.us.jpg-A-av.xvideos-dl.top--my_zone
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2563
Expires: Tue, 15 Nov 2022 08:14:39 GMT
Date: Tue, 15 Nov 2022 07:31:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2563
Expires: Tue, 15 Nov 2022 08:14:39 GMT
Date: Tue, 15 Nov 2022 07:31:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2563
Expires: Tue, 15 Nov 2022 08:14:39 GMT
Date: Tue, 15 Nov 2022 07:31:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2563
Expires: Tue, 15 Nov 2022 08:14:39 GMT
Date: Tue, 15 Nov 2022 07:31:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2563
Expires: Tue, 15 Nov 2022 08:14:39 GMT
Date: Tue, 15 Nov 2022 07:31:56 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b1ce583-5604-4223-b88e-880659fdc0e7.jpeg
200 OK 35 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b1ce583-5604-4223-b88e-880659fdc0e7.jpeg
IP
Hash 3b756000890178e3872cc25e3e18f70d
7d8e00fa24be85c7ae469088024bcb1ca28ff42b
32ddcbcb1db3ee619353a7637dae8d34f24ebfca7b18be126c681e96306c12cd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b1ce583-5604-4223-b88e-880659fdc0e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8025
x-amzn-requestid: c876c502-bde1-4c03-a946-7af2117240ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bg3EUF0foAMFfyA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63703881-0594a8076fb64f570f824ad1;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 00:21:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: eWpoQ8Bkfez0fw2HBZVlPIWIrtjeS6i6V-Dn0NthrKeeDYQEYq62kQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 21:49:06 GMT
etag: "1651325ad361d1c86a4b81edb6b75af27f490a39"
content-type: image/jpeg
age: 34970
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c3081d3-ef42-45da-adea-67bbc90bf9a6.jpeg
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c3081d3-ef42-45da-adea-67bbc90bf9a6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b18dc101656c2e449e5f54ff7b7fb10b
d5ba3b6a069a74b5db3560a265728e627f6fe18d
53a73577e37651a936a5841fe06e40475e06ce6fa9e14fc0590ddc7aba421dd2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c3081d3-ef42-45da-adea-67bbc90bf9a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4394
x-amzn-requestid: fd389a5e-b816-4bd8-a073-2f52fea5bfab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bnEhtFfnIAMF1rQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6372b471-133a3285137912af436daffd;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 21:34:41 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 6i-blK0B05DT_CvizlmYpcDTpDV8IZLOIrukIQPW6FISAuXa1T0FdQ==
via: 1.1 34c44cb7892e57a3b6c51812bcf68ee4.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 21:45:53 GMT
age: 35163
etag: "d5ba3b6a069a74b5db3560a265728e627f6fe18d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 032386e5c9dffff1ba1ee5e8a322d438
dd4fd6c803a9b333bace9a541c6bd183d0c56bb9
0e9f559a0aa7e114c5810a27ba243c0da7b44dc0bf7aec2b7ab32b8f0e2b536c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11667
x-amzn-requestid: 4778d1bd-28c3-4665-89da-046e356087f0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyD1HE-oAMF0QQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163b1-53c7330c5fd36d3c4d9e6aed;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:37:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CHi9V7-WaWmG6Y0249CZJnhe_RjvleaGFVXoOnJ62cjrcXoLLKwzgw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 00:41:48 GMT
age: 24608
etag: "dd4fd6c803a9b333bace9a541c6bd183d0c56bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd744cf1f-bbfc-4306-bf3d-5e1e6b8b1c90.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd744cf1f-bbfc-4306-bf3d-5e1e6b8b1c90.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash edc9d97a2396dfc326736cb9b2b3b474
2c5a98ad27133575ef4fa48a8ff379ee5ad51490
a89e1e9a13b72b0a826ed77a71ec92ac5548a996f6c17b11a4c002480a429333
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd744cf1f-bbfc-4306-bf3d-5e1e6b8b1c90.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7873
x-amzn-requestid: 4a968a3c-c6ca-4d18-83b4-6a1d42e85fee
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bef9SFIMoAMFYuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636f46bb-2cd01e7d191b3eda7d743866;Sampled=0
x-amzn-remapped-date: Sat, 12 Nov 2022 07:09:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jjir5UM8aqq3T3akiZx_aAcsWL5GDKBnaPA_cDlM2e9Ce6oi-wGEQA==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 08:21:23 GMT
age: 83433
etag: "2c5a98ad27133575ef4fa48a8ff379ee5ad51490"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07797f-dd0a-4d91-86dd-362bcde1053e.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07797f-dd0a-4d91-86dd-362bcde1053e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14d5eaa5fe940564f077ca611f6e3fbe
032b8bfc63294a55ff49ee7186768bd9728ce103
7bed85f8f78ba7e1fad560d0ea311a65bff33aaf5f3226bef392ddc10f52d620
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07797f-dd0a-4d91-86dd-362bcde1053e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12942
x-amzn-requestid: fd589c13-7784-4e3a-b928-908fd2b8f98a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bd8hgHQvIAMFmfQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636f0e09-29db9a7832efa131593951f2;Sampled=0
x-amzn-remapped-date: Sat, 12 Nov 2022 03:07:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: f-hb5cPg2rs4xJls_0z3RbITwQlh__E1X7YkHZeISA2jOm3MX0CKrA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 07:49:47 GMT
age: 85329
etag: "032b8bfc63294a55ff49ee7186768bd9728ce103"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd11e6547-de5b-41d6-a923-9194b88afaba.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd11e6547-de5b-41d6-a923-9194b88afaba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b891dd714ee24b92f59f0697dd45c2b4
8b54f502df3eb318b87ff8a3313007876752e181
d50396bc97a46452ed3af30dbfffc9fe75cf7d4ec347c0a8460d99a6affd1fb2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd11e6547-de5b-41d6-a923-9194b88afaba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5856
x-amzn-requestid: 5261109d-ca5e-4b77-b0a2-17b634a51fd8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bhPtpFvRoAMFfZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63705ff0-570bdfbd329fe34b47d8c7a4;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 03:09:36 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8XeCtd88wwfynTV2w67E7r__KCAAIAsfv7sg67o_HSehIsIBae_SkQ==
via: 1.1 ba55932f4947672586f0865cea81e028.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 04:01:21 GMT
age: 12635
etag: "8b54f502df3eb318b87ff8a3313007876752e181"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
xvideosporno.blog.br/wp-content/uploads/enche-minha-bucetinha-de-porra.jpg
200 OK 49 kB URL HTTP/2 xvideosporno.blog.br/wp-content/uploads/enche-minha-bucetinha-de-porra.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8f4be3be424c430efcec8175b3e12a6c
928bae7b98965a4c38231f7a20822b090523c867
b4e61d597763fd9f05f36efdf33f3fe8160d87c30d8012af4bad368de2f6efff
GET /wp-content/uploads/enche-minha-bucetinha-de-porra.jpg HTTP/1.1
Host: xvideosporno.blog.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:56 GMT
content-type: image/webp
content-length: 49232
access-control-allow-headers: Range
access-control-allow-origin: *
access-control-expose-headers: Content-Length
access-control-max-age: 3600
age: 312531
cache-control: max-age=315360000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=87879
content-disposition: inline; filename="enche-minha-bucetinha-de-porra.webp"
etag: "5f60da8e-15747"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Tue, 15 Sep 2020 15:15:26 GMT
vary: Accept
x-cache: MISS
x-cache-hits: 0
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yC092%2FpdCBVuOn1Q8e36TIbhlIGNggVX%2FvaOPDpwga6OydOYdUyU8%2FAq47xKFkd1xjNWwa6rb0ZlZlo7micGhImypQZ1d17jHJpKJSTs8XZIatZqYEC2Aer8j5PZ0FKwPggTJK2b"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a45cfc20b31-OSL
X-Firefox-Spdy: h2
broimg.net/images/2234/665/207/_601019c0e396e.jpeg
200 OK 22 kB URL HTTP/2 broimg.net/images/2234/665/207/_601019c0e396e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 500x322, components 3\012- data
Hash a73e83f604eaa7e2ff86e7b814b092cc
9c0b536df11a00475132c10d1e46719d240e2e1f
2458d213fafdce350d0cc30d9875e284b2e3525a71637dd7619927f6844d4647
GET /images/2234/665/207/_601019c0e396e.jpeg HTTP/1.1
Host: broimg.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:56 GMT
content-type: image/jpeg
content-length: 21698
last-modified: Tue, 26 Jan 2021 13:31:44 GMT
etag: "601019c0-54c2"
expires: Tue, 29 Nov 2022 07:09:59 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 1383717
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ODgO80ZulM5fvlp%2B5m7DIoA46bnEyD8OLKvvMDv28D%2FX8WHGOglHtqk05e1yv6NJomuVbXyBiG06oX9jzBBN427fojWgQkL%2FyZqPcXDUiBorU6MxDlM8LNd0IZK7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a45e89b0b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
moav.com/contents/videos_screenshots/19000/19597/preview.jpg
200 OK 43 kB URL HTTP/2 moav.com/contents/videos_screenshots/19000/19597/preview.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc59.20.100", baseline, precision 8, 610x1080, components 3\012- data
Hash 682852b6859b3d38e63f7be99361df77
c8f25d8d14112f88e337e5de3550ba9700abfc08
011c9e1580d229d0d0aac4c4ce70d0278363e731938f39aa060508b0cf98c96f
GET /contents/videos_screenshots/19000/19597/preview.jpg HTTP/1.1
Host: moav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:56 GMT
content-type: image/jpeg
content-length: 43360
last-modified: Fri, 25 Mar 2022 14:31:01 GMT
etag: "623dd225-a960"
expires: Mon, 28 Nov 2022 17:36:08 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 1432547
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AMBCo%2FMPR0xGFiAKZjQCyVcPyJ4%2BdfWKfWLd6wRzl3baOG36jcWu02aeORQkpXLLTJzR6URvMsPPWrTZEM4FWXtTX19tJE97tcNcm2jNNIQ4MU%2F%2FOMmheh0ipQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a4609c3747c-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
av.oppai.icu/poster/http://www.aipa570.com/uploads/2021/04/14/-%E9%AB%98%E6%B8%85%E5%8E%9F%E7%89%88%E6%97%A0%E6%B0%B4%E5%8D%B0%E3%80%90%E5%AE%A3%E4%BC%A0%E5%9B%BE%E3%80%91%20(5).jpg
302 Found 0 B URL HTTP/1.1 av.oppai.icu/poster/http://www.aipa570.com/uploads/2021/04/14/-%E9%AB%98%E6%B8%85%E5%8E%9F%E7%89%88%E6%97%A0%E6%B0%B4%E5%8D%B0%E3%80%90%E5%AE%A3%E4%BC%A0%E5%9B%BE%E3%80%91%20(5).jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /poster/http://www.aipa570.com/uploads/2021/04/14/-%E9%AB%98%E6%B8%85%E5%8E%9F%E7%89%88%E6%97%A0%E6%B0%B4%E5%8D%B0%E3%80%90%E5%AE%A3%E4%BC%A0%E5%9B%BE%E3%80%91%20(5).jpg HTTP/1.1
Host: av.oppai.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 302 Found
Date: Tue, 15 Nov 2022 07:31:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Host,Accept-Encoding
pdo-line8: host-av.oppai.icu127.0.0.1-myhost-127.0.0.1/poster/http://www.aipa570.com/uploads/2021/04/14/-%E9%AB%98%E6%B8%85%E5%8E%9F%E7%89%88%E6%97%A0%E6%B0%B4%E5%8D%B0%E3%80%90%E5%AE%A3%E4%BC%A0%E5%9B%BE%E3%80%91%20(5).jpg
phost: av.oppai.icu
line1066: notjp--myhost--filteron-
Cache-Control: public, max-age=36000000
Location: http://www.aipa570.com/uploads/2021/04/14/-%E9%AB%98%E6%B8%85%E5%8E%9F%E7%89%88%E6%97%A0%E6%B0%B4%E5%8D%B0%E3%80%90%E5%AE%A3%E4%BC%A0%E5%9B%BE%E3%80%91%20(5).jpg
Access-Control-Allow-Origin: *
X-Proxy-Cache-5950: HIT
Xkey-5950: av.oppai.icu/poster/http://www.aipa570.com/uploads/2021/04/14/-%E9%AB%98%E6%B8%85%E5%8E%9F%E7%89%88%E6%97%A0%E6%B0%B4%E5%8D%B0%E3%80%90%E5%AE%A3%E4%BC%A0%E5%9B%BE%E3%80%91%20(5).jpg--av.oppai.icu--cacpdo0---yes
X-Proxy-Cache-g-jp: HIT
Xkey-g-jp: av.oppai.icu/poster/http://www.aipa570.com/uploads/2021/04/14/-%E9%AB%98%E6%B8%85%E5%8E%9F%E7%89%88%E6%97%A0%E6%B0%B4%E5%8D%B0%E3%80%90%E5%AE%A3%E4%BC%A0%E5%9B%BE%E3%80%91%20(5).jpg--av.oppai.icu--my_zone
CF-Cache-Status: HIT
Age: 13646203
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NYKe9AjC8L3MOJBc1k6kYJ224ihQq2p0beMN0fymL8gptqQFTm%2FPFx1MFfk9NS3%2FTdPsAe2tpXRpBrWkPmnk3I2bV3L8CK%2BrlRlghaPQuN1%2FfktnyGQZVFY%2BsgklQiI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76a64a465de3b4f3-OSL
alt-svc: h2=":443"; ma=60
cdne-pics.youjizz.com/7/f/0/a/c/7f0acf83e1154837a11eb9aac00a3cee1577180163-944.jpg
200 OK 23 kB URL HTTP/1.1 cdne-pics.youjizz.com/7/f/0/a/c/7f0acf83e1154837a11eb9aac00a3cee1577180163-944.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 928x693, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 308x232, components 3\012- data
Hash 4ef24a6b81ff7d704f03f6f32e81f09c
2501a903bff574fd690e509825a73736d2a05dae
2d5a00bc4daefac688e6075c1f906ea5efcbbe895c74f8d6f9bf4e4ad408b339
GET /7/f/0/a/c/7f0acf83e1154837a11eb9aac00a3cee1577180163-944.jpg HTTP/1.1
Host: cdne-pics.youjizz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 200 OK
date: Tue, 15 Nov 2022 07:31:56 GMT
Content-Type: image/jpeg
Content-Length: 22674
last-modified: Sun, 23 Feb 2020 15:37:53 GMT
etag: "5892-59f4009c1e212"
expires: Sun, 30 Oct 2022 17:53:56 GMT
cache-control: max-age=10576535
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
timing-allow-origin: *
access-control-expose-headers: Content-Length
Accept-Ranges: bytes
x-cdn-diag: ams5-6140-2-38268-h-0-0---;7846-23-28522----0-0-0
av.xvideos-dl.top/4
200 OK 21 kB IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (48086), with CRLF line terminators
Hash 2e73063a112c794a4f1d28bc57564576
198bea6d13efeac0ff050a57bec94b729d34f9a4
c9782a50cb611e15b80cc59368c43f3a9556a2ca63aa9a81340ddd34049f2675
GET /4 HTTP/1.1
Host: av.xvideos-dl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/v/s:/hanjukb.com/vodplay/1303744.shtml/title/%E6%AF%8D%E4%BA%B2%E7%9A%84%E6%83%85%E4%BA%BA3%E4%B8%AD%E5%9B%BD%E6%AF%9B%E7%89%87%E5%85%8D%E8%B4%B9%E5%85%A8%E9%83%A8%E5%85%8D%E8%B4%B9%E8%A7%82%E7%9C%8B-%E6%92%AD%E6%94%BE-%E7%B2%BE%E6%B1%A1%E8%A7%86%E9%A2%91%20[7:57x406p]
Cookie: _ym_uid=1668497515857212711; _ym_d=1668497515; myda=yes; cnt=0
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 15 Nov 2022 07:31:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Host,Accept-Encoding
pdo-line8: host-av.xvideos-dl.top127.0.0.1-myhost-av.xvideos-dl.top127.0.0.1/4
phost: av.xvideos-dl.top
line1066: notjp--myhost-av.xvideos-dl.top-filteron-
line2430: notjp-/4-myhost-av.xvideos-dl.top-filteron-
line2504:
line2538: -
xline: 2594host-83050
Cache-Control: max-age=60, public
Content-Encoding: gzip
Access-Control-Allow-Origin: *
X-Proxy-Cache-5950: EXPIRED
Xkey-5950: av./4-A-av.xvideos-dl.top-av.xvideos-dl.top-cacpdo0---yes
X-Proxy-Cache-g-jp: EXPIRED
Xkey-g-jp: av./4-A-av.xvideos-dl.top--my_zone
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0a2e127e9c788dbe6aecdce816e005a7
f18e2030ff2ae7b3961ce6c2c569ff85380ccfde
5b2bb11b914a19db182d68defda9655d6cdc8e3caf4f69acea4797be612390c5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5B2BB11B914A19DB182D68DEFDA9655D6CDC8E3CAF4F69ACEA4797BE612390C5"
Last-Modified: Mon, 14 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3837
Expires: Tue, 15 Nov 2022 08:35:53 GMT
Date: Tue, 15 Nov 2022 07:31:56 GMT
Connection: keep-alive
vidcdn.123rf.com/450nwm/maxximmm/maxximmm1709/maxximmm170900291.jpg
200 OK 16 kB URL HTTP/2 vidcdn.123rf.com/450nwm/maxximmm/maxximmm1709/maxximmm170900291.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc58.18.100", baseline, precision 8, 450x252, components 3\012- data
Hash fff127d7b71dbfd72c2d115573c54f6d
1f082edf6ae2ac3e38f963f25f4171c4e8b7a082
be43827171306a2cceaeb92c8a4941f4045a83b01ec7f1ceadf96bfc40953b4d
GET /450nwm/maxximmm/maxximmm1709/maxximmm170900291.jpg HTTP/1.1
Host: vidcdn.123rf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 16038
x-amz-id-2: 962HpGMAXUo7A4iBe1U8zYH4Qu0/H2KsTL+PGBSK1Mhic1QWd6eLSTO5blV/BvL8eB7JkaBmIOI=
x-amz-request-id: YDEED3KPFRBGJ0AD
date: Wed, 26 Oct 2022 06:20:13 GMT
last-modified: Fri, 26 Apr 2019 13:01:13 GMT
etag: "fff127d7b71dbfd72c2d115573c54f6d"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sivRNUKIzOjs09SSQeXtFUOLJyAY0dHqkjeXyEVh655wDXZ5-23NSw==
age: 1732304
X-Firefox-Spdy: h2
mc.yandex.ru/watch/48140495?wmode=7&page-url=http%3A%2F%2Fav.xvideos-dl.top%2Fv%2Fs%3A%2Fhanjukb.com%2Fvodplay%2F1303744.shtml%2Ftitle%2F%25E6%25AF%258D%25E4%25BA%25B2%25E7%259A%2584%25E6%2583%2585%25E4%25BA%25BA3%25E4%25B8%25AD%25E5%259B%25BD%25E6%25AF%259B%25E7%2589%2587%25E5%2585%258D%25E8%25B4%25B9%25E5%2585%25A8%25E9%2583%25A8%25E5%2585%258D%25E8%25B4%25B9%25E8%25A7%2582%25E7%259C%258B-%25E6%2592%25AD%25E6%2594%25BE-%25E7%25B2%25BE%25E6%25B1%25A1%25E8%25A7%2586%25E9%25A2%2591%2520%5B7%3A57x406p%5D&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A12kwz5rkew6t6vin1zpu5w%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A596490328882%3Ahid%3A544744361%3Az%3A0%3Ai%3A20221115073155%3Aet%3A1668497515%3Ac%3A1%3Arn%3A415571806%3Arqn%3A1%3Au%3A1668497515857212711%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A99%2C257%2C263%2C8%2C-9%2C0%2C%2C%2C%2C%2C%2C%2C%3Ans%3A1668497513362%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668497515%3At%3A%E6%AF%8D%E4%BA%B2%E7%9A%84%E6%83%85%E4%BA%BA3%E4%B8%AD%E5%9B%BD%E6%AF%9B%E7%89%87%E5%85%8D%E8%B4%B9%E5%85%A8%E9%83%A8%E5%85%8D%E8%B4%B9%E8%A7%82%E7%9C%8B-%E6%92%AD%E6%94%BE-%E7%B2%BE%E6%B1%A1%E8%A7%86%E9%A2%91&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
302 Found 280 B URL HTTP/2 mc.yandex.ru/watch/48140495?wmode=7&page-url=http%3A%2F%2Fav.xvideos-dl.top%2Fv%2Fs%3A%2Fhanjukb.com%2Fvodplay%2F1303744.shtml%2Ftitle%2F%25E6%25AF%258D%25E4%25BA%25B2%25E7%259A%2584%25E6%2583%2585%25E4%25BA%25BA3%25E4%25B8%25AD%25E5%259B%25BD%25E6%25AF%259B%25E7%2589%2587%25E5%2585%258D%25E8%25B4%25B9%25E5%2585%25A8%25E9%2583%25A8%25E5%2585%258D%25E8%25B4%25B9%25E8%25A7%2582%25E7%259C%258B-%25E6%2592%25AD%25E6%2594%25BE-%25E7%25B2%25BE%25E6%25B1%25A1%25E8%25A7%2586%25E9%25A2%2591%2520%5B7%3A57x406p%5D&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A12kwz5rkew6t6vin1zpu5w%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A596490328882%3Ahid%3A544744361%3Az%3A0%3Ai%3A20221115073155%3Aet%3A1668497515%3Ac%3A1%3Arn%3A415571806%3Arqn%3A1%3Au%3A1668497515857212711%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A99%2C257%2C263%2C8%2C-9%2C0%2C%2C%2C%2C%2C%2C%2C%3Ans%3A1668497513362%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668497515%3At%3A%E6%AF%8D%E4%BA%B2%E7%9A%84%E6%83%85%E4%BA%BA3%E4%B8%AD%E5%9B%BD%E6%AF%9B%E7%89%87%E5%85%8D%E8%B4%B9%E5%85%A8%E9%83%A8%E5%85%8D%E8%B4%B9%E8%A7%82%E7%9C%8B-%E6%92%AD%E6%94%BE-%E7%B2%BE%E6%B1%A1%E8%A7%86%E9%A2%91&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP
Hash 94fb2c275ab163efd833de44e866ba94
7d169ce609f7ae0df936d0c5fde07660ef8a067d
80b72a2bdb80473743d3052691455f7d8b7d05aa1f898fe2aeab279a2f94f078
GET /watch/48140495?wmode=7&page-url=http%3A%2F%2Fav.xvideos-dl.top%2Fv%2Fs%3A%2Fhanjukb.com%2Fvodplay%2F1303744.shtml%2Ftitle%2F%25E6%25AF%258D%25E4%25BA%25B2%25E7%259A%2584%25E6%2583%2585%25E4%25BA%25BA3%25E4%25B8%25AD%25E5%259B%25BD%25E6%25AF%259B%25E7%2589%2587%25E5%2585%258D%25E8%25B4%25B9%25E5%2585%25A8%25E9%2583%25A8%25E5%2585%258D%25E8%25B4%25B9%25E8%25A7%2582%25E7%259C%258B-%25E6%2592%25AD%25E6%2594%25BE-%25E7%25B2%25BE%25E6%25B1%25A1%25E8%25A7%2586%25E9%25A2%2591%2520%5B7%3A57x406p%5D&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A12kwz5rkew6t6vin1zpu5w%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A596490328882%3Ahid%3A544744361%3Az%3A0%3Ai%3A20221115073155%3Aet%3A1668497515%3Ac%3A1%3Arn%3A415571806%3Arqn%3A1%3Au%3A1668497515857212711%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A99%2C257%2C263%2C8%2C-9%2C0%2C%2C%2C%2C%2C%2C%2C%3Ans%3A1668497513362%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668497515%3At%3A%E6%AF%8D%E4%BA%B2%E7%9A%84%E6%83%85%E4%BA%BA3%E4%B8%AD%E5%9B%BD%E6%AF%9B%E7%89%87%E5%85%8D%E8%B4%B9%E5%85%A8%E9%83%A8%E5%85%8D%E8%B4%B9%E8%A7%82%E7%9C%8B-%E6%92%AD%E6%94%BE-%E7%B2%BE%E6%B1%A1%E8%A7%86%E9%A2%91&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/48140495/1?wmode=7&page-url=http%3A%2F%2Fav.xvideos-dl.top%2Fv%2Fs%3A%2Fhanjukb.com%2Fvodplay%2F1303744.shtml%2Ftitle%2F%25E6%25AF%258D%25E4%25BA%25B2%25E7%259A%2584%25E6%2583%2585%25E4%25BA%25BA3%25E4%25B8%25AD%25E5%259B%25BD%25E6%25AF%259B%25E7%2589%2587%25E5%2585%258D%25E8%25B4%25B9%25E5%2585%25A8%25E9%2583%25A8%25E5%2585%258D%25E8%25B4%25B9%25E8%25A7%2582%25E7%259C%258B-%25E6%2592%25AD%25E6%2594%25BE-%25E7%25B2%25BE%25E6%25B1%25A1%25E8%25A7%2586%25E9%25A2%2591%2520%5B7%3A57x406p%5D&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A12kwz5rkew6t6vin1zpu5w%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A596490328882%3Ahid%3A544744361%3Az%3A0%3Ai%3A20221115073155%3Aet%3A1668497515%3Ac%3A1%3Arn%3A415571806%3Arqn%3A1%3Au%3A1668497515857212711%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A99%2C257%2C263%2C8%2C-9%2C0%2C%2C%2C%2C%2C%2C%2C%3Ans%3A1668497513362%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668497515%3At%3A%E6%AF%8D%E4%BA%B2%E7%9A%84%E6%83%85%E4%BA%BA3%E4%B8%AD%E5%9B%BD%E6%AF%9B%E7%89%87%E5%85%8D%E8%B4%B9%E5%85%A8%E9%83%A8%E5%85%8D%E8%B4%B9%E8%A7%82%E7%9C%8B-%E6%92%AD%E6%94%BE-%E7%B2%BE%E6%B1%A1%E8%A7%86%E9%A2%91&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 15 Nov 2022 07:31:55 GMT
access-control-allow-origin: http://av.xvideos-dl.top
set-cookie: yandexuid=5976840201668497515; Expires=Wed, 15-Nov-2023 07:31:55 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=5976840201668497515; Expires=Wed, 15-Nov-2023 07:31:55 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2299597141668497515; Path=/; SameSite=None; Secure
i=8Cxl1Wj9aXUWcS7ek5YIDFWC4c0m2aS3pv96TW2M9HqrJIUQeKBjUwTtghBq+pELkv8XeaSXPEvNo0I/5arHvDkk6R0=; Expires=Fri, 12-Nov-2032 07:31:54 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1700033515.yrts.1668497515#1700033515.yrtsi.1668497515; Expires=Wed, 15-Nov-2023 07:31:55 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 15-Nov-2022 07:31:55 GMT
last-modified: Tue, 15-Nov-2022 07:31:55 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cdn2.geefap.com/uploads/posts/2018-04/thumbs/495445170_991088351.jpg
200 OK 25 kB URL HTTP/1.1 cdn2.geefap.com/uploads/posts/2018-04/thumbs/495445170_991088351.jpg
IP
ASN #207728 EUROHOSTER Ltd.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x420, components 3\012- data
Hash 3034ea6441cacd317bbbc243cd1d2b52
6c7ea8a1ed1e69175d62a1627f5b9cc3d204bbbb
98eb5805f183f45737979421d29deba2ee0e5079bb4eec507bfe739fe56ab032
GET /uploads/posts/2018-04/thumbs/495445170_991088351.jpg HTTP/1.1
Host: cdn2.geefap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 07:31:56 GMT
Content-Type: image/jpeg
Content-Length: 24727
Last-Modified: Wed, 18 Apr 2018 04:57:41 GMT
Connection: keep-alive
ETag: "5ad6d045-6097"
Expires: Sun, 20 Nov 2022 07:31:56 GMT
Cache-Control: max-age=432000
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
pornyc.com/thumbs/44/112_molested--doctors.jpg
200 OK 20 kB URL HTTP/2 pornyc.com/thumbs/44/112_molested--doctors.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 312x208, components 3\012- data
Hash 443c127d5378eb8cf1fb7114531fd120
34c91e688b55db279bc2435d0814634c5bb00c28
73af0a5dda321653c3adf58665ca9c10b1f9371984040dc449a7b86900d8dbf4
GET /thumbs/44/112_molested--doctors.jpg HTTP/1.1
Host: pornyc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:56 GMT
content-type: image/jpeg
content-length: 20008
last-modified: Fri, 17 Sep 2021 16:21:44 GMT
etag: "6144c098-4e28"
expires: Wed, 07 Jun 2023 03:23:54 GMT
cache-control: public, max-age=31536000, no-transform
cf-cache-status: HIT
age: 13925282
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BcxDkVDTjhfOlR99SI77nxMelVSFzaVR6dX%2BqHyM5fRe6Bb2X17a9NvxS2eAYc8835fzZq8hGX6pacRpLf4H7exJJw%2BbUXIMP40n0K8GBXyeUJ6we40yqjj0wXdP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a478bc70afa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.thisav.com/images/videothumbs/180194-1.jpg
301 Moved Permanently 0 B URL HTTP/1.1 static.thisav.com/images/videothumbs/180194-1.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videothumbs/180194-1.jpg HTTP/1.1
Host: static.thisav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 301 Moved Permanently
Date: Tue, 15 Nov 2022 07:31:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 15 Nov 2022 08:31:56 GMT
Location: https://static.thisav.com/images/videothumbs/180194-1.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2fdaZrtdwX8Vn2skr4QSWKswQX7DzGCMGRi93u9mbWoW0qm6QZNXDWhp4XG0VU5DZl2dP0YXIzRH1YI40MtAm3zfmDzckEhHETIA5faEEF0SEyBNCj6sjVqm86YxB2wsfDBZ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a480d93b4ee-OSL
alt-svc: h2=":443"; ma=60
image-bankingf25.com/otakara/rnew/idol/202107/210717neta-idol04-c.jpg
200 OK 164 kB URL HTTP/1.1 image-bankingf25.com/otakara/rnew/idol/202107/210717neta-idol04-c.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1376, components 3\012- data
Size 164 kB (164229 bytes)
Hash 8e4d417fa626d21080ffc60a37f07a9a
120eaa855e896112f60c4291729c8c120483199b
679880278c1ad36570187dc7fdefb7a21411b5fef8377c039e643bbe3f5f8a42
GET /otakara/rnew/idol/202107/210717neta-idol04-c.jpg HTTP/1.1
Host: image-bankingf25.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:56 GMT
Content-Type: image/jpeg
Content-Length: 164229
Connection: keep-alive
Last-Modified: Fri, 16 Jul 2021 16:28:22 GMT
ETag: "60f1b3a6-28185"
Expires: Sat, 19 Nov 2022 10:02:23 GMT
Cache-Control: max-age=604800
CF-Cache-Status: HIT
Age: 245411
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KtB9qGUvwcxyJL7Rkxc7VpJamRpgt%2BmxEKj5LHIO%2FmzIIAExxAtwPjviMDo7SAGdCeHbPZ3UG2LOzVgbQq%2B8jk3w0kbKv7t2%2BZyaqDTPLjIrh69aS7vu039JtvalwRiqDkh%2F50dc7A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a4849f3b51d-OSL
alt-svc: h2=":443"; ma=60
soasianporn.com/tmb/galleries/73/709/flv_preview.jpg
200 OK 25 kB URL HTTP/1.1 soasianporn.com/tmb/galleries/73/709/flv_preview.jpg
IP
ASN #20860 Iomart Cloud Services Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 600x337, components 3\012- data
Hash 9fd67340de4cc08249310ed02cd5fea6
816079ead971b30450a91692be2516fbea83eba3
d00ebddc84a56c2783ccedbe283f3890c19443903c6b1f0a688461917a536f37
GET /tmb/galleries/73/709/flv_preview.jpg HTTP/1.1
Host: soasianporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Tue, 15 Nov 2022 07:18:14 GMT
Content-Type: image/jpeg
Content-Length: 25099
Last-Modified: Sat, 13 Oct 2018 11:59:41 GMT
Connection: keep-alive
ETag: "5bc1de2d-620b"
Expires: Fri, 18 Nov 2022 07:18:14 GMT
Cache-Control: max-age=259200
Accept-Ranges: bytes
static.thisav.com/images/videothumbs/359936-1.jpg
301 Moved Permanently 0 B URL HTTP/1.1 static.thisav.com/images/videothumbs/359936-1.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videothumbs/359936-1.jpg HTTP/1.1
Host: static.thisav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 301 Moved Permanently
Date: Tue, 15 Nov 2022 07:31:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 15 Nov 2022 08:31:56 GMT
Location: https://static.thisav.com/images/videothumbs/359936-1.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TRwZSjg%2FbWa12u%2BhgFigl7V7%2BoAgxry6N0CPlrXzi4FQ09wqUmXoN90BY5uRWjf6ybrNO2vabuwl%2B%2FAQ3UDDb1GzeNUcv7P4fd2MJGkBDJXrYP4CLuNRhE%2FvsjszhjDZUjR4"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a492ed3b4ee-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 279 B IP
Hash a7bf67edfd775cb87dc7c457f1cedb0e
84e5d81da4ad2c8e408e79811b95bf86fb990b0b
d6f115f431f7ca607b3b32b915bdad27261a104d925629bb424daa4e8a26bc17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3326
Cache-Control: max-age=133929
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:57 GMT
Etag: "63729b98-117"
Expires: Wed, 16 Nov 2022 20:44:06 GMT
Last-Modified: Mon, 14 Nov 2022 19:48:40 GMT
Server: ECS (amb/6BC8)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 9892243c4da05243832b3bed22970958
062bfc637c299c0a2bcf8519910924ac02916385
5e10987927bb204107c7ef5873348253b605ccfa939e45735cbccb82a1943c89
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3287
Cache-Control: max-age=147596
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:57 GMT
Etag: "6372d123-117"
Expires: Thu, 17 Nov 2022 00:31:53 GMT
Last-Modified: Mon, 14 Nov 2022 23:37:07 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 280 B IP
Hash 6ca36c51e12fcf528ffe727ff5ac1be6
6f48ae05ff55224547a136d16673dae904a84506
0dde97702a58501cb81545ce7ebda0d1fb3a565381ece7121e927723a9430dd3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5137
Cache-Control: max-age=102262
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:57 GMT
Etag: "637218d2-118"
Expires: Wed, 16 Nov 2022 11:56:19 GMT
Last-Modified: Mon, 14 Nov 2022 10:30:42 GMT
Server: ECS (amb/6BBB)
X-Cache: HIT
Content-Length: 280
images.fapmove.com/thumbs/1089/661_shaving-bath.jpg
200 OK 8.8 kB URL HTTP/2 images.fapmove.com/thumbs/1089/661_shaving-bath.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x180, components 3\012- data
Hash b45af3cb38cb40128cbf32882ccef172
74b428c451ad7327e579b88d5bfc731379fb53f7
d062941946c6525da1136e1d5e29ace29fc00d579f209d5c8aca6e83ec5062c0
GET /thumbs/1089/661_shaving-bath.jpg HTTP/1.1
Host: images.fapmove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:57 GMT
content-type: image/jpeg
content-length: 8815
last-modified: Wed, 23 Sep 2020 03:19:21 GMT
etag: "5f6abeb9-226f"
expires: Mon, 21 Nov 2022 22:08:17 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 33820
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TMIob%2Bl8bi6T%2BVGGSJAJLmBdGJ1Qqtr%2Bo2KJNNfeBr3wfQ9yTwkdPtKYw%2B0cQ%2Bu%2FduH%2BgeNPkhZR1SgxJQM4JfGDnmaITb8Ie9ZUNpwRE8EiNfn%2BPpaEb7Ia5Jj%2FFe2caI1CPhE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a49bf5eb4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
hlebo.com/thumbs/134584.jpg
200 OK 9.7 kB URL HTTP/2 hlebo.com/thumbs/134584.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3\012- data
Hash cb20557d86c55a23b194c83db95371c2
45a43fe8e026e7bde940a1dc1e795f790e00d5b7
306d3a838ced88b6196d39e22f81505e63fd073cd2ed61c5b639ef7da35b6489
GET /thumbs/134584.jpg HTTP/1.1
Host: hlebo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:57 GMT
content-type: image/jpeg
content-length: 9744
cache-control: max-age=31536000
cf-cache-status: HIT
age: 12536618
last-modified: Thu, 23 Jun 2022 05:08:19 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J5DGH%2FZQj43BGWd%2FGDhr3HQJf%2FL%2F5bFYku58XKMW3b3E9DJyqY0ldgAhsYS7p6XM1Si8exwkR6uauiZIZijFwhdqVzRhxsd%2FxXsRcdxTS9yt6HBZKJIb5WgTuhI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a49e8a8b4fa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash d2d68275b6548020ff8c785f2e66e152
e900c5515d08366cfcec47b3a712d2ca9dfd996d
9af01ce1162be998d41528a9f99840882aa0251e814a30f7664015b38fd718fa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5167
Cache-Control: max-age=130053
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:57 GMT
Etag: "63728543-117"
Expires: Wed, 16 Nov 2022 19:39:30 GMT
Last-Modified: Mon, 14 Nov 2022 18:13:23 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
www.91pjav.com/contents/videos_screenshots/54000/54096/preview.jpg
200 OK 174 kB URL HTTP/2 www.91pjav.com/contents/videos_screenshots/54000/54096/preview.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc58.54.100", baseline, precision 8, 1280x720, components 3\012- data
Size 174 kB (173507 bytes)
Hash 983db8e9ffb8e5a1bbb7c6852ab521ea
d33315111df23c2db2c79e1fdd3f03c4c63bca67
0517c00e181e5517316bce3e9768030413a125d5b659dd686799571107e378f3
GET /contents/videos_screenshots/54000/54096/preview.jpg HTTP/1.1
Host: www.91pjav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:57 GMT
content-type: image/jpeg
content-length: 173507
last-modified: Sat, 17 Oct 2020 08:52:02 GMT
etag: "5f8ab0b2-2a5c3"
expires: Sun, 20 Nov 2022 04:55:35 GMT
cache-control: max-age=2592000
access-control-allow-headers: *
access-control-expose-headers: Server,range,Content-Length,Content-Range
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
cf-cache-status: HIT
age: 2169382
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8s6O1ih2BDo21SI9K9RHoqjihGaGl8qMYYhxQaAbwgZLk9NZ2u5KsVv%2BCP%2F%2FN3O%2B99394JkxU6%2B%2F4xRT72VvUjNTogLvsu4Fe7X8zE%2BxuoQrx44RL7AJIDi1a0u6ut3FGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a49e8d4fabc-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
thumbs.7dakcdn.com/resimler/b/996673/%C3%A7illi-%C3%BCvey-k%C4%B1z-karde%C5%9Fini-yalayarak-sikiyor.jpg
200 OK 49 kB URL HTTP/2 thumbs.7dakcdn.com/resimler/b/996673/%C3%A7illi-%C3%BCvey-k%C4%B1z-karde%C5%9Fini-yalayarak-sikiyor.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3\012- data
Hash 3e85ad087a4db248c016e6eb28b8da78
4bce27f64ea2f91511544808391de84fd4cbf105
b522353418800b9d4558e69b1f766d406778c14b6340bb71d87904a79c02885b
GET /resimler/b/996673/%C3%A7illi-%C3%BCvey-k%C4%B1z-karde%C5%9Fini-yalayarak-sikiyor.jpg HTTP/1.1
Host: thumbs.7dakcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:57 GMT
content-type: image/jpeg
content-length: 49369
last-modified: Fri, 15 Jan 2021 12:05:21 GMT
vary: Accept-Encoding
etag: "60018501-c0d9"
expires: Thu, 01 Dec 2022 08:21:10 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 1206647
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VBtnL2ASUjuPNrdhS2i2znyoYu3MqsYwstlS3YqW6FnFM7HD1ichYq4hqr1%2Fb0biJHst%2BN3KxWVgMVfHPZ7%2FkTvnAo%2F8ry4ufJnRoI94L8a5t2oEw5uFd%2BsXA0stGIFPqHMpqAw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a4a1da20b06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
thumbs.7dakcdn.com/resimler/b/1035311/k%C3%BC%C3%A7%C3%BCc%C3%BCk-amc%C4%B1kl%C4%B1-k%C4%B1z%C4%B1-dev-yarra%C4%9F%C4%B1yla-darma-duman-ediyor.jpg
200 OK 68 kB URL HTTP/2 thumbs.7dakcdn.com/resimler/b/1035311/k%C3%BC%C3%A7%C3%BCc%C3%BCk-amc%C4%B1kl%C4%B1-k%C4%B1z%C4%B1-dev-yarra%C4%9F%C4%B1yla-darma-duman-ediyor.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Hash 4adea2ce1752de6b5f477c849be6bf4d
0a7bfdd42b6329d8c6410a523dcf4e5f04ca5733
6f0e4f17cb704dca10c706331a6c3f4fd06ccf408735c551434c4f410428edf4
GET /resimler/b/1035311/k%C3%BC%C3%A7%C3%BCc%C3%BCk-amc%C4%B1kl%C4%B1-k%C4%B1z%C4%B1-dev-yarra%C4%9F%C4%B1yla-darma-duman-ediyor.jpg HTTP/1.1
Host: thumbs.7dakcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:57 GMT
content-type: image/jpeg
content-length: 67654
last-modified: Mon, 25 Oct 2021 05:20:30 GMT
vary: Accept-Encoding
etag: "61763e9e-10846"
expires: Sun, 04 Dec 2022 04:30:31 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 961286
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wq17uI5QvY8JU3DyOdOTH4F4RPDkQo9OGtJfgKTR5bT1kQoiNrnG4oTnCC0B2a9unFkhCWlIqEHQACf4dFRm0dDI2g2VRlx%2BWQWnjNDCH4aZwTzIAgYW0khvSGofRxxiXC4uqLo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a4a1d9f0b06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.thisav.com/images/videothumbs/105197-1.jpg
301 Moved Permanently 0 B URL HTTP/1.1 static.thisav.com/images/videothumbs/105197-1.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videothumbs/105197-1.jpg HTTP/1.1
Host: static.thisav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 301 Moved Permanently
Date: Tue, 15 Nov 2022 07:31:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 15 Nov 2022 08:31:57 GMT
Location: https://static.thisav.com/images/videothumbs/105197-1.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HZI%2FK2jF496iPWu1Yp7BBFy5LyJEnTAPhAQ%2FCjvAM9SOg4Zsw6KwOgBcMpKcrlciSIWJcm9XJ74z4fisfTIRLzVFkd5QldcralguxGi1i0K4YbZoVl%2FAeZDvrnXkPrLxy7BW"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a4a481cb4ee-OSL
alt-svc: h2=":443"; ma=60
pic.ebenporno.com/imgs/a/y/d/y/u/vintage_pregnant_porn_1990-4_tmb.jpg
301 Moved Permanently 0 B URL HTTP/1.1 pic.ebenporno.com/imgs/a/y/d/y/u/vintage_pregnant_porn_1990-4_tmb.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /imgs/a/y/d/y/u/vintage_pregnant_porn_1990-4_tmb.jpg HTTP/1.1
Host: pic.ebenporno.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 301 Moved Permanently
Date: Tue, 15 Nov 2022 07:31:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 15 Nov 2022 08:31:57 GMT
Location: https://pic.ebenporno.com/imgs/a/y/d/y/u/vintage_pregnant_porn_1990-4_tmb.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KqnoVhpJdI1hDT8t%2BbcUzE8nNmSxe5P%2FR%2FGB93AwRpwFecx%2BPXWdZwdjuaoF5DyEngDclDH2gxMqO3JsIsVXRtCLOhfR6A%2F2WLL6jY%2BuPzuOJB0t2liEGeloiCp76xFhVRwBAg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a4a6cbdb51d-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 068df7ef499e5fecea88e7cfbb29f78a
595f5ca8129260d4125618764741a11008cfd107
b3b8865c9b36b3ee4bdb60bbe956bd4f8268395458fd56cf617eb511e1863c8d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B3B8865C9B36B3EE4BDB60BBE956BD4F8268395458FD56CF617EB511E1863C8D"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6523
Expires: Tue, 15 Nov 2022 09:20:40 GMT
Date: Tue, 15 Nov 2022 07:31:57 GMT
Connection: keep-alive
www.aipa570.com/uploads/2021/04/14/-%E9%AB%98%E6%B8%85%E5%8E%9F%E7%89%88%E6%97%A0%E6%B0%B4%E5%8D%B0%E3%80%90%E5%AE%A3%E4%BC%A0%E5%9B%BE%E3%80%91%20(5).jpg
200 OK 142 kB URL HTTP/1.1 www.aipa570.com/uploads/2021/04/14/-%E9%AB%98%E6%B8%85%E5%8E%9F%E7%89%88%E6%97%A0%E6%B0%B4%E5%8D%B0%E3%80%90%E5%AE%A3%E4%BC%A0%E5%9B%BE%E3%80%91%20(5).jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 2160x1270, components 3\012- data
Size 142 kB (142316 bytes)
Hash 9d33564ce5681c630d5964033d20cb18
12cb7de488de0d1cfe22ff9a067df7253bfa3b7e
97724016cb61cb593e3921eef656c3b8bb9499a0746fc105da9062a6cb1ec8f7
GET /uploads/2021/04/14/-%E9%AB%98%E6%B8%85%E5%8E%9F%E7%89%88%E6%97%A0%E6%B0%B4%E5%8D%B0%E3%80%90%E5%AE%A3%E4%BC%A0%E5%9B%BE%E3%80%91%20(5).jpg HTTP/1.1
Host: www.aipa570.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://av.xvideos-dl.top/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:57 GMT
Content-Type: image/jpeg
Content-Length: 142316
Connection: keep-alive
Last-Modified: Wed, 16 Feb 2022 02:41:50 GMT
ETag: "22bec-5d81997775c8c"
Cache-Control: public, max-age=31536000
CF-Cache-Status: HIT
Age: 15380739
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5OVFl9i%2FB8OnfZrr%2Fm0SsUTlEM39W94pHeQee5g4jt%2F2SFsHdTjWDuubLgkFvSUt67W%2FVanYzS4X51%2BKMzcb%2FCgWoHnRHEd4gRK7H8nOyj3szoFZXAPj1imR5D39q13dUD8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a4ac8c70af6-OSL
alt-svc: h2=":443"; ma=60
img.qdrama.top/vod/20220503-1/227d9c6b37fb258d6fbcdec49b18ddb1.jpg
200 OK 18 kB URL HTTP/1.1 img.qdrama.top/vod/20220503-1/227d9c6b37fb258d6fbcdec49b18ddb1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 205x290, components 3\012- data
Hash e561d706a202723c52987c6b366d2231
4f05cf3b2f380a49ad69188de441ddde8a79d98b
dbd095ab7441f6f8d05984edd43632c25768673c7bff6c199c588b91d3bd3b19
GET /vod/20220503-1/227d9c6b37fb258d6fbcdec49b18ddb1.jpg HTTP/1.1
Host: img.qdrama.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:57 GMT
Content-Type: image/jpeg
Content-Length: 18385
Connection: keep-alive
Cache-Control: max-age=2592000
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origSize=18625, status=webp_bigger
ETag: "6270e008-48c1"
Expires: Thu, 15 Dec 2022 06:47:40 GMT
Last-Modified: Tue, 03 May 2022 07:55:52 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
CF-Cache-Status: HIT
Age: 2006
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VL%2B5lf2v4VOd6ueplN%2B4M0y0t7zpQ%2FoFIcc7aB8TD2Y%2BmWBwQ0QypzRCStT5UxV1%2BoDyco1WuSoMJzQ7T5732dOsBCCWP%2FFiBeIxm1qFbigZHJKU9IGuSi1JwUE%2Bx5PaQw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 76a64a4b0a8f0b69-OSL
dvcasha2.ocsp-certum.com/
200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash e3dba07bdfc3d72006ef3316dc399125
a6c7f3edecedced81277194bc4125e35eb8eb8c8
ed021be435f4fb4089229f07622bab55951a7d230c2feb7f0f04f34c15c2ad3f
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=621
Date: Tue, 15 Nov 2022 07:31:57 GMT
Connection: keep-alive
X-N: S
static.thisav.com/images/videothumbs/477539-1.jpg
301 Moved Permanently 0 B URL HTTP/1.1 static.thisav.com/images/videothumbs/477539-1.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videothumbs/477539-1.jpg HTTP/1.1
Host: static.thisav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 301 Moved Permanently
Date: Tue, 15 Nov 2022 07:31:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 15 Nov 2022 08:31:57 GMT
Location: https://static.thisav.com/images/videothumbs/477539-1.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O%2BzNeGnpqKDc7qb1VK%2BwtUpG2hBpQqoBTlJhZnSpkd1FiNGh8U3nwubACsWx%2BWRDiB1jXr5weeXK6YXyV2S8SA90I8H2uO6M7S3shf5Pzf9IscBnvTFECDTs7FNi9mqGxOTo"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a4b18f2b4ee-OSL
alt-svc: h2=":443"; ma=60
ddcdn.comtucdncom.com/upload/vod/2019-08-11/15654650696.jpg
200 OK 6.4 kB URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/2019-08-11/15654650696.jpg
IP
File type JPEG image data, baseline, precision 8, 320x240, components 3\012- data
Hash 82d9cb0ac7aa0c0a2a46a79af7c75f12
ea2674cddadc4942b3db64eb4fea8bdba9b16763
bb22802e8a21514416996e944487cd2c47be72305504c003f90e80dc91f5855f
GET /upload/vod/2019-08-11/15654650696.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 15 Nov 2022 07:33:34 GMT
Content-Type: image/jpeg
Content-Length: 6409
Last-Modified: Sun, 04 Sep 2022 05:58:52 GMT
Connection: keep-alive
ETag: "63143e9c-1909"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
thumbs.7dakcdn.com/resimler/b/1032544/%C3%BCvey-k%C4%B1z-karde%C5%9Fini-ormanda-arkadan-sert-sikiyor.jpg
200 OK 330 kB URL HTTP/2 thumbs.7dakcdn.com/resimler/b/1032544/%C3%BCvey-k%C4%B1z-karde%C5%9Fini-ormanda-arkadan-sert-sikiyor.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 330 kB (330192 bytes)
Hash 60287d8946eac0844bd2a24e9f864893
e50922b222c08182a2ee6b81d755e52fa7b255c8
5e5f5a8620e5c7ec24255a66fc5c37a937a2d110ade2522a01fdd8df4875bb8f
GET /resimler/b/1032544/%C3%BCvey-k%C4%B1z-karde%C5%9Fini-ormanda-arkadan-sert-sikiyor.jpg HTTP/1.1
Host: thumbs.7dakcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:57 GMT
content-type: image/jpeg
content-length: 330192
last-modified: Fri, 08 Oct 2021 05:20:41 GMT
vary: Accept-Encoding
etag: "615fd529-509d0"
expires: Sat, 26 Nov 2022 20:08:21 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 1596216
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I9Iek4YkzHbs2gbvTqsJ%2FKDCs3c5%2BJ7Td656FD1uJz8fUEOoIzVKuFlsS9GTk%2FcYLPxcIMH4ndtz1YnyF2kc6IAXDo67p5BVuW%2BtUqHQHrio%2FuyrwMJqohHTIM15eFjqybyrTnQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a4b3e7e0b06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
001.manyse.com/2205/img/FC2-PPV-2897075.jpg
200 OK 14 kB URL HTTP/2 001.manyse.com/2205/img/FC2-PPV-2897075.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x800, components 3\012- data
Hash c897fc099fc2d0b74bf5a7c3b60e2f63
04d3c17fb1020ca9fe72f18022bb5b8e55a36dec
b70472ca9b7c0738aabb377c3035ce031f06141ac3796e3eaf880bf3c27627d0
GET /2205/img/FC2-PPV-2897075.jpg HTTP/1.1
Host: 001.manyse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 07:31:57 GMT
content-type: image/jpeg
content-length: 13956
last-modified: Mon, 05 Sep 2022 22:25:41 GMT
etag: "63167765-3684"
expires: Thu, 15 Dec 2022 07:31:57 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
access-control-allow-origin: https://manymv.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
static.thisav.com/images/videothumbs/614497-1.jpg
301 Moved Permanently 0 B URL HTTP/1.1 static.thisav.com/images/videothumbs/614497-1.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videothumbs/614497-1.jpg HTTP/1.1
Host: static.thisav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 301 Moved Permanently
Date: Tue, 15 Nov 2022 07:31:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 15 Nov 2022 08:31:57 GMT
Location: https://static.thisav.com/images/videothumbs/614497-1.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e4wEK0D5Ad6G6CKQVsNAvBMUqCZSN0ApIaNby9%2BdSZR431FwkTUGqFfdA4Gg%2FqEVL5YXw5a%2ByHF97cKFs6ZR%2BuzSw5Bt4k8lZc%2BfzZIwsSqtjFkjsCQqJGjNKUdAiBF5sBzI"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a4b4938b4ee-OSL
alt-svc: h2=":443"; ma=60
static.thisav.com/images/videothumbs/143537-1.jpg
301 Moved Permanently 0 B URL HTTP/1.1 static.thisav.com/images/videothumbs/143537-1.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videothumbs/143537-1.jpg HTTP/1.1
Host: static.thisav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 301 Moved Permanently
Date: Tue, 15 Nov 2022 07:31:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 15 Nov 2022 08:31:57 GMT
Location: https://static.thisav.com/images/videothumbs/143537-1.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jtt0BMBMc%2BuDxYR1Lh7hVuQPsLf40I0JJhBWg2rNBoSO3TeKTnb8qsOSr3V1w%2Ftl%2B4Qh247gQo9CWl4Gy8LhuYp%2FMl%2BlaxzuJicTvC8ou%2FtA0f0wt7utuoVqJHohgkuF%2BYyz"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a4c1a2eb4ee-OSL
alt-svc: h2=":443"; ma=60
vip.pornbraze.com/media/videos/tmb/000/009/937/1.jpg
301 Moved Permanently 0 B URL HTTP/1.1 vip.pornbraze.com/media/videos/tmb/000/009/937/1.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /media/videos/tmb/000/009/937/1.jpg HTTP/1.1
Host: vip.pornbraze.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 301 Moved Permanently
Date: Tue, 15 Nov 2022 07:31:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 15 Nov 2022 08:31:57 GMT
Location: https://vip.pornbraze.com/media/videos/tmb/000/009/937/1.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8d1c3lKh2Ceo6Rre51%2B7t1TDohZZikiljts9%2FeaCP1QjJJb9mxhRZz3t46%2FF5POuR%2BL02FrlPNfBTQb36S5suPGxXtSnBO9Skx1pKhI%2FOHfEIKljCL2jN0TBa50m68Hh2w9iFA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a4c3bf1e630-LHR
alt-svc: h2=":443"; ma=60
img.biguz.net/9fc606feaa266eee1d76c8a371539a43.jpg
403 Forbidden 146 B URL HTTP/2 img.biguz.net/9fc606feaa266eee1d76c8a371539a43.jpg
IP
ASN #14576 HOSTING-SOLUTIONS
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 9fe3cb2b7313dc79bb477bc8fde184a7
4d7b3cb41e90618358d0ee066c45c76227a13747
32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864
GET /9fc606feaa266eee1d76c8a371539a43.jpg HTTP/1.1
Host: img.biguz.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
server: nginx
date: Tue, 15 Nov 2022 07:29:39 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
udvl.b-cdn.net/contents/videos_screenshots/19000/19689/preview.jpg
200 OK 53 kB URL HTTP/1.1 udvl.b-cdn.net/contents/videos_screenshots/19000/19689/preview.jpg
IP
ASN #34989 ServeTheWorld AS
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x360, components 3\012- data
Hash 100cda97d02d4ed7081b1dad1611b6c7
a09afba51523b80a287a451392366be120207aaf
3a3df39b293dd00ebd652d9700f21a4135af52f48b57b20ca808991041e566a7
GET /contents/videos_screenshots/19000/19689/preview.jpg HTTP/1.1
Host: udvl.b-cdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:57 GMT
Content-Type: image/jpeg
Content-Length: 52886
Connection: keep-alive
Server: BunnyCDN-NO-830
CDN-PullZone: 134239
CDN-Uid: 797ae410-958d-4b76-8486-90744fa685bf
CDN-RequestCountryCode: NO
Cache-Control: public, max-age=31919000
ETag: "5f7ca4ad-ce96"
Last-Modified: Tue, 06 Oct 2020 17:09:01 GMT
CDN-ProxyVer: 1.03
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 200
CDN-CachedAt: 11/08/2022 17:50:49
CDN-EdgeStorageId: 830
Link: <https://udvl.com/contents/videos_screenshots/19000/19689/preview.jpg>; rel="canonical"
CDN-Status: 200
CDN-RequestId: f7274818e902a21f257b472b48446bdc
CDN-Cache: HIT
Accept-Ranges: bytes
subo228.com/20220917/6IRVruWk/1.jpg
200 OK 40 kB URL HTTP/1.1 subo228.com/20220917/6IRVruWk/1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 426x239, components 3\012- data
Hash 1c392da24085042fd22997bd56476d41
762d3c873cfbb1e5220dffa30b4129d91b1a3ce2
90301e733ea1d744e35bd80cf8aacc2659ce045fd83adcc2bf440c746910be7c
GET /20220917/6IRVruWk/1.jpg HTTP/1.1
Host: subo228.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 15 Nov 2022 07:31:57 GMT
Content-Type: image/jpeg
Content-Length: 40523
Last-Modified: Mon, 14 Nov 2022 22:49:23 GMT
Connection: keep-alive
ETag: "6372c5f3-9e4b"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
static.thisav.com/images/videothumbs/638346-1.jpg
301 Moved Permanently 0 B URL HTTP/1.1 static.thisav.com/images/videothumbs/638346-1.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/videothumbs/638346-1.jpg HTTP/1.1
Host: static.thisav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 301 Moved Permanently
Date: Tue, 15 Nov 2022 07:31:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 15 Nov 2022 08:31:57 GMT
Location: https://static.thisav.com/images/videothumbs/638346-1.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HbrRX61ZXlSySObqmUId%2BZath46NR4qNG%2F7RtLhh4gl67V8CJ%2BpLOtnSTRNiu4jqPusihQ%2B93MszCaYKZMcoJqEQK3UF59VGjit2ucmDdf6A9uwlWTb2mQyxZGYpeOLOx5kL"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a4e0c81b4ee-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 471 B IP
Hash 1de7a9d820b672d4c7e14e194ec593d2
c2e4a995e0a125db1013d196d77a494ab66b1006
691fcf53de50969dcb293c217d9cfde6ba24320e9db78a4d4b1c2af492bc0eca
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6527
Cache-Control: max-age=96095
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:57 GMT
Etag: "6371fb4e-1d7"
Expires: Wed, 16 Nov 2022 10:13:32 GMT
Last-Modified: Mon, 14 Nov 2022 08:24:46 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
dvcasha2.ocsp-certum.com/
200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 6dfc36bfc949b99bef9c424c05763ecf
5f7db8b1e18c7f4be1d87d68d41b38efbbbc4732
2516dad4a33e0e64553158c03b22448e110d3ec84504a61efabff331c611fdcc
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=802
Date: Tue, 15 Nov 2022 07:31:57 GMT
Connection: keep-alive
X-N: S
ocsp.digicert.com/
200 OK 280 B IP
Hash 94fb2c275ab163efd833de44e866ba94
7d169ce609f7ae0df936d0c5fde07660ef8a067d
80b72a2bdb80473743d3052691455f7d8b7d05aa1f898fe2aeab279a2f94f078
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: max-age=147553
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:57 GMT
Etag: "6372ddcd-118"
Expires: Thu, 17 Nov 2022 00:31:10 GMT
Last-Modified: Tue, 15 Nov 2022 00:31:09 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 280
pornogids.net/contents/videos_screenshots/746000/746641/preview.jpg
200 OK 23 kB URL HTTP/2 pornogids.net/contents/videos_screenshots/746000/746641/preview.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x360, components 3\012- data
Hash 5c8fbedc300b4244bdeb8cee63d8d2ae
04827293b2925cb67e9ddef3365bed074752c284
2773ea3395433c0c93dc1a624cb966cba3ae09ceea86d4d57c6411b87c131a9e
GET /contents/videos_screenshots/746000/746641/preview.jpg HTTP/1.1
Host: pornogids.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:57 GMT
content-type: image/jpeg
content-length: 22616
cf-bgj: h2pri
etag: "61c6d170-5858"
last-modified: Sat, 25 Dec 2021 08:08:16 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3690
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NymaHcf7XPtCz%2BEKSS6vD6MJ9AjPjAALZbVJI78iN9dqk6Pu3ftykCuE5g5IDiXvN16fCW9iarOm0Z2RFIKX%2F56TZVFDcjZci4Vds7zL1rG80zbnDhglhKzLjT1%2BjeB5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a4e4e568889-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
subo228.com/20220220/9w7IT7Jt/1.jpg
200 OK 6.2 kB URL HTTP/1.1 subo228.com/20220220/9w7IT7Jt/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x180, components 3\012- data
Hash 5d6efdc73a02cc8d433fb17884792b6b
27f9611ee1125251643bda81e032005ada7950a1
82d8a8bb68fd5500f3c98241a72671d3ed38aab648027c36482c732ae0ad2ac6
GET /20220220/9w7IT7Jt/1.jpg HTTP/1.1
Host: subo228.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 15 Nov 2022 07:31:57 GMT
Content-Type: image/jpeg
Content-Length: 6179
Last-Modified: Mon, 14 Nov 2022 22:49:23 GMT
Connection: keep-alive
ETag: "6372c5f3-1823"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
zerossl.ocsp.sectigo.com/
200 OK 728 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 570be9ebfd8c29e47ddf7f7d8568f188
a16516d38487265c8793c66880c2399efd7ea572
2e5c89773a32fe3668ed32994275671b372daff39b9cbf0c37b063bd1f97398f
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:57 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Sun, 13 Nov 2022 18:56:12 GMT
Expires: Sun, 20 Nov 2022 18:56:11 GMT
Etag: "a16516d38487265c8793c66880c2399efd7ea572"
Cache-Control: max-age=472453,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76a64a4e4a2db517-OSL
dvcasha2.ocsp-certum.com/
200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash e3dba07bdfc3d72006ef3316dc399125
a6c7f3edecedced81277194bc4125e35eb8eb8c8
ed021be435f4fb4089229f07622bab55951a7d230c2feb7f0f04f34c15c2ad3f
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=621
Date: Tue, 15 Nov 2022 07:31:57 GMT
Connection: keep-alive
X-N: S
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2b1532f394dcda7ec60c59e48122363f
06f2398e3c712595908aa853085f2da1f55cbd1f
8e31a1c7662d2f6e2af78ca9f4ad119a9b8e0d96074c9ad7218ad440c86a9324
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8E31A1C7662D2F6E2AF78CA9F4AD119A9B8E0D96074C9AD7218AD440C86A9324"
Last-Modified: Sun, 13 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3664
Expires: Tue, 15 Nov 2022 08:33:01 GMT
Date: Tue, 15 Nov 2022 07:31:57 GMT
Connection: keep-alive
69dv.com/pornpics/mimi-yazawa/mum00268/mimi-yazawa-0.jpg
200 OK 128 kB URL HTTP/2 69dv.com/pornpics/mimi-yazawa/mum00268/mimi-yazawa-0.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 128 kB (127897 bytes)
Hash ec12c079bf28ee5e98e90243235f165d
00bf09bf9e05d8bf5bc59a9b8d825b06c06bcdcd
2bc3cfb84ba093360e20f7d7ccaddf3fd8b495806b3aef699ccb903adbb096fb
GET /pornpics/mimi-yazawa/mum00268/mimi-yazawa-0.jpg HTTP/1.1
Host: 69dv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:57 GMT
content-type: image/jpeg
content-length: 127897
last-modified: Wed, 07 Mar 2018 10:08:59 GMT
etag: "5a9fba3b-1f399"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 13939400
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B39eWa%2FAYNeiZcFznkkY8T%2Fe7U%2BrRPkOa%2FqVBAPlWHgn2w%2FPSeY%2FSWr3VNLwH9Y7C41BusDmr7opSbhqOkjvZ%2BoVkuISJiOh%2FGVzJghUSHypePfOa1WGuRvvfA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a4ebea9b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ddcdn.comtucdncom.com/upload/vod/2019-11-16/15738591303.jpg
200 OK 5.7 kB URL HTTP/1.1 ddcdn.comtucdncom.com/upload/vod/2019-11-16/15738591303.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash d30c7132a05be2d25555b8700fe539c7
8a2b502eeb5f5533b65ee5f68d72e21a2e3b5b17
eb98786a60597b6bd5f27816f6e2f8ce9de6fed3f8d0fbbd9f5f4a5e00d6161f
GET /upload/vod/2019-11-16/15738591303.jpg HTTP/1.1
Host: ddcdn.comtucdncom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 15 Nov 2022 07:33:35 GMT
Content-Type: image/jpeg
Content-Length: 5657
Last-Modified: Wed, 10 Aug 2022 12:10:48 GMT
Connection: keep-alive
ETag: "62f3a048-1619"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
cdn.hotscope.tv/files/thumbnail/thumb_bbYrRMoexrI.jpeg
200 OK 7.9 kB URL HTTP/1.1 cdn.hotscope.tv/files/thumbnail/thumb_bbYrRMoexrI.jpeg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 13025x16686, segment length 16, comment: "Lavc58.32.100", baseline, precision 8, 180x250, components 3\012- data
Hash cff1a7791515eabf3a74a590ee11441e
ee0e9fce19b86c7fe637e7a35f0d908084436e15
18608dd0300ff0e8f6a5ebecf1e2b0a0f556c6d13c34f190afb38db29acd5d29
GET /files/thumbnail/thumb_bbYrRMoexrI.jpeg HTTP/1.1
Host: cdn.hotscope.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 15 Nov 2022 07:31:57 GMT
Content-Type: image/jpeg
Content-Length: 7877
Last-Modified: Sun, 31 Mar 2019 22:14:51 GMT
Connection: keep-alive
ETag: "5ca13bdb-1ec5"
Expires: Wed, 15 Nov 2023 07:31:57 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 77f854ce4798cccf61a289613d28cad8
b99835bd2cc81927ead9e913faf8f56a3f4d02e2
ac4033425732a66065a89855275a53b1e5383d1035079a4fca884ed390de102c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "AC4033425732A66065A89855275A53B1E5383D1035079A4FCA884ED390DE102C"
Last-Modified: Tue, 15 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3944
Expires: Tue, 15 Nov 2022 08:37:41 GMT
Date: Tue, 15 Nov 2022 07:31:57 GMT
Connection: keep-alive
www.18dl.net/wp-content/uploads/2022/09/RJ417226.jpg
200 OK 13 kB URL HTTP/2 www.18dl.net/wp-content/uploads/2022/09/RJ417226.jpg
IP
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash ab96da12d8312559415480d1f3036eb0
1d014a2419e02827bd13334af29578b1c9b4d6bf
1cca498904b87c8b14e4100203f31d6bd9b9cac47da3b99ec80f6042c91b47f9
GET /wp-content/uploads/2022/09/RJ417226.jpg HTTP/1.1
Host: www.18dl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/png
content-length: 12890
last-modified: Sat, 11 Sep 2021 01:38:52 GMT
etag: "613c08ac-325a"
expires: Tue, 07 Nov 2023 08:10:13 GMT
cache-control: max-age=31536000
x-powered-by: PleskLin
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 688597
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FRXIq6IUvMJgZwF2N15JksIu5YAKboiu5fjyfw%2BHKMua7jD89cOlrBRf%2F1gClA0Zumj7zJH6PHeMvKLnpXUVL1i8zQZe84RrHwLnAiUdUuvZSHgdvBgxrkycp2Lw4bE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a4f7e040b3d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 2e03c5600c60447726668e01f323cf3e
89838b048d1e5fad005d421dd55d61738f3b18e0
f6f0b67f8205204c238ad6347820891ed6e2bc7736ae39afe56675605ed80c36
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5323
Cache-Control: max-age=164731
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:58 GMT
Etag: "63730c1e-116"
Expires: Thu, 17 Nov 2022 05:17:29 GMT
Last-Modified: Tue, 15 Nov 2022 03:48:46 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 278
img.biguz.net/4b6ae5a8150bb700ba249c3e01d31cef.jpg
403 Forbidden 146 B URL HTTP/2 img.biguz.net/4b6ae5a8150bb700ba249c3e01d31cef.jpg
IP
ASN #14576 HOSTING-SOLUTIONS
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 9fe3cb2b7313dc79bb477bc8fde184a7
4d7b3cb41e90618358d0ee066c45c76227a13747
32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864
GET /4b6ae5a8150bb700ba249c3e01d31cef.jpg HTTP/1.1
Host: img.biguz.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
server: nginx
date: Tue, 15 Nov 2022 07:29:39 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 14909e88740f723fb6d42623fc60e92e
4b91309f967d6970a3479999b7536732cfaf96ca
284013526cb29b7ee133009ca1d589ee8ea0701082a892603b734017a2aa193a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:58 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 14 Nov 2022 13:53:13 GMT
Expires: Mon, 21 Nov 2022 13:53:12 GMT
Etag: "4b91309f967d6970a3479999b7536732cfaf96ca"
Cache-Control: max-age=540674,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76a64a4e8930b51b-OSL
cdn.hotscope.tv/files/thumbnail/size_thumb_rkmRlya0Z.jpeg
200 OK 5.1 kB URL HTTP/1.1 cdn.hotscope.tv/files/thumbnail/size_thumb_rkmRlya0Z.jpeg
IP
File type JPEG image data, baseline, precision 8, 180x250, components 3\012- data
Hash 072bfd12c21f610ae8790e55217285f4
43220a30090f5c5248070bd2b1c1561f92e3e6dd
a90bee9eed9f1392c73f3b24fc969b2df123e180ee863ad853d0e0f6f06c4666
GET /files/thumbnail/size_thumb_rkmRlya0Z.jpeg HTTP/1.1
Host: cdn.hotscope.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 15 Nov 2022 07:31:58 GMT
Content-Type: image/jpeg
Content-Length: 5142
Last-Modified: Sun, 05 Nov 2017 19:04:43 GMT
Connection: keep-alive
ETag: "59ff60cb-1416"
Expires: Wed, 15 Nov 2023 07:31:58 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
static.thisav.com/images/videothumbs/359936-1.jpg
200 OK 1.9 kB URL HTTP/2 static.thisav.com/images/videothumbs/359936-1.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 160x120, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 64becc91c10609ef31385131bf58f998
5b341e39d19529cbc7b493091037cf5a428552fa
786611700e64eb8bc6fdda53c4040743a5fbdf9d051547dada0d90452418de50
GET /images/videothumbs/359936-1.jpg HTTP/1.1
Host: static.thisav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://av.xvideos-dl.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/webp
content-length: 1882
cache-control: max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=12614
content-disposition: inline; filename="359936-1.webp"
etag: "5b02c4e4-3146"
expires: Fri, 02 Dec 2022 17:09:36 GMT
last-modified: Mon, 21 May 2018 13:08:52 GMT
vary: Accept
cf-cache-status: HIT
age: 1088416
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B4Vu00q9BpulILho3kxwflo1Ik8OcKZt7l4mR6FgCnLTy0wzFrl%2BughUot%2F9TYMmxwimSWws%2FrATHDTIlNKYba2THq56kxWqyt5vnCwb%2FEUlbAGtqFQMj0%2BXPMzBRv%2BLeLf1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a4fc889b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
iv-videos.com/img/thumb/thumb_299827.jpg
200 OK 35 kB URL HTTP/2 iv-videos.com/img/thumb/thumb_299827.jpg
IP
File type GIF image data, version 87a, 320 x 180\012- data
Hash 28367fdc66ef4cb8a93c88cd716f2626
154424b091d8b9755326062f270a8b035559411d
0423cfc3c8e8d2eca6c9a3c918c5a0dcf6858097848b01f3fad99024e2fdbbac
GET /img/thumb/thumb_299827.jpg HTTP/1.1
Host: iv-videos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 35108
cache-control: max-age=2592000
cf-bgj: h2pri
etag: "5c160e-8924-5711dd8570709"
expires: Fri, 02 Dec 2022 18:55:49 GMT
last-modified: Mon, 16 Jul 2018 13:31:21 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 1082169
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8zCkafOnv2nqAZq8hRqrU6XMAc8CvTPjScCM4iz71VyiuyhYR9P6HADTBDZgsg6YzUix0nNCH%2FQ9YzWJ5ECdsOJMVC%2F2e8BnNmhBO%2Fd2xklSNkvSCEhVSGDjAjRulGU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a4fda740b55-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash eec0a4c90cc09412b22b079c4ab179c5
3a4412a1ac9d0b865c43f105d49ea2d727d38d0d
6b7a2019ae4e88e65796188ded63249a91752adb8d2cba3a8752308d363bee4d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3401
Cache-Control: max-age=154903
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:58 GMT
Etag: "6372ed3c-117"
Expires: Thu, 17 Nov 2022 02:33:41 GMT
Last-Modified: Tue, 15 Nov 2022 01:37:00 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
static.thisav.com/images/videothumbs/638346-1.jpg
200 OK 1.9 kB URL HTTP/2 static.thisav.com/images/videothumbs/638346-1.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 160x120, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d6103f380af3837119dcc6e4993479f0
070f39f5809ccb70da8bc6db176a23e2382ae900
a2ab6b061ef85e4786888fbb7354786d80b83313a6061847e147c616960f92ba
GET /images/videothumbs/638346-1.jpg HTTP/1.1
Host: static.thisav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://av.xvideos-dl.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/webp
content-length: 1852
cache-control: max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10465
content-disposition: inline; filename="638346-1.webp"
etag: "631b69fd-28e1"
expires: Sat, 10 Dec 2022 20:29:03 GMT
last-modified: Fri, 09 Sep 2022 16:29:49 GMT
vary: Accept
cf-cache-status: HIT
age: 385247
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QfmY%2B%2BOc%2FElwLIhjW12OjuCDXTl1bxmLASRX7t0UtSbGpoezwfyRDOiXmgCcvZS2aUAQ%2FGeHjBwjtHPki%2FHsWBf48%2Bue9oZaThOhL771MXUG46Invsjak57bFN%2BY%2FP6yUNdi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a4fc88db50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img.sokmil.com/image/product/pef_fis0193_01_150x.jpg
200 OK 12 kB URL HTTP/2 img.sokmil.com/image/product/pef_fis0193_01_150x.jpg
IP
ASN #2497 Internet Initiative Japan Inc.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 150x213, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b183983fe5488b379fcabd18a0e02c23
f26731e2a14b95a4f56e13e5b89f515030051e46
aa50ff7ae44bf9642f474844cfb8e60d27158ecd8cc31afde201dcfe4b4a6389
GET /image/product/pef_fis0193_01_150x.jpg HTTP/1.1
Host: img.sokmil.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 07:31:57 GMT
content-type: image/webp
content-length: 11572
last-modified: Tue, 26 Oct 2021 06:24:59 GMT
etag: "61779f3b-2d34"
expires: Fri, 18 Nov 2022 20:14:06 GMT
cache-control: max-age=31536000, public
accept-ranges: bytes
vary: Accept
X-Firefox-Spdy: h2
fmtu.netfhtu.com/upload/vod/2022/06/yz5pxtmviof.jpg
200 OK 9.7 kB URL HTTP/2 fmtu.netfhtu.com/upload/vod/2022/06/yz5pxtmviof.jpg
IP
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash 992772cdb88ac6cb3bdd7edea5f47f20
f5375a6cb4b8a7e52885e92510854154bcb7b4ce
150c1108db4f46f83221581ea8b70d891ba8f13b2c9df876f64d9f331ae55920
GET /upload/vod/2022/06/yz5pxtmviof.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 9664
cf-bgj: h2pri
etag: "629d43b5-25c0"
last-modified: Mon, 06 Jun 2022 00:00:53 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1933
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w4NbvLS2L2DXm9pGN7RV8GkKfPiqktahttDryWdvN4t2TFIokjVVHp67BKyiuziUdvWcZwAH%2F0FmMIxvOKb2T3w7cDRmrzSE55hxG2ibbNTtrfMzY19fXIMqhyrVS2DL0l7e"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a500c4f71aa-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 2a20dd61c5c94c6e4848870f61d5b460
1ecb96be58d6e1aea72395f8024e0964070d277d
a6c74ede5084156b0921b6732283a92c74def2f67cef5a1750b24fcce1aa20ef
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1558
Cache-Control: max-age=100859
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:58 GMT
Etag: "63722153-118"
Expires: Wed, 16 Nov 2022 11:32:57 GMT
Last-Modified: Mon, 14 Nov 2022 11:06:59 GMT
Server: ECS (amb/6BC8)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 279 B IP
Hash a7bf67edfd775cb87dc7c457f1cedb0e
84e5d81da4ad2c8e408e79811b95bf86fb990b0b
d6f115f431f7ca607b3b32b915bdad27261a104d925629bb424daa4e8a26bc17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3327
Cache-Control: max-age=133929
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:58 GMT
Etag: "63729b98-117"
Expires: Wed, 16 Nov 2022 20:44:07 GMT
Last-Modified: Mon, 14 Nov 2022 19:48:40 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash a522341ba0e55903e1c3f51d7f3adfc3
0dd0b96e133f8b6fd1c7dcaf51aab0fda9dca2b3
cbe0800e8c9951f895ca73e0c2f5989ef47e4e5ef24839cf4ae81285d01e3d25
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4586
Cache-Control: max-age=97783
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:58 GMT
Etag: "6372097b-117"
Expires: Wed, 16 Nov 2022 10:41:41 GMT
Last-Modified: Mon, 14 Nov 2022 09:25:15 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
ocsp.sectigo.com/
200 OK 471 B IP
Hash ecbe80a858bb168f33fac29ae58fb13c
7880611f67451262e0b4e4134196d35c977b4277
ccdfa4a9c1707e90c51f91a5a1f16cc11643d83746f0467f27eaa336916e36fc
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:58 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 13 Nov 2022 10:10:52 GMT
Expires: Sun, 20 Nov 2022 10:10:51 GMT
Etag: "7880611f67451262e0b4e4134196d35c977b4277"
Cache-Control: max-age=440932,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76a64a501f440afe-OSL
ocsp.digicert.com/
200 OK 279 B IP
Hash 9892243c4da05243832b3bed22970958
062bfc637c299c0a2bcf8519910924ac02916385
5e10987927bb204107c7ef5873348253b605ccfa939e45735cbccb82a1943c89
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3288
Cache-Control: max-age=147596
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:58 GMT
Etag: "6372d123-117"
Expires: Thu, 17 Nov 2022 00:31:54 GMT
Last-Modified: Mon, 14 Nov 2022 23:37:07 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 280 B IP
Hash 6ca36c51e12fcf528ffe727ff5ac1be6
6f48ae05ff55224547a136d16673dae904a84506
0dde97702a58501cb81545ce7ebda0d1fb3a565381ece7121e927723a9430dd3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5138
Cache-Control: max-age=102262
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:58 GMT
Etag: "637218d2-118"
Expires: Wed, 16 Nov 2022 11:56:20 GMT
Last-Modified: Mon, 14 Nov 2022 10:30:42 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 280
subo228.com/20221106/UAHvgUzl/1.jpg
200 OK 29 kB URL HTTP/1.1 subo228.com/20221106/UAHvgUzl/1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 426x239, components 3\012- data
Hash 67f8c7146707e37953102d980bba91f0
1d3a4149465713143638be54f377ac060f21f5db
f5e8a585b87c908367223c996fbbc6b895bb8c201550fd10ede069ce502d1fa4
GET /20221106/UAHvgUzl/1.jpg HTTP/1.1
Host: subo228.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 15 Nov 2022 07:31:57 GMT
Content-Type: image/jpeg
Content-Length: 28897
Last-Modified: Mon, 14 Nov 2022 22:49:23 GMT
Connection: keep-alive
ETag: "6372c5f3-70e1"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
pic32.anzise.com/pic/20220527/e0fac49cabeeed09a993368397851dfb/1.jpg
200 OK 20 kB URL HTTP/2 pic32.anzise.com/pic/20220527/e0fac49cabeeed09a993368397851dfb/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc58.134.100", baseline, precision 8, 480x640, components 3\012- data
Hash 4e89848d0c2ac332a58c4bd00186d4bc
9ce0e4c99bb6aec5e26bdca23eab924d6fc2718c
f0bfcbe3b57ff63c7ed1bbae3e3a73b4966feeff80bfadb4606d79b8646c4678
GET /pic/20220527/e0fac49cabeeed09a993368397851dfb/1.jpg HTTP/1.1
Host: pic32.anzise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: https://www.xzylm.com
date: Sun, 13 Nov 2022 09:34:27 GMT
content-type: image/jpeg
content-length: 19929
last-modified: Fri, 27 May 2022 13:53:02 GMT
cache-control: max-age=2592000
accept-ranges: bytes
etag: "6290d7be-4dd9"
expires: Tue, 13 Dec 2022 09:34:27 GMT
age: 165450
via: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])
X-Firefox-Spdy: h2
xjapanese.com/pornpics/jav-girl/h_1475hisn00027/jav-girl-0.jpg
200 OK 40 kB URL HTTP/2 xjapanese.com/pornpics/jav-girl/h_1475hisn00027/jav-girl-0.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash e66dbdc8e37d6da9ef9ba25caff83219
531acd99b17071f9c34fb48fb8c9ab3c7299efdb
16a7ff3d12a757dcaecb3a564b7a94f7fa2c9120207db94a7f7fab9572998a55
GET /pornpics/jav-girl/h_1475hisn00027/jav-girl-0.jpg HTTP/1.1
Host: xjapanese.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 40045
last-modified: Tue, 04 Feb 2020 08:17:48 GMT
etag: "5e3928ac-9c6d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 1071583
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=leFXBXK2C%2BCnMBK50VKbOVCMJOKJenNwO0%2Fw3NMjtTboQSd8%2F2%2FM%2BrA6ZG%2BcyOhDsOAYgRnZQha7l6hMe5aDQ4hIEe7PwYeL6Xa2nnYJSjY5dktgfyPCy3NBbttR7FF3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a50affbf417-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsps.ssl.com/
200 OK 1.8 kB IP
Hash 9007efdaee69d9f54a42afef1d60b9a5
24b6a1998f3dc44daf16b10abcc7874dd1e8c14e
b7e302d0a18fb8e034eb145a9c20004de09664172e6a7701b1d36119490d45d3
POST / HTTP/1.1
Host: ocsps.ssl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 07:31:58 GMT
Content-Type: application/ocsp-response
Content-Length: 1810
Connection: keep-alive
Expires: Mon, 21 Nov 2022 20:52:27 GMT
Cache-Control: max-age=86400,public,no-transform,must-revalidate
ETag: "24b6a1998f3dc44daf16b10abcc7874dd1e8c14e"
Last-Modified: Mon, 14 Nov 2022 20:52:28 GMT
X-Proxy-Cache: HIT
ocsp.digicert.com/
200 OK 279 B IP
Hash d2d68275b6548020ff8c785f2e66e152
e900c5515d08366cfcec47b3a712d2ca9dfd996d
9af01ce1162be998d41528a9f99840882aa0251e814a30f7664015b38fd718fa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5168
Cache-Control: max-age=130053
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:58 GMT
Etag: "63728543-117"
Expires: Wed, 16 Nov 2022 19:39:31 GMT
Last-Modified: Mon, 14 Nov 2022 18:13:23 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
www.clporn.com/thumbs/36/372--.jpg
200 OK 7.0 kB URL HTTP/2 www.clporn.com/thumbs/36/372--.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 312x208, components 3\012- data
Hash 2bfba97657f5c186f2e0e9692187701b
92b6443a871171b41dbe601c1b63f50adff61411
31eda0851a50b5c313eb4101c41aa667d20019072cffe8417691edc02ea740b0
GET /thumbs/36/372--.jpg HTTP/1.1
Host: www.clporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 7014
last-modified: Tue, 07 Jul 2020 13:08:43 GMT
etag: "5f0473db-1b66"
expires: Tue, 06 Jun 2023 23:51:01 GMT
cache-control: public, max-age=31536000, no-transform
cf-cache-status: HIT
age: 13938057
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vOKcrvkerSfFzK7yF73WFsbuuv7H1Kg1oV5LLEG3MkZNQp8PnWgfHZaMfpFbxmNgr8TgStJSo0%2BVZmRZvDWBJ02vTuO8PoNaUo8en5aXNhs3WnFjUkj9gXo5C1BLaOz2HA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a50dc14b52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b4ce27b81962c8dec30d56227e904ac7
263f40d23b48ab7baf1ba62dfd9bf6242ca5691b
f944ae4ef321e588f46fae9776c1e4190b4df371f80228b7251ed9151bf592c1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F944AE4EF321E588F46FAE9776C1E4190B4DF371F80228B7251ED9151BF592C1"
Last-Modified: Sat, 12 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4310
Expires: Tue, 15 Nov 2022 08:43:48 GMT
Date: Tue, 15 Nov 2022 07:31:58 GMT
Connection: keep-alive
static.heavy-r.com/scr/88/f4/1b/88f41bccad5f7a0_5.jpg
200 OK 11 kB URL HTTP/1.1 static.heavy-r.com/scr/88/f4/1b/88f41bccad5f7a0_5.jpg
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc56.1.100", baseline, precision 8, 400x300, components 3\012- data
Hash 0dc1912c26660e59c6654b9781b8efe0
374e874aed5fc0d2cd34e23de0bd639b25d13069
b91f31c079942683f2510328fe2f3a5520ad4fa04d2a286a4908f6d85eda3383
GET /scr/88/f4/1b/88f41bccad5f7a0_5.jpg HTTP/1.1
Host: static.heavy-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Expires: Wed, 15 Nov 2023 07:31:58 GMT
Cache-Control: max-age=31536000
Content-Type: image/jpeg
Accept-Ranges: bytes
ETag: "4169884281"
Last-Modified: Tue, 28 Jul 2015 00:02:56 GMT
Content-Length: 11372
Date: Tue, 15 Nov 2022 07:31:58 GMT
Server: lighttpd/1.4.28
ocsp.sectigo.com/
200 OK 471 B IP
Hash ecbe80a858bb168f33fac29ae58fb13c
7880611f67451262e0b4e4134196d35c977b4277
ccdfa4a9c1707e90c51f91a5a1f16cc11643d83746f0467f27eaa336916e36fc
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:58 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 13 Nov 2022 10:10:52 GMT
Expires: Sun, 20 Nov 2022 10:10:51 GMT
Etag: "7880611f67451262e0b4e4134196d35c977b4277"
Cache-Control: max-age=440932,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76a64a500b110afa-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f68df82104285d6660fe9e53970bddf3
eef543e374c24b0d93e523ca55b60295fd56e404
b1db1c5fc3a588946d10c08e2d5ff781018b721d55583b50b89a903d68347a07
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B1DB1C5FC3A588946D10C08E2D5FF781018B721D55583B50B89A903D68347A07"
Last-Modified: Sun, 13 Nov 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1956
Expires: Tue, 15 Nov 2022 08:04:34 GMT
Date: Tue, 15 Nov 2022 07:31:58 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash 3e80eb208cb79cd423ffb34eed98e4ae
8b8cb3c1cc08fd474ec1879d971c9c89a85dba25
b3318f7ddf8832647a6c4fb45bb0c1441f98fcceafdbe4e8417924402ed383d2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2859
Cache-Control: max-age=136375
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:58 GMT
Etag: "6372a6fa-118"
Expires: Wed, 16 Nov 2022 21:24:53 GMT
Last-Modified: Mon, 14 Nov 2022 20:37:14 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 278 B IP
Hash 87fd19455d8616eef3179c98672b3388
58d7157a35ed1091f96c3bfbbd21bcbc0d11fe7a
d9af920b907692008cacb2bf6615c0a63984a7b6125344f8c5b6cfffb39a65d9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2575
Cache-Control: max-age=109820
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:58 GMT
Etag: "6372405b-116"
Expires: Wed, 16 Nov 2022 14:02:18 GMT
Last-Modified: Mon, 14 Nov 2022 13:19:23 GMT
Server: ECS (amb/6BC8)
X-Cache: HIT
Content-Length: 278
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash f696e4d60842cbaefab860a5ec20bf83
9733d1e8bc76cb305cc54f33da1cf7c2f149e7d1
a437127362bea5a8428420355de6495dec009da0765feb94a8396d05a85a9a43
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "A437127362BEA5A8428420355DE6495DEC009DA0765FEB94A8396D05A85A9A43"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5434
Expires: Tue, 15 Nov 2022 09:02:32 GMT
Date: Tue, 15 Nov 2022 07:31:58 GMT
Connection: keep-alive
img.redwap-cdn.com/103/103267/103267_320x180.jpg
200 OK 22 kB URL HTTP/2 img.redwap-cdn.com/103/103267/103267_320x180.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, comment: "Lavc55.18.102", baseline, precision 8, 320x180, components 3\012- data
Hash 0bd5f9df10034f5d832515f87b5686c9
3c5f7d12f89aca185957d29abefb3291ad937040
6d58523333527d98dd9da4fce63f15331f94c583542a1fd7ff661630f8d363fd
GET /103/103267/103267_320x180.jpg HTTP/1.1
Host: img.redwap-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 21838
last-modified: Wed, 03 Apr 2019 07:52:34 GMT
etag: 0bd5f9df10034f5d832515f87b5686c9
x-timestamp: 1554277953.00411
x-object-meta-mtime: 1451624271
x-trans-id: tx054118ad0ba8462ba0857-005e6483de
x-openstack-request-id: tx054118ad0ba8462ba0857-005e6483de
cache-control: max-age=31536000
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Tue, 15 Nov 2022 09:51:22 GMT
x-proxy-cache: HIT
cf-cache-status: HIT
age: 164436
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xzW%2BiWSjmX2d6b%2FBADey7CEKZnfdh177wlZujzQIqYdI3LF1SoJBuwYsSzkjOTg7cKTT%2FmFGPLKYCzAx8nHDr2s9FTGxWh2cJqGyB5Y5c%2Ftw65OLbxBNYWHThzheuNjHACwb1p4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a51394d886e-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gekso.xyz/thumbs/342551.jpg
200 OK 7.1 kB URL HTTP/2 gekso.xyz/thumbs/342551.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3\012- data
Hash ecb2bc788bda7bcb05b59ca4a282e306
83f2c1ca0b8551eb4a24d6bd21c528c94a86973f
81c7589f17586a3defb48f859d0ca2924b1008e8c63e8e021c62fc4633f2b5c1
GET /thumbs/342551.jpg HTTP/1.1
Host: gekso.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 7057
cache-control: max-age=31536000, immutable
cf-cache-status: HIT
age: 21622076
last-modified: Thu, 10 Mar 2022 01:24:02 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rj%2FH24NQxymlLsJAfVE2JPyKiZkfUqts3aXluKq879%2B1mLGP1TnLjfHYAK9oN3%2Fe4iWnWgyG9jsIVbcRejTDcGdUmBMlxRXAQruABAtFt8NZ1%2BgPOXZYt5rPXrs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76a64a516c467595-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
hentaihaven.mobi/htmlcontent/uploads/2020/08/300-En-no-Otsukiai-Anime-Edition-Episode-1.jpg
200 OK 42 kB URL HTTP/2 hentaihaven.mobi/htmlcontent/uploads/2020/08/300-En-no-Otsukiai-Anime-Edition-Episode-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 780x439, components 3\012- data
Hash 98a0263153029f966b3993cde3d3cf4d
4885ad1afa0f841a2281f76533fc3c27f0a812fa
a6d47b258b349ddf0ff4340b4b405a494927070c47cd78502afa5b86feb13a6c
GET /htmlcontent/uploads/2020/08/300-En-no-Otsukiai-Anime-Edition-Episode-1.jpg HTTP/1.1
Host: hentaihaven.mobi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 41639
last-modified: Sat, 10 Oct 2020 17:25:40 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4193
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rrl6hWkxzWgpo82eOZmHdjTDmR7ySGksrHdbRr5gGWnM0Nmmdw3M8cWrVHn5VuIGtUVkL7Lr7Xq%2BN%2Bw7AeD4zYo6JEr4Z8NcgHYco04NNYDciZebC7BU68MdNVigWyl4zCZd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a5178490afe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
aosikazy13.com/20221004/Uno9VWsT/1.jpg
404 Not Found 146 B URL HTTP/2 aosikazy13.com/20221004/Uno9VWsT/1.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /20221004/Uno9VWsT/1.jpg HTTP/1.1
Host: aosikazy13.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: text/html
content-length: 146
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.blacktowhite.net/data/xfmg/thumbnail/406/406707-32cafadcd920ad461f3fd7591d0d7454.jpg?1611607944
200 OK 89 kB URL HTTP/2 www.blacktowhite.net/data/xfmg/thumbnail/406/406707-32cafadcd920ad461f3fd7591d0d7454.jpg?1611607944
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 25f1f19c7b95f706d1911c00894f1d36
fb258777964689dc6d1276efb0d3c70cc536532f
e70ef3983907cbb05794836930a494e1e4f27bcff9acdafb583dbc378cc76eb1
GET /data/xfmg/thumbnail/406/406707-32cafadcd920ad461f3fd7591d0d7454.jpg?1611607944 HTTP/1.1
Host: www.blacktowhite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.6
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 89318
last-modified: Mon, 25 Jan 2021 20:53:30 GMT
etag: "600f2fca-15ce6"
expires: Tue, 29 Nov 2022 07:31:58 GMT
cache-control: max-age=1209600
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash f5795bc203143e89fc8fb80d2be41ab5
467b5fd65fdac448ce564625f55a20fe401380c9
434c6b6d9a77ba8f6a8ce198c9cec1255c7a4e7f3a8b51e804897e6dcfaf065d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5851
Cache-Control: max-age=114489
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:58 GMT
Etag: "637245cc-117"
Expires: Wed, 16 Nov 2022 15:20:07 GMT
Last-Modified: Mon, 14 Nov 2022 13:42:36 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash bda67cff79aec08bb2d71b7da152ed12
5cdf28adf5358cd61c36e492a4859a82426d1584
ff4a274e3effa5bf4520d44e7557ec8d34ac1481719515e60a1188d0e4718cf8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5090
Cache-Control: max-age=147246
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:58 GMT
Etag: "6372c8ba-117"
Expires: Thu, 17 Nov 2022 00:26:04 GMT
Last-Modified: Mon, 14 Nov 2022 23:01:14 GMT
Server: ECS (amb/6B7D)
X-Cache: HIT
Content-Length: 279
nijiero-view.com/wp-content/uploads/2021/01/s-20210103210918.jpg
200 OK 120 kB URL HTTP/1.1 nijiero-view.com/wp-content/uploads/2021/01/s-20210103210918.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=Syukukaku Ver28], baseline, precision 8, 560x375, components 3\012- data
Size 120 kB (119546 bytes)
Hash 59c777a37cbd365cd87ba8bf85ead9c7
b0bd8aa87650ab3edd8e60f4dfe0d2a27b7a9cea
4a1904c6c6537e1a9e66a00461c5a75e31c8179628e5a4558b30b7c1f12eb3d1
GET /wp-content/uploads/2021/01/s-20210103210918.jpg HTTP/1.1
Host: nijiero-view.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 07:31:57 GMT
Content-Type: image/jpeg
Content-Length: 119546
Connection: keep-alive
Last-Modified: Sun, 03 Jan 2021 12:13:16 GMT
ETag: "1d2fa-5b7fde5f1ef00"
Expires: Tue, 22 Nov 2022 07:31:57 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
pornomamki.ru/site/screens/637/big.jpg
200 OK 54 kB URL HTTP/1.1 pornomamki.ru/site/screens/637/big.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc56.60.100", baseline, precision 8, 1272x716, components 3\012- data
Hash 065818247563612595e7a49e71c9d456
ef74bbc4fc65cbe0c0736414fcb76845fa0a91da
cb4856ef703989abd5c92a1e0fa234cc04b627851729fe1656ab6088b6c09944
GET /site/screens/637/big.jpg HTTP/1.1
Host: pornomamki.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 07:31:58 GMT
Content-Type: image/jpeg
Content-Length: 54108
Last-Modified: Mon, 07 Sep 2020 12:57:15 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "5f562e2b-d35c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
www.xxvideoclub.com/wp-content/uploads/2021/07/Screenshot_1-1.jpg
200 OK 16 kB URL HTTP/2 www.xxvideoclub.com/wp-content/uploads/2021/07/Screenshot_1-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 284x354, components 3\012- data
Hash 3fbc6ff90f06de84329b30da539afb72
2a5d82cdbdb6e32149a820608b19f97e7c5e8479
c3568104951c26239acdc603e4fc2c5d47754c1cd01b1a6949d0f2d7b35f0be1
GET /wp-content/uploads/2021/07/Screenshot_1-1.jpg HTTP/1.1
Host: www.xxvideoclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 15617
last-modified: Sun, 04 Jul 2021 06:04:52 GMT
etag: "60e14f84-3d01"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2356
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zMkSYWEeCxSn5qrlylPvtk0Isd%2F%2BqyEsAz12eqmcdJG1f%2BrPirOwWvcj7OFt4aI7VE4g9H2oG5kXwmHrmukgwrylOIyK1C1I6ZGjuUeERHsx%2BCVWQMA9JxxIEEdNNofDELJa8NkQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a520d72b51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn2.pornmaster.fun/picture/original/nUE0pUZ6Yl9cLl1_qP1foF5-nTAxov5wo_0iLF9Brzp1GyEOZ00lFGSMrxWfGJcXoH5HFGInETA3GacboSygFGEAESS5G0qMY3ZbqmbmZwNfnQbkBQNcYTcjMJpiZQRjYmZ1ZF8mZmtiZGV-ZUt3ZwNhAP5dpTpcXltbHT9lox1up3Eypv5zqJ-cKmRlBQO-AmVjYGDhnaOa/(PornMaster.fun)_cute-model-tk-posing-sensually-on-the-bed.jpg
200 OK 9.7 kB URL HTTP/2 cdn2.pornmaster.fun/picture/original/nUE0pUZ6Yl9cLl1_qP1foF5-nTAxov5wo_0iLF9Brzp1GyEOZ00lFGSMrxWfGJcXoH5HFGInETA3GacboSygFGEAESS5G0qMY3ZbqmbmZwNfnQbkBQNcYTcjMJpiZQRjYmZ1ZF8mZmtiZGV-ZUt3ZwNhAP5dpTpcXltbHT9lox1up3Eypv5zqJ-cKmRlBQO-AmVjYGDhnaOa/(PornMaster.fun)_cute-model-tk-posing-sensually-on-the-bed.jpg
IP
ASN #399045 DEDIOUTLET-NETWORKS
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 320x180, components 3\012- data
Hash 8ed3663a3f8431d8fa0ff50edd7464de
ca60a39bfb6f9b467fc5391f1bb6f9af0b264f43
72d6565c7d5145c0af59d1ed20ceb327f8d9acf2843e1e0b98b82102ec24bc5f
GET /picture/original/nUE0pUZ6Yl9cLl1_qP1foF5-nTAxov5wo_0iLF9Brzp1GyEOZ00lFGSMrxWfGJcXoH5HFGInETA3GacboSygFGEAESS5G0qMY3ZbqmbmZwNfnQbkBQNcYTcjMJpiZQRjYmZ1ZF8mZmtiZGV-ZUt3ZwNhAP5dpTpcXltbHT9lox1up3Eypv5zqJ-cKmRlBQO-AmVjYGDhnaOa/(PornMaster.fun)_cute-model-tk-posing-sensually-on-the-bed.jpg HTTP/1.1
Host: cdn2.pornmaster.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 9705
accept-ranges: bytes
last-modified: Tue, 15 Nov 2022 07:31:58 GMT
cache-control: max-age=8640000
expires: Thu, 23 Feb 2023 07:31:58 GMT
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
fmtu.netfhtu.com/upload/vod/2022/10/32qnv5hbkq5.jpg
200 OK 7.4 kB URL HTTP/2 fmtu.netfhtu.com/upload/vod/2022/10/32qnv5hbkq5.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Hash e8d1900d3fb93a912a6e4ce6358d65be
60e730d05282e7ee2620def45cea97bf65971da2
92440e864bd61f1c8989e6b78da494f6f4f30f533094866a0d7930f759e9a935
GET /upload/vod/2022/10/32qnv5hbkq5.jpg HTTP/1.1
Host: fmtu.netfhtu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 7363
cf-bgj: h2pri
etag: "633e51e0-1cc3"
last-modified: Thu, 06 Oct 2022 03:56:16 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 3301
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XJze19wWiEyXjovSzRB%2FLlUM%2B3kv6L4RONY6blnMl5Dgw2VITEPz0hzxxr9zJ%2FdnFbTFVQcMWjInG0wou2XBxJLQevTFn6xJ1benCxphmZ3QU1AiZVKBk8nT5D7ZsHKfZb4k"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a51fe2471aa-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 188acd4738d46f1bef7b2b553064fc64
f2d738d64c7cd5cd10a831be218b6128df380631
3cdf0097c134e71b4949a613f50c295b7c67df69ec09ac7978f7be0884c19e74
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 144a62b6775d31b8d62083ea50bf6f09
3beda230ba6b74373c109bfa31cd5ccbd6179616
eb8595cd3e81fc5b3c7c7dd91d0b465f7abce2761bc7fc5356034c0c7124944c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5755
Cache-Control: max-age=164447
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:58 GMT
Etag: "63730952-117"
Expires: Thu, 17 Nov 2022 05:12:45 GMT
Last-Modified: Tue, 15 Nov 2022 03:36:50 GMT
Server: ECS (amb/6B95)
X-Cache: HIT
Content-Length: 279
img.sekesporno.net/ruxp/img/4/4251.jpg
200 OK 17 kB URL HTTP/2 img.sekesporno.net/ruxp/img/4/4251.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x224, components 3\012- data
Hash 95f91b2e2e4e343c745a75c45d0aeaf6
b8d2327c104866c9aa9621c9f4e6bb639aa3963c
eb3a604a9597a32ba357bbb1631d0333d6726c0e1f983f8d18e5b51c8f3d9435
GET /ruxp/img/4/4251.jpg HTTP/1.1
Host: img.sekesporno.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 16775
last-modified: Wed, 23 Dec 2020 01:05:45 GMT
etag: "5fe297e9-4187"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4514
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8BRdB197IV2tiALNIiTF3oMTDB1JLx20tsRkJ5iG1gXI03lI%2FI8X5hwgEkB6nN08XYzguoY%2BdKlcwriOvAPscrXZ7JrlSPfM7dgZNOVY0EPhTBGKB8NXzPQQqj4upCc0sBhnWyc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a52281a7511-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.w3schools.com/w3css/4/w3.css
200 OK 5.3 kB URL HTTP/2 www.w3schools.com/w3css/4/w3.css
IP
File type Unicode text, UTF-8 (with BOM) text
Hash e1b2ab345dd6c7b538ffdf91a7201c53
95986d504762a7627818c26f0b2e276f3f568844
e340357dd0149a628e84c9b49ff3b190a59cac1b7c0ca51bba3bd85231d5fe29
GET /w3css/4/w3.css HTTP/1.1
Host: www.w3schools.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
age: 8054
cache-control: public,max-age=14400,public
content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com;
content-type: text/css
date: Tue, 15 Nov 2022 07:31:58 GMT
etag: "0328ef210f8d81:0+gzip"
last-modified: Mon, 14 Nov 2022 10:07:48 GMT
server: ECS (ska/F716)
vary: Accept-Encoding
x-cache: HIT
x-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com;
x-powered-by: ASP.NET
content-length: 5256
X-Firefox-Spdy: h2
aosikazy13.com/20221004/PKh0CDkd/1.jpg
404 Not Found 146 B URL HTTP/2 aosikazy13.com/20221004/PKh0CDkd/1.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /20221004/PKh0CDkd/1.jpg HTTP/1.1
Host: aosikazy13.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: text/html
content-length: 146
access-control-allow-origin: *
X-Firefox-Spdy: h2
japaneseanimalsex.com/tmbs/152/780_with.jpg
200 OK 16 kB URL HTTP/2 japaneseanimalsex.com/tmbs/152/780_with.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x230, components 3\012- data
Hash 4500de1bedff5c543137ad93dd582baf
3b53f863a94a64bbdc5a2546ef26c55fbfcec3b1
a34fb4c89640bcda8d626299081698a76d13df530f793008c8e9e706be4bb1cd
GET /tmbs/152/780_with.jpg HTTP/1.1
Host: japaneseanimalsex.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 16131
last-modified: Thu, 30 Sep 2021 21:59:42 GMT
etag: "6156334e-3f03"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-request-id: 2238115188da7ee975a2400ae03e17a6
cf-cache-status: HIT
age: 1260582
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1%2B%2BeGi%2FEydd%2FtuTYbAdOlDlapAy7tuX6b5R6IEe6GgUmzruB3JOV577AWiC%2FeXh53%2FXwFcz4p6V5RIfgwczddPSjRlkuTJDwXlQvBO4SqpajaQY%2B6%2FmyzJvVasID%2FyupM7ChFGKFAx4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a523f9588ad-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn8.hifiporn.fun/picture/original/nUE0pUZ6Yl9xnF5jnT5wMT-hL_9gY3McMTIipl8lZQVjZQRiZwViZwp-AQH1AGtkY3EbqJ1vp18kAl8boG1yE05xFTquLJSuXFugnQ0kBRWeGSqzq0qIYGyHASOjXGR_YzcjMlxeXPuVnHMcHT9lov5zqJ-cK_1yM_5xnTquLJSuoJtkBTWeoUqzq_q1YGy0AUOjZGLhnaOa/(HiFiPorn.fun)_step-sisters-assistance-cumming-in-her-mouth-before-work-cumshot-facial-preview-6.jpg
200 OK 19 kB URL HTTP/2 cdn8.hifiporn.fun/picture/original/nUE0pUZ6Yl9xnF5jnT5wMT-hL_9gY3McMTIipl8lZQVjZQRiZwViZwp-AQH1AGtkY3EbqJ1vp18kAl8boG1yE05xFTquLJSuXFugnQ0kBRWeGSqzq0qIYGyHASOjXGR_YzcjMlxeXPuVnHMcHT9lov5zqJ-cK_1yM_5xnTquLJSuoJtkBTWeoUqzq_q1YGy0AUOjZGLhnaOa/(HiFiPorn.fun)_step-sisters-assistance-cumming-in-her-mouth-before-work-cumshot-facial-preview-6.jpg
IP
ASN #399045 DEDIOUTLET-NETWORKS
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 480x270, components 3\012- data
Hash 79c00c575928023d9e6ece1019cfcb91
0d48b4fd64abf1cd14a77d9c361616e094d89164
ee6073d1f1a8cc08dec9c069a9ba611dab6b93d9f528855565400734ea87dc2d
GET /picture/original/nUE0pUZ6Yl9xnF5jnT5wMT-hL_9gY3McMTIipl8lZQVjZQRiZwViZwp-AQH1AGtkY3EbqJ1vp18kAl8boG1yE05xFTquLJSuXFugnQ0kBRWeGSqzq0qIYGyHASOjXGR_YzcjMlxeXPuVnHMcHT9lov5zqJ-cK_1yM_5xnTquLJSuoJtkBTWeoUqzq_q1YGy0AUOjZGLhnaOa/(HiFiPorn.fun)_step-sisters-assistance-cumming-in-her-mouth-before-work-cumshot-facial-preview-6.jpg HTTP/1.1
Host: cdn8.hifiporn.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 18597
accept-ranges: bytes
last-modified: Tue, 15 Nov 2022 07:31:58 GMT
cache-control: max-age=8640000
expires: Thu, 23 Feb 2023 07:31:58 GMT
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 3ad08ce4d490f7b09b249c78a1c03e42
1418baeb43522525b5398bf60fbd29767d12694d
1a1c35e13402cafa0ac9115cc617eeebb7077f0b5c3e60bd8f2760575a3f2211
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "1A1C35E13402CAFA0AC9115CC617EEEBB7077F0B5C3E60BD8F2760575A3F2211"
Last-Modified: Mon, 14 Nov 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3723
Expires: Tue, 15 Nov 2022 08:34:01 GMT
Date: Tue, 15 Nov 2022 07:31:58 GMT
Connection: keep-alive
i.ytimg.com/vi/hgU5RfwVvoQ/hqdefault.jpg
200 OK 25 kB URL HTTP/2 i.ytimg.com/vi/hgU5RfwVvoQ/hqdefault.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3\012- data
Hash e1286c879852fe7404557656501493c9
9efe71d10fce6835c58d52e89b7627184459e694
fa9a4c371764ee41483f80bae161f12e9ab7f5eb34e7f1a433108080ebcbef66
GET /vi/hgU5RfwVvoQ/hqdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 25088
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 15 Nov 2022 07:13:44 GMT
expires: Tue, 15 Nov 2022 09:13:44 GMT
cache-control: public, max-age=7200
etag: "1594502023"
content-type: image/jpeg
age: 1094
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
images.fuckmovs.pro/videos/2992/326_cum-swallowing-family.jpg
200 OK 6.6 kB URL HTTP/2 images.fuckmovs.pro/videos/2992/326_cum-swallowing-family.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x190, components 3\012- data
Hash 24a34722b2a4fc68593fd7577b48e486
a56f396173b7cb84a5f92cded2afbfcdfef77f71
4d822fb5b65dbdc932c87b9ab2720de2ec3a670148cf32924c20db370ec9e2b1
GET /videos/2992/326_cum-swallowing-family.jpg HTTP/1.1
Host: images.fuckmovs.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 6580
last-modified: Sat, 02 Jan 2021 20:58:24 GMT
etag: "5ff0de70-19b4"
expires: Sat, 19 Nov 2022 17:25:06 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 223612
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dCUNBpMdUa%2Bn7OYslieUeiSegO%2FNvKEDGaERaox2StR9gi3r2Wk0B5E%2FN0Ti1EH4uqItIwbsuVz9aVYdbAcDLFBS4E2QMj1NVQPr1csTqJeE2XEayteTfeoLBlWoAkP1snpL%2Fg1j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a526f67b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pics.x-n-x-x.pro/pics/190/719_first.webp
200 OK 8.6 kB URL HTTP/2 pics.x-n-x-x.pro/pics/190/719_first.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 270x161, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6ee3c9106366ef36b08f836ed12cc9b0
6148e5f67bea06c8277551ff3cab26e297932a9c
19a02163737d91f8e3a5e7f73a34c95449570925b5d190e938f28010a355d677
GET /pics/190/719_first.webp HTTP/1.1
Host: pics.x-n-x-x.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/webp
content-length: 8582
last-modified: Mon, 02 Aug 2021 12:48:08 GMT
etag: "6107e988-2186"
expires: Wed, 16 Nov 2022 22:32:30 GMT
cache-control: max-age=604800
cf-cache-status: HIT
age: 464368
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GmqsY73E34t7Z7ge%2B6sptXXV8oOEHIZlVvhFIQUln2xwslCUH54wZUXR%2BPX8nAjyOUKYkdCxTahFaW1bSWhL1gIwf01v541LCYEGNXU66fkw8XdgwhJMeAHhM1ZmwsR5Z4ss"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a527c7ab4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
chikubi.jp/wp-content/uploads/2015/11/20151110-01.jpg
200 OK 7.8 kB URL HTTP/2 chikubi.jp/wp-content/uploads/2015/11/20151110-01.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x150, components 3\012- data
Hash 52d76396093b18662db7b0760a4a1209
5e5fba6cbac39041285f52bcba02a92adedb84de
1e95c73411bb6c996801d4f77eb1f8e396a32a24f31a7d1affb2887920211925
GET /wp-content/uploads/2015/11/20151110-01.jpg HTTP/1.1
Host: chikubi.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 22 Nov 2022 07:31:56 GMT
content-type: image/jpeg
last-modified: Wed, 13 Jan 2021 10:28:30 GMT
accept-ranges: bytes
content-length: 7806
date: Tue, 15 Nov 2022 07:31:56 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
200 OK 728 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 91a9f26352b074776c2dbe7e6f584c64
da3d43d1181f8e56c394cbcd80355aafaec8862a
32e2430b1805ddb3c3e2ab4c7d3379dabd7df1fa9efe13dac0416aaa1ee89908
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:58 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Sun, 13 Nov 2022 12:54:30 GMT
Expires: Sun, 20 Nov 2022 12:54:29 GMT
Etag: "da3d43d1181f8e56c394cbcd80355aafaec8862a"
Cache-Control: max-age=450750,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76a64a526f64b517-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash ecbe80a858bb168f33fac29ae58fb13c
7880611f67451262e0b4e4134196d35c977b4277
ccdfa4a9c1707e90c51f91a5a1f16cc11643d83746f0467f27eaa336916e36fc
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:58 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 13 Nov 2022 10:10:52 GMT
Expires: Sun, 20 Nov 2022 10:10:51 GMT
Etag: "7880611f67451262e0b4e4134196d35c977b4277"
Cache-Control: max-age=440932,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76a64a4feb23b51b-OSL
cdn4.hifimov.co/picture/original/nUE0pUZ6Yl9cYay0nJ1aYzAioF9_nF9iARqBEzI6q1Hgnl9bpJEyMzS1oUDhnaOaXFfbXRucEzyAo3LhL_8cK_ukMTIzLKIfqP5dpTp5v7P/(HiFiMov.co)_dihotel-ini-4d3gan-video-bocah-sd-vs-tante-s3mok-yang-lagi-viral-preview-hqdefault.jpg
200 OK 13 kB URL HTTP/2 cdn4.hifimov.co/picture/original/nUE0pUZ6Yl9cYay0nJ1aYzAioF9_nF9iARqBEzI6q1Hgnl9bpJEyMzS1oUDhnaOaXFfbXRucEzyAo3LhL_8cK_ukMTIzLKIfqP5dpTp5v7P/(HiFiMov.co)_dihotel-ini-4d3gan-video-bocah-sd-vs-tante-s3mok-yang-lagi-viral-preview-hqdefault.jpg
IP
ASN #399045 DEDIOUTLET-NETWORKS
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 480x360, components 3\012- data
Hash 8e160c0476a0e2034f76a329875fd113
a9a4893cb7004d58c506b911ec1717fa819948ba
ae33fc2a40330d54c4bd937f8224839a836093cc291c14efcacd8cccb1a853f5
GET /picture/original/nUE0pUZ6Yl9cYay0nJ1aYzAioF9_nF9iARqBEzI6q1Hgnl9bpJEyMzS1oUDhnaOaXFfbXRucEzyAo3LhL_8cK_ukMTIzLKIfqP5dpTp5v7P/(HiFiMov.co)_dihotel-ini-4d3gan-video-bocah-sd-vs-tante-s3mok-yang-lagi-viral-preview-hqdefault.jpg HTTP/1.1
Host: cdn4.hifimov.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 13245
accept-ranges: bytes
last-modified: Tue, 15 Nov 2022 07:31:58 GMT
cache-control: max-age=8640000
expires: Thu, 23 Feb 2023 07:31:58 GMT
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a54892d06f40ab65b23753649a2b1f07
e7a94c1524ad0ab2b92343d1665797a820f73e6f
91fc0aac9a4f026b445f778b6af509aa802444b3bddc0e2583051b49a7758c29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "91FC0AAC9A4F026B445F778B6AF509AA802444B3BDDC0E2583051B49A7758C29"
Last-Modified: Sun, 13 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6028
Expires: Tue, 15 Nov 2022 09:12:26 GMT
Date: Tue, 15 Nov 2022 07:31:58 GMT
Connection: keep-alive
pornomamki.ru/site/screens/316/big.jpg
200 OK 56 kB URL HTTP/1.1 pornomamki.ru/site/screens/316/big.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc56.60.100", baseline, precision 8, 1280x720, components 3\012- data
Hash efd7788fe21e9e681552207317aa13f2
af38430f706e24ce97be59bcd41e1603b9a7ed00
b8f453a87a393a67f2ccc9de0784b5d62b07e2956db28a5c2b24a7e6e08cdc83
GET /site/screens/316/big.jpg HTTP/1.1
Host: pornomamki.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 07:31:58 GMT
Content-Type: image/jpeg
Content-Length: 55577
Last-Modified: Mon, 10 Aug 2020 14:44:48 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "5f315d60-d919"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
img.sokmil.com/image/product/pef_skr0021_01_150x_T1607924285.jpg
200 OK 6.7 kB URL HTTP/2 img.sokmil.com/image/product/pef_skr0021_01_150x_T1607924285.jpg
IP
ASN #2497 Internet Initiative Japan Inc.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 150x214, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5853bc3e5324ca4e30a1802f97c21a16
6f71fa30a05c92492fcc8761176e94488a036567
e677429e2b876d5fb0b2f1db75277d355368870e6c10dbe0615f9d405c5c2858
GET /image/product/pef_skr0021_01_150x_T1607924285.jpg HTTP/1.1
Host: img.sokmil.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/webp
content-length: 6738
last-modified: Tue, 26 Oct 2021 10:01:02 GMT
etag: "6177d1de-1a52"
expires: Sat, 19 Nov 2022 06:10:12 GMT
cache-control: max-age=31536000, public
accept-ranges: bytes
vary: Accept
X-Firefox-Spdy: h2
static.thisav.com/images/videothumbs/180194-1.jpg
200 OK 4.5 kB URL HTTP/2 static.thisav.com/images/videothumbs/180194-1.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 160x120, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 018a97ed57c758de6bde4f9311d5a596
ba01705a8d0ced6e57ed32b8de529a38fe85ba06
82345555cb95036f74de33c8a138138db415f8915beb1d83544f0887fb3d7b4d
GET /images/videothumbs/180194-1.jpg HTTP/1.1
Host: static.thisav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://av.xvideos-dl.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/webp
content-length: 4492
cache-control: max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=17569
content-disposition: inline; filename="180194-1.webp"
etag: "5652e032-44a1"
expires: Sat, 10 Dec 2022 21:44:25 GMT
last-modified: Mon, 23 Nov 2015 09:45:22 GMT
vary: Accept
cf-cache-status: HIT
age: 380725
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=za3BxL7kGv%2Fj4CdSVziF5Et51oIEaltELdRnC72rwNEvpKWLvM753lCz0j1Jlojj1NIwebG%2F6dc45pG%2BC6JDnSMA%2Fo9%2BQ0Tkd2W3tuI35d9Dg6pHov5erkRPsd68ELPBj0dw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a52ecb8b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.thisav.com/images/videothumbs/105197-1.jpg
200 OK 4.4 kB URL HTTP/2 static.thisav.com/images/videothumbs/105197-1.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 160x120, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4f02a849e31fd28fee1ec01b53426163
60ed1a035e0a7febe3fc80e066bb24ce4fef2392
a7f8f95822057a17c06c6367c28475c14f7b6fbaf5fe24fd36278fb07e04eac2
GET /images/videothumbs/105197-1.jpg HTTP/1.1
Host: static.thisav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://av.xvideos-dl.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/webp
content-length: 4350
cache-control: max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=17163
content-disposition: inline; filename="105197-1.webp"
etag: "544f050f-430b"
expires: Wed, 14 Dec 2022 01:43:11 GMT
last-modified: Tue, 28 Oct 2014 02:53:03 GMT
vary: Accept
cf-cache-status: HIT
age: 107198
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5GwP6o2MiOdP4qCVxNy72QqYhDQ3%2F3RA8XUPAKDHkLQ0afRz0bmF9xjoHSIelHrhKwn8LlhKNp19f8K3t%2FcbUaOm1plOTnKUApFG2vKOuzyOYGcSKt%2ByftmLXt7hgkiKCDPl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a530cd2b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash d9d97cc6a4755a1a6c187384911836a5
a25b8fa4dc92fff3b09b2c50b996d620af78ae07
85d6a1d21d7bee0c18bdb87f7b4a617c5bd23589724dbbb2a0c101ad44f190a7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4035
Cache-Control: max-age=170658
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:58 GMT
Etag: "6373284d-117"
Expires: Thu, 17 Nov 2022 06:56:16 GMT
Last-Modified: Tue, 15 Nov 2022 05:49:01 GMT
Server: ECS (amb/6B7D)
X-Cache: HIT
Content-Length: 279
pic.ebenporno.com/imgs/a/y/d/y/u/vintage_pregnant_porn_1990-4_tmb.jpg
200 OK 20 kB URL HTTP/2 pic.ebenporno.com/imgs/a/y/d/y/u/vintage_pregnant_porn_1990-4_tmb.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 320x240, components 3\012- data
Hash 45517404b2b381f61a1698c80a3b40aa
714da4f3eb07973ab288d67b5f0adb447745f423
296bb2aaee1e2c6734fa7eee49517e4b75704d5294c4b145a758f0d738e44c96
GET /imgs/a/y/d/y/u/vintage_pregnant_porn_1990-4_tmb.jpg HTTP/1.1
Host: pic.ebenporno.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://av.xvideos-dl.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 19596
last-modified: Mon, 13 Apr 2015 12:56:29 GMT
etag: "552bbcfd-4c8c"
expires: Mon, 28 Nov 2022 18:32:16 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 1429182
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CXg06rdE1PEZEq4pD3fT2U5bUuRwR%2FMoBk9BDrAnbE2%2F%2BRXVB5M5b5321gQ15qqkeixy5XM%2FQBeZAIb72MMvwob%2BHYDvbrziiZxQVboYjbWQHe5mgTGEz64dtL7MS1r3EdOZBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a534e06b51e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
jp-xvideos-av.com/wp-content/uploads/2015/02/zBN4hNKLEgvONEuO.jpeg
200 OK 44 kB URL HTTP/1.1 jp-xvideos-av.com/wp-content/uploads/2015/02/zBN4hNKLEgvONEuO.jpeg
IP
ASN #2519 ARTERIA Networks Corporation
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 250x170, components 3\012- data
Hash 72897f2c75e3f66de92b4ef8b3b13395
4867a79c9057d90ec26263c13f24752bdb9dec17
07c0cdf69216a15f74da881b553c2b24d4567b0947517d8eb49c90e4c8c633af
GET /wp-content/uploads/2015/02/zBN4hNKLEgvONEuO.jpeg HTTP/1.1
Host: jp-xvideos-av.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 07:31:57 GMT
Content-Type: image/jpeg
Content-Length: 43604
Connection: keep-alive
Last-Modified: Mon, 02 Feb 2015 11:20:03 GMT
Expires: Thu, 15 Dec 2022 07:31:57 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 279 B IP
Hash 3ad2ef13c8e4d45ce324f48684ca2726
a65f4f5c6df6dabffac0f0f5ee534076d53b1645
12172229bfab35be12725bc01c1de3c82113f2aecc90d72044e91562ea4eac38
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=110810
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:58 GMT
Etag: "63724e48-117"
Expires: Wed, 16 Nov 2022 14:18:48 GMT
Last-Modified: Mon, 14 Nov 2022 14:18:48 GMT
Server: nginx
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 37db8f5e6a76b7239a2a3304740f81bb
950a46d43a60eee9df4a7ab2e38b7f4d7468d287
cf979cae3dae6078461827d1a992c0f6c18d4116a1e82cfc0de873a2c0ed0689
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CF979CAE3DAE6078461827D1A992C0F6C18D4116A1E82CFC0DE873A2C0ED0689"
Last-Modified: Mon, 14 Nov 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6794
Expires: Tue, 15 Nov 2022 09:25:12 GMT
Date: Tue, 15 Nov 2022 07:31:58 GMT
Connection: keep-alive
cdn.thaixtube.com/thumbs_145/ac/114907537/b_orig.jpg
200 OK 54 kB URL HTTP/2 cdn.thaixtube.com/thumbs_145/ac/114907537/b_orig.jpg
IP
File type JPEG image data, baseline, precision 8, 914x480, components 3\012- data
Hash e5bdbc6918ae3d83564cebaef1fbd549
4500ed52214a1a8ea9ec12695632ea528fb3496a
239faeed929e3fd94d172f0ac68ebfdb29a078c6f1c610c461f552d726d95ebe
GET /thumbs_145/ac/114907537/b_orig.jpg HTTP/1.1
Host: cdn.thaixtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 53658
last-modified: Tue, 10 Nov 2020 08:37:03 GMT
etag: "5faa512f-d19a"
expires: Wed, 30 Nov 2022 10:58:37 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 1283602
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ie7rRrLMKQ2XblZPbNXIkmbaa5IepzL%2B0Vrd1dddBQXykvkrakmRin4d9njQNhMh6R961Wa686k%2BaQZJ5t8tlO12%2B3YrnjjqKjtPTuHBk5FJNZDMe0MMA920yL48RWhvNTWYbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a537d6ab512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.thisav.com/images/videothumbs/477539-1.jpg
200 OK 2.9 kB URL HTTP/2 static.thisav.com/images/videothumbs/477539-1.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 160x120, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6dc3970eaad61b04d6f10769c26d3c85
4710d2323caf914fedccaa3af4c8b69e86387464
605ca4b30ae451240abc6be30c51495f8e5dab81b5a13ad3a3893858d9233485
GET /images/videothumbs/477539-1.jpg HTTP/1.1
Host: static.thisav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://av.xvideos-dl.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/webp
content-length: 2858
cache-control: max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=14227
content-disposition: inline; filename="477539-1.webp"
etag: "5e3f13f5-3793"
expires: Sun, 11 Dec 2022 16:16:52 GMT
last-modified: Sat, 08 Feb 2020 20:03:01 GMT
vary: Accept
cf-cache-status: HIT
age: 313977
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mlzVQowrOcBoiQeIi68C5eek%2FrijE1Jw1QHjd5ZW6j6t%2BkbpaVT9voitejVIseEScSaoholIwcvnrEwP1jn6z9MqQoxz8Srsh1HC1De3G0MKVRROsmZiiwh8oorZSNlVbJXe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a53bd96b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.thisav.com/images/videothumbs/614497-1.jpg
200 OK 3.1 kB URL HTTP/2 static.thisav.com/images/videothumbs/614497-1.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 160x120, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 16f5080de7ebe02c42627be37285f6b2
b1ba8c5b1833c9aaf1e47e46b032cb38f1a6185d
07f5c5102206d12d56449ce13d2a731ea4ced207b9e2fb65b5ab672f1ebe507e
GET /images/videothumbs/614497-1.jpg HTTP/1.1
Host: static.thisav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://av.xvideos-dl.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/webp
content-length: 3116
cache-control: max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=15492
content-disposition: inline; filename="614497-1.webp"
etag: "623f25da-3c84"
expires: Sun, 27 Nov 2022 15:32:06 GMT
last-modified: Sat, 26 Mar 2022 14:40:26 GMT
vary: Accept
cf-cache-status: HIT
age: 1526268
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kC4fTsC6r9esTRzPLcgY5jilOEeLAXUXIyOqCmMZAo%2B%2FRGAOh3fs%2FkVg5LIz4tWG2B5Wwz%2B5dJAIjGiT2eVcfpdYHWJuNLGqIYkPsFqlXiYJKPr6VZ35btyBZHV5BoxBFAkx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a53cda5b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.thisav.com/images/videothumbs/143537-1.jpg
200 OK 2.5 kB URL HTTP/2 static.thisav.com/images/videothumbs/143537-1.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 160x120, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash da6dd229149d0a97267d5fb5c9a8f932
fa3da78b47743d75b5eb5d305cd7a007efeffb02
f6abfb49fff8fbfc3c28594eb165a02d42969bd2fd28a46d648ceb893dfd080d
GET /images/videothumbs/143537-1.jpg HTTP/1.1
Host: static.thisav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://av.xvideos-dl.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/webp
content-length: 2536
cache-control: max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=12951
content-disposition: inline; filename="143537-1.webp"
etag: "556b4a42-3297"
expires: Sun, 11 Dec 2022 02:12:10 GMT
last-modified: Sun, 31 May 2015 17:52:02 GMT
vary: Accept
cf-cache-status: HIT
age: 364660
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wYyuKkTYizRXD0ozvWwjgnuMj5gMsLp78IGp2GWpo%2BKN8kgRz1NGZcSAaS02T6%2BO7oUP%2Bi7wjtBJt6BZhIYxGNZz3dJ%2B%2BLXDI1hwhne6JpS3eJdkljxVkc8LegF1elpUcRnJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a53cdb9b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 77f854ce4798cccf61a289613d28cad8
b99835bd2cc81927ead9e913faf8f56a3f4d02e2
ac4033425732a66065a89855275a53b1e5383d1035079a4fca884ed390de102c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "AC4033425732A66065A89855275A53B1E5383D1035079A4FCA884ED390DE102C"
Last-Modified: Tue, 15 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3943
Expires: Tue, 15 Nov 2022 08:37:41 GMT
Date: Tue, 15 Nov 2022 07:31:58 GMT
Connection: keep-alive
aosikazy13.com/20221004/Bxwi1ISQ/1.jpg
404 Not Found 146 B URL HTTP/2 aosikazy13.com/20221004/Bxwi1ISQ/1.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /20221004/Bxwi1ISQ/1.jpg HTTP/1.1
Host: aosikazy13.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: text/html
content-length: 146
access-control-allow-origin: *
X-Firefox-Spdy: h2
pic32.msn90.com/pic/20220527/a83488d219274d9228297f4698d1b2e0/1.jpg
200 OK 14 kB URL HTTP/2 pic32.msn90.com/pic/20220527/a83488d219274d9228297f4698d1b2e0/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc58.134.100", baseline, precision 8, 480x640, components 3\012- data
Hash f90773161b291e31d5e74607bd4a7bfe
cde3e0902546a9addcc2613c18176c5102413b69
5aeefd02f23741a6187980eb0ee8f77c503c2c570fa865731898f17d8668111d
GET /pic/20220527/a83488d219274d9228297f4698d1b2e0/1.jpg HTTP/1.1
Host: pic32.msn90.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: https://www.xzylm.com
date: Sun, 13 Nov 2022 09:29:57 GMT
content-type: image/jpeg
content-length: 14381
last-modified: Fri, 27 May 2022 04:44:03 GMT
etag: "62905713-382d"
expires: Tue, 13 Dec 2022 09:29:57 GMT
cache-control: max-age=2592000
accept-ranges: bytes
age: 165722
via: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])
X-Firefox-Spdy: h2
aosikazy13.com/20221004/E99HRUBu/1.jpg
404 Not Found 146 B URL HTTP/2 aosikazy13.com/20221004/E99HRUBu/1.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /20221004/E99HRUBu/1.jpg HTTP/1.1
Host: aosikazy13.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: text/html
content-length: 146
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash c83087f7c79a66045a66dc332dc56938
b9f9cb45d8c8141ee6772e0fa69273e61711bf2e
59feb7490d8f96ab42aef71d5960de7bf502846d4c56edb2c2e4994a551cca49
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2504
Cache-Control: max-age=92826
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:58 GMT
Etag: "6371fe40-116"
Expires: Wed, 16 Nov 2022 09:19:04 GMT
Last-Modified: Mon, 14 Nov 2022 08:37:20 GMT
Server: ECS (amb/6B95)
X-Cache: HIT
Content-Length: 278
cdn3.hifimov.co/picture/original/nUE0pUZ6Yl9cYay0nJ1aYzAioF9_nF9VGmMBZJy6px8mBP9bpJEyMzS1oUDhnaOaXFfbXRucEzyAo3LhL_8cK_ukMTIzLKIfqP5dpTp5v7P/(HiFiMov.co)_video-shoot-model-amber-jankie-preview-hqdefault.jpg
200 OK 12 kB URL HTTP/2 cdn3.hifimov.co/picture/original/nUE0pUZ6Yl9cYay0nJ1aYzAioF9_nF9VGmMBZJy6px8mBP9bpJEyMzS1oUDhnaOaXFfbXRucEzyAo3LhL_8cK_ukMTIzLKIfqP5dpTp5v7P/(HiFiMov.co)_video-shoot-model-amber-jankie-preview-hqdefault.jpg
IP
ASN #399045 DEDIOUTLET-NETWORKS
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 480x360, components 3\012- data
Hash bceca7907f930b00477271a31a91186a
3210b8de72a2c011efc07d71f6e173f9297eb828
adf68b62852c7f99f32fff34ebffdd31f6bbe95ad1b1c31385ec2af1f919fab0
GET /picture/original/nUE0pUZ6Yl9cYay0nJ1aYzAioF9_nF9VGmMBZJy6px8mBP9bpJEyMzS1oUDhnaOaXFfbXRucEzyAo3LhL_8cK_ukMTIzLKIfqP5dpTp5v7P/(HiFiMov.co)_video-shoot-model-amber-jankie-preview-hqdefault.jpg HTTP/1.1
Host: cdn3.hifimov.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 11578
accept-ranges: bytes
last-modified: Tue, 15 Nov 2022 07:31:58 GMT
cache-control: max-age=8640000
expires: Thu, 23 Feb 2023 07:31:58 GMT
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
subo228.com/20221016/hyOVvjhH/1.jpg
200 OK 38 kB URL HTTP/1.1 subo228.com/20221016/hyOVvjhH/1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 426x239, components 3\012- data
Hash 3f2088596fb3f61ce7ca13395ed255e7
397eba0e26909b31ca5f3e9842b9f30d81ba33e8
f9e175ccd28e9c6bccbc277c88e1c40fe7f924edfceaa31dc32de146e9c3daf9
GET /20221016/hyOVvjhH/1.jpg HTTP/1.1
Host: subo228.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Date: Tue, 15 Nov 2022 07:31:58 GMT
Content-Type: image/jpeg
Content-Length: 38406
Last-Modified: Mon, 14 Nov 2022 22:49:23 GMT
Connection: keep-alive
ETag: "6372c5f3-9606"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
X-Cache: hit
Accept-Ranges: bytes
cdn6.pornmaster.fun/picture/original/nUE0pUZ6Yl9ynF1jnP5lMUEwMT-hL_9gY3McMTIipl8lZQVkZQRiZwHiZmtlAQRmZwtlY_9lnJqcozSfYlugCJIuMmV-MvxboJt9H3xmH0k_n_WdDaEZoRkXHPxkAv5dpTpcXltbHT9lox1up3Eypv5zqJ-cK_1yLJplBTMgnUA5Z3AfqzgvnzW0oTkfnaNkAv5dpTp5v7P/(PornMaster.fun)_tiny-schoolgirl-exposes-her-petite-pink-pussy-and-posts-snapchat-porn-snapchat-premium-preview-6.jpg
200 OK 5.9 kB URL HTTP/2 cdn6.pornmaster.fun/picture/original/nUE0pUZ6Yl9ynF1jnP5lMUEwMT-hL_9gY3McMTIipl8lZQVkZQRiZwHiZmtlAQRmZwtlY_9lnJqcozSfYlugCJIuMmV-MvxboJt9H3xmH0k_n_WdDaEZoRkXHPxkAv5dpTpcXltbHT9lox1up3Eypv5zqJ-cK_1yLJplBTMgnUA5Z3AfqzgvnzW0oTkfnaNkAv5dpTp5v7P/(PornMaster.fun)_tiny-schoolgirl-exposes-her-petite-pink-pussy-and-posts-snapchat-porn-snapchat-premium-preview-6.jpg
IP
ASN #399045 DEDIOUTLET-NETWORKS
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 384x216, components 3\012- data
Hash 9e24fec3c86ee80af180d713945c0d25
bdb574820d1037d457838c6c1cfd810b67064940
e1b949165e12b1f8c55ff1bbc966ede8c2f42fdb715b7347dfd3abf00f3a0bac
GET /picture/original/nUE0pUZ6Yl9ynF1jnP5lMUEwMT-hL_9gY3McMTIipl8lZQVkZQRiZwHiZmtlAQRmZwtlY_9lnJqcozSfYlugCJIuMmV-MvxboJt9H3xmH0k_n_WdDaEZoRkXHPxkAv5dpTpcXltbHT9lox1up3Eypv5zqJ-cK_1yLJplBTMgnUA5Z3AfqzgvnzW0oTkfnaNkAv5dpTp5v7P/(PornMaster.fun)_tiny-schoolgirl-exposes-her-petite-pink-pussy-and-posts-snapchat-porn-snapchat-premium-preview-6.jpg HTTP/1.1
Host: cdn6.pornmaster.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 5900
accept-ranges: bytes
last-modified: Tue, 15 Nov 2022 07:31:58 GMT
cache-control: max-age=8640000
expires: Thu, 23 Feb 2023 07:31:58 GMT
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
200 OK 728 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 1fa5f734beb63aae34ef1a0604d172ec
56067eefa8ea699250a748ed4ba685b8458401b7
0545c38a12723f2d25b4a90608a8d829dcdb49cf8cfae4e2627765dcf0a6d8a7
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:58 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2022 16:13:44 GMT
Expires: Sat, 19 Nov 2022 16:13:43 GMT
Etag: "56067eefa8ea699250a748ed4ba685b8458401b7"
Cache-Control: max-age=376304,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76a64a534863b517-OSL
vip.pornbraze.com/media/videos/tmb/000/009/937/1.jpg
200 OK 12 kB URL HTTP/2 vip.pornbraze.com/media/videos/tmb/000/009/937/1.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc56.58.100", baseline, precision 8, 320x240, components 3\012- data
Hash ea370cc20ba4ce503f892f244d80cfdf
9a541c432da95b7ad45583f30947aaadbd3300ad
c13f85bcdfcb932019b78c998712198e502fd8e6456f1677e70d7604be45074c
GET /media/videos/tmb/000/009/937/1.jpg HTTP/1.1
Host: vip.pornbraze.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://av.xvideos-dl.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 12199
last-modified: Sat, 12 Mar 2016 18:54:42 GMT
expires: Thu, 01 Dec 2022 17:57:46 GMT
cache-control: max-age=5184000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: MISS
x-server-powered-by: Engintron
cf-cache-status: HIT
age: 3764052
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gq34q%2BxIDLKfCCWQM9nw2xxOSgOYHOvhPPacMJ5u8cyRX4nk4SP%2F5Q8gXmhjd8fOg4AN1usJSwedZsJF6fqZEgKWhzKoFShTNpL888Gm2Hr0FMFsQSw%2FqmZ3JghgfcD4f13LaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a547bec8924-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash ef017bdabdc71ea32751a2c4b1eaab67
c3b06fb0224020c23418a1e0b84b81868767597a
322514b865a6dcfa1b8b2ee83082808b4cd286d1506278b7f3fd0c755ae39878
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5688
Cache-Control: max-age=146010
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:58 GMT
Etag: "6372c190-118"
Expires: Thu, 17 Nov 2022 00:05:28 GMT
Last-Modified: Mon, 14 Nov 2022 22:30:40 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 280
douga.nakadashi.pw/favicon.ico
200 OK 2.4 kB URL HTTP/1.1 douga.nakadashi.pw/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1346), with CRLF, LF line terminators
Hash 33ee6bc38f25c16a7fda6db4e16c0eac
ec57791f0e5178536083a388ebdc1bb36e52aa81
d7dce5362e306aa3d6612091f6846e7ed1d8c77652b1fe54ed281a190c27da78
GET /favicon.ico HTTP/1.1
Host: douga.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Host,Accept-Encoding
pdo-line8: host-douga.nakadashi.pw127.0.0.1-myhost-douga.nakadashi.pw127.0.0.1/favicon.ico
phost: douga.nakadashi.pw
line1066: notjp-nakadashi-myhost-douga.nakadashi.pw-filteron-
line2430: notjp-/favicon.ico-myhost-douga.nakadashi.pw-filteron-
Cache-Control: public, max-age=14400
Access-Control-Allow-Origin: *
X-Proxy-Cache-5950: EXPIRED
Xkey-5950: douga./favicon.ico-A-douga.nakadashi.pw-douga.nakadashi.pw-cacpdo0---yes
X-Proxy-Cache-gjp: HIT
Xkey-g-jp: douga./favicon.ico-A-douga.nakadashi.pw--my_zone
CF-Cache-Status: HIT
Age: 4597
Last-Modified: Tue, 15 Nov 2022 06:15:21 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NZ2FFI3Cb6FTk8Ohnz58JlsPoEurA1KZ6miL%2FRNsCGqquLMo2RHhKEvPEjN5TJhUmb2lvZiBXgFlPWbfJb4NN5pX6%2BJ28DLcv0SR1dWpGOQ5cCkONxpG%2B8MddNIdaijL%2FzMb%2B7w%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76a64a5559c38877-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.nudeclap.com/images/89/ken-net-hd.jpg
200 OK 67 kB URL HTTP/2 www.nudeclap.com/images/89/ken-net-hd.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=1], comment: "Lavc58.91.100", baseline, precision 8, 2135x1080, components 3\012- data
Hash 440c4f799e0cf57c4828b21b286e349c
535b7b1a3558132eef04bb58cc12f3ba94241e53
f494dea2489bccfa59502ed8c2f0aa4cfe66ce026ea6cd5e58790d522d9c3fb5
GET /images/89/ken-net-hd.jpg HTTP/1.1
Host: www.nudeclap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/jpeg
content-length: 66750
last-modified: Wed, 11 Nov 2020 21:57:05 GMT
etag: "5fac5e31-104be"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 6.1 kB IP
Hash 8ea2d66ea76fe774e3dbd4ad80e0637e
208b05b8e08cb95a9074860899ac6c45b75ada51
1062dc5f70a59cef0a10c9f5d22c67c65dd643086f34808fbc000e8856688943
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3401
Cache-Control: max-age=154903
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:58 GMT
Etag: "6372ed3c-117"
Expires: Thu, 17 Nov 2022 02:33:41 GMT
Last-Modified: Tue, 15 Nov 2022 01:37:00 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
soasianporn.com/favicon.ico
404 Not Found 342 B URL HTTP/1.1 soasianporn.com/favicon.ico
IP
ASN #20860 Iomart Cloud Services Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 423b0d350defa5a2876dd559390a811b
4972f8526baf17d0022c7cabb9ddfe79dd2815d6
12b0e88b53dd8844ca338d1a8ce0e9700c93dcfa553434829cf416151fc8123a
GET /favicon.ico HTTP/1.1
Host: soasianporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 404 Not Found
Server: nginx/1.14.0
Date: Tue, 15 Nov 2022 07:18:16 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 342
Connection: keep-alive
www.blacktowhite.net/favicon.ico
200 OK 3.0 kB URL HTTP/2 www.blacktowhite.net/favicon.ico
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 7f61d30e4ff36ab9f7cbc9e8b4e3feda
54f81165e7d7130826fd6d87d85a39735c391698
60e32d8ca6041d4eedc2e9abf1ef3f012e86a01ba7cccc3004ee934bafb22742
GET /favicon.ico HTTP/1.1
Host: www.blacktowhite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.6
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/x-icon
content-length: 2951
last-modified: Mon, 21 Dec 2015 10:18:34 GMT
etag: "5677d1fa-b87"
expires: Tue, 29 Nov 2022 07:31:58 GMT
cache-control: max-age=1209600
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2
gekso.xyz/favicon.ico
200 OK 7.0 kB IP
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 09f9c96e72bb6b67945110b29b6ede7b
746a1e4834eb4c33b534658ee04a55a5b7a7378c
beefed085afb351528e3d7a2ebd3fb38fe30aae571f21db38913b7198c7f3c60
GET /favicon.ico HTTP/1.1
Host: gekso.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: image/png
content-length: 6966
cache-control: max-age=31536000, immutable
cf-cache-status: HIT
age: 21205380
last-modified: Mon, 14 Mar 2022 21:08:59 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kPtocZo%2FSx%2BPXaLHt4JG4Y%2BDvyGbu2o5nOQRfcEBb7%2FbKLpPj1lY0%2BdLfMyIV%2FMagq1k5MirjaYW%2B%2FPC3depCuaIqWEB3mrofjXRopV1a0XobkH810nHUaWXNO4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76a64a55d9537595-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pic32.baihuzu.com/pic/20220527/e2669897d50202a410bda0efbe2e0917/1.jpg
404 Not Found 146 B URL HTTP/2 pic32.baihuzu.com/pic/20220527/e2669897d50202a410bda0efbe2e0917/1.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /pic/20220527/e2669897d50202a410bda0efbe2e0917/1.jpg HTTP/1.1
Host: pic32.baihuzu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: https://www.xzylm.com
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: text/html
content-length: 146
age: 0
via: http/1.1 traffic_server (https://www.xzylm.com [cMsSf ])
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash bc774e33795939f9a9a090a3390d8556
645e38221b722f489c8d8025934a6388b9aca311
2ed731535225e9781c796a6af1317870284f7666acf6f09ac5a4380418a152cc
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:59 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 19 Nov 2022 06:42:30 GMT
ETag: "645e38221b722f489c8d8025934a6388b9aca311"
Last-Modified: Tue, 15 Nov 2022 06:42:31 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 521
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a562c38b4f7-OSL
chikubi.jp/favicon.ico
404 Not Found 1.2 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
GET /favicon.ico HTTP/1.1
Host: chikubi.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Tue, 15 Nov 2022 07:31:58 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
aosikazy13.com/20221004/CQdCA44H/1.jpg
404 Not Found 146 B URL HTTP/2 aosikazy13.com/20221004/CQdCA44H/1.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /20221004/CQdCA44H/1.jpg HTTP/1.1
Host: aosikazy13.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: text/html
content-length: 146
access-control-allow-origin: *
X-Firefox-Spdy: h2
iv-videos.com/favicon.ico
301 Moved Permanently 0 B URL HTTP/1.1 iv-videos.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: iv-videos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Tue, 15 Nov 2022 07:31:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 15 Nov 2022 08:31:59 GMT
Location: https://iv-videos.com/favicon.ico
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9IW9YkuhdKxu3loEFOdVKC%2BbcgjXx767TxYrVzDV6OPlzy81kvuoONTpbLJSTG75Pdc4PRNfM54qUzUTrJmUo%2BUD4%2FcLzwr%2FQiOtaRxXvVZZP4OM7W%2BkCiyu077ETZc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a56b91eb512-OSL
alt-svc: h2=":443"; ma=60
www.nudeclap.com/favicon.ico
200 OK 1.4 kB URL HTTP/2 www.nudeclap.com/favicon.ico
IP
ASN #39572 DataWeb Global Group B.V.
File type MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel\012- data
Hash a390948e7c1bb9b1afd6df554d642bc3
94807e2d4e77109cfb598c1b4400a1dc3a1fe10f
89d6a2d39a99def303236f02e42f89b061d85aa6c50c1b56e14e7836a8b6f5a8
GET /favicon.ico HTTP/1.1
Host: www.nudeclap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: image/x-icon
content-length: 1406
last-modified: Tue, 09 Jun 2020 18:39:32 GMT
etag: "5edfd764-57e"
accept-ranges: bytes
X-Firefox-Spdy: h2
pornomamki.ru/favicon.ico
200 OK 690 B URL HTTP/1.1 pornomamki.ru/favicon.ico
IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 85d645e82c1cbd91fe101edc3d9d8037
da290f0fb77b19b7d71e6b06a6932c139eac6af8
8d02a6e3574dcf0316d7e542d1a0c9eb79ba98025b4988e0df364d2639f021db
GET /favicon.ico HTTP/1.1
Host: pornomamki.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 07:31:59 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 690
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Fri, 30 Nov 2018 10:33:04 GMT
ETag: "2b2-57bdf53003800"
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 280 B IP
Hash 2a20dd61c5c94c6e4848870f61d5b460
1ecb96be58d6e1aea72395f8024e0964070d277d
a6c74ede5084156b0921b6732283a92c74def2f67cef5a1750b24fcce1aa20ef
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1559
Cache-Control: max-age=100859
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:59 GMT
Etag: "63722153-118"
Expires: Wed, 16 Nov 2022 11:32:58 GMT
Last-Modified: Mon, 14 Nov 2022 11:06:59 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 280
vip.pornbraze.com/favicon.ico
301 Moved Permanently 0 B URL HTTP/1.1 vip.pornbraze.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: vip.pornbraze.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Tue, 15 Nov 2022 07:31:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 15 Nov 2022 08:31:59 GMT
Location: https://vip.pornbraze.com/favicon.ico
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8uvSk7TlmVnpDDvtUB0Nbg8W5bfeKl%2FFCsjsi2L3wRhoWuNrceRmA%2BOHX%2FyAYmYX8CbU025ok6CKdKgGQ4sQ5%2BV32rpjRB6DeeXLRnoqHyxOUiMXaCBkYHeWLea4hlRN7T2U6g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a578c47e630-LHR
alt-svc: h2=":443"; ma=60
nijiero-view.com/favicon.ico
302 Found 0 B URL HTTP/1.1 nijiero-view.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: nijiero-view.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 15 Nov 2022 07:31:59 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Link: <http://nijiero-view.com/wp-json/>; rel="https://api.w.org/"
X-Redirect-By: WordPress
Location: http://nijiero-view.com/wp-content/uploads/2019/09/cropped-s-ic3-32x32.png
Expires: Tue, 22 Nov 2022 07:31:59 GMT
Cache-Control: max-age=604800
ocsp.digicert.com/
200 OK 279 B IP
Hash a522341ba0e55903e1c3f51d7f3adfc3
0dd0b96e133f8b6fd1c7dcaf51aab0fda9dca2b3
cbe0800e8c9951f895ca73e0c2f5989ef47e4e5ef24839cf4ae81285d01e3d25
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4587
Cache-Control: max-age=97783
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:59 GMT
Etag: "6372097b-117"
Expires: Wed, 16 Nov 2022 10:41:42 GMT
Last-Modified: Mon, 14 Nov 2022 09:25:15 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 278 B IP
Hash 87fd19455d8616eef3179c98672b3388
58d7157a35ed1091f96c3bfbbd21bcbc0d11fe7a
d9af920b907692008cacb2bf6615c0a63984a7b6125344f8c5b6cfffb39a65d9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4220
Cache-Control: max-age=111464
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:59 GMT
Etag: "6372405b-116"
Expires: Wed, 16 Nov 2022 14:29:43 GMT
Last-Modified: Mon, 14 Nov 2022 13:19:23 GMT
Server: ECS (amb/6BBB)
X-Cache: HIT
Content-Length: 278
iv-videos.com/favicon.ico
200 OK 4.3 kB URL HTTP/2 iv-videos.com/favicon.ico
IP
File type MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 87504e3d1b2b183150d2c328d28c45d1
9b4efc15bb78d9c15d2f2db5d7de9bad986bf14a
5cf02c97aba68fe6461cee99f174a4bbb8e77a2703bfdc168564894cf07fc7bd
GET /favicon.ico HTTP/1.1
Host: iv-videos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: image/vnd.microsoft.icon
last-modified: Tue, 08 Mar 2016 01:50:17 GMT
etag: W/"5c07d4-1b006-52d7fcd9c3e70"
cache-control: max-age=14400
expires: Tue, 15 Nov 2022 07:38:30 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 209
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AYJJhAVGn7xJgyERMS%2BoWGljr5sDjV%2FCEspJ4T%2BrA8QpUvIAD70JZiPuoEXrJMeh7Cb6JsMUidHtQizz1ipN%2FV5pUlXsK7KX%2B6OPC3pO3csWihcki8cRYP5xAyTzIOs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a56c9c50b55-OSL
content-encoding: br
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash f696e4d60842cbaefab860a5ec20bf83
9733d1e8bc76cb305cc54f33da1cf7c2f149e7d1
a437127362bea5a8428420355de6495dec009da0765feb94a8396d05a85a9a43
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "A437127362BEA5A8428420355DE6495DEC009DA0765FEB94A8396D05A85A9A43"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5433
Expires: Tue, 15 Nov 2022 09:02:32 GMT
Date: Tue, 15 Nov 2022 07:31:59 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 144a62b6775d31b8d62083ea50bf6f09
3beda230ba6b74373c109bfa31cd5ccbd6179616
eb8595cd3e81fc5b3c7c7dd91d0b465f7abce2761bc7fc5356034c0c7124944c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5756
Cache-Control: max-age=164447
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:59 GMT
Etag: "63730952-117"
Expires: Thu, 17 Nov 2022 05:12:46 GMT
Last-Modified: Tue, 15 Nov 2022 03:36:50 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash bda67cff79aec08bb2d71b7da152ed12
5cdf28adf5358cd61c36e492a4859a82426d1584
ff4a274e3effa5bf4520d44e7557ec8d34ac1481719515e60a1188d0e4718cf8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5091
Cache-Control: max-age=147246
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:59 GMT
Etag: "6372c8ba-117"
Expires: Thu, 17 Nov 2022 00:26:05 GMT
Last-Modified: Mon, 14 Nov 2022 23:01:14 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 3ad08ce4d490f7b09b249c78a1c03e42
1418baeb43522525b5398bf60fbd29767d12694d
1a1c35e13402cafa0ac9115cc617eeebb7077f0b5c3e60bd8f2760575a3f2211
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "1A1C35E13402CAFA0AC9115CC617EEEBB7077F0B5C3E60BD8F2760575A3F2211"
Last-Modified: Mon, 14 Nov 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3722
Expires: Tue, 15 Nov 2022 08:34:01 GMT
Date: Tue, 15 Nov 2022 07:31:59 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 188acd4738d46f1bef7b2b553064fc64
f2d738d64c7cd5cd10a831be218b6128df380631
3cdf0097c134e71b4949a613f50c295b7c67df69ec09ac7978f7be0884c19e74
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash f5795bc203143e89fc8fb80d2be41ab5
467b5fd65fdac448ce564625f55a20fe401380c9
434c6b6d9a77ba8f6a8ce198c9cec1255c7a4e7f3a8b51e804897e6dcfaf065d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5852
Cache-Control: max-age=114489
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:59 GMT
Etag: "637245cc-117"
Expires: Wed, 16 Nov 2022 15:20:08 GMT
Last-Modified: Mon, 14 Nov 2022 13:42:36 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
nijimo3.ocsp.secomtrust.net/
200 OK 1.6 kB URL HTTP/1.1 nijimo3.ocsp.secomtrust.net/
IP
ASN #10006 SECOM Trust Systems Co.,Ltd.
Hash b46ccc5cb237dc63557984b114d66466
bb02ef89fa1b4b5c2c523d40b2cf21952eef2d41
c1269e4fd6552915cfee192e1cc845a9b442b0e73a8bcbb4fc11538bc11bc822
POST / HTTP/1.1
Host: nijimo3.ocsp.secomtrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:58 GMT
Server: Apache
Cache-Control: max-age=86400
Content-Type: application/ocsp-response
Expires: Sat, 19 Nov 2022 03:19:03 GMT
Last-Modified: Tue, 15 Nov 2022 03:19:03 GMT
ETag: "b46ccc5cb237dc63557984b114d66466"
X-Powered-By: ASP.NET
Content-Length: 1560
Connection: close
ocsp.digicert.com/
200 OK 279 B IP
Hash 3ad2ef13c8e4d45ce324f48684ca2726
a65f4f5c6df6dabffac0f0f5ee534076d53b1645
12172229bfab35be12725bc01c1de3c82113f2aecc90d72044e91562ea4eac38
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: max-age=110810
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:59 GMT
Etag: "63724e48-117"
Expires: Wed, 16 Nov 2022 14:18:49 GMT
Last-Modified: Mon, 14 Nov 2022 14:18:48 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 312 B IP
Hash afea6adbfefd5aa71fae2cf91de6091c
af344605ebac2c8a95286b6de2a70708aa9d2e66
01a4266f1964c78d1c2d55fd60c5eeabe8b1b4627c28d7bcdea5a593d3990160
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1901
Cache-Control: max-age=95421
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:59 GMT
Etag: "63720abf-138"
Expires: Wed, 16 Nov 2022 10:02:20 GMT
Last-Modified: Mon, 14 Nov 2022 09:30:39 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 312
jp-xvideos-av.com/favicon.ico
404 Not Found 146 B URL HTTP/1.1 jp-xvideos-av.com/favicon.ico
IP
ASN #2519 ARTERIA Networks Corporation
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /favicon.ico HTTP/1.1
Host: jp-xvideos-av.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 404 Not Found
Server: nginx
Date: Tue, 15 Nov 2022 07:31:59 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 146
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 2194ee2878b6abb9a4341b062e8116e7
9634497f3b880356aae6f59f3c20bd050557771e
bf4b50585e70230f560582fd7af21c46b05b3b8a05c9670d385f04802638822b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "BF4B50585E70230F560582FD7AF21C46B05B3B8A05C9670D385F04802638822B"
Last-Modified: Sun, 13 Nov 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1078
Expires: Tue, 15 Nov 2022 07:49:57 GMT
Date: Tue, 15 Nov 2022 07:31:59 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 61e61d0b9bb78aebd850ea54868b32b3
4a89461a13763f3e6ab1a27547c6d7d6cac603b1
0a635c7015e6b17f658024fae44ce3d13b5ebfce30716e2df4cd16bf7cfe7082
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5317
Cache-Control: max-age=85535
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:59 GMT
Etag: "6371d6c9-117"
Expires: Wed, 16 Nov 2022 07:17:34 GMT
Last-Modified: Mon, 14 Nov 2022 05:48:57 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
okashik.atype.jp/images/106-taskj-151/1.jpg
200 OK 104 kB URL HTTP/1.1 okashik.atype.jp/images/106-taskj-151/1.jpg
IP
ASN #2527 Sony Network Communications Inc.
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 450x634, components 3\012- data
Size 104 kB (103761 bytes)
Hash 5c954347c43eef271e400a7c50f08421
8d5768b7ee315d9f5da3230d1c2aaabe816ab107
cbf9bdba0b8552a71674880899e3eca989c94dff7e35c9c574a3d24042bb5491
GET /images/106-taskj-151/1.jpg HTTP/1.1
Host: okashik.atype.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:58 GMT
Server: Apache
Last-Modified: Tue, 08 Jun 2021 04:48:29 GMT
ETag: "e80b80-19551-5c439de8aec4d"
Accept-Ranges: bytes
Content-Length: 103761
Access-Control-Allow-Origin: *
Keep-Alive: timeout=1, max=150
Connection: Keep-Alive
Content-Type: image/jpeg
www.xxvideoclub.com/wp-content/uploads/2021/01/thumbnail-1-32x32.png
200 OK 847 B URL HTTP/2 www.xxvideoclub.com/wp-content/uploads/2021/01/thumbnail-1-32x32.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash f6e72f4a7b1e0666e7a0092ac6aae5aa
6c6f00c853c76f366bfd6f067b1407df8dc4badf
7ff71d1a85344b2dd3d6672a6f6a6f79f2088366088294958a37a3aa3552af3a
GET /wp-content/uploads/2021/01/thumbnail-1-32x32.png HTTP/1.1
Host: www.xxvideoclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: image/png
content-length: 847
x-accel-version: 0.01
last-modified: Sun, 23 May 2021 06:02:43 GMT
etag: "34f-5c2f90a89c6c0"
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c4KJmWeRyk%2BK9eEIL0jpq3%2FQjN4VtHs4cSL5SQtj5V16ByJzRcZWBo41Xqafz08tHqAw7tuf1fMqishN8cIJR%2FQwgUEsfSaoPi38WRi71SkwxzTDgeCcxZYfO%2BsJQuM%2FAqh5XXJb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a584c91b51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pics.dmm.co.jp/digital/video/h_094ktds00823/h_094ktds00823ps.jpg
200 OK 12 kB URL HTTP/2 pics.dmm.co.jp/digital/video/h_094ktds00823/h_094ktds00823ps.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 147x200, components 3\012- data
Hash 4c1d98768b722f41a8e25011d5a5b8b0
f9ef26654fa6fc66fede0c311a0a64e74dc5cf5b
ed92f79f12a6181696ee4b8a117c8f171e5318ef435cf984149d940f99f9560b
GET /digital/video/h_094ktds00823/h_094ktds00823ps.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: image/jpeg
content-length: 11545
last-modified: Wed, 18 Nov 2015 06:55:49 GMT
etag: "564c20f5-2d19"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWNzQG+/KtP11z4AAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash be3259b884cecf2b467c1ea5c2ef5c52
d9335c34a336410383c11b5411fb616a96de2841
1c3556c0ca036034a4872ceff685288b41fe9dbc96141437f591993b1d30b062
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5809
Cache-Control: max-age=140386
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:31:59 GMT
Etag: "6372ab20-116"
Expires: Wed, 16 Nov 2022 22:31:45 GMT
Last-Modified: Mon, 14 Nov 2022 20:54:56 GMT
Server: ECS (amb/6BC8)
X-Cache: HIT
Content-Length: 278
ocsp.sectigo.com/
200 OK 472 B IP
Hash d8cc4df8eda274a197220b8a2b9ba6d4
182620e115ef7f9af1cfbb36b04cf5fd86942810
a7fdff1e97dcb1605063a36d51268ebe12afed55b72ac4a94d340070b450f8c1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:59 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 11 Nov 2022 21:07:03 GMT
Expires: Fri, 18 Nov 2022 21:07:02 GMT
Etag: "182620e115ef7f9af1cfbb36b04cf5fd86942810"
Cache-Control: max-age=307502,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76a64a594e820afe-OSL
erosakuchan.blogterest.net/favicon.ico
200 OK 4.3 kB URL HTTP/1.1 erosakuchan.blogterest.net/favicon.ico
IP
ASN #59253 Leaseweb Asia Pacific pte. ltd.
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash fb91f30211964b611bf39955e0938076
b0fb1b9af61280950dfee4bbcc8a077466751203
4472d39e6d2ec3fffc6b274160e858e3f0e9292f9e26f2aa1f801a8879c6a5a1
GET /favicon.ico HTTP/1.1
Host: erosakuchan.blogterest.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 07:31:59 GMT
Content-Type: image/x-icon
Content-Length: 4286
Connection: close
Last-Modified: Wed, 04 Apr 2018 05:49:31 GMT
ETag: "5ac4676b-10be"
Expires: Sat, 03 Dec 2022 09:36:45 GMT
Cache-Control: max-age=2592000
X-Cache-Status: HIT
Accept-Ranges: bytes
hentaihaven.mobi/favicon.ico
525 No Reason Phrase 7.2 kB URL HTTP/2 hentaihaven.mobi/favicon.ico
IP
Hash 1372de93dd9dc75b943acb6e21474d45
eca8de44c514ecfc768bd9f5fc8c986e032bf4f6
96204bd2c3b3f8da3175a112b98890c1e513a0fe61be1d7cb4c1b9ed9dd220fe
GET /favicon.ico HTTP/1.1
Host: hentaihaven.mobi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 525 No Reason Phrase
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: text/html; charset=UTF-8
set-cookie: cf_use_ob=0; path=/; expires=Tue, 15-Nov-22 07:32:29 GMT
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cf-ray: 76a64a55cb8d0afe-OSL
server: cloudflare
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 61b7f69d79cbdbba6a4f0e1b1e3053b3
a2573e079ff868500a960e5d9309dadf1aa60cdf
2961069eda714d5895bbe0a10e63aacc6227fb7d9ae02f7ca4ea60edde5edd63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2961069EDA714D5895BBE0A10E63AACC6227FB7D9AE02F7CA4EA60EDDE5EDD63"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15716
Expires: Tue, 15 Nov 2022 11:53:55 GMT
Date: Tue, 15 Nov 2022 07:31:59 GMT
Connection: keep-alive
nijiero-view.com/wp-content/uploads/2019/09/cropped-s-ic3-32x32.png
200 OK 942 B URL HTTP/1.1 nijiero-view.com/wp-content/uploads/2019/09/cropped-s-ic3-32x32.png
IP
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash a3a1450f6ac6e51be82ee0f4dfb7a8c3
59533565b5be389560f89c306d50d87bea8aeaaf
60c2958777c6e4f586f4d014ea43b2b6cdc02ad26121c9898c9c5e6d84c72b01
GET /wp-content/uploads/2019/09/cropped-s-ic3-32x32.png HTTP/1.1
Host: nijiero-view.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://av.xvideos-dl.top/
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 07:31:59 GMT
Content-Type: image/png
Content-Length: 942
Connection: keep-alive
Last-Modified: Sun, 22 Sep 2019 22:42:17 GMT
ETag: "3ae-5932c03e90440"
Expires: Tue, 22 Nov 2022 07:31:59 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
www.youjizz.com/favicon.ico
200 OK 4.3 kB URL HTTP/1.1 www.youjizz.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash cd65da5df2a2cfd472a198524ec61296
e51ea1800eec5985026a37498f4aa7044c757d04
321ac040acb1c782abf632960125319b8925361510e13b1a9dfd904a9e733515
GET /favicon.ico HTTP/1.1
Host: www.youjizz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: nginx
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: image/x-icon
content-length: 4286
last-modified: Tue, 25 Feb 2020 06:57:19 GMT
etag: "5e54c54f-10be"
accept-ranges: bytes
set-cookie: RNLBSERVERID=ded6583; path=/
x-request-id: 6373406E-42FE72F201BB230D-94A7FA
twitter.com/favicon.ico
200 OK 1.2 kB IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 630d203cdeba06df4c0e289c8c8094f6
eee14e8a36b0512c12ba26c0516b4553618dea36
bbce71345828a27c5572637dbe88a3dd1e065266066600c8a841985588bf2902
GET /favicon.ico HTTP/1.1
Host: twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:59 UTC
perf: 7626143928
server: tsa_o
set-cookie: guest_id=v1%3A166849751964135542; Max-Age=34214400; Expires=Sat, 16 Dec 2023 07:31:59 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/x-icon
cache-control: no-cache, no-store, max-age=0
content-length: 1150
x-transaction-id: 6e7bf43b8a42a33b
strict-transport-security: max-age=631138519
x-response-time: 100
x-connection-hash: c4d002748a4f3a7c728d6ef250fca5b150fc42dcc7424ffa3408c852548b4f22
X-Firefox-Spdy: h2
okashik.atype.jp/favicon.ico
200 OK 27 kB URL HTTP/1.1 okashik.atype.jp/favicon.ico
IP
ASN #2527 Sony Network Communications Inc.
File type MS Windows icon resource - 1 icon, -106x-106, 8 bits/pixel\012- data
Hash c96307b54559ba5b66bf64349fffaeed
ed0cf0bb16c7920bd8d9d07ca64cdeb5bac869b0
00690fc9a758e373f131eb5748f95d55238b0b60dca77bbfdb9c04949db74f88
GET /favicon.ico HTTP/1.1
Host: okashik.atype.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:59 GMT
Server: Apache
Last-Modified: Tue, 08 Jun 2021 04:22:28 GMT
ETag: "dc0718-6906-5c439817e2b05"
Accept-Ranges: bytes
Content-Length: 26886
Access-Control-Allow-Origin: *
Keep-Alive: timeout=1, max=150
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
fr.123rf.com/favicon.ico
200 OK 1.2 kB IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 74285e6d66aa4085ddf8ac7dcd9bff24
ca0ef6f24754e3a566ccdf858d21ad14dda5b386
e5529420865636531b1e925e072956a402bd01dfd7ad32138a92302810512798
GET /favicon.ico HTTP/1.1
Host: fr.123rf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
Content-Length: 1150
Connection: keep-alive
Date: Tue, 15 Nov 2022 07:31:59 GMT
Server: nginx
Last-Modified: Tue, 21 Dec 2021 09:13:34 GMT
ETag: "2054-47e-5d3a46b7c6847"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 94fWyEL8n4xRZGPQxydu7kQEg8J2jCxSywzsQf5mcGlYVTc6Znx8dA==
pornmaster.fun/favicon.ico
301 Moved Permanently 162 B URL HTTP/2 pornmaster.fun/favicon.ico
IP
ASN #399045 DEDIOUTLET-NETWORKS
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /favicon.ico HTTP/1.1
Host: pornmaster.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: text/html
content-length: 162
location: https://pornmaster.fun/
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
hifiporn.fun/favicon.ico
301 Moved Permanently 162 B IP
ASN #399045 DEDIOUTLET-NETWORKS
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /favicon.ico HTTP/1.1
Host: hifiporn.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: text/html
content-length: 162
location: https://hifiporn.fun/
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cf4699d5ced9c975a51ed20022b9af70
4ca5728464386ce9f4ce9de41ea36a4f719d6166
3dd9de76dae42702729480e4aee958d3225be344348ab32c223bc9b41a579f10
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3DD9DE76DAE42702729480E4AEE958D3225BE344348AB32C223BC9B41A579F10"
Last-Modified: Mon, 14 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9902
Expires: Tue, 15 Nov 2022 10:17:01 GMT
Date: Tue, 15 Nov 2022 07:31:59 GMT
Connection: keep-alive
nijimo3.ocsp.secomtrust.net/
200 OK 1.6 kB URL HTTP/1.1 nijimo3.ocsp.secomtrust.net/
IP
ASN #10006 SECOM Trust Systems Co.,Ltd.
Hash a73818ecb687055646cd7e8c4d4cdd7c
9a03b4dd5b3c25343c2e1f3ff7ec247a832f744b
4d61f3c4061806083fb6d4facdefc2feca6fd2e5b4c56fea1ae0d4cd6b5080af
POST / HTTP/1.1
Host: nijimo3.ocsp.secomtrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:59 GMT
Server: Apache
Cache-Control: max-age=86400
Content-Type: application/ocsp-response
Expires: Sat, 19 Nov 2022 03:19:03 GMT
Last-Modified: Tue, 15 Nov 2022 03:19:03 GMT
ETag: "a73818ecb687055646cd7e8c4d4cdd7c"
X-Powered-By: ASP.NET
Content-Length: 1560
Connection: close
81867od.com/favicon.ico
200 OK 764 B IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 2fcac82b36ec789a2c120f18fa0356f9
439c0a47df523f9bf0df08e97bfbffbafa61f550
7cb9d44797a1dcb78e3a0b75f363743431ebfceb354ac62af15c5439e4b5c69d
GET /favicon.ico HTTP/1.1
Host: 81867od.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: image/x-icon
content-length: 764
last-modified: Tue, 25 Jan 2022 18:08:38 GMT
etag: "61f03ca6-2fc"
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
sex18.photos/favicon.ico
404 Not Found 186 B IP
ASN #207728 EUROHOSTER Ltd.
File type HTML document text\012- HTML document, ISO-8859 text
Hash c8ec0913b3a74880a0b8dd5aaaa6ebae
eca628e3067c203c1daf89877509aed92ebb086c
f20033daa00189dc78b801858463c38b335489aaf140a94f76afa0d00d616c37
GET /favicon.ico HTTP/1.1
Host: sex18.photos
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
Server: nginx
Date: Tue, 15 Nov 2022 07:31:59 GMT
Content-Type: text/html; charset=WINDOWS-1251
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
www.sokmil.com/favicon.ico
200 OK 1.2 kB URL HTTP/1.1 www.sokmil.com/favicon.ico
IP
ASN #9607 BroadBand Tower, Inc.
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash f243152e0bb1b7e931e83c23c0323ad9
f96b60d635eebe8493c553fcb678dfb6bf7b3f21
0ad0eaefd3558dda714af20aeaaecf657778f5c7e17ec1444093e1ed2a828dd4
GET /favicon.ico HTTP/1.1
Host: www.sokmil.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:59 GMT
Server: Apache
Last-Modified: Tue, 25 Jun 2019 04:16:18 GMT
Accept-Ranges: bytes
Content-Length: 1150
Cache-Control: max-age=315360000, public
Expires: Fri, 12 Nov 2032 07:31:59 GMT
Service-Worker-Allowed: /
Connection: close
Content-Type: image/vnd.microsoft.icon
pornmaster.fun/
301 Moved Permanently 162 B IP
ASN #399045 DEDIOUTLET-NETWORKS
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET / HTTP/1.1
Host: pornmaster.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://av.xvideos-dl.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: text/html
content-length: 162
location: https://pornmaster.fun/hd/
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
hifiporn.fun/
301 Moved Permanently 977 B IP
ASN #399045 DEDIOUTLET-NETWORKS
Hash fdc7c8e6f463cefe83d47edb0886776e
ad0f12c5ffbd646350dab2b9d10e6fa9336a5261
94f147e12efb04846dbf6fa252851bfdc1fba4f95a57ceed282393e6fb4d4f1a
GET / HTTP/1.1
Host: hifiporn.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://av.xvideos-dl.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: text/html
content-length: 162
location: https://hifiporn.fun/xxx/
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
okashik.atype.jp/images/104-sigd-005/1.jpg
200 OK 246 kB URL HTTP/1.1 okashik.atype.jp/images/104-sigd-005/1.jpg
IP
ASN #2527 Sony Network Communications Inc.
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2010:08:24 15:34:35], baseline, precision 8, 450x634, components 3\012- data
Size 246 kB (246318 bytes)
Hash 7daec1f712d3aff9aa04ff7991669d04
d16ffbdb0c5b46af1f717b01c6a5da21c841892c
d615d836416d366de3cd69e7bda3769f0ac0e612670da612e25ada469d2dfacd
GET /images/104-sigd-005/1.jpg HTTP/1.1
Host: okashik.atype.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:58 GMT
Server: Apache
Last-Modified: Tue, 08 Jun 2021 04:42:53 GMT
ETag: "e60156-3c22e-5c439ca8d00cd"
Accept-Ranges: bytes
Content-Length: 246318
Access-Control-Allow-Origin: *
Keep-Alive: timeout=1, max=150
Connection: Keep-Alive
Content-Type: image/jpeg
muryouav.avximg.com/2018-12/thumb/UeLI7EDfcVnfExfO.jpeg
200 OK 25 kB URL HTTP/2 muryouav.avximg.com/2018-12/thumb/UeLI7EDfcVnfExfO.jpeg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x200, components 3\012- data
Hash e2d7cecfadf036234bd24d1afc078ad7
88b4c86ed76ca709edf95f0f53cc85bfe4a32c7a
4b2960298f06798d78eab0de34bac346bcb5f94aefe9a05f2d652b695fae1ae0
GET /2018-12/thumb/UeLI7EDfcVnfExfO.jpeg HTTP/1.1
Host: muryouav.avximg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: image/jpeg
content-length: 24886
last-modified: Fri, 07 Dec 2018 02:36:40 GMT
expires: Tue, 15 Nov 2022 08:01:59 GMT
cache-control: max-age=1800
accept-ranges: bytes
X-Firefox-Spdy: h2
okashik.atype.jp/images/106-taskj-092/1.jpg
200 OK 357 kB URL HTTP/1.1 okashik.atype.jp/images/106-taskj-092/1.jpg
IP
ASN #2527 Sony Network Communications Inc.
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 450x634, components 3\012- data
Size 357 kB (357306 bytes)
Hash c6fe5d6a21a486dd975fbd45c908ca42
733d4552fbf08399d65f0ff3e4c5867a969d74fc
d6e36116f3464af125c138746ce1be28df092eb7a25c258fa7d8c7efaaaae8e0
GET /images/106-taskj-092/1.jpg HTTP/1.1
Host: okashik.atype.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:58 GMT
Server: Apache
Last-Modified: Tue, 08 Jun 2021 04:47:51 GMT
ETag: "e806a2-573ba-5c439dc46825d"
Accept-Ranges: bytes
Content-Length: 357306
Access-Control-Allow-Origin: *
Keep-Alive: timeout=1, max=150
Connection: Keep-Alive
Content-Type: image/jpeg
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash af564e41edf9e58dcb2a20186f02e6e0
6994a73e718cd5e37b901ecf756e9ba60a82a6fa
3fe74f380bc6408ddfddbf655cc3e44a9f6be4d946622ae3e79451e397868c9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3FE74F380BC6408DDFDDBF655CC3E44A9F6BE4D946622AE3E79451E397868C9B"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14194
Expires: Tue, 15 Nov 2022 11:28:34 GMT
Date: Tue, 15 Nov 2022 07:32:00 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 92ce349f446ca97abc7a09055061c814
0512767c65e6eba17fc6bf6bebe42b82eebd1bbc
1d30593d527440ddc3a863a4fc7fefcfdaa724eb7effc26e99745bdfabed6675
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2499
Cache-Control: max-age=166566
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:32:00 GMT
Etag: "63731e53-117"
Expires: Thu, 17 Nov 2022 05:48:06 GMT
Last-Modified: Tue, 15 Nov 2022 05:06:27 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 279
hifiporn.fun/xxx/
200 OK 10 kB IP
ASN #399045 DEDIOUTLET-NETWORKS
Hash 3c3706ceba767f7b290745e109ffcf02
1e87f402570624cd2d8b6f2e00985216b37d3fc3
94208921c583c8d92881428a2ad150298f8477e15f510f8ff3504f6dcc0642c2
GET /xxx/ HTTP/1.1
Host: hifiporn.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://av.xvideos-dl.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 07:32:00 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=604800
expires: Tue, 22 Nov 2022 07:32:00 GMT
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
muryouav.avximg.com/2017-06/thumb/NCEjJvC7BGmxwY4i.jpeg
200 OK 32 kB URL HTTP/2 muryouav.avximg.com/2017-06/thumb/NCEjJvC7BGmxwY4i.jpeg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x200, components 3\012- data
Hash 96bee491a2366377d68a43a235eaa582
b7b8539d67fcab71f193d464eed1ebd3db5a6298
f2343828916e632de7a4421881898a4670f2bdc6df15188c5ca987e7dfe769bd
GET /2017-06/thumb/NCEjJvC7BGmxwY4i.jpeg HTTP/1.1
Host: muryouav.avximg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: image/jpeg
content-length: 32197
last-modified: Thu, 15 Jun 2017 08:04:07 GMT
expires: Tue, 15 Nov 2022 08:01:59 GMT
cache-control: max-age=1800
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 8e6f5cdd90c2fe2c217e1f6b35700ea2
b18dad996cd79601ed39ff747729f19e9f16f99f
b7a421074c904ff8c7fa3fb205c0cf5bb1907cf4e1f14c14361d760c93990134
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=157269
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:32:00 GMT
Etag: "637303c5-117"
Expires: Thu, 17 Nov 2022 03:13:09 GMT
Last-Modified: Tue, 15 Nov 2022 03:13:09 GMT
Server: nginx
Content-Length: 279
www.dramasq.co/favicon.ico
301 Moved Permanently 208 B URL HTTP/1.1 www.dramasq.co/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ec31181eeb2f50f30c67bb1418c3891b
385820a53838aaa8215241bf7cec9058ad3d1c15
88e23b9a9e821f549899472fc14f97cebb4c9e592e4596343808c717ecb173e6
GET /favicon.ico HTTP/1.1
Host: www.dramasq.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Date: Tue, 15 Nov 2022 07:32:00 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://www.dramasq.co/
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 102
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SMq3a6yJFXkCbb6MHbE8jJoN0c1ILvUbedgZ48Q3TbZpdtKSRBEaBzC%2BIOPRAoe6TUlhMBEGa%2BTe6hpg19z%2F%2FobiO8HoQyKuuWeEk0ELtZvzhnfdskILjoujfLXiQ%2BBBuA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 76a64a5df99c0b65-OSL
aviui.com/favicon.ico
200 OK 2.5 kB IP
File type MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel\012- data
Hash 277023cad78eb6f329038e739726e4c7
93c6511ce79460a025f93c579e4d325d18693bab
a8a1ebbe3c9fe9bc6601912e2776c1671b10db6fe93307a6fca18dd37dce9696
GET /favicon.ico HTTP/1.1
Host: aviui.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:00 GMT
content-type: image/x-icon
last-modified: Thu, 17 Jan 2019 15:10:16 GMT
etag: W/"5c409ad8-1cee"
expires: Sat, 19 Nov 2022 06:44:22 GMT
cache-control: max-age=2678400
cf-cache-status: HIT
age: 2249258
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F%2FzVtbd7wul2sigH4q72o8lm5ywOKEeG0P7MQik9lqJZaBMItgYx8LQ2z4mekaqfymgGwhZ6SUMKdhD%2FmY%2BkK1WMwrQjnV9fhK0Y5CkHIClEUbMJEhtUtwiQ7w8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a5d7ae71c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.dramasq.co/
301 Moved Permanently 49 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (42482), with no line terminators
Hash 3d38f1e45e6d1ef4367fb603274b3c4e
6c4a302dd19d04e312fff9d38f5c20fbaa65da2f
f4020df4fa805ce6801b94e60b94d38e20804ff8eec7956c37525f120cb36b29
GET / HTTP/1.1
Host: www.dramasq.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Date: Tue, 15 Nov 2022 07:32:00 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.qdrama.top/
Link: <https://img.dramasq.co>; rel="preconnect",<https://img.dramasq.co>; rel="dns-prefetch"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Cache-Control: max-age=1800
CF-Cache-Status: HIT
Age: 101
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rSMKBbPRrhQpsXmLdAhl37NCw7hEgAZXDEIEjc0pmNJGUg7CCJW7AoZN2o4YPE3PHhuiJZ9uIAAPJc3TpsCO21TIFga9afiCfJqh0dGhhw622hUKLeytdfUgCDfRG2FIoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 76a64a5e39cf0b65-OSL
hotscope.tv/favicon.ico
200 OK 469 B IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash e08dcb3223adf8d3464e53a4bce7f419
63d214210679594f5f07c66b443e3b9a199e2a6c
15f448ea0ce9fc576423afd02ec84d60cf945a1f999fad0ba8babfce09998772
GET /favicon.ico HTTP/1.1
Host: hotscope.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 15 Nov 2022 07:32:00 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Strict-Transport-Security: max-age=63072000
X-Frame-Options: sameorigin
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Thu, 10 Jun 2021 13:28:52 GMT
ETag: W/"47e-179f61c7bd7"
Vary: Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 206a677bdffb28860907b53c5e85d233
498b7f46ac48602e20e8ea30921f2705e195d2e5
818fe6d59543d50f1b67ca126a7dc21613bb50cf954cba77c565a2944da7a9fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "818FE6D59543D50F1B67CA126A7DC21613BB50CF954CBA77C565A2944DA7A9FC"
Last-Modified: Sat, 12 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2334
Expires: Tue, 15 Nov 2022 08:10:54 GMT
Date: Tue, 15 Nov 2022 07:32:00 GMT
Connection: keep-alive
okashik.atype.jp/images/106-taskj-117/1.jpg
200 OK 311 kB URL HTTP/1.1 okashik.atype.jp/images/106-taskj-117/1.jpg
IP
ASN #2527 Sony Network Communications Inc.
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 450x634, components 3\012- data
Size 311 kB (311034 bytes)
Hash 02d9fd439dd7d614d9123f6f11c9589f
cb078b6ada42c5b38a102e596d7a5fa00735b53c
62f8f1c3b622eea7b8bdee88b42fe6f41c8e029526d459085d0322c3fa1cc5d0
GET /images/106-taskj-117/1.jpg HTTP/1.1
Host: okashik.atype.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:58 GMT
Server: Apache
Last-Modified: Tue, 08 Jun 2021 04:48:07 GMT
ETag: "e808ab-4befa-5c439dd3581f5"
Accept-Ranges: bytes
Content-Length: 311034
Access-Control-Allow-Origin: *
Keep-Alive: timeout=1, max=150
Connection: Keep-Alive
Content-Type: image/jpeg
iook.club/favicon.ico
200 OK 4.3 kB IP
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash da00228045bbdc9fc485eee15ae466f7
51acd57ef4439a7e622281388e2aa83d53b3fe33
18a2fc0c936b1782fb1f1dec65e9ea9dfff00e1a081594c8c3049a5b435c1d2d
GET /favicon.ico HTTP/1.1
Host: iook.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 07:35:25 GMT
content-type: image/x-icon
content-length: 4286
last-modified: Wed, 24 Aug 2022 21:01:24 GMT
etag: "630691a4-10be"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ebenporno.com/favicon.ico
301 Moved Permanently 0 B URL HTTP/1.1 ebenporno.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: ebenporno.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Tue, 15 Nov 2022 07:32:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 15 Nov 2022 08:32:00 GMT
Location: https://ebenporno.com/favicon.ico
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UqCT%2FQ7LOfneMG%2B9%2FfsneRGRF8oIzFawv4veQyHeilwlKvTzxRJnsODXEIUfWKdPNN3JMDwgjs9r4TNEqDSuoKJfiNE1B%2BtF8PYgCWbbFz8CaV8NEq9GA%2FjVHsvbLaPg"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a6058ccb4f7-OSL
alt-svc: h2=":443"; ma=60
mtspn.com/favicon.ico
404 Not Found 1.2 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ISO-8859 text, with CRLF line terminators
Hash 8363acaeab9cbb099b59b78a44127ca6
aef448ce5500e3734059ec285cf6ec0b547075f2
9b342ae7f25d65bdb817d8c995f3211ac398e41575fc5d149d994c1dcb008f0a
GET /favicon.ico HTTP/1.1
Host: mtspn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 404 Not Found
Content-Type: text/html
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Tue, 15 Nov 2022 07:32:00 GMT
Content-Length: 1163
book10.instantbook.jp/favicon.ico
404 Not Found 1.2 kB URL HTTP/2 book10.instantbook.jp/favicon.ico
IP
ASN #7506 GMO Internet,Inc
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
GET /favicon.ico HTTP/1.1
Host: book10.instantbook.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Tue, 15 Nov 2022 07:32:00 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
page.myfile-host.info/myda.php
200 OK 0 B URL HTTP/1.1 page.myfile-host.info/myda.php
IP
ASN #7506 GMO Internet,Inc
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /myda.php HTTP/1.1
Host: page.myfile-host.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:31:56 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/7.4.20
X-Powered-By: PHP/7.4.20
Access-Control-Allow-Origin: *
Content-Length: 0
Connection: close
Content-Type: text/html; charset=utf-8
e1.o.lencr.org/
200 OK 1.1 kB IP
ASN #20940 Akamai International B.V.
Hash 28b898e5a62fa93a4af9d715044f594c
7a4e551f4244dc5976fd346d17e2fecd24af2245
964fe35258ab064e75f426b784f9276e2eaafb5e5928c9202cae4efcb232264b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "318F51E119659FFDAFD76D88639DEF9B53AFAA235E21EE7CC739BA0087141BC0"
Last-Modified: Sun, 13 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6111
Expires: Tue, 15 Nov 2022 09:13:51 GMT
Date: Tue, 15 Nov 2022 07:32:00 GMT
Connection: keep-alive
sekesporno.net/favicon.ico
301 Moved Permanently 0 B URL HTTP/1.1 sekesporno.net/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: sekesporno.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Tue, 15 Nov 2022 07:32:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 15 Nov 2022 08:32:00 GMT
Location: https://sekesporno.net/favicon.ico
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X98lsAn%2BRHuynEbT59Iaw8mmJF68QnHX7UAlILNHvWmRwlV2VyStvvGN%2BF20eudGxx35q6YEXM4BhF5wI6Zdo57Vk6Kq%2F8TZVOEM62mRbhURgMIptI9IlVIt%2F7k1R9tsqw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a64a618b59755a-LHR
alt-svc: h2=":443"; ma=60
www.redwap.me/favicon.ico
200 OK 807 B URL HTTP/2 www.redwap.me/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel\012- data
Hash ffeaeb0bec32eb228c01501bf17a22ff
483cdbb6d6a353e37fbee3d160846a0ec3e676bc
a9d6ee0f0f8a24d182625dc84759d24bd52b9ed9065d5ef1c1e083722437527b
GET /favicon.ico HTTP/1.1
Host: www.redwap.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:00 GMT
content-type: image/x-icon
last-modified: Fri, 09 Jul 2021 20:44:03 GMT
etag: W/"60e8b513-57e"
expires: Tue, 15 Nov 2022 23:36:26 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 201334
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A3EDTmJFzYwwfk%2B9NXZ5RZ%2F9XODbqUc8FebhLlLMarmojOmrJDSgda8kzWg6Y0DlAaHWJE4B27Vj3WrRK4dQEO0o9%2FlVQxQq8eZcaUmdFpkkmn2kk7yvG70bhj%2BCw11q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a60bbb0b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 15 Nov 2022 07:32:00 GMT
access-control-allow-origin: *
etag: "63575841-2b"
expires: Tue, 15 Nov 2022 08:32:00 GMT
accept-ranges: bytes
last-modified: Tue, 25 Oct 2022 06:30:09 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
appav2.buzz/favicon.ico
200 OK 2.1 kB IP
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash bb0f569163d23b0f6cd15a6c0d1a412b
163aee179ab906e8913f8abc4e320f8c2ef5c4e9
26ba15ccd4a69bdfc789f764f6e973614373bb1127120e35c351d8b937261eca
GET /favicon.ico HTTP/1.1
Host: appav2.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:00 GMT
content-type: image/x-icon
last-modified: Sat, 20 Aug 2022 22:00:05 GMT
etag: W/"63015965-10be"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3535
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cSHtrRAT39vt1psN1%2BwNzjzj%2FeuvVGKRKxU2uvQlXxxAhTkw1HtegsbYCNdPlmV3kWHpBMoe%2FrxaofB7i0SCJ4Fjoa3NnicgPIl1GSE4OqVaoNWV2%2BdaBKg161bIFg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a61de260b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 20d3f76f04fb25c542b5f72563cc30ba
fd09f6536cc68885832c10a645cd5fb76beb6e49
a18074caca4ca0e02d66801219274eeb829ecb33ba18e5c9c7594103e26ca3b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A18074CACA4CA0E02D66801219274EEB829ECB33BA18E5C9C7594103E26CA3B0"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2276
Expires: Tue, 15 Nov 2022 08:09:57 GMT
Date: Tue, 15 Nov 2022 07:32:01 GMT
Connection: keep-alive
fuckmovs.pro/favicon.ico
200 OK 1.2 kB IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 16ba4ea145fcb9702fd424ba10173a1f
6f229dd75f224cad28d49ef63c45df4e11ba1061
c3033a0ea2ae65943acaae4379d76beadbf4319629afaf24cd508101481d29b9
GET /favicon.ico HTTP/1.1
Host: fuckmovs.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: image/x-icon
content-length: 1150
last-modified: Mon, 01 Apr 2019 09:10:31 GMT
etag: "5ca1d587-47e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=63072000;
accept-ranges: bytes
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash b126f1f3ebff4fd3501077eb36810e5a
3f1340bb13591d06f3bb6b8eea71eb32cc680d53
318f51e119659ffdafd76d88639def9b53afaa235e21ee7cc739ba0087141bc0
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "318F51E119659FFDAFD76D88639DEF9B53AFAA235E21EE7CC739BA0087141BC0"
Last-Modified: Sun, 13 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6110
Expires: Tue, 15 Nov 2022 09:13:51 GMT
Date: Tue, 15 Nov 2022 07:32:01 GMT
Connection: keep-alive
monaitv.me/upload/vod/2021-12-12/163929103117.jpg
503 Service Unavailable 18 B URL HTTP/1.1 monaitv.me/upload/vod/2021-12-12/163929103117.jpg
IP
File type Unicode text, UTF-8 text, with no line terminators
Hash 07a8ad6c0304abdb203b1643a4a15380
87b0649989905de63ec066bff201be7a161b29c7
89fa4589c024be0220bd5623ef0b80dfe8dbb44e747173007db24c2ce0e75fc8
GET /upload/vod/2021-12-12/163929103117.jpg HTTP/1.1
Host: monaitv.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 503 Service Unavailable
Server: Tengine
Date: Tue, 15 Nov 2022 07:32:01 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 18
Connection: keep-alive
x-n-x-x.pro/favicon.ico
200 OK 1.2 kB IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 93c0ce0d3b86947fc409da9b0349f9da
4ccf9572f132e457de84cd8ebc8b885ca24e1d87
d0f8397c265919dde00efc8ff36b1c4a0fa7df93195f2eb9b608a9d1e5a34b0e
GET /favicon.ico HTTP/1.1
Host: x-n-x-x.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: image/x-icon
content-length: 1150
last-modified: Mon, 08 Mar 2021 11:09:10 GMT
etag: "604605d6-47e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=63072000;
accept-ranges: bytes
X-Firefox-Spdy: h2
udvl.com/favicon.ico
200 OK 15 kB IP
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash e1a08ec3b9248d7d4501250b47a6f712
94d5f871bc2d63fa5220766f94cd92578e8717e5
d92caf7e4a7d04447ec2f56a3b9a86b57071f1b53cb06ad6bb0b51b8d812020d
GET /favicon.ico HTTP/1.1
Host: udvl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 07:32:01 GMT
Content-Type: image/x-icon
Content-Length: 15406
Last-Modified: Tue, 19 Oct 2021 20:13:03 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "616f26cf-3c2e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
nijimo3.ocsp.secomtrust.net/
200 OK 1.6 kB URL HTTP/1.1 nijimo3.ocsp.secomtrust.net/
IP
ASN #10006 SECOM Trust Systems Co.,Ltd.
Hash 4573a95499df8ecf94c88b2aeaf4f4fe
3c9517a2a4bae45136b1a4c229af65125adbcbff
22ff3f4c6454c8b4ba981fff3cd1231ded9858846f24f9b9c2b9a3e3325ec1ca
POST / HTTP/1.1
Host: nijimo3.ocsp.secomtrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:32:00 GMT
Server: Apache
Cache-Control: max-age=86400
Content-Type: application/ocsp-response
Expires: Sat, 19 Nov 2022 03:19:03 GMT
Last-Modified: Tue, 15 Nov 2022 03:19:03 GMT
ETag: "4573a95499df8ecf94c88b2aeaf4f4fe"
X-Powered-By: ASP.NET
Content-Length: 1560
Connection: close
porndaft.com/faviconico/
404 Not Found 8.8 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (492)
Hash 146a69c673d28c0c109edd8c255cada3
83ae856b55df02f0aa6218255492c43cfe882e20
591c507f9bebc6e86e4e70796d0a928fb24aa7f070ffdbadb4c51bcf7d503e47
GET /faviconico/ HTTP/1.1
Host: porndaft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 404 Not Found
Date: Tue, 15 Nov 2022 07:32:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ASPro_1382933ca042bef776e8100bd5eb8ac5=9f0207ed224565cf6a66f2450080bdc0; path=/
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NoubgqeK%2F%2Fxio%2FkK6rUh%2FKx%2BG01UDjQ7Zl96Mqh7dz0sTBpEZltqpO5UE%2FtCFiKO2yBpFmy7hoStPzvrae1JrHBVZ3Ph%2FeV4AG0gvlse57FNO3Jv%2Fb3pd00Sg%2BF8qw4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76a64a662ef8b4ff-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 280 B IP
Hash ce5b905aa19463bd5a0e6911494cd34c
c7f0fbd446bfc1aa4bb782989b2b71bb29adbd31
0b91da43bac8ac5687dc7f400dd4600a557091c7141825c1c1050488826099c5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5095
Cache-Control: max-age=137131
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 07:32:01 GMT
Etag: "6372a135-118"
Expires: Wed, 16 Nov 2022 21:37:32 GMT
Last-Modified: Mon, 14 Nov 2022 20:12:37 GMT
Server: ECS (amb/6BC2)
X-Cache: HIT
Content-Length: 280
xvideo-jp.com/favicon.ico
200 OK 0 B URL HTTP/2 xvideo-jp.com/favicon.ico
IP
ASN #10013 FreeBit Co.,Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: xvideo-jp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: image/x-icon
content-length: 0
last-modified: Tue, 09 Apr 2019 01:53:17 GMT
etag: "5cabfb0d-0"
expires: Wed, 16 Nov 2022 07:32:01 GMT
cache-control: max-age=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
www.qdrama.top/
200 OK 10 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (40693), with no line terminators
Hash 3bad6ab72d5babcc25b44db48a848847
a72d31ba94185c83ddcfd6df63dc6ef7c103ca63
fcb85983619100ae374cd02b64582b0db3beb5d76f2c5dc480ce96a084b13961
GET / HTTP/1.1
Host: www.qdrama.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 07:32:01 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Link: <https://img.qdrama.top>; rel="preconnect",<https://img.qdrama.top>; rel="dns-prefetch"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Last-Modified: Tue, 15 Nov 2022 06:29:41 GMT
Cache-Control: max-age=120
CF-Cache-Status: HIT
Age: 2110
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SyEZMP4ZlkyUXAALH5pRE5CG3673CaHERoLw%2BwcdXWgimJjHXPeI7N6yzm%2F8mZgq8lron0HT5M7BnAs%2FckZPDOBZk%2FEeLQt054vpnDvBf4GDZ9R%2F9dlfekFI0fARrCn0lw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 76a64a66edd7b50f-OSL
Content-Encoding: br
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 9b8a05f91142be9637f9e6b1a31483c0
9616bfad8196c9158296911692eea5a6884698c3
af9ff31722bae3158ab5ba4726445a312d34948619288a11529756f9e1ad7c6b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=96716
Date: Tue, 15 Nov 2022 07:32:01 GMT
Etag: "6372011f-1d7"
Expires: Wed, 16 Nov 2022 10:23:57 GMT
Last-Modified: Mon, 14 Nov 2022 08:49:35 GMT
Server: ECS (dcb/7ECA)
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KCJsuHkRzaXssrCmTOuqmR64n10m_ATA_Wkhmth42J4nTVnoxxvwLQ==
Age: 5662
r3.o.lencr.org/
200 OK 1.3 kB IP
ASN #20940 Akamai International B.V.
Hash 35827c75534e8d5c84f2973a446aeac1
7fcdb2998fd2ae66a2f7d1b347c3474c25108b21
14a5bc53aaf25498196227df4a69001a05be7db369f60a08e27cfcd3b32a194e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "096F051AE6FAA019484469B78C20D6D45E7B24149030C992254993CFBBC0CEDA"
Last-Modified: Mon, 14 Nov 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3279
Expires: Tue, 15 Nov 2022 08:26:40 GMT
Date: Tue, 15 Nov 2022 07:32:01 GMT
Connection: keep-alive
xn---jifanggecom-1j5sq16de9mhl3fn9p.xn--9kq80g37uthu.com/favicon.ico
403 Forbidden 2.2 kB URL HTTP/2 xn---jifanggecom-1j5sq16de9mhl3fn9p.xn--9kq80g37uthu.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (531)
Hash 2b962b9163ac96a1e1f5d3641fc21277
99af7544c7bfeb01878a7493dc5e216540a121f7
b624513ad95709ed4647c383a0d87193c093cae349172e4095797f316c8073d0
GET /favicon.ico HTTP/1.1
Host: xn---jifanggecom-1j5sq16de9mhl3fn9p.xn--9kq80g37uthu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FobkQSMXk7XXKmqw7yQSROYLo1qULCVFn%2FMbL%2F6TxPogEEG0qRn3S5DxGoTWFldeQEDVkHiJgyCOS67uFyHeN%2BOQpl5ai%2F%2Beo9CGlftOD8l0p3DNs9svCOVXN3TGmjCVxnXMzpRCWpe2HYzSArXOACbWA1BdIqKnZXqWgNB3baFqew4lNe9ct9slzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76a64a59b8f1b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.manyvids.com/favicon.ico
200 OK 15 kB URL HTTP/2 www.manyvids.com/favicon.ico
IP
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash b4c706c77e46f093de900a6a7bc51305
27ef8b88481324b5756e84eee68f3bb98dd1d62c
a8b4eab72261736e4fb04fd45b07487dd64025b4c0f0aa1f3e5942538f6e6d1f
GET /favicon.ico HTTP/1.1
Host: www.manyvids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 15086
date: Tue, 15 Nov 2022 07:32:02 GMT
set-cookie: AWSALB=1z/ZYqUd0aSUcPI+DG83sD9RO4/Oq0LopeKqRgcUjEK54dM8hmWaRudx+/FWd90QQ5f8oY1mOOgb2HMU2n6PcCQXdWM+ABRDJaf5ddDkC3+lKiU5LDPJS917V9ns; Expires=Tue, 22 Nov 2022 07:32:02 GMT; Path=/
AWSALBCORS=1z/ZYqUd0aSUcPI+DG83sD9RO4/Oq0LopeKqRgcUjEK54dM8hmWaRudx+/FWd90QQ5f8oY1mOOgb2HMU2n6PcCQXdWM+ABRDJaf5ddDkC3+lKiU5LDPJS917V9ns; Expires=Tue, 22 Nov 2022 07:32:02 GMT; Path=/; SameSite=None; Secure
server: Apache
last-modified: Mon, 14 Nov 2022 21:16:28 GMT
etag: "3aee-5ed74c0ab6300"
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 15 Dec 2022 07:32:02 GMT
x-cache: Miss from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: E45C6J6yqyjCCquVK38v6x3adQv9Fu8XKxKlr1GmOSMzSkBTsHgBGw==
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/834629.shtml/title/myhash/3
200 OK 84 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/834629.shtml/title/myhash/3
IP
File type ASCII text, with no line terminators
Hash a66307c67b81e64c2fc2cf46b59483c6
bc399311c991cb0fd6756e1efc43b7b9da6af821
605c90a63ccab2510aeef13e2f0646ab4ca4398eb6e10ee570b8aada121e07bc
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/834629.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/834629.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo1/3f/b3/1f8b36, lfm-1-148, lmd-148, lud-1446916, xfvlen-1299634, fsize-447558, played-372
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: HIT
xkey-5950: rz./v/s://hanjukb.com/vodplay/834629.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/834629.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 632753
last-modified: Mon, 07 Nov 2022 23:46:08 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xC733fthkFo2Y7P6G6AbPCqmTtOG5LHmNYWElU0Z3pvnHaYwOiybHjV%2BBsL9UgbGWwH8JSqZBZMeTvqLotJcj80DZQJPzlSduGc%2B8FvajOIrOXkJ5r7SOeW3IrEpUh3YmUU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a674b8a7707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dvcasha2.ocsp-certum.com/
200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash f8fa3cf9848ae5a66c953004f1980c58
f1704d1a5142e1a6c1d9333b839d9e7b453f9744
30e4eac8466c8b096e2f085a9c81725adbaec264066499243884e6b121cc868e
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=518
Date: Tue, 15 Nov 2022 07:32:02 GMT
Connection: keep-alive
X-N: S
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1412477.shtml/title/myhash/3
200 OK 15 kB URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1412477.shtml/title/myhash/3
IP
File type ASCII text, with no line terminators
Hash 584712cb1a7fe36ba36b8125b38f8eef
0efd0af95fea108d6b44b8765e2f3eddd512fdd6
b23a94a8acd8e005ef7bc9954e49bffb224716e9ed387ba91aad968aceb39385
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/1412477.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1412477.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo2/bb/29/875d37, lfm-1-553, lmd-553, lud-58524, xfvlen-1202864, fsize-408487, played-98
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: HIT
xkey-5950: rz./v/s://hanjukb.com/vodplay/1412477.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1412477.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 299277
last-modified: Fri, 11 Nov 2022 20:24:04 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o%2BECZFh83b%2BECFuu22FRoBFoQ4r5p7szEpKi1Gi5h6G8CJPv2Yd0A1XHIX8iwTn%2Fou%2BPKAl51cVH2udBQSwJW5kON7AfzfSi64SUdTxWjW1LuFR9vppZhcgBmV0h9UvKKvM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66eb107707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1830384.shtml//title/myhash/3
200 OK 14 kB URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1830384.shtml//title/myhash/3
IP
File type ASCII text, with no line terminators
Hash 344b88bbfe3390a6a535c2e23bea457d
b3691064ab458d4ad3b0b07353e0cfe77ba095b9
cdc10b070f0d7de1aab677a9a953900df21e453085644d26fa5a6e3007c9aabf
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/1830384.shtml//title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1830384.shtml//title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo6/9e/da/bbe838, lfm-1-3415, lmd-3415, lud-933674, xfvlen-1265649, fsize-355593, played-70
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: MISS
xkey-5950: rz./v/s://hanjukb.com/vodplay/1830384.shtml//title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1830384.shtml//title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 243910
last-modified: Sat, 12 Nov 2022 11:46:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L3nYVd2Qmybl6GuvB4E1DoSiAnTMThHq5G625WNmJaVDPFWAEXW%2BES7W1bUtPMChxKhLUrl8vJzlE5WlYMdOXpzHdjv05VaL0HrlKiga4JVbxfJ4vdGXpLYPCDf8dBPDkug%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66dace7707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.dmm.co.jp/favicon.ico
301 Moved Permanently 198 B URL HTTP/2 www.dmm.co.jp/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 4b4e14e78cc1cfeaff2be86686a7872d
45a095fc2374b08181d51e199e08955232fa2414
3c656afd70b573701e1cdd886340dd79bff1834c6f47ab8daed47f04c03a4e6f
GET /favicon.ico HTTP/1.1
Host: www.dmm.co.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-type: text/html; charset=iso-8859-1
content-length: 198
location: https://p.dmm.co.jp/p/favicon.ico
date: Tue, 15 Nov 2022 07:32:02 GMT
server: Apache
vary: Accept-Encoding
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ORuZZA-ieNZmfUinz7hFdhYDvP66rr7O6sGPJv2WCaGiCZM7dK5_6w==
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/653567.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/653567.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/653567.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/653567.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo9/48/16/ca9a36, lfm-1-2456, lmd-2456, lud-1112173, xfvlen-1669865, fsize-386913, played-104
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: HIT
xkey-5950: rz./v/s://hanjukb.com/vodplay/653567.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/653567.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 210648
last-modified: Sat, 12 Nov 2022 21:01:13 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A6KLtfGah%2BmWH5wosJ2YqE4IY9rGZR7Ya%2F6InptdbIxmKC0gETQQyBg%2FE5G7q44XvQID0e813GzAV5RoVZioZKDCb%2FcXIpMh0kphPRMr024Ul8fuab3zG5aL7BA2RpmKycA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66eb0b7707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1036866.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1036866.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/1036866.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1036866.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo6/95/35/f1e137, lfm-1-9250, lmd-9250, lud-2283551, xfvlen-1314323, fsize-463760, played-57
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: MISS
xkey-5950: rz./v/s://hanjukb.com/vodplay/1036866.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1036866.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 1275222
last-modified: Mon, 31 Oct 2022 13:18:19 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2RvttAK5JLCHtl0ed7EGbbQPwF1xeZGvqIfc8JfAXC%2Flp18XdSwoJ%2BAuqm59WqRPDteCABHRT8leT5QSdxmsK1vj5UNc4n41y35BIfnz6um2hQkFLrPfhkL%2BGx7aTmrbY5s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66eafd7707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pornmaster.fun/hd/
200 OK 0 B IP
ASN #399045 DEDIOUTLET-NETWORKS
GET /hd/ HTTP/1.1
Host: pornmaster.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://av.xvideos-dl.top/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 07:32:00 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=604800
expires: Tue, 22 Nov 2022 07:32:00 GMT
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
vip.pornbraze.com/favicon.ico
301 Moved Permanently 0 B URL HTTP/2 vip.pornbraze.com/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: vip.pornbraze.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: text/html; charset=UTF-8
location: https://vip.pornbraze.com/faviconico/
expires: Tue, 20 Dec 2022 15:25:57 GMT
cache-control: max-age=5184000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: STALE
x-server-powered-by: Engintron
cf-cache-status: HIT
age: 2131562
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WlLv42Q4UbO9uYqKnq3HaKweJgag47zl3OJpzh7nqFTVrXJ8fxuzjTJdxOzCV6ry02FqGf%2FGv6YDKYVx3JGMgbmNxMuXZ%2FAFdrxyKZUx%2FHvrvSI1VJP1kzfMvUCy8AVKiA%2FTAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a57b8888924-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
appav.best/favicon.ico
200 OK 0 B IP
GET /favicon.ico HTTP/1.1
Host: appav.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: image/x-icon
last-modified: Sat, 20 Aug 2022 22:00:55 GMT
etag: W/"63015997-10be"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sSnD5GQTvXI8nyyM8jooa7yc8cc%2F3j4ra0REwVPvld%2FOV19wU%2FbIwTbyzYs4zL1G%2BTjOomdsJuUDBehr5vnVfjLNfi%2F7cCrKC21nsq2cRc%2BMs5bW24TiODczFajY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a619e030b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
7dak.com/favicon.ico
200 OK 0 B IP
GET /favicon.ico HTTP/1.1
Host: 7dak.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 07:32:00 GMT
content-type: image/x-icon
last-modified: Tue, 11 Aug 2020 18:52:14 GMT
vary: Accept-Encoding
etag: W/"5f32e8de-3aee"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000
content-encoding: br
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1051556.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1051556.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/1051556.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1051556.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo1/3f/1a/c92637, lfm-1-1631, lmd-1631, lud-938600, xfvlen-1469934, fsize-536234, played-556
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: HIT
xkey-5950: rz./v/s://hanjukb.com/vodplay/1051556.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1051556.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 220711
last-modified: Sat, 12 Nov 2022 18:13:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=brfxyitbq7beB%2F4BmtCExZKlvULCaupyWnl7T3N5TPVzZ7MWLtLYjWkGnPiwEpriZIDLqV47LX74X28yYCH32fhYDivxhgwEIknl1dNO6S9c7ZkXVNlvk3DuwDtJNK1A2AE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66dad47707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1806413.shtml/?format=im/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1806413.shtml/?format=im/title/myhash/3
IP
GET /v/s://hanjukb.com/vodplay/1806413.shtml/?format=im/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1806413.shtml/?format=im/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo3/c5/3c/f13548, lfm-1-13945, lmd-13945, lud-2163949, xfvlen-1377592, fsize-377101, played-159
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: HIT
xkey-5950: rz./v/s://hanjukb.com/vodplay/1806413.shtml/?format=im/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1806413.shtml/?format=im/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 1394585
last-modified: Sun, 30 Oct 2022 04:08:56 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0QYq1YBKMiXMdKyScjUDcCs1aySueR5WphXo3JaFjZxvw%2Flk5i53vEzyTUUYZM8BFFrXM%2BYUeQjs6ywk6Lyy61nCbICblogwKyuS503uHEe4TVkDDgIVi%2BW2Y9zx%2BkLK4oo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66eaf97707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1153179.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1153179.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/1153179.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1153179.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo2/b3/ec/81cd37, lfm-1-3892, lmd-3892, lud-1099475, xfvlen-1033169, fsize-311200, played-169
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: HIT
xkey-5950: rz./v/s://hanjukb.com/vodplay/1153179.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1153179.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 69122
last-modified: Mon, 14 Nov 2022 12:19:59 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H2m1%2Bxc9ZuTbO8rSlogYi5dM6lVSESx3aemzHQIttJajEal%2ByOCfF9NYv2k462WURx460lE2LDgEzR1vd1%2FsgfEHSa%2FjXjOl9riOFTPUUD1%2FeLowqS1%2FDgmS2NiZDQdEYG0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66eb067707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
769372a0a8.4073284684.com/6986c402f61ed227e3e13935105cf716.js
200 OK 0 B URL HTTP/2 769372a0a8.4073284684.com/6986c402f61ed227e3e13935105cf716.js
IP
ASN #39572 DataWeb Global Group B.V.
Analyzer Verdict Alert quad9 Sinkholed
GET /6986c402f61ed227e3e13935105cf716.js HTTP/1.1
Host: 769372a0a8.4073284684.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 01 Nov 2022 13:27:00 GMT
etag: W/"63611ea4-171bc"
content-encoding: gzip
expires: Tue, 15 Nov 2022 07:37:01 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
js.gazo.space/index.php?js=av4&advertisement&
200 OK 0 B URL HTTP/2 js.gazo.space/index.php?js=av4&advertisement&
IP
GET /index.php?js=av4&advertisement& HTTP/1.1
Host: js.gazo.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:54 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
access-control-allow-headers: Cake
imghost: 240026512804c008ad763d1c3-h-jsgazospacmh--IE-rm2400cb003771024ac465ab2/index.php?js=av4&advertisement&
55nloadrate: 0.4325
cache-control: public, max-age=7200, s-max-age=1800
vary: Accept-Encoding
cf-cache-status: HIT
age: 981
last-modified: Tue, 15 Nov 2022 07:15:33 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LtWJr3A8AGL9rQVBZHp3FM3pvcoDpHe0I4OclP3XFZQQOUNy4Gq30D2Q8p591Y%2FbQ9Ej2pnj5dOz%2BwBe9PUe2IS8Y3oAwlLMI40bYocudgEQiXBdU1vNkiCNSOrADKEQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a38edce72b4-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
unpkg.com/videojs-flash/dist/videojs-flash.js
302 Found 0 B URL HTTP/2 unpkg.com/videojs-flash/dist/videojs-flash.js
IP
GET /videojs-flash/dist/videojs-flash.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 15 Nov 2022 07:31:55 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /videojs-flash@2.2.1/dist/videojs-flash.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GHX2ZXXBHTGMM4SXX8DKDF4V-fra
cf-cache-status: HIT
age: 241
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76a64a3efde6b505-OSL
X-Firefox-Spdy: h2
xvideosporno.blog.br/favicon.ico
200 OK 0 B URL HTTP/2 xvideosporno.blog.br/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: xvideosporno.blog.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: image/x-icon
last-modified: Thu, 20 Feb 2020 07:14:14 GMT
vary: Accept-Encoding
etag: W/"5e4e31c6-25be"
age: 206
x-cache: MISS
x-cache-hits: 0
cache-control: max-age=432000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9NGhKWNIOlG73H1iFtz0Lbi4aRdfpD8ttCzr7b06763EJsyUOHPcnH1S88qatbveU4lSuEPmjax%2FRLlzAUrRCiFxBaIC3ktU8v7OQ9D1KS1BgTEle%2FPxBNYS5AeUlKTAxoOjtnPz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a54aac00b31-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.appav.site/favicon.ico
200 OK 0 B URL HTTP/2 www.appav.site/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: www.appav.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: image/x-icon
last-modified: Sat, 20 Aug 2022 22:00:55 GMT
etag: W/"63015997-10be"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: HIT
age: 1818
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pwNJ5Z4nQNBB6ZsC%2BLMm%2FAI7Au55cp%2BGI0LkI6m43GSG04rmIEGHqzI%2FoPxNXznzykwe1fGAGcAqeTe2t5WBtL9zC8W1dRDOjB61oMKUk%2BMT9mhlg3tU8aPSjxqq89e1FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a59de2ab51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.xxvideoclub.com/favicon.ico
302 Found 0 B URL HTTP/2 www.xxvideoclub.com/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: www.xxvideoclub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: text/html; charset=UTF-8
location: https://www.xxvideoclub.com/wp-content/uploads/2021/01/thumbnail-1-32x32.png
link: <https://www.xxvideoclub.com/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
vary: Accept-Encoding,User-Agent
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UvowSzWpH3Ls1l%2FyjxOXR1ONT8BpmKxwNgPouJGM0bpiC8ri0UpSpkv9NYBy%2FlslR45pTbvfpyz%2FpcuCgHPl7qOaORjt6F7WZzT6SFdO1cdewdEgtb%2F2DgWvMKKvbJqaaySoawE%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a55d9b8b51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1831986.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1831986.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/1831986.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1831986.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo4/1a/ca/7fab37, lfm-1-9526, lmd-9526, lud-938453, xfvlen-1141300, fsize-223671, played-33
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: HIT
xkey-5950: rz./v/s://hanjukb.com/vodplay/1831986.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1831986.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 350193
last-modified: Fri, 11 Nov 2022 06:15:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IvNALdkX1rCqTHmJVyM19jEQZfW6GA7bf%2FyWRbp0eCX1xIlgfU9Ed5N3CEC3qJX0gk2WZdh1NusHGeqc5xnXD2TkdoOv%2B68ohUvyEBekLujFCQ7%2F%2FDkic3thzkfD5hnngOs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66eb007707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1476399.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1476399.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/1476399.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1476399.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo4/1d/c8/2d4037, lfm-1-78, lmd-78, lud-852490, xfvlen-937023, fsize-364210, played-94
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: MISS
xkey-5950: rz./v/s://hanjukb.com/vodplay/1476399.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1476399.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 157909
last-modified: Sun, 13 Nov 2022 11:40:12 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N2iKG56LcQfPHyK72HZadFEGfBPbdOHmZ4Y8VJ2UkpmGd6VYWkDW0inqS4Iab92Uq780SKxoLtsJ1YUFmfFXpvy8wcfCr8mawlo2ltpQgMjzkW8Y9AvcfAXD8z1QdG72q38%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66eafa7707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1139152.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1139152.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/1139152.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1139152.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo9/65/95/0ad637, lfm-1-810, lmd-810, lud-2745027, xfvlen-1311032, fsize-306842, played-52
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: HIT
xkey-5950: rz./v/s://hanjukb.com/vodplay/1139152.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1139152.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 47421
last-modified: Mon, 14 Nov 2022 18:21:40 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oR7RMmVEbB1RKNfhPgYECOba%2FVJPYVuKC9t9oK7IFS9RJ5GJIhzp0zQXv2hjGFETbyadLMZN%2FMxVRp2uUa2HfSbwDL9dQQ89M%2BQd4XmtRi8mrKg4dIfeU1YdMR8Gx68wsb8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66eb0a7707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1476344.shtml//title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1476344.shtml//title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/1476344.shtml//title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1476344.shtml//title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo4/18/6f/bd, lfm-1-5127, lmd-5127, lud-3023460, xfvlen-1020359, fsize-181215, played-12
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: MISS
xkey-5950: rz./v/s://hanjukb.com/vodplay/1476344.shtml//title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1476344.shtml//title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 299088
last-modified: Fri, 11 Nov 2022 20:27:13 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HfbZ06QU%2F6C8VcU5vlUEXr%2Ftx9iLcSlMFdsdjZF37Gu3YMXY7e9qxEcZGEEsLi6Is9c2mBP2YY%2BxTDTHIG3wHqq3%2FsKsrboeoWgoMG4%2Fnt6mk9TragJWIi7vxpt2IfA3JG0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66eb0f7707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
japaneseanimalsex.com/favicon.ico
404 Not Found 0 B URL HTTP/2 japaneseanimalsex.com/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: japaneseanimalsex.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IL01uQs1PDWrJVf1J%2FnWvr63R0cB%2FiRc1CbF%2Fz7w%2B%2FOMWNvrJo%2BXhC6NI2OJ12mAKEQp9vW8LmnsWmFTGnJ0Gi%2FtrlyEJPMr6LYLvEqxV7bxGL2e3sOE4MfZDsyfsR1V4TGAu58qJVE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a55ecb988ad-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1320786.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1320786.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/1320786.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1320786.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo2/a6/15/2c4e37, lfm-1-1141, lmd-1141, lud-1284126, xfvlen-962842, fsize-416321, played-487
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: MISS
xkey-5950: rz./v/s://hanjukb.com/vodplay/1320786.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1320786.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 137081
last-modified: Sun, 13 Nov 2022 17:27:20 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TZCpEbyuEfUvZPntfGf%2BFa68b%2B2QNf05H2kueldhV47tSJOh%2Fd1CIQAquwUBDSuNGN8eHPM9XSlhv2F%2BlDo5BUX5xcd6bHcV8dqoGaIZYahW%2BFsnP8HZB8kBQOzqg9dFxmk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66eb037707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1186090.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1186090.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/1186090.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1186090.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo6/78/94/484037, lfm-1-10, lmd-10, lud-3071198, xfvlen-1291106, fsize-338473, played-80
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: MISS
xkey-5950: rz./v/s://hanjukb.com/vodplay/1186090.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1186090.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 350193
last-modified: Fri, 11 Nov 2022 06:15:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1UGqc2G5jsKFvRwBXuJyYulQiSkyGHgc5aZf7B3Vc2sQpTR3tBrrfjbJkVflu2YT2OBvq5g2GNndtifKzluSekrNMdWXNCJSZaD3yS9a3rxuLs8GtbeXfCloQZMkhY5kjb8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66eafc7707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1013564.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1013564.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/1013564.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1013564.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo9/5b/cb/94ba37, lfm-1-334, lmd-334, lud-585912, xfvlen-977145, fsize-400709, played-272
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: HIT
xkey-5950: rz./v/s://hanjukb.com/vodplay/1013564.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1013564.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 293142
last-modified: Fri, 11 Nov 2022 22:06:19 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mD0SzbHOWo1Edf2TQoBYcf%2F7OffrYcanyaCpl5FhHhIAJgrKo458DTJX5ZsenoBeGCunFf%2FKdUw%2Ft4bMGDeNOwA0DQVZ2Txl2leI26gMxfk8PQDJ0zg3MBAQ9jIo2V9adA0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66eb087707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/://hanjukb.com/vodplay/1476124.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/://hanjukb.com/vodplay/1476124.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/://hanjukb.com/vodplay/1476124.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/://hanjukb.com/vodplay/1476124.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo9/49/56/b09636, lfm-1-59, lmd-59, lud-324927, xfvlen-990668, fsize-250507, played-33
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: HIT
xkey-5950: rz./v/://hanjukb.com/vodplay/1476124.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/://hanjukb.com/vodplay/1476124.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 500575
last-modified: Wed, 09 Nov 2022 12:29:06 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oDpxnBuqZaRae9My5BCSRLDQX9GKob6QWTJAXcidJ7AvAAsFwd20sx%2BqbkKcYKbJhkVY%2BdCvW7Mzh5MXN9SFtYlPwapYSVlseUEe1jVRZ84s2A2rfdvHPVyPxawz1naE33Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66eb027707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1440531.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1440531.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/1440531.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1440531.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo9/65/63/4e, lfm-12-135, lmd-136, lud-136, xfvlen-109037, fsize-482118, played-
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: MISS
xkey-5950: rz./v/s://hanjukb.com/vodplay/1440531.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1440531.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 3582088
last-modified: Tue, 04 Oct 2022 20:30:33 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s3h2rOctN0%2FZx2ZRw9a694Wm3w%2B8BRP91DKFP21IGcLh1cs%2FgfXn1xfS72EnvHNnTvE9WcwznBp1U%2FLpKYhRkhFQlp8d6zMGl8xWYgEgQzGgNnCmJWGRFpqpcgfI9tdtxsw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a674b897707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
unpkg.com/videojs-flash@2.2.1/dist/videojs-flash.js
200 OK 0 B URL HTTP/2 unpkg.com/videojs-flash@2.2.1/dist/videojs-flash.js
IP
GET /videojs-flash@2.2.1/dist/videojs-flash.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://av.xvideos-dl.top/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:55 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"99ef-EigKzOQZJEjpPjsu+eGt9sbrqUo"
via: 1.1 fly.io
fly-request-id: 01G4XED00012H0FHS4H5YGBK8Y-fra
cf-cache-status: HIT
age: 13946843
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76a64a3f0dfcb505-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.52gg.net/upload/vod/20201219-50/53c1bb1b12fc7e5696eb40ba2e2aaf9d.jpg
403 Forbidden 0 B URL HTTP/2 cdn.52gg.net/upload/vod/20201219-50/53c1bb1b12fc7e5696eb40ba2e2aaf9d.jpg
IP
GET /upload/vod/20201219-50/53c1bb1b12fc7e5696eb40ba2e2aaf9d.jpg HTTP/1.1
Host: cdn.52gg.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Tue, 15 Nov 2022 07:31:58 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xjQLrZdDzElXaqXEYA%2B1Lf7FzxLwaCFWXUs0ySIa3lfyiDxjL9NcJ3y%2BE06ksQAG26kobgiN3Ust3RflLgZxunQykxDyN4FX7d0OeP7VbXxZGFlm5RuaaBXumEQ2Hjg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a504d400b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
manymv.com/favicon.ico
200 OK 0 B IP
GET /favicon.ico HTTP/1.1
Host: manymv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: image/x-icon
last-modified: Mon, 03 Jan 2022 19:58:34 GMT
etag: W/"61d3556a-3c2e"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: HIT
age: 2896
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yX0xjitfuUFFB0YreCxbwwIXdDyAXadw9%2B9J1GKkgd1tL9PrsJ5%2FQoNbtgAc9gDWmEQYcbCni9VO03Di9WWFwQD%2FxB37F0l%2FfpH32W96pq6PSZeZuXSD3kMWmUZq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a59bc6eb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1828863.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1828863.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/1828863.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1828863.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo3/c6/ed/804837, lfm-1-2930, lmd-2930, lud-1600378, xfvlen-1637489, fsize-503845, played-229
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: MISS
xkey-5950: rz./v/s://hanjukb.com/vodplay/1828863.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1828863.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 243910
last-modified: Sat, 12 Nov 2022 11:46:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vqjTVJEjMZ9iIMPvFvCOAJOgHJX9v1TX5fVQkrxyLC9q6HS2E0XFyYSSp6WbdGTPFxlfG6DGYrcwTJ1eQXeP9TPbt7zmpsllKEzYwpuqDievX1EF50KkYjysLAsbT55570U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66eaf77707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1476297.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1476297.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/1476297.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1476297.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo9/4c/74/266637, lfm-1-9168, lmd-9168, lud-2946654, xfvlen-1861622, fsize-388386, played-73
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: MISS
xkey-5950: rz./v/s://hanjukb.com/vodplay/1476297.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1476297.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 234209
last-modified: Sat, 12 Nov 2022 14:28:32 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BgXWFNQs0gS14ZIxuxWbCcG%2Bb08HG00nhfxFElEZXGrNzpWPSJSUpl6zmKZPTQLM64A4ovnJVeODNJNuyBrFhqoU5iFDUMdifXspzmtCMtdEa9vVDTCi5W%2FIdPlHGG6tZ0M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66eb017707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fapmove.com/favicon.ico
403 Forbidden 0 B IP
GET /favicon.ico HTTP/1.1
Host: fapmove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
server: nginx
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: text/html
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
www.heavy-r.com/favicon.ico
200 OK 0 B URL HTTP/2 www.heavy-r.com/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: www.heavy-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:00 GMT
content-type: image/vnd.microsoft.icon
etag: W/"4080963554"
last-modified: Mon, 11 Dec 2017 19:49:52 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3150
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a5d5ac51c0e-OSL
content-encoding: br
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1819927.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1819927.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/1819927.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1819927.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo2/2e/a1/fe6737, lfm-1-1052, lmd-1052, lud-2993823, xfvlen-996908, fsize-310931, played-157
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: HIT
xkey-5950: rz./v/s://hanjukb.com/vodplay/1819927.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1819927.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 348163
last-modified: Fri, 11 Nov 2022 06:49:18 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t5UvTHim8oZb88ZVx%2BRPHGOvbBiUrCdq5VAkB%2B0jrUWRlbeDjSKgkqMeFVMDDjDpH9%2FET2tNUaQX2CIPByte51seg%2B0gPdGnsk%2BDYKE4zNgcHMr%2F3SLxqJLQ7ooLcDYSo5k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66eafb7707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1143706.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1143706.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/1143706.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1143706.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo6/80/d8/540c37, lfm-1-1363, lmd-1363, lud-3089156, xfvlen-991467, fsize-390475, played-45
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: HIT
xkey-5950: rz./v/s://hanjukb.com/vodplay/1143706.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1143706.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 400407
last-modified: Thu, 10 Nov 2022 16:18:34 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mqS%2BiYSc2DGzDEvMQIILhceBYjyx6V3DAIrX5zS9RITn3OMoEq6%2BfkhPcXAmbodFJWhDSaK1xK9KCv7iYR3eRx%2BWN%2BU7ngEstqPl1KgeD7U7uV9%2FVVa%2Fj1w9RFtRbTl2DQg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a674b877707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/://hanjukb.com/vodplay/1476437.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/://hanjukb.com/vodplay/1476437.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/://hanjukb.com/vodplay/1476437.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/://hanjukb.com/vodplay/1476437.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo6/97/17/a92b36, lfm-1-1655, lmd-1655, lud-75224, xfvlen-1157581, fsize-378817, played-80
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: HIT
xkey-5950: rz./v/://hanjukb.com/vodplay/1476437.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/://hanjukb.com/vodplay/1476437.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 496633
last-modified: Wed, 09 Nov 2022 13:34:48 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TCsHCG5vCv6xLh%2Bqo4ob%2F1mW1QbrSwM5Uo5VaAmpX3EeGsxOW3wRDmntM1jMSGaibjLS4jwPJGjIpG%2FRmOVwEftaM6jjF0k%2BVJa4yBUzsxfxdZJ%2B%2BTqvNm77S63kow3qyNE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66dad17707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1476143.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1476143.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/1476143.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1476143.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo3/c9/45/11a837, lfm-1-231, lmd-231, lud-38592, xfvlen-966253, fsize-455366, played-33
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: HIT
xkey-5950: rz./v/s://hanjukb.com/vodplay/1476143.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1476143.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 133827
last-modified: Sun, 13 Nov 2022 18:21:34 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SWV5BsaytpSwNGEPpDNuOBSusr9DZ4n%2BIjhTFS6%2FLPYwp3oOTd3Xg98ljdVtdjpPdGOiEaUSsrWNu648uGS8DtJ3EdPFE4IEIbmkoHFL7Y%2BL5Z%2FDCsTjGzUsNqRZOR1a8Nk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66eaf67707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.sc.gl/videojs-hotkeys/latest/videojs.hotkeys.min.js
200 OK 0 B URL HTTP/2 cdn.sc.gl/videojs-hotkeys/latest/videojs.hotkeys.min.js
IP
GET /videojs-hotkeys/latest/videojs.hotkeys.min.js HTTP/1.1
Host: cdn.sc.gl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:55 GMT
content-type: application/javascript
last-modified: Sun, 28 Aug 2022 02:39:12 GMT
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 4906
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wOOV%2FvCcI7XtvmbWq0EILCeG2I%2FqwcLRaxLnwXAMxVXaWS1lUS3wTi36PSggBwz%2FZ1wEQGwdOYNOT0vS5SpTmw3Ks0qNeRWtY53A08dAXtrmLMxM4CuCOmU6YAM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a3f1891b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1051786.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/1051786.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/1051786.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/1051786.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo2/2f/3c/622337, lfm-1-2886, lmd-2886, lud-2022050, xfvlen-874470, fsize-353168, played-203
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: HIT
xkey-5950: rz./v/s://hanjukb.com/vodplay/1051786.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/1051786.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 1576852
last-modified: Fri, 28 Oct 2022 01:31:09 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FErLIuIw74stts9iXJl7fcbkrhyMOH31NoHFsFZApjOABzEdgyHip8PaqH25kWQfa9ngxt3%2FLwwGkd5DP2%2BST%2Fdtoz4GJpMOgwf2DgxOZZJeTF5Lr%2Fn98SaSKV1T51TQPcY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66dacf7707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
xjapanese.com/favicon.ico
200 OK 0 B URL HTTP/2 xjapanese.com/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: xjapanese.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:31:59 GMT
content-type: image/x-icon
last-modified: Sat, 31 Mar 2018 06:45:06 GMT
etag: W/"5abf2e72-729d"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1316
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3cqE16%2FPUFV6n2A9if5rD6xaDYpomkvT8tOefW08SjMkKkb%2BVWwqXAvzj0S8dVX%2FAJiSDmG3qa3xUqCakwKwN%2BYGX412oOyE%2FzWig8UQL3eJySBb5qSiBAHzOtIL2UGx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a64a55cb0cf417-LHR
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rz.nakadashi.pw/v/s://hanjukb.com/vodplay/673693.shtml/title/myhash/3
200 OK 0 B URL HTTP/2 rz.nakadashi.pw/v/s://hanjukb.com/vodplay/673693.shtml/title/myhash/3
IP
Analyzer Verdict Alert fortinet Phishing
GET /v/s://hanjukb.com/vodplay/673693.shtml/title/myhash/3 HTTP/1.1
Host: rz.nakadashi.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://av.xvideos-dl.top
Connection: keep-alive
Referer: http://av.xvideos-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 15 Nov 2022 07:32:01 GMT
content-type: text/html; charset=UTF-8
vary: Host,Accept-Encoding
pdo-line8: host-rz.nakadashi.pw127.0.0.1-myhost-127.0.0.1/v/s://hanjukb.com/vodplay/673693.shtml/title/myhash/3
phost: rz.nakadashi.pw
line1066: notjp-nakadashi-myhost--filteron-
pdo106: feedvid-, cachefileb-cacpdo1/32/8c/261436, lfm-1-11412, lmd-11412, lud-3489016, xfvlen-1627017, fsize-480110, played-203
access-control-allow-headers: X-Requested-With
cache-control: public, max-age=3600000
access-control-allow-origin: *
x-proxy-cache-5950: HIT
xkey-5950: rz./v/s://hanjukb.com/vodplay/673693.shtml/title/myhash/3-A-rz.nakadashi.pw--cacpdo0---yes
x-proxy-cache-la2: HIT
xkey-la2: rz./v/s://hanjukb.com/vodplay/673693.shtml/title/myhash/3-A-rz.nakadashi.pw--my_zone
cf-cache-status: HIT
age: 73467
last-modified: Mon, 14 Nov 2022 11:07:34 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8VfYdBYnQbsqp6NpgTWolD35x9rDYNWPuOx0t4%2FwF2N1Dn09UH2MwdFmK2wRuD9lSq4IMM4qZDALzcZ%2BQEejPvm5Ck6Wq8pB0nsxnOJcS1FxjDg4vIJr7xSuCh67z4YOom4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76a64a66eb047707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
148.72.246.38
104.37.244.75
104.21.39.49
94.130.33.133
185.73.220.217
178.208.81.84
150.95.59.16
23.36.77.32
51.195.63.200
192.99.20.64
87.117.247.112
151.101.86.217