daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
301 Moved Permanently 162 B URL HTTP/1.1 daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
IP
ASN #51852 Private Layer INC
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /113686/the-dorm-inspector-is-cumming-jayla-de-angelis/ HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 01 Feb 2023 14:56:55 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Keep-Alive: timeout=60
Location: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2e72d45afe3d391c204b5391599607c
149d68b9d00a720b6f380fa2324779dca9dbe26d
f6f1c295c68dfebadacb1fc812b44e01c7ede0e203615ef3e2cced2ce2251e7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6F1C295C68DFEBADACB1FC812B44E01C7EDE0E203615EF3E2CCED2CE2251E7E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11963
Expires: Wed, 01 Feb 2023 18:16:18 GMT
Date: Wed, 01 Feb 2023 14:56:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 62de35a6c8e4efd7633fc5236b5b086f
6a92912a86dfcd0330d040cef06bef36889c76ab
ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13759
Expires: Wed, 01 Feb 2023 18:46:14 GMT
Date: Wed, 01 Feb 2023 14:56:55 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Retry-After, Content-Length, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 01 Feb 2023 14:36:01 GMT
content-type: application/json
age: 1254
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8d45deaa7ebfcd996c2055dae592ab8
55befe074589fe7b39757c145968058162a8fc6b
50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6726
Expires: Wed, 01 Feb 2023 16:49:01 GMT
Date: Wed, 01 Feb 2023 14:56:55 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: mEaxgCa+rHCyG728vCP6mVETOVMAqmGZbw+EqrV+5Yak0HFl8T5QjtnThhMkBKU9+BzgXY7Jr3s=
x-amz-request-id: 8FJ7ZTE8J3YKQ1HK
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 01 Feb 2023 14:51:36 GMT
age: 319
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3fe744c651f38152a47b5673a278c365
e5b89be7474fc88fc194c302115fc11df347d970
6a7136658460873952093827dab5f7594fac1d7faa27a9b6224324c0f25f1f54
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A7136658460873952093827DAB5F7594FAC1D7FAA27A9B6224324C0F25F1F54"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4699
Expires: Wed, 01 Feb 2023 16:15:14 GMT
Date: Wed, 01 Feb 2023 14:56:55 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 14:56:55 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 01 Feb 2023 14:41:42 GMT
age: 914
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8944
Expires: Wed, 01 Feb 2023 17:26:00 GMT
Date: Wed, 01 Feb 2023 14:56:56 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: veIZcLFDgFk5vn+0jZExyg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: SPM7zMXjMBXc2/Q48JsgRa4ptcQ=
daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
200 OK 8.8 kB URL HTTP/1.1 daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
IP
ASN #51852 Private Layer INC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4206), with CRLF, LF line terminators
Hash 31690084bed33c8c79154b38474ffca9
a3792d43ee8513e4aa60b744569a1f7443f5c610
ebc1729f514667ae6e5e151a46fc96e00a5568b0596d2df9d012c1c9839ddef1
GET /113686/the-dorm-inspector-is-cumming-jayla-de-angelis/ HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.30
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; path=/
history=113686; path=/
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 278 B IP
Hash ade05cc0faa410b18f220942470bc8e8
731b52477b264e47fac6a311cbd059e4af79e9fd
a4d5fc587e4cce82ea6d57859c3bd9a6ab0450955e75eb980bd07383ce9cec28
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1923
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:56:56 GMT
Last-Modified: Wed, 01 Feb 2023 14:24:53 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 278
daftsex.net/templates/bula/css/all.min.css?t=1671301097
200 OK 2.7 kB URL HTTP/1.1 daftsex.net/templates/bula/css/all.min.css?t=1671301097
IP
ASN #51852 Private Layer INC
File type ASCII text, with very long lines (12324), with no line terminators
Hash 89ffd7b4f99efda467412e67bf94cca7
b903442ce8ff943b0ba0b476548153ef0f7332e5
12bb05a22b71a5f5932ddec7b58c5a0dc55e5607b05388b2577a84ee5499a79b
GET /templates/bula/css/all.min.css?t=1671301097 HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: text/css
Last-Modified: Sat, 17 Dec 2022 18:18:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"639e07e9-3024"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 278 B IP
Hash ade05cc0faa410b18f220942470bc8e8
731b52477b264e47fac6a311cbd059e4af79e9fd
a4d5fc587e4cce82ea6d57859c3bd9a6ab0450955e75eb980bd07383ce9cec28
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1923
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:56:56 GMT
Last-Modified: Wed, 01 Feb 2023 14:24:53 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 278
daftsex.net/misc/jquery/jquery.min.js
200 OK 30 kB URL HTTP/1.1 daftsex.net/misc/jquery/jquery.min.js
IP
ASN #51852 Private Layer INC
File type ASCII text, with very long lines (32065)
Hash c8f14a62c63e02b31f475d5ba7111e6d
d4dea786a748e1cea3512a2367cd9559fbcb5261
c48995035671714ce6c5370e077c92e7b2b7dc977a04cb546df2488755280139
GET /misc/jquery/jquery.min.js HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: application/javascript
Last-Modified: Fri, 20 May 2016 17:24:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"573f4859-14e4a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
daftsex.net/misc/bulma/bulma.min.css
200 OK 27 kB URL HTTP/1.1 daftsex.net/misc/bulma/bulma.min.css
IP
ASN #51852 Private Layer INC
File type ASCII text, with very long lines (65536), with no line terminators
Hash eeb2f404987efe70e2291aaf12e76a34
a316d5a014dcbf5622cc786aad11c9967201e421
30385cb0b6312c80d0a1202b5a347a95bee432c972e46c4cac38ee8cd24362b2
GET /misc/bulma/bulma.min.css HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: text/css
Last-Modified: Sat, 26 Oct 1985 07:15:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"1dc08f74-3271c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
daftsex.net/templates/bula/js/all.min.js?t=1671301097
200 OK 30 kB URL HTTP/1.1 daftsex.net/templates/bula/js/all.min.js?t=1671301097
IP
ASN #51852 Private Layer INC
File type ASCII text, with very long lines (41849)
Hash 70e5c59800b27c9b96d373615e9ebe7e
c31bcc593c36e8fe6c8c93042be393d26c0ad4cc
5b0e53d14f9aceb723a719561dbcd359238b820a59389b03a0c96905cecd980f
GET /templates/bula/js/all.min.js?t=1671301097 HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: application/javascript
Last-Modified: Sat, 17 Dec 2022 18:18:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"639e07e9-138a0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
daftsex.net/media/videos/tmb/000/005/249/1.jpg
200 OK 21 kB URL HTTP/1.1 daftsex.net/media/videos/tmb/000/005/249/1.jpg
IP
ASN #51852 Private Layer INC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 384x216, components 3\012- data
Hash a5be96338146920add28f5bf06394fad
1111966196b12fe8849f92e8d4e8a7d12d183736
9039cc98c2de1d132b93e51475139482f87ee5abc1818825c2cb16254fe719e5
GET /media/videos/tmb/000/005/249/1.jpg HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: image/jpeg
Content-Length: 20818
Last-Modified: Thu, 01 Apr 2021 08:44:45 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "606587fd-5152"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
daftsex.net/media/videos/tmb/000/000/462/1.jpg
200 OK 19 kB URL HTTP/1.1 daftsex.net/media/videos/tmb/000/000/462/1.jpg
IP
ASN #51852 Private Layer INC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 384x216, components 3\012- data
Hash 97bfe9d92b0cc1b4a1f25539d011bf88
811ebd30e6fded5b499707fefd8c19067ce2b8c0
f6616f7a4b0cce44f6918d228edd80a6b5ea00032fc051110b555f692871d45c
GET /media/videos/tmb/000/000/462/1.jpg HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: image/jpeg
Content-Length: 19144
Last-Modified: Thu, 01 Apr 2021 06:45:51 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "60656c1f-4ac8"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
daftsex.net/media/videos/tmb/000/004/875/1.jpg
200 OK 19 kB URL HTTP/1.1 daftsex.net/media/videos/tmb/000/004/875/1.jpg
IP
ASN #51852 Private Layer INC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 384x216, components 3\012- data
Hash a2725644064e633bafec4e002274b55a
06e0c13d3e767454dee6e0f18b5d6a280836a90f
d9e689e0ab731b4b29729ecd3106ce19421bf03f95aeca13f87001dbfd24cd6e
GET /media/videos/tmb/000/004/875/1.jpg HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: image/jpeg
Content-Length: 19344
Last-Modified: Thu, 01 Apr 2021 08:41:51 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "6065874f-4b90"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
daftsex.net/media/videos/tmb/000/002/175/1.jpg
200 OK 19 kB URL HTTP/1.1 daftsex.net/media/videos/tmb/000/002/175/1.jpg
IP
ASN #51852 Private Layer INC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 384x216, components 3\012- data
Hash 5a3cab7ca405e60b98691dff69eb097b
d8fb9d062b930f8e108b4c11f52e17cdc425df11
bc6173ae93f916cd4d83c962297fe96f4d1c76f546f07e1aa399525a6b996558
GET /media/videos/tmb/000/002/175/1.jpg HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: image/jpeg
Content-Length: 18900
Last-Modified: Thu, 01 Apr 2021 08:21:07 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "60658273-49d4"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
daftsex.net/media/videos/tmb/000/000/243/1.jpg
200 OK 19 kB URL HTTP/1.1 daftsex.net/media/videos/tmb/000/000/243/1.jpg
IP
ASN #51852 Private Layer INC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 384x216, components 3\012- data
Hash 6339cd13e6fe5a2082ad743320226168
2e58c6f20f11eb01b03e1e6dbf5152b09b3144ae
9f0a344368a2d368ef05785f845770f3aa2797bacd54d0f6ec60f0aedbb39434
GET /media/videos/tmb/000/000/243/1.jpg HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: image/jpeg
Content-Length: 18592
Last-Modified: Thu, 01 Apr 2021 06:44:00 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "60656bb0-48a0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
daftsex.net/media/videos/tmb/000/000/521/1.jpg
200 OK 20 kB URL HTTP/1.1 daftsex.net/media/videos/tmb/000/000/521/1.jpg
IP
ASN #51852 Private Layer INC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 384x216, components 3\012- data
Hash 61e115787525579e3edb670a7047d75f
72a7e34a951609831151b8244387f7096c158359
7a1f671a4c448b5dca8d012e1c91936922e8cab36820dc8f67e5756ea45911bd
GET /media/videos/tmb/000/000/521/1.jpg HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: image/jpeg
Content-Length: 20241
Last-Modified: Thu, 01 Apr 2021 06:46:18 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "60656c3a-4f11"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
daftsex.net/media/videos/tmb/000/000/575/1.jpg
200 OK 17 kB URL HTTP/1.1 daftsex.net/media/videos/tmb/000/000/575/1.jpg
IP
ASN #51852 Private Layer INC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 384x216, components 3\012- data
Hash 986ab72eb3a630f24032acd18fa90c8a
4848d8cb6d2eec101080e4ae285633795bd1c699
1d2dd3f695826c7665ae201a02a681b2e8bff76872c84c8e49548b633c5998b5
GET /media/videos/tmb/000/000/575/1.jpg HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: image/jpeg
Content-Length: 17135
Last-Modified: Thu, 01 Apr 2021 06:46:45 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "60656c55-42ef"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
daftsex.net/templates/bula/images/logo.png?v=1
200 OK 2.1 kB URL HTTP/1.1 daftsex.net/templates/bula/images/logo.png?v=1
IP
ASN #51852 Private Layer INC
File type PNG image data, 268 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 89729ba768db0b43d379baccb36eb386
31ba3b89b52ef527e1a4b46f07ce1c529fcd2971
0d283ae2cf2a4be8f742b798c3a7b3cbda4c9e78a4425e0b242bad9241df9c1e
GET /templates/bula/images/logo.png?v=1 HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: image/png
Content-Length: 2058
Last-Modified: Sat, 05 Mar 2022 02:11:07 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "6222c6bb-80a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
syndication.realsrv.com/splash.php?idzone=4214764
200 OK 3.0 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?idzone=4214764
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with very long lines (748)
Hash ed1d739a7daf0aea2125b1d0cd72d7f9
93ef1e81d904ce1f427e6fc046376398e23d0cbc
cd682334cd60e1ddf276253b2b9869213a5b52f351dd86f59629dffd55f93e8e
GET /splash.php?idzone=4214764 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2263da7db8d06993.06543589818731587%22%3B%7D; expires=Fri, 31 Jan 2025 14:56:56 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
daftsex.net/media/videos/tmb/000/000/520/1.jpg
200 OK 22 kB URL HTTP/1.1 daftsex.net/media/videos/tmb/000/000/520/1.jpg
IP
ASN #51852 Private Layer INC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 384x216, components 3\012- data
Hash a74fdac028a0833ff3b0cedd76bfc621
bee758b77dbc3362b27f20282579c5a8b208b2a7
458199cfcaf0c49467e880ebe458c635f3d94e942e2f84cfcf71b3250ad5a68a
GET /media/videos/tmb/000/000/520/1.jpg HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: image/jpeg
Content-Length: 22542
Last-Modified: Thu, 01 Apr 2021 06:46:18 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "60656c3a-580e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
daftsex.net/media/videos/tmb/000/001/008/1.jpg
200 OK 17 kB URL HTTP/1.1 daftsex.net/media/videos/tmb/000/001/008/1.jpg
IP
ASN #51852 Private Layer INC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 384x216, components 3\012- data
Hash 79b674ab0771242b1db2d7a6657662fd
39a067d87e66b5782d05cb87e2c9204adbf07b35
733800a83905ecd1c12d9e74c8050079b698aa499376083fbb94524f6027f746
GET /media/videos/tmb/000/001/008/1.jpg HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: image/jpeg
Content-Length: 16876
Last-Modified: Thu, 01 Apr 2021 08:12:20 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "60658064-41ec"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
daftsex.net/media/videos/tmb/000/000/727/1.jpg
200 OK 25 kB URL HTTP/1.1 daftsex.net/media/videos/tmb/000/000/727/1.jpg
IP
ASN #51852 Private Layer INC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 384x216, components 3\012- data
Hash 618b17157f6c7b74ce299454bf4e6095
ca3edfa652a2db336d51019c5cd0e40baa24e038
f32aff12fa4a9ddb8ce772a053bbe53f00983feae31f3202ff37787ee4629dc4
GET /media/videos/tmb/000/000/727/1.jpg HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: image/jpeg
Content-Length: 25398
Last-Modified: Thu, 01 Apr 2021 06:47:56 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "60656c9c-6336"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
daftsex.net/media/videos/tmb/000/000/043/1.jpg
200 OK 14 kB URL HTTP/1.1 daftsex.net/media/videos/tmb/000/000/043/1.jpg
IP
ASN #51852 Private Layer INC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 384x216, components 3\012- data
Hash 237012c834aa6ada20733ebae84be35f
a371c1b9aea8076365b67d1ce37e159ee240b410
418f91816967efea5bb70c3a8a04ee424aece486fdeb804beb1c70da46e2e411
GET /media/videos/tmb/000/000/043/1.jpg HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: image/jpeg
Content-Length: 14484
Last-Modified: Thu, 01 Apr 2021 06:42:25 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "60656b51-3894"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
daftsex.net/media/videos/tmb/000/003/934/1.jpg
200 OK 22 kB URL HTTP/1.1 daftsex.net/media/videos/tmb/000/003/934/1.jpg
IP
ASN #51852 Private Layer INC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 384x216, components 3\012- data
Hash 43f4e50ef41be9c63aca33c230375ecb
429133ee29ae64825f6f504b126b63cb1b0bd1ac
ccd7abf7d5be4cee240e2f765f73e7532398eb3527c89140d080f897c3201d38
GET /media/videos/tmb/000/003/934/1.jpg HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: image/jpeg
Content-Length: 22476
Last-Modified: Thu, 01 Apr 2021 08:34:46 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "606585a6-57cc"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
daftsex.net/media/videos/tmb/000/004/134/1.jpg
200 OK 26 kB URL HTTP/1.1 daftsex.net/media/videos/tmb/000/004/134/1.jpg
IP
ASN #51852 Private Layer INC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 384x216, components 3\012- data
Hash af169357ef99b7ce62a345d32827f938
e354c4c864bb35345cab8ed20788c496ee740ecb
3fe11de026534526bdf020798ed7bd1fadb0c8a54980da5d66839fbbf5dacbf5
GET /media/videos/tmb/000/004/134/1.jpg HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: image/jpeg
Content-Length: 25870
Last-Modified: Thu, 01 Apr 2021 08:36:15 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "606585ff-650e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
syndication.realsrv.com/splash.php?idzone=4234656&cookieconsent=true&tags=null
200 OK 2.7 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?idzone=4234656&cookieconsent=true&tags=null
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (1550)
Hash 5b5c5df88becae8aad73713d68adba15
75a4c73182fbda49f3cf043c4646d4adfde45b2a
98c12791105479667226f0dee1a039b169c0bbf3617d1a7653dcf383e5437ec0
GET /splash.php?idzone=4234656&cookieconsent=true&tags=null HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://daftsex.net
Connection: keep-alive
Referer: https://daftsex.net/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2263da7db8d06993.06543589818731587%22%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: text/xml;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2263da7db8d06993.06543589818731587%22%3B%7D; expires=Fri, 31 Jan 2025 14:56:57 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-video%22%3A%22v3%7C%7CNOR%7C4234656%7C59504696%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C63da7db8d06993.06543589818731587%7C%7C0%7Cdaftsex.net%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Thu, 02 Feb 2023 14:56:57 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
Cache-Control: no-store
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: https://daftsex.net
Access-Control-Allow-Credentials: true
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
daftsex.net/media/videos/tmb/000/006/351/1.jpg
200 OK 30 kB URL HTTP/1.1 daftsex.net/media/videos/tmb/000/006/351/1.jpg
IP
ASN #51852 Private Layer INC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 384x216, components 3\012- data
Hash 2cc3a92b0628966d907779cf6ed63cec
f42a55da1b47e2c04cb76a6e4451c1c7314aff96
c8fb57712eda500d767ad0a7d9ba83c365b8fdcc6ab0cfae2a494a7f2e4bdb0f
GET /media/videos/tmb/000/006/351/1.jpg HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: image/jpeg
Content-Length: 30534
Last-Modified: Thu, 01 Apr 2021 08:53:12 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "606589f8-7746"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
daftsex.net/media/videos/tmb/000/001/432/1.jpg
200 OK 13 kB URL HTTP/1.1 daftsex.net/media/videos/tmb/000/001/432/1.jpg
IP
ASN #51852 Private Layer INC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 384x216, components 3\012- data
Hash 0aa4ddfde835bdca1567e2c2bcc90b7a
d17336705cc157f49127ba6cb3e29f1363d684e3
d24844db4078c7725311949d2b30014105b33d5c7e384fb2f2ab6a5ba8fef7e1
GET /media/videos/tmb/000/001/432/1.jpg HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: image/jpeg
Content-Length: 13090
Last-Modified: Thu, 01 Apr 2021 08:15:35 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "60658127-3322"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
syndication.realsrv.com/cimp.php?t=imp&data=H4sIAAAAAAAAA1WOO05FMQxEt8IGbjR27HyoqUECsQC/fEoaXnELL57kIgTkJPJYGmfM4HiAD9AD6qOmdb1SqAjCgVT8+eXVhbzbvH+OM3yMu4sUUXLNpBCv0LJ8wiQ5iSuKK+VcAM+lCDInF3h0LFijyFYBoG3N8Pe3p+vRInkETlYsvZOd4bI0zj1NGTeKPLJSt2SjCcutTDOyqDbyNv7bFN+EFUTOP+3ioKusA/9Vf0nXZytbZC/jkdtovZfWZopWRo/T6ozJbCSySV9gjZ3ASQEAAA==&d=inst
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=imp&data=H4sIAAAAAAAAA1WOO05FMQxEt8IGbjR27HyoqUECsQC/fEoaXnELL57kIgTkJPJYGmfM4HiAD9AD6qOmdb1SqAjCgVT8+eXVhbzbvH+OM3yMu4sUUXLNpBCv0LJ8wiQ5iSuKK+VcAM+lCDInF3h0LFijyFYBoG3N8Pe3p+vRInkETlYsvZOd4bI0zj1NGTeKPLJSt2SjCcutTDOyqDbyNv7bFN+EFUTOP+3ioKusA/9Vf0nXZytbZC/jkdtovZfWZopWRo/T6ozJbCSySV9gjZ3ASQEAAA==&d=inst
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=imp&data=H4sIAAAAAAAAA1WOO05FMQxEt8IGbjR27HyoqUECsQC/fEoaXnELL57kIgTkJPJYGmfM4HiAD9AD6qOmdb1SqAjCgVT8+eXVhbzbvH+OM3yMu4sUUXLNpBCv0LJ8wiQ5iSuKK+VcAM+lCDInF3h0LFijyFYBoG3N8Pe3p+vRInkETlYsvZOd4bI0zj1NGTeKPLJSt2SjCcutTDOyqDbyNv7bFN+EFUTOP+3ioKusA/9Vf0nXZytbZC/jkdtovZfWZopWRo/T6ozJbCSySV9gjZ3ASQEAAA==&d=inst HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://daftsex.net
Connection: keep-alive
Referer: https://daftsex.net/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2263da7db8d06993.06543589818731587%22%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://daftsex.net
Access-Control-Allow-Credentials: true
Set-Cookie: impressions=oslmrxbrnxgxamremxosxgeicxbmsbcenxgxamrxrlrabgeimmccrbebnxgxamcbexxbmgeioslmrxbmnxgxamreseallgeicxbmsbocnxgxamremxosxgeimmccrlaonxgxamccxobsegeimmccrlacnxgxamcmlarclgeicxbmsboenxgxamclrbcelgeioslmrxlrnxgxamslescrogeimmccrbxenxgxamrescroogeislsaroornxgxamccolacbgeioslmroemnxgxamclrbcrogeioslmrxlsnxgxamclrbcelgeicmmsxrbonxgxamsoeamlmgeimmccrlaenxgxamrescroogeimmccrbeanxgxamcssabxegeicaocmrmanxgxamolcrcergeimcclsxronxgxamsscrmclgeimcclsxmenxgxamrescroogeialbserebnxgxamccrrssogeimcclsxaonxgxamsxsxllxgeicxbmsbxcnxgxamresecrcgeimrblxebenxgxamselmborgeimcclsxconxgxamsbremaegeirbabxabbnxgxamrescroogeimcclsxacnxgxamsscrmclgeicmmsxaeenxgxamcmrmsrmgeialbsereanxgxamsoeabscgeicaxsscmbnxgxamsosomemgeimcclosconxgxamcxbemmxgeimcclsoeonxgxamrescroogeimcclsxlcnxgxamreaccbbgeimcclossbnxgxamcscxaesgeimcclsxscnxgxamsmoooeegeimcclsxlenxgxamcbrorxbgeimaecseaenxgxamsmoooeegeimaecsxcbnxgxamsmoooeegeimcclsxoanxgxamclrbcelgeimcclsxlbnxgxamcrbalrageimccloscanxgxamclrbcrogeiclsmrbsonxgxamsmmrbmbgeiclsmarsenxgxamsmmrbmbgeiccmmllebnxgxamclarlmmgeimcclsxsbnxgxamreollxsgeiclsmrbxonxgxamsbebceegeiclsmrbxcnxgxamsbebceegeiclsmarscnxgxamsbebceegeiccmmlmlcnxgxamsbebceegeiclsmarrenxgxamsbebceegeicaormbaonxgxamsbxxbsrgeicaormlrenxgxamcememscgeimcclsxlonxgxamcsmlmxcgeimrblelronxgxamsbremaegeimaecsxobnxgxamsbremaegeiclsmrbrcnxgxamsbroemmgeiclsmrraanxgxamclsslaegeiclsmrmxbnxgxamsbroemmgeimccloscenxgxamsbmrxregeimcclsxxonxgxamslescrogeimrblelxbnxgxamslescrogeimcclsoeenxgxamclrbcelgeimrblelmonxgxamcxcrasxgeimrbleloenxgxamcxcrasxgeiclsmrrmanxgxamcxabcxbgeiclsmrbeonxgxamcxabcxbgeiclsmrrcenxgxamcxabcxbgeiclsmrmxanxgxamcxabcxbgeiclsmrbxenxgxamcxabcxbgeiclsmaroonxgxamcxabcxbgeialbserxenxgxamcosraregeimcclsxsenxgxamrescroogeimcclsxlanxgxamcblrlbcgeiccmmlleanxgxamccrrssogeicaormlabnxgxamcrllsmageicaormlconxgxamcrllsmageiclsmarsonxgxamclsslaegeiclsmrmlbnxgxamclsslaegeiclsmrmocnxgxamclsslaegeiccmmllecnxgxamclsslaegeimcclsxcanxgxamclrbcelgeimrblelcenxgxamclrbcelgeimaecsxrcnxgxamclrbcelgeialbserxonxgxamclarlmmgeimcclosscnxgxamreaccbbgeimaecobronxgxamrescroogeimaecobeenxgxamrescroogeimcclosccnxgxamrescroogeimaecoboonxgxamrescroogeimrblxelenxgxamrescroogeixaoossalnxgxamrxbalmbgxcceixaoosscrnxgxamrxlsccsgxcceimxlbmoscnogxamrxlmbcbgxcceimaoolxrcnxgxamrocblesgxcceimsrrbxmonogxamrocblesgxcceimxlbmoaonxgxamrocblesgxcceimbbcemoanxgxamroascxmgxcce; expires=Thu, 02 Feb 2023 14:56:57 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
__upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D; expires=Fri, 31 Jan 2025 14:56:57 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecf5aa559c0b346ea061b142d17eef87
6ca74e408e705d6409400a0190ae1bdad2012f4c
cfc7da1a937ae2a61d6d1e628215fed444a957c5b0fc4227f9f5a5bf2b30cf82
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CFC7DA1A937AE2A61D6D1E628215FED444A957C5B0FC4227F9F5A5BF2B30CF82"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13906
Expires: Wed, 01 Feb 2023 18:48:43 GMT
Date: Wed, 01 Feb 2023 14:56:57 GMT
Connection: keep-alive
daftsex.net/misc/flags-icons/flags/4x3/us.svg
200 OK 697 B URL HTTP/1.1 daftsex.net/misc/flags-icons/flags/4x3/us.svg
IP
ASN #51852 Private Layer INC
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3840)
Hash 112de53b7233a000ea27cc78e015334c
d219c6de8fb98efbd266376deebd13cacd781823
a1a21b6624fb3d746f05617ddddf75f1725341495fc294453dac50b5cffcd556
GET /misc/flags-icons/flags/4x3/us.svg HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: image/svg+xml
Last-Modified: Thu, 28 Oct 2021 07:56:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"617a57a5-116a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
syndication.realsrv.com/splash.php?native-settings=1&idzone=4214766&cookieconsent=true&&p=https%3A%2F%2Fdaftsex.net%2F113686%2Fthe-dorm-inspector-is-cumming-jayla-de-angelis%2F
200 OK 812 B URL HTTP/1.1 syndication.realsrv.com/splash.php?native-settings=1&idzone=4214766&cookieconsent=true&&p=https%3A%2F%2Fdaftsex.net%2F113686%2Fthe-dorm-inspector-is-cumming-jayla-de-angelis%2F
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (2026), with no line terminators
Hash 4a905884a0366549829d0c050e924d14
b86a5b8c9ba9be6a20d5d3aa097d567e32717cea
f3e7831c9232acb410692618caadcd1c7ffd3ece30da67a9c4358cc6646c27b6
GET /splash.php?native-settings=1&idzone=4214766&cookieconsent=true&&p=https%3A%2F%2Fdaftsex.net%2F113686%2Fthe-dorm-inspector-is-cumming-jayla-de-angelis%2F HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://daftsex.net
Connection: keep-alive
Referer: https://daftsex.net/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2263da7db8d06993.06543589818731587%22%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://daftsex.net
Access-Control-Allow-Credentials: true
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ba0df358e83d7ddff8649f274503a5e0
96f18d2b45c4f4dae485046afe22d678696cf9d1
0f5f73e087ea9e2add972f140f08ba3c1eae0f4d811f01c219acf84044712a01
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0F5F73E087EA9E2ADD972F140F08BA3C1EAE0F4D811F01C219ACF84044712A01"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9806
Expires: Wed, 01 Feb 2023 17:40:23 GMT
Date: Wed, 01 Feb 2023 14:56:57 GMT
Connection: keep-alive
syndication.realsrv.com/v1/api.php
200 OK 2.9 kB URL HTTP/1.1 syndication.realsrv.com/v1/api.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (6675), with no line terminators
Hash f4e5826c3dc8f200f87fb502210f83d2
d3f680875cbde1d3650e670049815219e257a041
2e1e5a19ee16c12d19ad02c8128f8111b4c7718eee08c792bf284f616e11c820
POST /v1/api.php HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 324
Origin: https://daftsex.net
Connection: keep-alive
Referer: https://daftsex.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://daftsex.net
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263da7db9072295.700340793756452635%22%3B%7D; expires=Fri, 31-Jan-2025 14:56:57 GMT; Max-Age=63072000; path=/; domain=realsrv.com; secure; SameSite=None
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/v1/api.php
200 OK 2.8 kB URL HTTP/1.1 syndication.realsrv.com/v1/api.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (6119), with no line terminators
Hash f2fafda616c5d9cb2e022bffe33d0383
55a090d4d39b61cf92e51a0d3f6ff62df68a0b1d
eeecb1fa788b02db45f94043d3538835983452ca918876d5401f9b1c1784a4d3
POST /v1/api.php HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 324
Origin: https://daftsex.net
Connection: keep-alive
Referer: https://daftsex.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://daftsex.net
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2263da7db90259b4.58529808835109313%22%3B%7D; expires=Fri, 31-Jan-2025 14:56:57 GMT; Max-Age=63072000; path=/; domain=realsrv.com; secure; SameSite=None
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/v1/api.php
200 OK 2.7 kB URL HTTP/1.1 syndication.realsrv.com/v1/api.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (5696), with no line terminators
Hash 04f25ab614dad89a12d61fa4a5f01586
281b86a3d6de0c76202511e5b5ec92092cca6f0a
c1035a9f1445e4005f01c069f7e9d49505b193bab376f00b176324d9011c4751
POST /v1/api.php HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 324
Origin: https://daftsex.net
Connection: keep-alive
Referer: https://daftsex.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://daftsex.net
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263da7db8ec32c8.624815063156879264%22%3B%7D; expires=Fri, 31-Jan-2025 14:56:57 GMT; Max-Age=63072000; path=/; domain=realsrv.com; secure; SameSite=None
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/v1/api.php
200 OK 2.7 kB URL HTTP/1.1 syndication.realsrv.com/v1/api.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (5705), with no line terminators
Hash 90ce87b011056bc47c86a1491d1040a0
9299e7b22b614e11284a50959e64e769af3a641d
f648a48547f0588e0b1161ffa5619674789438b2797fc3eaf9e6ff576d4aaf23
POST /v1/api.php HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 324
Origin: https://daftsex.net
Connection: keep-alive
Referer: https://daftsex.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://daftsex.net
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263da7db9032510.287625221063333968%22%3B%7D; expires=Fri, 31-Jan-2025 14:56:57 GMT; Max-Age=63072000; path=/; domain=realsrv.com; secure; SameSite=None
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/v1/api.php
200 OK 2.7 kB URL HTTP/1.1 syndication.realsrv.com/v1/api.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (5699), with no line terminators
Hash 51913aa6a8f4fd8227ab0aba9217c84f
4195e4d47be7127fc4315c803e4efd4555c184cd
ae28d01d32d12e607b8d0f0414c595c4134896d5d018d7522c28299521e68413
POST /v1/api.php HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 324
Origin: https://daftsex.net
Connection: keep-alive
Referer: https://daftsex.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://daftsex.net
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263da7db9029295.327836731742489487%22%3B%7D; expires=Fri, 31-Jan-2025 14:56:57 GMT; Max-Age=63072000; path=/; domain=realsrv.com; secure; SameSite=None
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s3t3d2y8.afcdn.net/library/448451/19e50e0fb4d0a3ab37cd6c417b424fa12312b487.webp
200 OK 10 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/448451/19e50e0fb4d0a3ab37cd6c417b424fa12312b487.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0e06150789b63a1b3481343fc88e3cd4
19e50e0fb4d0a3ab37cd6c417b424fa12312b487
c55ca475e359fc82ba20e32e5868eb81e446bc0a41dde3aba44e1e14ef2d2b20
GET /library/448451/19e50e0fb4d0a3ab37cd6c417b424fa12312b487.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:56:57 GMT
content-type: image/webp
content-length: 10080
last-modified: Tue, 09 Aug 2022 11:10:25 GMT
etag: "62f240a1-2760"
expires: Sat, 20 Jan 2024 09:07:30 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
x-accel-expires: @1706473685
server: CDN77-Turbo
x-77-nzt: AblMCRTrJ4j/ZPgEAA
x-77-nzt-ray: af5856309a12bd46b97dda63286f6a0c
x-cache: HIT
x-age: 325732
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/images/close-icon-circle.png
200 OK 405 B URL HTTP/2 s3t3d2y8.afcdn.net/images/close-icon-circle.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash bc8bf5d1633e548e9a178bf29be30b7b
bd290b6eabd73d2c95db053620797503e9178484
94f575abdb5c45476f9c2b62bbe06fbfacce9d25e95796ffcd07680bd7c6c0bb
GET /images/close-icon-circle.png HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:56:57 GMT
content-type: image/png
content-length: 405
last-modified: Wed, 29 Jun 2022 13:13:10 GMT
etag: "62bc4fe6-195"
expires: Fri, 30 Jun 2023 18:46:41 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195204
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCRQ5VJX/teAbAQ
x-77-nzt-ray: af5856309a12bd46b97dda635b27910c
x-cache: HIT
x-age: 18604213
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.pornhits.com/static/images/fonts/icomoon.ttf?nddhpi
200 OK 9.6 kB URL HTTP/2 www.pornhits.com/static/images/fonts/icomoon.ttf?nddhpi
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash 21263355cf739547055f2da9fd6759bd
762384d3af0de2d2bd630855b3f388326038ba92
2674595ece6d29bba3197719873b35d8e2893e9eb3a0271bad0ea717e9b3d405
GET /static/images/fonts/icomoon.ttf?nddhpi HTTP/1.1
Host: www.pornhits.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pornhits.com/embed.php?id=228327
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 01 Feb 2023 14:56:57 GMT
content-type: text/plain
content-length: 9568
last-modified: Thu, 17 Nov 2022 11:44:20 GMT
etag: "63761e94-2560"
expires: Wed, 27 Sep 2023 11:26:52 GMT
access-control-allow-origin: *
cache-control: max-age=25920000, public
pragma: public
x-nginx-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash e0d5cef290e64147859d24dfab033f8d
1b64cb1c126247bd2c4e8b6fcf8e47d6326a1b96
9582d5a0c46f3f52cc725d71627a37565c47c0a89da08704c80df92b28e7d5b2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4761
Cache-Control: max-age=96085
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:56:57 GMT
Etag: "63d93f75-118"
Expires: Thu, 02 Feb 2023 17:38:22 GMT
Last-Modified: Tue, 31 Jan 2023 16:19:01 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 280
www.pornhits.com/upd/20221228.082412.131697/static/main.js
200 OK 50 kB URL HTTP/2 www.pornhits.com/upd/20221228.082412.131697/static/main.js
IP
File type Unicode text, UTF-8 text, with very long lines (31507)
Hash 274e642adced1417bb06c74bee6eefc5
15f0efce657a863fa7aa6cf6e329e8659400ee23
978e63e1a07e02775dc2a3ededa9e4dcd732b914fd016ef3b72b33dc35f8c6dc
GET /upd/20221228.082412.131697/static/main.js HTTP/1.1
Host: www.pornhits.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pornhits.com/embed.php?id=228327
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 01 Feb 2023 14:56:57 GMT
content-type: application/javascript
last-modified: Wed, 28 Dec 2022 08:24:12 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63abfd2c-20271"
expires: Wed, 25 Oct 2023 09:21:58 GMT
access-control-allow-origin: *
cache-control: max-age=25920000, public
pragma: public
x-nginx-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA1VQu27DMAz8lf6AhePLojK3awukyAcYtjxmSYYU4MeHVpEC1Q13lI4HUgyWCTyB3tBONp+sRqPSUJQLmcbn1zmUYlv2+60/yrXfQ3mGtbBKBo0G8/Qpk1bRMHhobSQNUV28Gc+hCAkk2ET1UAWYWxNC1s414yri8v0eH5dzUIFXexEjgsYcR46mxmNkVeN+9DO7Lrplorc5q912GHAY/82NXxRi8nzk10ViokF5EEMtt5/rGvFnEB9koyu39SM++mqQuW+eH7LtXcxcSBnSbdn7Wp8JD/tAXgEAAA==
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA1VQu27DMAz8lf6AhePLojK3awukyAcYtjxmSYYU4MeHVpEC1Q13lI4HUgyWCTyB3tBONp+sRqPSUJQLmcbn1zmUYlv2+60/yrXfQ3mGtbBKBo0G8/Qpk1bRMHhobSQNUV28Gc+hCAkk2ET1UAWYWxNC1s414yri8v0eH5dzUIFXexEjgsYcR46mxmNkVeN+9DO7Lrplorc5q912GHAY/82NXxRi8nzk10ViokF5EEMtt5/rGvFnEB9koyu39SM++mqQuW+eH7LtXcxcSBnSbdn7Wp8JD/tAXgEAAA==
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA1VQu27DMAz8lf6AhePLojK3awukyAcYtjxmSYYU4MeHVpEC1Q13lI4HUgyWCTyB3tBONp+sRqPSUJQLmcbn1zmUYlv2+60/yrXfQ3mGtbBKBo0G8/Qpk1bRMHhobSQNUV28Gc+hCAkk2ET1UAWYWxNC1s414yri8v0eH5dzUIFXexEjgsYcR46mxmNkVeN+9DO7Lrplorc5q912GHAY/82NXxRi8nzk10ViokF5EEMtt5/rGvFnEB9koyu39SM++mqQuW+eH7LtXcxcSBnSbdn7Wp8JD/tAXgEAAA== HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://daftsex.net
Connection: keep-alive
Referer: https://daftsex.net/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263da7db9029295.327836731742489487%22%3B%7D; c-tag=%7B%22tag-video%22%3A%22v3%7C%7CNOR%7C4234656%7C59504696%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C63da7db8d06993.06543589818731587%7C%7C0%7Cdaftsex.net%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; impressions=oslmrxbrnxgxamremxosxgeicxbmsbcenxgxamrxrlrabgeimmccrbebnxgxamcbexxbmgeioslmrxbmnxgxamreseallgeicxbmsbocnxgxamremxosxgeimmccrlaonxgxamccxobsegeimmccrlacnxgxamcmlarclgeicxbmsboenxgxamclrbcelgeioslmrxlrnxgxamslescrogeimmccrbxenxgxamrescroogeislsaroornxgxamccolacbgeioslmroemnxgxamclrbcrogeioslmrxlsnxgxamclrbcelgeicmmsxrbonxgxamsoeamlmgeimmccrlaenxgxamrescroogeimmccrbeanxgxamcssabxegeicaocmrmanxgxamolcrcergeimcclsxronxgxamsscrmclgeimcclsxmenxgxamrescroogeialbserebnxgxamccrrssogeimcclsxaonxgxamsxsxllxgeicxbmsbxcnxgxamresecrcgeimrblxebenxgxamselmborgeimcclsxconxgxamsbremaegeirbabxabbnxgxamrescroogeimcclsxacnxgxamsscrmclgeicmmsxaeenxgxamcmrmsrmgeialbsereanxgxamsoeabscgeicaxsscmbnxgxamsosomemgeimcclosconxgxamcxbemmxgeimcclsoeonxgxamrescroogeimcclsxlcnxgxamreaccbbgeimcclossbnxgxamcscxaesgeimcclsxscnxgxamsmoooeegeimcclsxlenxgxamcbrorxbgeimaecseaenxgxamsmoooeegeimaecsxcbnxgxamsmoooeegeimcclsxoanxgxamclrbcelgeimcclsxlbnxgxamcrbalrageimccloscanxgxamclrbcrogeiclsmrbsonxgxamsmmrbmbgeiclsmarsenxgxamsmmrbmbgeiccmmllebnxgxamclarlmmgeimcclsxsbnxgxamreollxsgeiclsmrbxonxgxamsbebceegeiclsmrbxcnxgxamsbebceegeiclsmarscnxgxamsbebceegeiccmmlmlcnxgxamsbebceegeiclsmarrenxgxamsbebceegeicaormbaonxgxamsbxxbsrgeicaormlrenxgxamcememscgeimcclsxlonxgxamcsmlmxcgeimrblelronxgxamsbremaegeimaecsxobnxgxamsbremaegeiclsmrbrcnxgxamsbroemmgeiclsmrraanxgxamclsslaegeiclsmrmxbnxgxamsbroemmgeimccloscenxgxamsbmrxregeimcclsxxonxgxamslescrogeimrblelxbnxgxamslescrogeimcclsoeenxgxamclrbcelgeimrblelmonxgxamcxcrasxgeimrbleloenxgxamcxcrasxgeiclsmrrmanxgxamcxabcxbgeiclsmrbeonxgxamcxabcxbgeiclsmrrcenxgxamcxabcxbgeiclsmrmxanxgxamcxabcxbgeiclsmrbxenxgxamcxabcxbgeiclsmaroonxgxamcxabcxbgeialbserxenxgxamcosraregeimcclsxsenxgxamrescroogeimcclsxlanxgxamcblrlbcgeiccmmlleanxgxamccrrssogeicaormlabnxgxamcrllsmageicaormlconxgxamcrllsmageiclsmarsonxgxamclsslaegeiclsmrmlbnxgxamclsslaegeiclsmrmocnxgxamclsslaegeiccmmllecnxgxamclsslaegeimcclsxcanxgxamclrbcelgeimrblelcenxgxamclrbcelgeimaecsxrcnxgxamclrbcelgeialbserxonxgxamclarlmmgeimcclosscnxgxamreaccbbgeimaecobronxgxamrescroogeimaecobeenxgxamrescroogeimcclosccnxgxamrescroogeimaecoboonxgxamrescroogeimrblxelenxgxamrescroogeixaoossalnxgxamrxbalmbgxcceixaoosscrnxgxamrxlsccsgxcceimxlbmoscnogxamrxlmbcbgxcceimaoolxrcnxgxamrocblesgxcceimsrrbxmonogxamrocblesgxcceimxlbmoaonxgxamrocblesgxcceimbbcemoanxgxamroascxmgxcce; __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://daftsex.net
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.029701%22%7D; expires=Fri, 31 Jan 2025 14:56:57 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
tn.pornhits.com/media/tn/sources/228327_1.jpg
200 OK 124 kB URL HTTP/2 tn.pornhits.com/media/tn/sources/228327_1.jpg
IP
File type JPEG image data, baseline, precision 8, 1280x720, components 3\012- data
Size 124 kB (124215 bytes)
Hash 88103f41564c83cc291d42891ea1bfd0
577a2dfcecb62f987628c5f78db6c0607a653c96
5735762bfc5a1c52ea8f7cc611a7219cc0f737b05eddc5908028ace21315287b
GET /media/tn/sources/228327_1.jpg HTTP/1.1
Host: tn.pornhits.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pornhits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 01 Feb 2023 14:56:57 GMT
content-type: image/jpeg
content-length: 124215
last-modified: Thu, 31 Mar 2022 23:37:05 GMT
etag: "62463b21-1e537"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
x-nginx-cache-status: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
www.pornhits.com/magic/9b5bec2f6312b55ee074c942d9e4c22f.js
200 OK 7.1 kB URL HTTP/2 www.pornhits.com/magic/9b5bec2f6312b55ee074c942d9e4c22f.js
IP
Hash 79021e38562f49de8198bf1e909bded2
b61f7255e2d6e23abd358e7816220aa760ec0ca9
e5eb2b77289c0fbed1294696a2dc6ee23650f219abbb6ec5b2fab138aaa8647a
GET /magic/9b5bec2f6312b55ee074c942d9e4c22f.js HTTP/1.1
Host: www.pornhits.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pornhits.com/embed.php?id=228327
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 01 Feb 2023 14:56:57 GMT
content-type: application/javascript
last-modified: Wed, 28 Dec 2022 08:22:33 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63abfcc9-675c"
expires: Fri, 10 Nov 2023 08:33:33 GMT
access-control-allow-origin: *
cache-control: max-age=25920000, public
pragma: public
x-nginx-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
www.pornhits.com/livesmatter/holly7.10.1.096d25ada1e33f673f3f24f295bd9ea5.js
200 OK 80 kB URL HTTP/2 www.pornhits.com/livesmatter/holly7.10.1.096d25ada1e33f673f3f24f295bd9ea5.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 3bf1f3be1915f724a95e9300fa49716f
c9086f3fab14c560f59d4565e3ea9e1ad60a3cbd
9674097bd8168be13a1b0d080cdca6767e4b436eae8a30e8a1676b0b6e14dd41
GET /livesmatter/holly7.10.1.096d25ada1e33f673f3f24f295bd9ea5.js HTTP/1.1
Host: www.pornhits.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pornhits.com/embed.php?id=228327
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 01 Feb 2023 14:56:57 GMT
content-type: application/javascript
last-modified: Fri, 20 Jan 2023 11:23:09 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63ca799d-31f16"
expires: Thu, 16 Nov 2023 11:23:09 GMT
access-control-allow-origin: *
cache-control: max-age=25920000, public
pragma: public
x-nginx-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/426059/c939fdb909578ebf7577341bb1723ce604f19d28.jpg
200 OK 32 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/426059/c939fdb909578ebf7577341bb1723ce604f19d28.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 84d61f43ec1dc4b715ee00d2888a78fc
c939fdb909578ebf7577341bb1723ce604f19d28
4a81caa135ac5cacceaa88d1e96d64266fd640caf99911e3ba43a8e1691f61c0
GET /library/426059/c939fdb909578ebf7577341bb1723ce604f19d28.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:56:57 GMT
content-type: image/jpeg
content-length: 32171
last-modified: Thu, 15 Sep 2022 15:28:27 GMT
etag: "6323449b-7dab"
expires: Wed, 25 Oct 2023 20:53:30 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
x-accel-expires: @1704988813
server: CDN77-Turbo
x-77-nzt: AblMCRROC1P/rKAbAA
x-77-nzt-ray: af5856309a12bd46b97dda63d8097311
x-cache: HIT
x-age: 1810604
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA1VPu24DMQz7lf7AGZQs+ZG5XVsgRT7grjmPWZIhAfjx1V2QAhUH0RJNUArNE3SCvKEfvBy8skvqSKZJ3Pj5daQJz/O4Xdd7uqw3mhZ4p1dxGDu8hc5UrJrR0Wi1S+5gbbl110IDMxFQz6EJloAqosVyqU0KOit4+n7nx+lISWjVX01Byp5j87HguO9e1XVF+Kk2m+0MlNZLvIYPOLAJ/+XGE0lyK7HU1yAwyd6iwJ3N18flh/wTPFPT919xbdvs6Rk4Y6wj14ElL3Nfl1Uiw9B5iNgv5MAI6V4BAAA=
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA1VPu24DMQz7lf7AGZQs+ZG5XVsgRT7grjmPWZIhAfjx1V2QAhUH0RJNUArNE3SCvKEfvBy8skvqSKZJ3Pj5daQJz/O4Xdd7uqw3mhZ4p1dxGDu8hc5UrJrR0Wi1S+5gbbl110IDMxFQz6EJloAqosVyqU0KOit4+n7nx+lISWjVX01Byp5j87HguO9e1XVF+Kk2m+0MlNZLvIYPOLAJ/+XGE0lyK7HU1yAwyd6iwJ3N18flh/wTPFPT919xbdvs6Rk4Y6wj14ElL3Nfl1Uiw9B5iNgv5MAI6V4BAAA=
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA1VPu24DMQz7lf7AGZQs+ZG5XVsgRT7grjmPWZIhAfjx1V2QAhUH0RJNUArNE3SCvKEfvBy8skvqSKZJ3Pj5daQJz/O4Xdd7uqw3mhZ4p1dxGDu8hc5UrJrR0Wi1S+5gbbl110IDMxFQz6EJloAqosVyqU0KOit4+n7nx+lISWjVX01Byp5j87HguO9e1XVF+Kk2m+0MlNZLvIYPOLAJ/+XGE0lyK7HU1yAwyd6iwJ3N18flh/wTPFPT919xbdvs6Rk4Y6wj14ElL3Nfl1Uiw9B5iNgv5MAI6V4BAAA= HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://daftsex.net
Connection: keep-alive
Referer: https://daftsex.net/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263da7db9029295.327836731742489487%22%3B%7D; c-tag=%7B%22tag-video%22%3A%22v3%7C%7CNOR%7C4234656%7C59504696%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C63da7db8d06993.06543589818731587%7C%7C0%7Cdaftsex.net%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; impressions=oslmrxbrnxgxamremxosxgeicxbmsbcenxgxamrxrlrabgeimmccrbebnxgxamcbexxbmgeioslmrxbmnxgxamreseallgeicxbmsbocnxgxamremxosxgeimmccrlaonxgxamccxobsegeimmccrlacnxgxamcmlarclgeicxbmsboenxgxamclrbcelgeioslmrxlrnxgxamslescrogeimmccrbxenxgxamrescroogeislsaroornxgxamccolacbgeioslmroemnxgxamclrbcrogeioslmrxlsnxgxamclrbcelgeicmmsxrbonxgxamsoeamlmgeimmccrlaenxgxamrescroogeimmccrbeanxgxamcssabxegeicaocmrmanxgxamolcrcergeimcclsxronxgxamsscrmclgeimcclsxmenxgxamrescroogeialbserebnxgxamccrrssogeimcclsxaonxgxamsxsxllxgeicxbmsbxcnxgxamresecrcgeimrblxebenxgxamselmborgeimcclsxconxgxamsbremaegeirbabxabbnxgxamrescroogeimcclsxacnxgxamsscrmclgeicmmsxaeenxgxamcmrmsrmgeialbsereanxgxamsoeabscgeicaxsscmbnxgxamsosomemgeimcclosconxgxamcxbemmxgeimcclsoeonxgxamrescroogeimcclsxlcnxgxamreaccbbgeimcclossbnxgxamcscxaesgeimcclsxscnxgxamsmoooeegeimcclsxlenxgxamcbrorxbgeimaecseaenxgxamsmoooeegeimaecsxcbnxgxamsmoooeegeimcclsxoanxgxamclrbcelgeimcclsxlbnxgxamcrbalrageimccloscanxgxamclrbcrogeiclsmrbsonxgxamsmmrbmbgeiclsmarsenxgxamsmmrbmbgeiccmmllebnxgxamclarlmmgeimcclsxsbnxgxamreollxsgeiclsmrbxonxgxamsbebceegeiclsmrbxcnxgxamsbebceegeiclsmarscnxgxamsbebceegeiccmmlmlcnxgxamsbebceegeiclsmarrenxgxamsbebceegeicaormbaonxgxamsbxxbsrgeicaormlrenxgxamcememscgeimcclsxlonxgxamcsmlmxcgeimrblelronxgxamsbremaegeimaecsxobnxgxamsbremaegeiclsmrbrcnxgxamsbroemmgeiclsmrraanxgxamclsslaegeiclsmrmxbnxgxamsbroemmgeimccloscenxgxamsbmrxregeimcclsxxonxgxamslescrogeimrblelxbnxgxamslescrogeimcclsoeenxgxamclrbcelgeimrblelmonxgxamcxcrasxgeimrbleloenxgxamcxcrasxgeiclsmrrmanxgxamcxabcxbgeiclsmrbeonxgxamcxabcxbgeiclsmrrcenxgxamcxabcxbgeiclsmrmxanxgxamcxabcxbgeiclsmrbxenxgxamcxabcxbgeiclsmaroonxgxamcxabcxbgeialbserxenxgxamcosraregeimcclsxsenxgxamrescroogeimcclsxlanxgxamcblrlbcgeiccmmlleanxgxamccrrssogeicaormlabnxgxamcrllsmageicaormlconxgxamcrllsmageiclsmarsonxgxamclsslaegeiclsmrmlbnxgxamclsslaegeiclsmrmocnxgxamclsslaegeiccmmllecnxgxamclsslaegeimcclsxcanxgxamclrbcelgeimrblelcenxgxamclrbcelgeimaecsxrcnxgxamclrbcelgeialbserxonxgxamclarlmmgeimcclosscnxgxamreaccbbgeimaecobronxgxamrescroogeimaecobeenxgxamrescroogeimcclosccnxgxamrescroogeimaecoboonxgxamrescroogeimrblxelenxgxamrescroogeixaoossalnxgxamrxbalmbgxcceixaoosscrnxgxamrxlsccsgxcceimxlbmoscnogxamrxlmbcbgxcceimaoolxrcnxgxamrocblesgxcceimsrrbxmonogxamrocblesgxcceimxlbmoaonxgxamrocblesgxcceimbbcemoanxgxamroascxmgxcce; __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://daftsex.net
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.029701%22%7D; expires=Fri, 31 Jan 2025 14:56:57 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
go.xlivrdr.com/smartpop/165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&memberId=ooc4ASOpnoprqrdVdVLTXdW6VzqpbXUzOodTK6V0rpXT1UU0uldK6V0zpXSuldK6Z0rpXTOro2zs20t2lruuojlrqpoqtutmtsomqtsc6V22fBi7qjBuZznSuldK6V0rpXSuldK4PsA-&sourceId=4234656&p1=4581850&skipOffset=00:00:05
302 Found 0 B URL HTTP/2 go.xlivrdr.com/smartpop/165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&memberId=ooc4ASOpnoprqrdVdVLTXdW6VzqpbXUzOodTK6V0rpXT1UU0uldK6V0zpXSuldK6Z0rpXTOro2zs20t2lruuojlrqpoqtutmtsomqtsc6V22fBi7qjBuZznSuldK6V0rpXSuldK4PsA-&sourceId=4234656&p1=4581850&skipOffset=00:00:05
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smartpop/165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&memberId=ooc4ASOpnoprqrdVdVLTXdW6VzqpbXUzOodTK6V0rpXT1UU0uldK6V0zpXSuldK6Z0rpXTOro2zs20t2lruuojlrqpoqtutmtsomqtsc6V22fBi7qjBuZznSuldK6V0rpXSuldK4PsA-&sourceId=4234656&p1=4581850&skipOffset=00:00:05 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://daftsex.net
Connection: keep-alive
Referer: https://daftsex.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 01 Feb 2023 14:56:57 GMT
content-length: 0
location: https://go.xlivrdr.com/api/models/vast?campaignId=165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af&campaignType=smartpop&creativeId=1aa4022af61bfad6ec7c637003dfb79b6edb7465c731eac0e6955245fc823c00&duration=00%3A00%3A30&endpoint=room&iterationId=397613&masterSmartpopId=2683&memberId=ooc4ASOpnoprqrdVdVLTXdW6VzqpbXUzOodTK6V0rpXT1UU0uldK6V0zpXSuldK6Z0rpXTOro2zs20t2lruuojlrqpoqtutmtsomqtsc6V22fBi7qjBuZznSuldK6V0rpXSuldK4PsA-&p1=4581850&ruleId=157&skipOffset=00%3A00%3A05&smartpopId=3564&sourceId=4234656&tag=-girls%2Findian&userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&variationId=30208&videosList=oil-show11
access-control-allow-origin: https://daftsex.net
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: DYNAMIC
set-cookie: _var=7868025.30208; Path=/; HttpOnly; SameSite=Strict
__cflb=0H28uukSkGJRy5UBr1MAvzNuwf2BatFGwpo9DbrfFkG; SameSite=None; Secure; path=/; expires=Thu, 02-Feb-23 13:56:57 GMT; HttpOnly
server: cloudflare
cf-ray: 792b89660965b515-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash e0d5cef290e64147859d24dfab033f8d
1b64cb1c126247bd2c4e8b6fcf8e47d6326a1b96
9582d5a0c46f3f52cc725d71627a37565c47c0a89da08704c80df92b28e7d5b2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4761
Cache-Control: max-age=96085
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:56:57 GMT
Etag: "63d93f75-118"
Expires: Thu, 02 Feb 2023 17:38:22 GMT
Last-Modified: Tue, 31 Jan 2023 16:19:01 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 280
www.pornhits.com/embed.php?id=228327
200 OK 41 kB URL HTTP/2 www.pornhits.com/embed.php?id=228327
IP
Hash 48447d9483e44c2e99e0ee90aef32bb4
64e6a605dc925a41a815f12a4d328e8f78649588
53eea6e779e2f26054fa330502727d58fdb6b03e4f9fad7a3ade3655eddb13eb
GET /embed.php?id=228327 HTTP/1.1
Host: www.pornhits.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 01 Feb 2023 14:56:57 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
x-powered-by: PHP/7.2.34
access-control-allow-origin: *
set-cookie: kt_lang=en; expires=Sat, 27-Jan-2024 14:56:59 GMT; Max-Age=31104000; path=/; domain=.pornhits.com
x-request-id: 0b6e5790cd6cd7650c2d91b7ac6ded73
content-encoding: gzip
X-Firefox-Spdy: h2
crossingwhile.com/97/bd/8b/97bd8b8dabd9a70e21fb3cb58787512c.js
200 OK 29 kB URL HTTP/1.1 crossingwhile.com/97/bd/8b/97bd8b8dabd9a70e21fb3cb58787512c.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9df1f319fa2975be4bce039dbf3d8144
03003f83d45b9b16f57ec33d7a77332850948ac2
872899eb32e8b01e719ee1f2e15e005e278924c34cb8f4789a9cb7926de605a9
Analyzer Verdict Alert quad9 Sinkholed
GET /97/bd/8b/97bd8b8dabd9a70e21fb3cb58787512c.js HTTP/1.1
Host: crossingwhile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 815b410c0eba2e3cdf38bcb41106ed95
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.googletagmanager.com/gtag/js?id=UA-115613791-4
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-115613791-4
IP
File type ASCII text, with very long lines (1759)
Hash 5398096f681eb2dbe7c822b945496e4a
20bb63884fd17904b79ee32b07fef993eaa4b96d
f567df492b5415a199ed674f2b18c19729b821767d8b8a9536442fc46ab4c5ad
GET /gtag/js?id=UA-115613791-4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pornhits.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 Feb 2023 14:56:57 GMT
expires: Wed, 01 Feb 2023 14:56:57 GMT
cache-control: private, max-age=900
last-modified: Wed, 01 Feb 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43953
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-HVPVT8JSE5
200 OK 78 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-HVPVT8JSE5
IP
File type ASCII text, with very long lines (21849)
Hash efcda7bd9b74abb8c5f744bf6927b348
eb13ff558079ac15f534b429796a521221bdc91c
4e5cbeaa4ece96e0f35c1aaef7e7600dec91dcf9be91f508f144fc190cb822cd
GET /gtag/js?id=G-HVPVT8JSE5 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pornhits.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 Feb 2023 14:56:57 GMT
expires: Wed, 01 Feb 2023 14:56:57 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77732
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c004ef398fc2138876eac9e202e6e7c9
9b695108fe043113ee8dc3369be58234f1a73323
ab71d4c6d64f3c7a0114070414615b26843c22de34b0f04c9ad932ca112031c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 14:56:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ads.exoclick.com/ads.js
200 OK 974 B IP
File type ASCII text, with very long lines (2476), with no line terminators
Hash 92af51b4341a31ff621022c2a648c05e
3761459319128e7349981f338926abcd89ba58e0
6dd1f44f60b3c9584b3d9a54af5348c3fc36c7e13585f593f205ed42a0fa7e9f
GET /ads.js HTTP/1.1
Host: ads.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pornhits.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 14:56:57 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 974
Content-Type: application/javascript
Accept-Ranges: bytes
Server: nginx
etag: W/"8f3c7314efe500b41baba9f571b"
Cache-Control: max-age=10800
X-HW: 1675263417.dop228.sk1.t,1675263417.cds249.sk1.shn,1675263417.dop228.sk1.t,1675263417.cds003.sk1.c
Access-Control-Allow-Origin: *, *
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 43e63b8b519d676a778472be4d3c8156
02942d46ceb9d52b3d4d723e4e3ccacfa4a3fb99
2dfec0e109061d404883b68e4e04155d6bfa89534ffd69603c0d4263399a68ba
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 14:56:57 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sun, 05 Feb 2023 13:10:02 GMT
ETag: "02942d46ceb9d52b3d4d723e4e3ccacfa4a3fb99"
Last-Modified: Wed, 01 Feb 2023 13:10:03 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3000
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792b89678a7fb518-OSL
daftsex.net/misc/bulma-tooltip/css/bulma-tooltip.min.css
200 OK 4.2 kB URL HTTP/1.1 daftsex.net/misc/bulma-tooltip/css/bulma-tooltip.min.css
IP
ASN #51852 Private Layer INC
File type ASCII text, with very long lines (65412)
Hash 7f4681aec74601ca3e80b3721a46ee3d
b0baacc83197c8542e7969019134562a84e49240
ca5fa8afa591114ae21188e27829664d62fc28c27cde6aaaac2b08206f48bbdd
GET /misc/bulma-tooltip/css/bulma-tooltip.min.css HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:58 GMT
Content-Type: text/css
Last-Modified: Sun, 17 May 2020 18:55:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"5ec18893-1028d"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
daftsex.net/misc/font-awesome-free/css/all.min.css
200 OK 13 kB URL HTTP/1.1 daftsex.net/misc/font-awesome-free/css/all.min.css
IP
ASN #51852 Private Layer INC
File type ASCII text, with very long lines (59119)
Hash 658ef3cedef861e1eaa16779ebcefc70
2d92524b8389693dcf24bdff549e313a9f24266c
f3c1717237d0a2527e184fef8c990503d879cc4b7e9cd124efbe88f15f35d3c1
GET /misc/font-awesome-free/css/all.min.css HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:58 GMT
Content-Type: text/css
Last-Modified: Wed, 04 Aug 2021 14:25:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"610aa36a-e7a9"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
daftsex.net/misc/overlay-scrollbars/css/OverlayScrollbars.min.css
200 OK 4.4 kB URL HTTP/1.1 daftsex.net/misc/overlay-scrollbars/css/OverlayScrollbars.min.css
IP
ASN #51852 Private Layer INC
File type ASCII text, with very long lines (19243)
Hash fb01de5b1e2cbca8d2b7edfcce5035a8
cb5855a5e67e3790e6131356924987394f82a290
e226af506505e018e163f0413d2bfcdb5fb5804243c23f201c2a78635edf17ad
GET /misc/overlay-scrollbars/css/OverlayScrollbars.min.css HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:58 GMT
Content-Type: text/css
Last-Modified: Fri, 11 Oct 2019 09:38:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"5da04d91-4c0e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 82a752ace3d774fa7ff99666c32a85d4
45adcf6685e1c5d863aadcbf06404ae5f20cd3de
d95c438d055849c92de40b253ec777e9133e902cf6b4f30d79b69c8c1b9b816e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=86427
Date: Wed, 01 Feb 2023 14:56:57 GMT
Etag: "63d91814-1d7"
Expires: Thu, 02 Feb 2023 14:57:24 GMT
Last-Modified: Tue, 31 Jan 2023 13:31:00 GMT
Server: ECS (nyb/1D1C)
X-Cache: Miss from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: iyd9P_vgk68l-vaFODudvGvP6okT0TAa_6qWBQzZxEEscNEw6eMDFA==
Age: 5184
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 385abc33bca25d486e8d068ed0d67df9
224df5657c0bb408f23aa0c2bb9ba353829a86be
6d4b8d847553b830a201c275b4f24a5cf690576031e413d0e948f9d6cb99324c
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://daftsex.net
Connection: keep-alive
Referer: https://daftsex.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:56:57 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://daftsex.net
access-control-allow-credentials: true
set-cookie: uid_id2=2ea264f7-7269-49cf-ba06-54200ff13148:3:1; expires=Sat, 29 Jan 2033 14:56:57 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5637
Expires: Wed, 01 Feb 2023 16:30:54 GMT
Date: Wed, 01 Feb 2023 14:56:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5637
Expires: Wed, 01 Feb 2023 16:30:54 GMT
Date: Wed, 01 Feb 2023 14:56:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5637
Expires: Wed, 01 Feb 2023 16:30:54 GMT
Date: Wed, 01 Feb 2023 14:56:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5637
Expires: Wed, 01 Feb 2023 16:30:54 GMT
Date: Wed, 01 Feb 2023 14:56:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5637
Expires: Wed, 01 Feb 2023 16:30:54 GMT
Date: Wed, 01 Feb 2023 14:56:57 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb36bfce9-5d67-458e-846d-ca30f9242449.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb36bfce9-5d67-458e-846d-ca30f9242449.jpeg
IP
Hash a9dfc2c9acb551f795fab8279f20452d
c0cb4e63e3fc3d50bf84d6dac2b529391e6fcd4f
6484847c8040853cae8619cdd7ac7f963dd33c7ac58e901e5a61a408555e8c26
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb36bfce9-5d67-458e-846d-ca30f9242449.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14041
x-amzn-requestid: 2be6655d-3b0e-4e65-b44b-11682610b640
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foJaRGFpIAMFbMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9890e-5554d18d5db235913afa77a2;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 21:33:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: MeSOuCSjsjhK6FOS67rw6oF4rS08twjOACGbXJrNPH6vwZb8lZh9lw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:51:18 GMT
etag: "ac0b58423d7578e7a1b60a62220c0a57924dda82"
content-type: image/jpeg
age: 61539
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30335cb7-009a-42f5-8186-d0c302adc827.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30335cb7-009a-42f5-8186-d0c302adc827.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ec7e808a5e82552c46c3417a5b32b836
f0a273292b47d7e2e33c9d77fd95abdcc9e31ddd
f16d982224dfeb0753eaf9d4eb87d80fd1111f682fd8fa36f3177aad5bf926a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30335cb7-009a-42f5-8186-d0c302adc827.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6819
x-amzn-requestid: a0368695-4182-40bd-9a28-c50ae783a7a5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foJaRHGnoAMF0Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9890e-624285eb16110b8c2360dec5;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 21:33:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4MpUHqMYJoNA7QuRuQwbJIodNkhizq6EL5SPbIoSKFQjtoAKQgLuEg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:51:25 GMT
age: 61532
etag: "f0a273292b47d7e2e33c9d77fd95abdcc9e31ddd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg
IP
Hash 5ff40baae01eb87c2e3c57eb05357ba4
a13c5e5859453e86174cd730bbc10c601b5780d4
aa572041817ba66a39a9a94b5d88e9d42129bd3c9d3586365b9828a31e7abb76
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15857
x-amzn-requestid: cfe36b9d-34f6-4f3f-896e-e70ec45c4a04
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmJ2JGGWoAMFSLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bcf3-0dd68dd778b9aba268a129b0;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:02:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: pU_436f27nMZKPxZZWqZekERHFTvcG5NT5p_CYEXHRPtIWjDtSA-uA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 07:15:18 GMT
age: 27699
etag: "8e30002699e9fbf2047f9ac11a36d2175fc9c591"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.pornhits.com/lojhgdpu/apkbcsrjh.js
200 OK 81 kB URL HTTP/2 www.pornhits.com/lojhgdpu/apkbcsrjh.js
IP
Hash d542193773add337a78745000af15dac
6ce66a263d9ab5de544b7e285f2108d572f93a5d
68fcb955959af39b3dec53a87e12104bc15d19202776eb611e8686d98fcc1fb6
GET /lojhgdpu/apkbcsrjh.js HTTP/1.1
Host: www.pornhits.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pornhits.com/embed.php?id=228327
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 01 Feb 2023 14:56:57 GMT
content-type: application/javascript
last-modified: Wed, 01 Feb 2023 14:00:53 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63da7095-3474d"
expires: Tue, 28 Nov 2023 14:00:53 GMT
access-control-allow-origin: *
cache-control: max-age=25920000, public
pragma: public
x-nginx-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
daftsex.net/favicon.png
200 OK 2.9 kB IP
ASN #51852 Private Layer INC
File type PNG image data, 238 x 241, 8-bit/color RGB, non-interlaced\012- data
Hash 2659aeb436cbf066c5f1ff82d688e46f
eaae42bd2da5b0053c8c98d7f439ef04cfc7aff4
e5b90d55e523b47060c6f531eb4cd9e5425040da78336d6fcad31ae201c58dac
GET /favicon.png HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/113686/the-dorm-inspector-is-cumming-jayla-de-angelis/
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:58 GMT
Content-Type: image/png
Content-Length: 2876
Last-Modified: Fri, 02 Apr 2021 09:34:13 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "6066e515-b3c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3366ef4f8733cb9c89a5c88f63a0a441
7da46843b6d885f38a4759a08e6c899906ab7b97
7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aZOeDFqBJQoGwLpIs-GpPvY0FKGCAOXY6MgzG32qzX-kVzUCKKv-kw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 22:03:43 GMT
age: 60794
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 27e95b7912edc909d6b031e36fe83534
eb27fae0bb17dbe0929a620002195233ef50c1d0
b32e7e1a2eee367c5bf9e99bcb38f4c74c4e9e7bdfe7fb0f8f2a657060c0624c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8597
x-amzn-requestid: e7bf4ac9-d86d-4ee9-9e10-8a42e5dfe2c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fcRaNEW4IAMFatA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d4c90d-7731312f630b00ba028836ca;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 07:04:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: z3ZJ7bq6LuJd-9I9D22VIs0avctNGVDKnYmt-fxevCheQibivmUomQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 07:53:10 GMT
age: 25427
etag: "eb27fae0bb17dbe0929a620002195233ef50c1d0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.pornhits.com/static/1.c27b1e7dc2773ceb8541.js
200 OK 38 kB URL HTTP/2 www.pornhits.com/static/1.c27b1e7dc2773ceb8541.js
IP
File type Unicode text, UTF-8 text, with very long lines (55423)
Hash d395f10312a0e062d72287a6135007fe
4c971f30919d285927d600e176d7fe8772beb55b
a3a6ef263e2967118e94831f95d3188eb3b9ea8df4c794d1bf28e3ecebdc8eb3
GET /static/1.c27b1e7dc2773ceb8541.js HTTP/1.1
Host: www.pornhits.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pornhits.com/embed.php?id=228327
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 01 Feb 2023 14:56:57 GMT
content-type: application/javascript
last-modified: Wed, 28 Dec 2022 08:24:12 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63abfd2c-d880"
expires: Fri, 10 Nov 2023 08:29:35 GMT
access-control-allow-origin: *
cache-control: max-age=25920000, public
pragma: public
x-nginx-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash a236c7014c1f1a1e52d356f59e5d665a
b66c638eb2346287364c37725819bbab1f409d66
ad2d57579e453af0eac49156840bcd1dcfbd802a82135af98f41f714d7e698f2
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pornhits.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73769
date: Wed, 01 Feb 2023 14:56:57 GMT
access-control-allow-origin: *
etag: "63c93a4b-12029"
expires: Wed, 01 Feb 2023 15:56:57 GMT
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
daftsex.net/misc/font-awesome-free/webfonts/fa-solid-900.woff2
200 OK 78 kB URL HTTP/1.1 daftsex.net/misc/font-awesome-free/webfonts/fa-solid-900.woff2
IP
ASN #51852 Private Layer INC
File type Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196\012- data
Hash d824df7eb2e268626a2dd9a6a741ac4e
0ccb2c814a7e4ca12c4778821633809cb0361eaa
9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537
GET /misc/font-awesome-free/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: daftsex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://daftsex.net/misc/font-awesome-free/css/all.min.css
Cookie: ASPro_3dff9eb3db=qrpu5kfsss7mljhrnmieh4274s; history=113686
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 14:56:58 GMT
Content-Type: font/woff2
Content-Length: 78268
Last-Modified: Wed, 04 Aug 2021 14:25:46 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "610aa36a-131bc"
Accept-Ranges: bytes
www.pornhits.com/assets/jwplayer-8.21.2.3/jwplayer.js
200 OK 43 kB URL HTTP/2 www.pornhits.com/assets/jwplayer-8.21.2.3/jwplayer.js
IP
Hash b84abd933975d8306f7ffb57844f8cb5
16b5d97dc6d383dfd5f10d519a9a90de733a2f94
65ee3987c13a6abde5637686d8b2693a66f54130268e1d1c8fcc5f60376fb73f
GET /assets/jwplayer-8.21.2.3/jwplayer.js HTTP/1.1
Host: www.pornhits.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pornhits.com/embed.php?id=228327
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 01 Feb 2023 14:56:57 GMT
content-type: application/javascript
last-modified: Thu, 17 Nov 2022 11:45:31 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63761edb-1b527"
expires: Wed, 27 Sep 2023 11:26:53 GMT
access-control-allow-origin: *
cache-control: max-age=25920000, public
pragma: public
x-nginx-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f8fb8d0c1620d690ea7620c386795d09
576f8382f3a4c64df22ea188420b3b114cab1b41
540eff8dfdbc111458f3fb237c01a9aae824fd3846f139dd8c30cdca7040b44b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "540EFF8DFDBC111458F3FB237C01A9AAE824FD3846F139DD8C30CDCA7040B44B"
Last-Modified: Mon, 30 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9561
Expires: Wed, 01 Feb 2023 17:36:18 GMT
Date: Wed, 01 Feb 2023 14:56:57 GMT
Connection: keep-alive
vast.yomeno.xyz/vast
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /vast HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.pornhits.com/
Origin: https://www.pornhits.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.20.1
date: Wed, 01 Feb 2023 14:56:58 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.pornhits.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
content-type: text/plain; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pornhits.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 01 Feb 2023 14:56:58 GMT
access-control-allow-origin: *
etag: "63c93a4b-2b"
expires: Wed, 01 Feb 2023 15:56:58 GMT
accept-ranges: bytes
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 0af768d51b157bd7fdb3ee9266369e6e
b3624083e5f63967bd2e098b48b086fa3f95136f
3ac5e3e149e03bf435b699474743a92bb20403542a448b7f3eaf67a76f56002e
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 01 Feb 2023 14:56:58 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 31 Jan 2023 21:57:02 GMT
Expires: Wed, 01 Feb 2023 21:57:02 GMT
ETag: "b3624083e5f63967bd2e098b48b086fa3f95136f"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
pixel.onaudience.com/?partner=232&mapped=2ea264f7-7269-49cf-ba06-54200ff13148
302 Found 0 B URL HTTP/1.1 pixel.onaudience.com/?partner=232&mapped=2ea264f7-7269-49cf-ba06-54200ff13148
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?partner=232&mapped=2ea264f7-7269-49cf-ba06-54200ff13148 HTTP/1.1
Host: pixel.onaudience.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
set-cookie: cookie=c517b1c4abab0156; Max-Age=31536000; Expires=Thu, 1 Feb 2024 14:56:58 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None
done_redirects104=1; Max-Age=86400; Expires=Thu, 2 Feb 2023 14:56:58 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None
location: https://sync.crwdcntrl.net/map/c=8587/tp=CLOD/tpid=c517b1c4abab0156/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D
content-length: 0
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b310f65b4230d192912561803fa14ed8
bd513bae96a2de7722d3a020cbf0d5a7ff4c648f
fd0f7c3dec06fab8dd05e156e211277e31680ba4f9c4afecf5a36b84b978e9c9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FD0F7C3DEC06FAB8DD05E156E211277E31680BA4F9C4AFECF5A36B84B978E9C9"
Last-Modified: Tue, 31 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5774
Expires: Wed, 01 Feb 2023 16:33:12 GMT
Date: Wed, 01 Feb 2023 14:56:58 GMT
Connection: keep-alive
region1.google-analytics.com/g/collect?v=2&tid=G-HVPVT8JSE5>m=2oe1u0&_p=1437434138&cid=1304246632.1675263440&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675263439&sct=1&seg=0&dl=https%3A%2F%2Fwww.pornhits.com%2Fembed.php%3Fid%3D228327&dr=https%3A%2F%2Fdaftsex.net%2F&dt=Embed%20Player&en=scroll&_fv=1&_ss=1&epn.percent_scrolled=90
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-HVPVT8JSE5>m=2oe1u0&_p=1437434138&cid=1304246632.1675263440&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675263439&sct=1&seg=0&dl=https%3A%2F%2Fwww.pornhits.com%2Fembed.php%3Fid%3D228327&dr=https%3A%2F%2Fdaftsex.net%2F&dt=Embed%20Player&en=scroll&_fv=1&_ss=1&epn.percent_scrolled=90
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-HVPVT8JSE5>m=2oe1u0&_p=1437434138&cid=1304246632.1675263440&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675263439&sct=1&seg=0&dl=https%3A%2F%2Fwww.pornhits.com%2Fembed.php%3Fid%3D228327&dr=https%3A%2F%2Fdaftsex.net%2F&dt=Embed%20Player&en=scroll&_fv=1&_ss=1&epn.percent_scrolled=90 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pornhits.com
Connection: keep-alive
Referer: https://www.pornhits.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.pornhits.com
date: Wed, 01 Feb 2023 14:56:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash c6249a0023446bdc19b7707a7f95aec1
f8bfd912aa10a0180ea07a16e71be4fe6db91a14
76cb35d60163e4b83db1fd9553be722b714c3a993d1fbc4b797c1e25a0c95d2c
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 01 Feb 2023 14:56:58 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 31 Jan 2023 23:02:36 GMT
Expires: Wed, 01 Feb 2023 23:02:36 GMT
ETag: "f8bfd912aa10a0180ea07a16e71be4fe6db91a14"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
sync.crwdcntrl.net/map/c=8587/tp=CLOD/tpid=c517b1c4abab0156/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D
404 Not Found 49 B URL HTTP/2 sync.crwdcntrl.net/map/c=8587/tp=CLOD/tpid=c517b1c4abab0156/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 56398e76be6355ad5999b262208a17c9
a1fdee122b95748d81cee426d717c05b5174fe96
2f561b02a49376e3679acd5975e3790abdff09ecbadfa1e1858c7ba26e3ffcef
GET /map/c=8587/tp=CLOD/tpid=c517b1c4abab0156/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D HTTP/1.1
Host: sync.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://daftsex.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Wed, 01 Feb 2023 14:56:58 GMT
content-type: image/gif
content-length: 49
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.26.67
access-control-allow-origin: *
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
regulationprivilegescan.top/advertisers.js
200 OK 0 B URL HTTP/1.1 regulationprivilegescan.top/advertisers.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: regulationprivilegescan.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Wed, 01 Feb 2023 14:56:58 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
mc.yandex.ru/watch/61864270/1?wmode=7&page-url=https%3A%2F%2Fwww.pornhits.com%2Fembed.php%3Fid%3D228327&page-ref=https%3A%2F%2Fdaftsex.net%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1046%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A542083323173%3Ahid%3A1064092523%3Az%3A0%3Ai%3A20230201145722%3Aet%3A1675263443%3Arn%3A677993130%3Arqn%3A1%3Au%3A1675263440379659801%3Aw%3A832x468%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C1%2C0%2C%2C201%2C0%2C1250%2C1250%2C0%2C466%3Aco%3A0%3Ans%3A1675263438802%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675263443%3At%3AEmbed%20Player&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/61864270/1?wmode=7&page-url=https%3A%2F%2Fwww.pornhits.com%2Fembed.php%3Fid%3D228327&page-ref=https%3A%2F%2Fdaftsex.net%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1046%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A542083323173%3Ahid%3A1064092523%3Az%3A0%3Ai%3A20230201145722%3Aet%3A1675263443%3Arn%3A677993130%3Arqn%3A1%3Au%3A1675263440379659801%3Aw%3A832x468%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C1%2C0%2C%2C201%2C0%2C1250%2C1250%2C0%2C466%3Aco%3A0%3Ans%3A1675263438802%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675263443%3At%3AEmbed%20Player&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 2e6e86a4f3a1b98b411294804df51f12
4ee04f00094f81a00136db149a891abd1333f239
72dab33cae49be78b8eca7179d1d9f2041f45b14f7349ca21fcaa0649210d81d
GET /watch/61864270/1?wmode=7&page-url=https%3A%2F%2Fwww.pornhits.com%2Fembed.php%3Fid%3D228327&page-ref=https%3A%2F%2Fdaftsex.net%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1046%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A542083323173%3Ahid%3A1064092523%3Az%3A0%3Ai%3A20230201145722%3Aet%3A1675263443%3Arn%3A677993130%3Arqn%3A1%3Au%3A1675263440379659801%3Aw%3A832x468%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C1%2C0%2C%2C201%2C0%2C1250%2C1250%2C0%2C466%3Aco%3A0%3Ans%3A1675263438802%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675263443%3At%3AEmbed%20Player&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pornhits.com
Referer: https://www.pornhits.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Wed, 01 Feb 2023 14:57:01 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://www.pornhits.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 01-Feb-2023 14:57:01 GMT
last-modified: Wed, 01-Feb-2023 14:57:01 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
www.pornhits.com/assets/jwplayer-8.21.2.3/vast.js
200 OK 0 B URL HTTP/2 www.pornhits.com/assets/jwplayer-8.21.2.3/vast.js
IP
GET /assets/jwplayer-8.21.2.3/vast.js HTTP/1.1
Host: www.pornhits.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pornhits.com/embed.php?id=228327
Cookie: _ga=GA1.1.1304246632.1675263440; _gid=GA1.2.1299832513.1675263440; _ga_HVPVT8JSE5=GS1.1.1675263439.1.0.1675263439.0.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 01 Feb 2023 14:56:57 GMT
content-type: application/javascript
last-modified: Thu, 17 Nov 2022 11:45:31 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63761edb-1b600"
expires: Wed, 27 Sep 2023 11:26:54 GMT
access-control-allow-origin: *
cache-control: max-age=25920000, public
pragma: public
x-nginx-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
www.pornhits.com/assets/jwplayer-8.21.2.3/jwplayer.core.controls.html5.js
200 OK 0 B URL HTTP/2 www.pornhits.com/assets/jwplayer-8.21.2.3/jwplayer.core.controls.html5.js
IP
GET /assets/jwplayer-8.21.2.3/jwplayer.core.controls.html5.js HTTP/1.1
Host: www.pornhits.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pornhits.com/embed.php?id=228327
Cookie: _ga=GA1.1.1304246632.1675263440; _gid=GA1.2.1299832513.1675263440; _ga_HVPVT8JSE5=GS1.1.1675263439.1.0.1675263439.0.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 01 Feb 2023 14:56:57 GMT
content-type: application/javascript
last-modified: Thu, 17 Nov 2022 11:45:31 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63761edb-55fcd"
expires: Wed, 27 Sep 2023 11:26:54 GMT
access-control-allow-origin: *
cache-control: max-age=25920000, public
pragma: public
x-nginx-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
a.realsrv.com/nativeads-v2.js
200 OK 0 B URL HTTP/2 a.realsrv.com/nativeads-v2.js
IP
ASN #60068 Datacamp Limited
GET /nativeads-v2.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:56:56 GMT
content-type: application/javascript
etag: W/"21b43fd9d304f2027f605b8ad4d"
expires: Wed, 01 Feb 2023 17:13:26 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1675271816
server: CDN77-Turbo
x-77-nzt: AblMCRTJKx//YAkAAA
x-77-nzt-ray: af585630771a9641b87dda639aa61c2f
x-cache: HIT
x-age: 2400
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
static.addtoany.com/menu/page.js
200 OK 0 B URL HTTP/2 static.addtoany.com/menu/page.js
IP
GET /menu/page.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:56:56 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=172800
cf-bgj: minify
access-control-allow-origin: *
etag: W/"c04-5f1f2ae2e431b"
last-modified: Wed, 11 Jan 2023 01:11:30 GMT
vary: Accept-Encoding
via: e2s
x-content-type-options: nosniff
cf-cache-status: HIT
age: 145530
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 792b8962f86c2e01-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
a.realsrv.com/ad-provider.js
200 OK 0 B URL HTTP/2 a.realsrv.com/ad-provider.js
IP
ASN #60068 Datacamp Limited
GET /ad-provider.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:56:56 GMT
content-type: application/javascript
etag: W/"e2bbca1c479226a45392909d6a4"
expires: Wed, 01 Feb 2023 17:13:26 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1675271816
server: CDN77-Turbo
x-77-nzt: AblMCRSrnvb/YAkAAA
x-77-nzt-ray: af585630771a9641b87dda63e6e3302f
x-cache: HIT
x-age: 2400
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
vast.yomeno.xyz/vast
200 OK 0 B IP
POST /vast HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json; charset=utf-8
Content-Length: 425
Origin: https://www.pornhits.com
Connection: keep-alive
Referer: https://www.pornhits.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 01 Feb 2023 14:56:58 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: Accept-Encoding, *
access-control-allow-credentials: true
access-control-allow-origin: https://www.pornhits.com
access-control-expose-headers: Content-Length,Content-Range
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/61864270?wmode=7&page-url=https%3A%2F%2Fwww.pornhits.com%2Fembed.php%3Fid%3D228327&page-ref=https%3A%2F%2Fdaftsex.net%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1046%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A542083323173%3Ahid%3A1064092523%3Az%3A0%3Ai%3A20230201145722%3Aet%3A1675263443%3Arn%3A677993130%3Arqn%3A1%3Au%3A1675263440379659801%3Aw%3A832x468%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C1%2C0%2C%2C201%2C0%2C1250%2C1250%2C0%2C466%3Aco%3A0%3Ans%3A1675263438802%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675263443%3At%3AEmbed%20Player&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/61864270?wmode=7&page-url=https%3A%2F%2Fwww.pornhits.com%2Fembed.php%3Fid%3D228327&page-ref=https%3A%2F%2Fdaftsex.net%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1046%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A542083323173%3Ahid%3A1064092523%3Az%3A0%3Ai%3A20230201145722%3Aet%3A1675263443%3Arn%3A677993130%3Arqn%3A1%3Au%3A1675263440379659801%3Aw%3A832x468%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C1%2C0%2C%2C201%2C0%2C1250%2C1250%2C0%2C466%3Aco%3A0%3Ans%3A1675263438802%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675263443%3At%3AEmbed%20Player&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/61864270?wmode=7&page-url=https%3A%2F%2Fwww.pornhits.com%2Fembed.php%3Fid%3D228327&page-ref=https%3A%2F%2Fdaftsex.net%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1046%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A542083323173%3Ahid%3A1064092523%3Az%3A0%3Ai%3A20230201145722%3Aet%3A1675263443%3Arn%3A677993130%3Arqn%3A1%3Au%3A1675263440379659801%3Aw%3A832x468%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C1%2C0%2C%2C201%2C0%2C1250%2C1250%2C0%2C466%3Aco%3A0%3Ans%3A1675263438802%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675263443%3At%3AEmbed%20Player&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pornhits.com
Connection: keep-alive
Referer: https://www.pornhits.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/61864270/1?wmode=7&page-url=https%3A%2F%2Fwww.pornhits.com%2Fembed.php%3Fid%3D228327&page-ref=https%3A%2F%2Fdaftsex.net%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1046%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A542083323173%3Ahid%3A1064092523%3Az%3A0%3Ai%3A20230201145722%3Aet%3A1675263443%3Arn%3A677993130%3Arqn%3A1%3Au%3A1675263440379659801%3Aw%3A832x468%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C1%2C0%2C%2C201%2C0%2C1250%2C1250%2C0%2C466%3Aco%3A0%3Ans%3A1675263438802%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675263443%3At%3AEmbed%20Player&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Wed, 01 Feb 2023 14:57:00 GMT
access-control-allow-origin: https://www.pornhits.com
set-cookie: yabs-sid=79385921675263420; Path=/; SameSite=None; Secure
i=68aPnXzIY20O3xOOXdWoZIBK/n8Ir5k8xCMH+L1AHyM09pxzBEjtf+ji1E5PKdTu80PWrPRowiPWnPN9qSEkW40iui0=; Expires=Sat, 29-Jan-2033 14:57:00 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=1916633261675263420; Expires=Thu, 01-Feb-2024 14:57:00 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=1916633261675263420; Expires=Thu, 01-Feb-2024 14:57:00 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1706799420.yc.1675263420#1706799420.yrts.1675263420#1706799420.yrtsi.1675263420; Expires=Thu, 01-Feb-2024 14:57:00 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 01-Feb-2023 14:57:00 GMT
last-modified: Wed, 01-Feb-2023 14:57:00 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
a.realsrv.com/popunder1000.js
200 OK 0 B URL HTTP/2 a.realsrv.com/popunder1000.js
IP
ASN #60068 Datacamp Limited
GET /popunder1000.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:56:56 GMT
content-type: application/javascript
etag: W/"d866557387aa14b697929065b92"
expires: Wed, 01 Feb 2023 17:13:29 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1675271816
server: CDN77-Turbo
x-77-nzt: AblMCRQ+FPn/YAkAAA
x-77-nzt-ray: af585630771a9641b87dda63ebe6672e
x-cache: HIT
x-age: 2400
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
a.realsrv.com/video-outstream.js
200 OK 0 B URL HTTP/2 a.realsrv.com/video-outstream.js
IP
ASN #60068 Datacamp Limited
GET /video-outstream.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://daftsex.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 14:56:56 GMT
content-type: application/javascript
etag: W/"0340be1298a1ece8c30f851e732"
expires: Wed, 01 Feb 2023 17:13:26 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1675271817
server: CDN77-Turbo
x-77-nzt: AblMCRTeX1T/XwkAAA
x-77-nzt-ray: af585630771a9641b87dda63c436cf2e
x-cache: HIT
x-age: 2399
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
179.43.144.210
185.76.9.22
146.19.173.172
142.250.74.131
93.184.220.29
3.120.47.42
77.88.21.119
104.18.51.106
109.206.181.2
141.94.171.214
52.48.35.78
23.36.77.32