Overview

URLfbjav.javhardcore.net/nfdm-245/
IP 172.67.158.147 (United States)
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-12-08 10:18:00 UTC
StatusLoading report..
IDS alerts0
Blocklist alert11
urlquery alerts No alerts detected
Tags None

Domain Summary (39)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 391 34.117.237.239
www.googletagmanager.com (1) 75 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 389 45432 142.250.74.168
addresseepaper.com (1) 18169 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 284 3275 34.160.73.230
cdn.cloudimagesb.com (1) 23099 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 415 76315 45.133.44.10
tartator.com (3) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1441 51561 178.162.196.156
a.realsrv.com (1) 10080 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 360 486 185.76.9.15
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2372 35.241.9.150
fbjav.javhardcore.net (7) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2848 162933 104.21.40.252
vmuid.com (2) 939822 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 853 11135 178.162.196.156
fbjav.com (14) 13590 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 6187 166746 172.67.153.211
middaysonnyguffaw.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 325 14147 173.233.137.52
s3t3d2y8.afcdn.net (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 362 13844 185.76.9.23
r3.o.lencr.org (11) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3718 9754 23.36.77.32
populationrind.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 370 467 192.243.59.20
ocsp.globalsign.com (1) 2075 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 359 1490 151.101.2.133
e1.o.lencr.org (3) 6159 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1014 2187 23.36.77.32
cdn.barscreative1.com (1) 25648 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 459 18271 45.133.44.4
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5844 34.160.144.191
origunix.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 400 374 178.162.196.156
vocalconferencesinister.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 331 21414 192.243.59.12
ocsp.pki.goog (3) 175 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1029 2099 142.250.74.131
poweredby.jads.co (3) 30525 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1150 5045 185.94.237.64
syndication.realsrv.com (1) 9112 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 570 6969 95.211.229.248
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3246 57887 34.120.237.76
i.jads.co (2) 46788 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 640 165059 69.16.175.42
region1.google-analytics.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 706 567 216.239.34.36
thumb.fvs.io (1) 53071 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 424 135734 104.23.135.25
cdn.creative-bars1.com (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 895 6683 172.64.109.13
ocsp.digicert.com (8) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2728 4901 93.184.220.29
ocsp.sectigo.com (1) 487 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 340 964 104.18.32.68
friendshipmale.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 284 28545 172.64.163.31
simplewebanalysis.com (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 802 826 18.185.190.54
imfb.xyz (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 883 68427 104.21.17.7
mc.yandex.ru (5) 2672 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 4031 81547 93.158.134.119
www.google-analytics.com (1) 40 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 377 20685 216.239.38.178
ocsp.sca1b.amazontrust.com (1) 1015 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 350 944 54.230.245.100
verdictdisingenuousfruitless.com (6) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 5380 7253 192.243.59.13
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 44.228.207.167
fonts.gstatic.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 411 16501 142.250.74.35

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-08 medium vocalconferencesinister.com/4e/84/f4/4e84f42101bf00d68343d16d78e896d0.js Malware
2022-12-08 medium cdn.barscreative1.com/sb/au/5d/1e/66/5d1e6654b79f5bf053b789353432e45e/16137 (...) Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-12-08 medium middaysonnyguffaw.com Sinkholed
2022-12-08 medium vocalconferencesinister.com Sinkholed
2022-12-08 medium populationrind.com Sinkholed
2022-12-08 medium verdictdisingenuousfruitless.com Sinkholed
2022-12-08 medium verdictdisingenuousfruitless.com Sinkholed
2022-12-08 medium verdictdisingenuousfruitless.com Sinkholed
2022-12-08 medium verdictdisingenuousfruitless.com Sinkholed
2022-12-08 medium verdictdisingenuousfruitless.com Sinkholed
2022-12-08 medium verdictdisingenuousfruitless.com Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 4 reports on IP: 172.67.158.147
Date UQ / IDS / BL URL IP
2023-05-22 21:56:01 UTC 0 - 0 - 8 tight-limit-0f93.9urdvqae.workers.dev/ 172.67.158.147
2023-05-07 19:49:21 UTC 0 - 8 - 0 inolge.ga/7Lrbvut 172.67.158.147
2022-10-19 10:10:58 UTC 0 - 0 - 4 faceb00k-lo9ins.onesite.my.id/ 172.67.158.147
2022-12-08 10:18:00 UTC 0 - 0 - 11 fbjav.javhardcore.net/nfdm-245/ 172.67.158.147


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-06-07 03:01:02 UTC 3 - 0 - 0 clicks.qtxnewsletter.com/newsletter.ads/click (...) 172.67.200.177
2023-06-07 02:58:37 UTC 4 - 0 - 0 vosomsvat.com/De/Prozess/Versans/V6737NFbrghr (...) 188.114.97.1
2023-06-07 02:57:39 UTC 0 - 0 - 1 whahtssapp.com/WhatsApp.apk 172.67.168.248
2023-06-07 02:57:18 UTC 0 - 0 - 1 go.tradelively.com/gorillaflow0123/b6511221ee (...) 188.114.97.1
2023-06-07 02:49:05 UTC 0 - 2 - 0 descola.org 172.66.40.201


Last 1 reports on domain: javhardcore.net
Date UQ / IDS / BL URL IP
2022-12-08 10:18:00 UTC 0 - 0 - 11 fbjav.javhardcore.net/nfdm-245/ 172.67.158.147


No other reports with similar screenshot

JavaScript

Executed Scripts (31)

Executed Evals (0)

Executed Writes (1)
#1 JavaScript::Write (size: 472) - SHA256: 861d8b6d1179c873f5f67f13d6669aa2dbb157cd6b2cecc0e2de0082488a70c1
< iframe src = "http://syndication.realsrv.com/ads-iframe-display.php?idzone=3984742&amp;type=300x250&amp;p=http%3A//fbjav.javhardcore.net/nfdm-245/&amp;dt=1670494670036&amp;sub=&amp;tags=&amp;cookieconsent=true&amp;screen_resolution=1280x1024&amp;el=&quot; "
sandbox = "allow-forms allow-pointer-lock allow-popups allow-popups-to-escape-sandbox allow-same-origin allow-scripts"
scrolling = "no"
marginwidth = "0"
marginheight = "0"
width = "300"
height = "250"
frameborder = "0" > < /iframe>


HTTP Transactions (103)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13656
Expires: Thu, 08 Dec 2022 14:05:25 GMT
Date: Thu, 08 Dec 2022 10:17:49 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2508
Expires: Thu, 08 Dec 2022 10:59:37 GMT
Date: Thu, 08 Dec 2022 10:17:49 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "593BC437FF8A8233516C62613D50220FCB25B9F967ED5FB384C253F0DB135103"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2614
Expires: Thu, 08 Dec 2022 11:01:23 GMT
Date: Thu, 08 Dec 2022 10:17:49 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 08 Dec 2022 10:08:09 GMT
age: 580
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: 9EEUNU7FgSoddMMjjihndI1bDnTfc8tFHGO9Vpzh+NaSjaeuwIA1bLgd77Jub6GTDACy6Eg+yZg=
x-amz-request-id: JZ7Z6X9WF9PC7RMC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 08 Dec 2022 09:49:44 GMT
age: 1685
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Thu, 08 Dec 2022 10:17:49 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 08 Dec 2022 10:07:58 GMT
age: 591
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 6331
Cache-Control: 'max-age=158059'
Date: Thu, 08 Dec 2022 10:17:49 GMT
Last-Modified: Thu, 08 Dec 2022 08:32:18 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Ij/Oee6DGWOXBrF6rsiNEQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             44.228.207.167
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: +XaKYtLdcx4zt2UdvgX8GdyeKnk=

                                        
                                            GET /nfdm-245/ HTTP/1.1 
Host: fbjav.javhardcore.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             104.21.40.252
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                            
Date: Thu, 08 Dec 2022 10:17:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: view=1; expires=Fri, 09-Dec-2022 10:17:49 GMT; Max-Age=86400 PHPSESSID=hgdriv4v7c0ij7ev8n2gplf2cl; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1gkyQ3yqNW4RRZQzyhraqCkhG%2BOrpEZP5rmqS1qbkw9yigEXSJ65%2BmTpBi%2BX%2BZ7vZxRyR2dQK96g%2BR3iQhxFYrtQ03OaMHbS%2FRzT5i03I3EaGIhYOOHEDOXI8%2BJT9gR6pxlLXi6FHuI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7764c0e138701c0e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8855)
Size:   12869
Md5:    1be240db7d005393977752b19e55f482
Sha1:   829462a2daa2aa800005ed5704a2d4910d8fd18c
Sha256: 81430b318f30bfff409e2693281aba421c16de9747218220d72f50c4a0e4ebd7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 10:17:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 2202
Cache-Control: max-age=141964
Date: Thu, 08 Dec 2022 10:17:50 GMT
Etag: "639138c0-117"
Expires: Sat, 10 Dec 2022 01:43:54 GMT
Last-Modified: Thu, 08 Dec 2022 01:07:12 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Cache-Control: max-age=139762
Date: Thu, 08 Dec 2022 10:17:50 GMT
Etag: "639138c0-117"
Expires: Sat, 10 Dec 2022 01:07:12 GMT
Last-Modified: Thu, 08 Dec 2022 01:07:12 GMT
Server: nginx
Content-Length: 279

                                        
                                            GET /gtag/js?id=UA-70834815-5 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 10:17:50 GMT
expires: Thu, 08 Dec 2022 10:17:50 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44715
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   44715
Md5:    e0c9af944a89e16353716b7c1627d122
Sha1:   34b4fd95d87c7ad1ff6055c5bb944359f31546e4
Sha256: 0de6af83d5adafe3463dfa3280311cde679ac7f16a83b3b6f94879b89942d723
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4716
Cache-Control: max-age=144478
Date: Thu, 08 Dec 2022 10:17:50 GMT
Etag: "639138c0-117"
Expires: Sat, 10 Dec 2022 02:25:48 GMT
Last-Modified: Thu, 08 Dec 2022 01:07:12 GMT
Server: ECS (amb/6B8D)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 2202
Cache-Control: max-age=141964
Date: Thu, 08 Dec 2022 10:17:50 GMT
Etag: "639138c0-117"
Expires: Sat, 10 Dec 2022 01:43:54 GMT
Last-Modified: Thu, 08 Dec 2022 01:07:12 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 6594
Cache-Control: max-age=146356
Date: Thu, 08 Dec 2022 10:17:50 GMT
Etag: "639138c0-117"
Expires: Sat, 10 Dec 2022 02:57:06 GMT
Last-Modified: Thu, 08 Dec 2022 01:07:12 GMT
Server: ECS (amb/6B81)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "F9621F9C136F5A3B0D65F260BAD964A68AF4347010AAFEE9A8B1BE08B0ADA7D5"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2614
Expires: Thu, 08 Dec 2022 11:01:24 GMT
Date: Thu, 08 Dec 2022 10:17:50 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "CFDDD122D82C0D79C8E04014C13C6F82A0EFF0ABFBBDFBC737DA67D37DCC69FE"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12884
Expires: Thu, 08 Dec 2022 13:52:34 GMT
Date: Thu, 08 Dec 2022 10:17:50 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 10:17:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /sdk.js?sid=c7a563de-f73e-40f2-abfd-c98fa333d0c0 HTTP/1.1 
Host: origunix.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             178.162.196.156
HTTP/1.1 302 Found
                                            
Server: nginx/1.14.1
Date: Thu, 08 Dec 2022 10:17:50 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, max-age=0
Accept-Ch: Sec-CH-UA-Platform-Version
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Location: https://tartator.com/sdk.js?sid=c7a563de-f73e-40f2-abfd-c98fa333d0c0
X-Cache-Status: EXPIRED

                                        
                                            GET /script.js?sid=c7a563de-f73e-40f2-abfd-c98fa333d0c0 HTTP/1.1 
Host: vmuid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             178.162.196.156
HTTP/1.1 200 OK
Content-Type: text/javascript
                                            
Server: nginx/1.14.1
Date: Thu, 08 Dec 2022 10:17:50 GMT
Content-Length: 10176
Connection: keep-alive
Cache-Control: no-store, max-age=0
Accept-Ch: Sec-CH-UA-Platform-Version
X-Cache-Status: EXPIRED


--- Additional Info ---
Magic:  ASCII text, with very long lines (10176), with no line terminators
Size:   10176
Md5:    3de3ce8ec950a993d1d3bb362d84f0e7
Sha1:   c938aaab8eed435eb4fd277f1c1ab9976e969043
Sha256: 6f2d139be44a6dc85d842a753f4e3ebafdb63a0babcb64f741310076aaa29a7f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 10:17:50 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 08:27:04 GMT
Expires: Tue, 13 Dec 2022 08:27:03 GMT
Etag: "fc6713e61cb22b5f3b00ef6e4a025bb6c4f5c1b1"
Cache-Control: max-age=424752,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7764c0eafb2e1bfe-OSL

                                        
                                            GET /js/jads.js HTTP/1.1 
Host: poweredby.jads.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.94.237.64
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 08 Dec 2022 10:17:50 GMT
Content-Length: 178
Connection: keep-alive
Location: jads2.js


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            GET /js/jads2.js HTTP/1.1 
Host: poweredby.jads.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://fbjav.javhardcore.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.94.237.64
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                            
Server: nginx
Date: Thu, 08 Dec 2022 10:17:50 GMT
Last-Modified: Mon, 11 Jul 2022 00:36:11 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"62cb707b-eae"
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (3758), with no line terminators
Size:   1719
Md5:    558e1b61fc513016183a3812938e79fb
Sha1:   5f72ea61a2aad8f7a0956321d3fd8524db70eddf
Sha256: a79f8c0aabfc2d1d45e4df2a86ca9172d292b08987f7a9d5c10bd10abf3aef54
                                        
                                            GET /wp-content/themes/fbjav/assets/js/custom.min.js?v11020 HTTP/1.1 
Host: fbjav.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             172.67.153.211
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 08 Dec 2022 10:17:50 GMT
last-modified: Wed, 30 Sep 2020 17:50:36 GMT
vary: Accept-Encoding
etag: W/"5f74c56c-1a3b"
expires: Wed, 04 Jan 2023 19:23:47 GMT
cache-control: public, max-age=31536000
pragma: public
x-powered-by: W3 Total Cache/2.1.1
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 29170443
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b8BEWaoaaPDmdEQdYijlD8tEWcGGNDb0pHiiG2IDzgv5XNkID%2BDo95rtlfk3ye7NE1vo1Ows6ktnjjesLWx9POPvI6CMm2k54QDtu62Q89xAQexw2zT1rkiWiPo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7764c0eacce21c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6715), with no line terminators
Size:   3151
Md5:    37c47107987fb7adc7858cda0ad4fd44
Sha1:   8b4e9891eee03c0018ae92cc2c52cd4fc6e8584f
Sha256: 43635d4cd12875d4195a5acf078b0b477c22fe973bcf6a3f9e1bc6285debed3b
                                        
                                            GET /ads-iframe-display.php?idzone=3984742&type=300x250&p=http%3A//fbjav.javhardcore.net/nfdm-245/&dt=1670494670036&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22 HTTP/1.1 
Host: syndication.realsrv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Upgrade-Insecure-Requests: 1

                                        
                                             95.211.229.248
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                            
Server: nginx
Date: Thu, 08 Dec 2022 10:17:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226391b9ceac3dc6.258560734177689735%22%3B%7D; expires=Sat, 07 Dec 2024 10:17:50 GMT; path=; domain=.realsrv.com; impressions=cmmsxrbonxgxameexmllsgeicmmsxaeenxgxamecmrmabgeimacslbecnxgxaaabssxamgeislsaroornxgxaallsbmomgeicxbmsbxcnxgxaallaccblgeioslmrxlrnxgxamecmscacgeiccmmlmlcnxgxameomroeegeialbsereanxgxaalrollmegeioslmrxbrnxgxamecbxbacgeicxbmsbcenxgxaallsbmbbgeioslmrxlsnxgxameolxrmmgeicxbmsbocnxgxaallcccaogeicxbmsboenxgxaalbaaamegeiclsmarcanxgxaaallsxlcgeiclsmrrmanxgxaaallsxlcgeirbabxabbnxgxameexmllsgeiccmmlleanxgxameexmerxgeimcrxsbcenxgxaameollsmgeimreaoboenxgxaameollsmgeimcclosscnxgxaalccxmexgeimacslbeenxgxaaboslelageioslmroemnxgxamecmrmabgeioslmrxbmnxgxamesrlmlogeicaxsscmbnxgxamexrbcemgeicaormlxonxgxaamealeoegeicaormbmcnxgxaamealeoegeimcclsxscnxgxaamsmxlcageimccloscanxgxaallmalxmgeimreaomxenxgxaamelbbsbgeimreaobscnxgxaamelbbsbgeimcclosconxgxaallsbmbbgeimcclsoeonxgxaamxaacblgeimacslbeonxgxaaloesaslgeimcclsxsanxgxaamsmxlcageimcclsxlbnxgxaamssmcolgeimaecseaonxgxaamssmcolgeimaecsxeonxgxaamssmcolgeimaecseronxgxaamssmcolgeimrblelrenxgxaamssmcolgeiccmmllebnxgxameoxbrrrgeimcclsxlonxgxaamcsebsxgeimcclsoeenxgxaamcrclalgeimcclsxsbnxgxaamcrclalgeimcclossbnxgxaalbexcrageimcclsxlcnxgxaamrscxmxgeimaecseranxgxaabrlemaegeimcclosccnxgxaamrscxmxgeicaormlxcnxgxaalbxrlcegeicaormbmbnxgxaalrexasogeiclsmrbsenxgxaamaxcsxcgeialbserebnxgxamexsrmoogeimcclsxconxgxamecabelcgeimcclsxmenxgxamecabelcgeialbserxonxgxaalbcxbsageimccloscenxgxaalmlsmmcgeimcclsxxonxgxameexxllrgeimcclsxbcnxgxameomoscbgeicaormlxanxgxaammacmrxgeimcclsxaonxgxamesemoslgeimrblxxxbnxgxaambboecmgeimrblxelcnxgxaambboecmgeimrblxxrbnxgxaambboecmgeialbserxenxgxamexmlmxxgeimacslbeanxgxaablxaelxgeialbserecnxgxameoxbrrrgeiccmmllecnxgxamexsrmoogeisaeeasslnxgxaabrbeccogeimcclossanxgxaabrlemaegeimcclsxronxgxamesemoslgeimaecseabnxgxaabrlemaegeimrblelrcnxgxaabrlemaegeimrblxemonxgxaabrlemaegeimcclsxcanxgxaalrlccrxgeimaecsxoonxgxaabmalbxxgeircsxcxscnxgxaabbxeomsgeicaormbbenxgxaalexxbcxgeiabeocmconxgxaablxrcmmgeimcclsxxcnxgxaalesmxrsgeimrblxeeanxgxaablsaloageimaecsemanxgxaalmmeabageimaecselonxgxaaloaroaageimcclsxacnxgxameolxrmmgeimcclselenxgxamecrasabgeimaecsxronxgxaalxmmoorgeimaecsxsenxgxaalxmmoorgeimaecsercnxgxaalxmmoorgeimaecsembnxgxaalxmmoorgeimaecselenxgxaalxmmoorgeimaecobobnxgxaalsmleergeimaecomoanxgxaalsbbboageimrblxxoenxgxaalsbmacmgeimaecobsbnxgxaalsbbboageimrblxosonxgxaalsbbboageimcclsxmanxgxamecrasabgeimaecsxccnxgxaalmeeamageimrblxeecnxgxaalmeeamageimrblelronxgxaalmeeamageimrblelmonxgxaalmeeamageimaecseacnxgxaalmmeabageimaecsxxcnxgxaalmmeabageicaormbmanxgxaalbxrlcegeimaecsxocnxgxaalbrxssogeicaormlobnxgxaallcccaogeimaecomrenxgxameexxllcgeimrblxxxanxgxameexxllrgeimrblxosbnxgxameexxllrgeimaecomlonxgxameexxllrgeimcclselanxgxameobesbsgeimrblxoxenxgxameexmllsgeimaecomconxgxameexmllsgeiclsmrrrenxgxamexlcmeageiclsmarocnxgxamexlcmeageiclsmrbecnxgxamexlcmeageiclsmarcbnxgxamexlcmeageiaaxcambbnogxamecelsabgxcceimcssmlrcnsgxamecelcalgxcceimxxerrecnxgxamecelcalgxcceimxlbmosanogxamecelcalgxcceimxeemlxcnogxamecelcmegxcceialrexexbnxgxamecxxblrgxcceimxxrecsanxgxamecxxblrgxcceimcoaxmxcncgxamecxoslogxcceimaoolcoonxgxamecxrrssgxcceimclsaoxbncgxamecxborxgxcceimsacexoonxgxamecxborxgxcceimmosssconsgxamecxborxgxcceimcssmlronsgxamecxborxgxcceimmsxarcbnlgxamecoelsbgxcceimxlbmosonogxamecoxsssgxcceimaoobbebnxgxamecoobcbgxcceimrsmcsebnogxamecocaomgxcceimsbebobbnxgxamecocaomgxcceimaooloranxgxamecocaobgxcceimsxcleebnxgxamecocaobgxcceialbbebrenxgxamecocbbegxcceimmslxsbanxgxamecoroergxcceimmxcxslenxgxamecoroergxcceialxosmbanxgxamecoroergxcceimrbleaxenxgxamecolclrgxcceimxeemblonxgxamecsbmbmgxcceimcrxeocbnxgxameccxbsegxcceimmoabamcncgxameccolaogxcceicloaxxmenxgxameccolaogxcceimmomxmlcnogxameccolasgxcceimxlbmoobnogxameccolasgxcceiccblrxrbnxgxameccsbaagxcceiccblrxaanxgxameccsbaagxcceimmooobrcnxgxameccassegxcceimmsoxrlonxgxameccmaoogxcceimmsoxrlcnxgxameccmaoogxcceimmsxrlabnxgxameccmaoogxcceimxlbalscnogxameccmaoogxcceimemlxbocnxgxameccmborgxcceimrxccoscnsgxameccmlclgxcceimrmaobxanogxameccmlclgxcceimxlbmxlcnogxamecclmxcgxcceimxlbmxbbnogxamecclmxcgxcceimxlbmxlonogxamecclmxcgxcceimxlbmxlenogxamecclmxcgxcceimxlbmoacnxgxamecreaaogxcceimmcorsxansgxamecrxbaxgxcceialbbebsanxgxamecrxbaxgxcceimxeoxsbenrgxamecrxbaxgxcceimaalslbbnogxamecrxbaogxcceimxxerreanxgxamecrorlrgxcceimeelaclcncgxamecrorlagxcceimaalslbanogxamecrsmcmgxcceimasbmxsanxgxamecrcmsxgxcceixbblrmlanxgxamecrremcgxcceimasbmxsonxgxamecraelmgxcceimxlbalsbnogxamecraosegxcceimmcorsxbnrgxamecraosegxcceircmbbroanxgxamecraosegxcceimmccrbeanxgxamecrasabgeimmccrlacnxgxamecmrmabgeimrblxeoenxgxamecrasabgeiraclralcnxgxamecaexxagxcceimrcscrsanxgxamecaexxagxcceimaoobrbcnsgxamecaecragxcceimaoobrbanrgxamecaoarxgxcceimxlbmoscnogxamecaoarogxcceicloaxxmonxgxamecacommgxcceimromoslanxgxamecacommgxcceimroxaclanxgxamecacommgxcceimmccrlaonxgxamecmscacgeimrxccosonsgxamecmselogxcceicloaxxacnxgxamecmselsgxcceixaoossalnsgxamecmselsgxcceimmccrbxenxgxamecbxbacgeimmcorsxonxgxamecmscacgxcceicmarxbbonsgxamecmscacgxcceialbmlesenxgxamecmcmrogxcceimrxmbarenxgxamecmcmrogxcceimxlbmoconcgxamecmrsbogxcceicloaxxaanxgxamecmmsrogxcceimraeelabnsgxamecmmcxsgxcceimrxccosansgxamecmmcsogxcceimxxerreonxgxamecmmcsogxcceiceecmorsnxgxamecmmcsogxcceimeembesonxgxamecmbbmegxcceimxxerrxenxgxamecmlbxegxcceimcssmlrensgxamecmlbxegxcceialbbebsbnxgxamecmlbxegxcceimmossscensgxamecmlbxegxcceimxxerrebnxgxamecbeobxgxcceimxlbalcenogxamecbeobogxcceimeembescnxgxamecbessmgxcceialrexeoonxgxamecbxmbmgxcceimmccrlaenxgxamecbxbacgeimcoaxmxoncgxamecbsaregxcceimeembecenxgxamecbsaregxcceimasbmxconxgxamecbmrbsgxcceimxlbmosensgxamecbbmbcgxcceimmooobranxgxamecloaaogxcceimeelaclonxgxamecloaaogxcceimeelaclanxgxamecloaaogxcceicloaxxabnxgxameclomccgxcce; expires=Fri, 09 Dec 2022 10:17:50 GMT; path=/; domain=.realsrv.com;
X-Robots-Tag: noindex, follow
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document, ASCII text, with very long lines (1700), with no line terminators
Size:   836
Md5:    69c318271f5d0e6d65b64ff00ac9fdb5
Sha1:   be636fc08067f1f4be276867ebd9a053922ea5f6
Sha256: 622ce6bd1f0830b517e326bdde3e13b5612b49541c9aab6f497ecbfc7d09c0f5
                                        
                                            GET /1b/8a/d1/1b8ad19e5b8faa97b5af717e65b0bdee.js HTTP/1.1 
Host: middaysonnyguffaw.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/

                                        
                                             173.233.137.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.19.5
Date: Thu, 08 Dec 2022 10:17:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 499e00929aa203ad039e4e307d887874
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (37199), with no line terminators
Size:   13437
Md5:    5569b664f13f3bcf1df2e4716b826273
Sha1:   dde82111c538a67bc1a8f4cf95e5b57f96c1e9d3
Sha256: afd8875489f2ed83a766d87d3bbbdd39c9eaedba4183f91c7c4721e02512c243

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/fbjav/assets/images/loading2.gif HTTP/1.1 
Host: fbjav.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fbjav.com/wp-content/themes/fbjav/assets/css/main.min.css?v270421
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             172.67.153.211
HTTP/2 200 OK
content-type: image/gif
                                            
date: Thu, 08 Dec 2022 10:17:50 GMT
content-length: 5396
last-modified: Sun, 08 Apr 2018 04:01:44 GMT
etag: "5ac99428-1514"
expires: Wed, 29 Nov 2023 23:35:41 GMT
cache-control: public, max-age=31536000
pragma: public
x-powered-by: W3 Total Cache/2.1.1
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 729729
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JacC5k02tX0f02bKbxVb6Xjt4SKBeO3LzI7dZ4JtLTJRAQCbL3yawzWAxavgKbhEfSXJ%2FdK1%2BJ3V%2Bo80ZDiKjCHjAIHLzuohRY3nv2l00uOV1cPs24Xp2rZ6Row%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7764c0eceed41c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 400 x 50\012- data
Size:   5396
Md5:    791ab27bab45300800fd516dfa3dec44
Sha1:   3b534228f8d6e01f2b6393ae7ed7537dc298ff9e
Sha256: 52ba04feb272ee01dcd51466c27986885e575d252dd392b2feca72d3b97878d4
                                        
                                            GET /4e/84/f4/4e84f42101bf00d68343d16d78e896d0.js HTTP/1.1 
Host: vocalconferencesinister.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/

                                        
                                             192.243.59.12
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.17.6
Date: Thu, 08 Dec 2022 10:17:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1bfd70ad0bef94dc9ae5c20d70afd1df
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (60141), with no line terminators
Size:   20704
Md5:    ab8676e77fa8efd538a9980d80d10afb
Sha1:   cc429cdacb8bbb55ae8596e0a1208f452851c2dc
Sha256: 2ad56670a48b02c6f76c54fc003840180eb8572d91f72636d31cd4a9695aa59f

Blocklists:
  - fortinet: Malware
  - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/fbjav/assets/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1 
Host: fbjav.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://fbjav.javhardcore.net
Connection: keep-alive
Referer: https://fbjav.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             172.67.153.211
HTTP/2 200 OK
content-type: font/woff2
                                            
date: Thu, 08 Dec 2022 10:17:50 GMT
content-length: 18028
last-modified: Sun, 08 Apr 2018 04:01:42 GMT
etag: "5ac99426-466c"
strict-transport-security: max-age=31536000
referrer-policy: no-referrer-when-downgrade
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M1yvZdYikdcqVqYQ2GqH7nTqVgoUtL3bpTlaBEHnLhAQ60lO7tlSWzv4SESnhrPvHyNj956Nq8BzktzThwq3kPKbNtPpvqMAhw1RuV%2FBNAwnPevdr6s4ZBFPbPY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7764c0ed0ef71c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 18028, version 1.589\012- data
Size:   18028
Md5:    448c34a56d699c29117adc64c43affeb
Sha1:   ca35b697d99cae4d1b60f2d60fcd37771987eb07
Sha256: fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c
                                        
                                            POST /uid/send HTTP/1.1 
Host: vmuid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://fbjav.javhardcore.net/
Content-Type: multipart/form-data; boundary=---------------------------404156196829092233282822987600
Origin: http://fbjav.javhardcore.net
Content-Length: 323
Connection: keep-alive

                                        
                                             178.162.196.156
HTTP/1.1 200 OK
Content-Type: application/json
                                            
Server: nginx/1.14.1
Date: Thu, 08 Dec 2022 10:17:51 GMT
Content-Length: 65
Connection: keep-alive
Cache-Control: no-store, max-age=0
Accept-Ch: Sec-CH-UA-Platform-Version
Access-Control-Allow-Origin: http://fbjav.javhardcore.net
Access-Control-Allow-Headers: X-Requested-With, content-type, access-control-allow-origin, access-control-allow-methods, access-control-allow-headers, set-cookie, Cookie
Access-Control-Allow-Credentials: true
Set-Cookie: guid=2e1a4e6c-51fe-46d4-b664-82c3f744ff79; expires=Wed, 31 Dec 2025 00:00:00 GMT; domain=vmuid.com; path=/; secure; SameSite=None


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   65
Md5:    b6979428acd50c62fb14313b5616743a
Sha1:   b3be20c33462a8e38b8800105317eee200e6c70f
Sha256: 03390f5ace61427332cce928dc5c94fbb53375d683ee2fee83874b58800ae931
                                        
                                            GET /library/426059/4ad2280f196cc966ac0f7b1d6545762cba5b351b.webp HTTP/1.1 
Host: s3t3d2y8.afcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://syndication.realsrv.com/

                                        
                                             185.76.9.23
HTTP/1.1 200 OK
Content-Type: image/webp
                                            
Date: Thu, 08 Dec 2022 10:17:51 GMT
Content-Length: 13276
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 17:48:53 GMT
ETag: "63879785-33dc"
Expires: Thu, 30 Nov 2023 17:52:18 GMT
Cache-Control: max-age=31536000
Access-Control-Allow-Origin: *
X-Robots-Tag: noindex, follow
X-Cache-OP: HIT
X-Accel-Expires: @1701956764
Server: CDN77-Turbo
X-77-NZT: AblMCRSFaWf/syABAA
X-77-NZT-Ray: af5856302e0930b8cfb99163e6bb1803
X-Cache: HIT
X-Age: 73907
X-77-POP: stockholmSE
X-77-Cache: HIT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   13276
Md5:    cd7ab36fb761a7f45de51eb28b70cfcc
Sha1:   4ad2280f196cc966ac0f7b1d6545762cba5b351b
Sha256: c5940458f42f85a17639354b1ac1f831413411b40ca3376df39ffbc8080c9113
                                        
                                            GET /wp-content/themes/fbjav/assets/fonts/glyphicons-halflings-regular.woff HTTP/1.1 
Host: fbjav.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://fbjav.javhardcore.net
Connection: keep-alive
Referer: https://fbjav.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             172.67.153.211
HTTP/2 200 OK
content-type: font/woff
                                            
date: Thu, 08 Dec 2022 10:17:51 GMT
content-length: 23424
last-modified: Sun, 08 Apr 2018 04:01:42 GMT
etag: "5ac99426-5b80"
expires: Sat, 07 Jan 2023 10:17:51 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n5ViLTVsPw0bYTfiTUwReQ4CYV1uyfvFFjPGfUo8pPFUGxUvW%2FmQdQCwvF8a397WkV9XGsWIohvlfQNwHtU1OOzYN3cs9rEJfVy%2B45GgaBq2b8Hf35HUcfznCkk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7764c0edbf8e1c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 23424, version 1.0\012- data
Size:   23424
Md5:    fa2772327f55d8198301fdb8bcfc8158
Sha1:   278e49a86e634da6f2a02f3b47dd9d2a8f26210f
Sha256: a26394f7ede100ca118eff2eda08596275a9839b959c226e15439557a5a80742
                                        
                                            GET /sdk.js?sid=c7a563de-f73e-40f2-abfd-c98fa333d0c0 HTTP/1.1 
Host: tartator.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://fbjav.javhardcore.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             178.162.196.156
HTTP/1.1 200 OK
Content-Type: text/javascript
                                            
Server: nginx/1.14.1
Date: Thu, 08 Dec 2022 10:17:50 GMT
Content-Length: 50530
Connection: keep-alive
Cache-Control: no-store, max-age=0
Accept-Ch: Sec-CH-UA-Platform-Version
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
X-Cache-Status: EXPIRED


--- Additional Info ---
Magic:  ASCII text, with very long lines (50530), with no line terminators
Size:   50530
Md5:    333931c233a41cf0cbc835bd4e14c76d
Sha1:   e958afe25ea384e708555815afb37c37cafccac3
Sha256: 6245bfa00e8394d9d8467d56ab291b65d7bf5341d633f2199d5edc4491fe0e13
                                        
                                            GET /sfp.js HTTP/1.1 
Host: addresseepaper.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/

                                        
                                             34.160.73.230
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Server: openresty
Date: Thu, 08 Dec 2022 10:17:51 GMT
Content-Length: 2551
Last-Modified: Tue, 06 Dec 2022 22:15:21 GMT
ETag: "638fbef9-9f7"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_ksH1sTc9EjXCmWZup74uFSR+dkwy0KAqHyDjqCX5+b0zeGjsBDwHGeUXqHO1YTnGXNMqi9DZqRg/7nsDREvaAw
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=91.90.42.154;Path=/;Max-Age=86400; country=NO;Path=/;Max-Age=86400; city="";Path=/;Max-Age=86400; expiry_partner=enom.EXPIRED.305E185C-5D0C-4AD0-86FE-5F99F413CC83;Path=/;Max-Age=86400;
Accept-Ranges: bytes
Via: 1.1 google


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2551), with no line terminators
Size:   2551
Md5:    41f66bb0ac50f2d851236170e7c71341
Sha1:   59bcec216302151922219b51be8ad8ab6d0b8384
Sha256: ec99cca58b612ce268e6ada818dfcec0acc22dd1bbe372487be9abbdd07ce073
                                        
                                            POST /hit HTTP/1.1 
Host: tartator.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------42192605687745777201017731216
Content-Length: 536
Origin: http://fbjav.javhardcore.net
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             178.162.196.156
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                            
Server: nginx/1.14.1
Date: Thu, 08 Dec 2022 10:17:51 GMT
Content-Length: 2
Connection: keep-alive
Cache-Control: no-store, max-age=0
Accept-Ch: Sec-CH-UA-Platform-Version
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Set-Cookie: av_sw_hit=1; expires=Fri, 09 Dec 2022 10:17:51 GMT; secure; SameSite=None


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    e0aa021e21dddbd6d8cecec71e9cf564
Sha1:   9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
Sha256: 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
                                        
                                            GET /sfp.js HTTP/1.1 
Host: friendshipmale.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/

                                        
                                             172.64.163.31
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
Date: Thu, 08 Dec 2022 10:17:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: max-age=14400
X-Request-ID: 66774266fb5ebf9bc50aa6c78eb88d73
Strict-Transport-Security: max-age=0; includeSubdomains
CF-Cache-Status: EXPIRED
Last-Modified: Thu, 08 Dec 2022 10:17:51 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CrN2DHaEK46GevRRa3ZhEy1etRI87s3FKhNcwasFBxNVsLvmg6xyya50%2BgZAczrJl3T3fhhalrGF30%2BkYubTuf%2FpDvQ14mnCau%2F4sjZzrUzK820tlBUVPW6ykJNb5tecpGv%2FRpY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7764c0ede90c2401-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Size:   27574
Md5:    b1fa950e77a7db5425f9a5257af02e9c
Sha1:   2d5580451f34ad96218f8b97edf9708f9ee1be87
Sha256: d999c4320df27dc4a1d3de5aec22bb3ef201560b47a7eff3f28f4133c1997a14
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.245.100
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 08 Dec 2022 10:17:51 GMT
Last-Modified: Thu, 08 Dec 2022 08:52:59 GMT
Server: ECS (nyb/1D1F)
X-Cache: Miss from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: NR7fFNB5zBa-vnMYaKQMAH_LdOC4APP0DH6lpPRwsD8u4MQyAxutyg==
Age: 5092

                                        
                                            GET /wp-content/plugins/wordpress-popular-posts/assets/js/wpp.min.js HTTP/1.1 
Host: fbjav.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.67.153.211
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 08 Dec 2022 10:17:50 GMT
last-modified: Tue, 15 Sep 2020 15:43:55 GMT
vary: Accept-Encoding
etag: W/"5f60e13b-a3a"
expires: Tue, 04 Jul 2023 17:55:32 GMT
cache-control: public, max-age=31536000
pragma: public
x-powered-by: W3 Total Cache/2.1.1
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 13537338
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tmv5zZuIR5hca1KfAN3ux9085A4yA%2FCEkUKganv5Sykd%2Bl5T%2FLTuJRpqI%2BCyETVmR6LtHbW%2FWG8nH%2FdlEE9hWbEFWFE2%2BgJ4Dqtdtw7tEurvDCRAHBaUMJt9cKE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7764c0eadced1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (2618), with no line terminators
Size:   1612
Md5:    e6aa68a428db4494ed60b27cf898da55
Sha1:   ef62d838ef8914d8d88c8d24d6d7a70338a1eaed
Sha256: 37881b222017e1f0cfd80ecfd1ec5443cac6dd60f44bfded6f3ae8d898cb717d
                                        
                                            GET /pixel/purst?dl=0&th=0&sc=0&rs=1983&rd=1983&fd=567&bv=22.10.v.9&tmpl=70 HTTP/1.1 
Host: populationrind.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/

                                        
                                             192.243.59.20
HTTP/1.1 200 OK
                                            
Server: nginx/1.17.9
Date: Thu, 08 Dec 2022 10:17:51 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/fbjav/assets/js/script.min.js HTTP/1.1 
Host: fbjav.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             172.67.153.211
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 08 Dec 2022 10:17:50 GMT
last-modified: Thu, 19 Apr 2018 05:03:42 GMT
vary: Accept-Encoding
etag: W/"5ad8232e-114e4"
expires: Wed, 04 Jan 2023 19:23:46 GMT
cache-control: public, max-age=31536000
pragma: public
x-powered-by: W3 Total Cache/2.1.1
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 29170443
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6V6vRKiHHGrFklBeWlWaQ5trsK6R%2FJuWHwCoL%2FStda0HplHz3SD9JxQgIfTprmd9ZECdUdz7bMzWhCPIDm0Ub3x5ourGVM6xmf3KONQPGs3N21hUgZjzxX7S4nk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7764c0eacce11c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32052)
Size:   19203
Md5:    7f30bc65e03ed37dc428fdd532200b8a
Sha1:   970ebc99192151a6c92f7cb56b6c771f8effaee5
Sha256: 2b39b766edd7affb89fd30a6f5b158b1ab9069fdcb3bbf86a5493eca0a4d14b5
                                        
                                            GET /stats HTTP/1.1 
Host: simplewebanalysis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://fbjav.javhardcore.net
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             18.185.190.54
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Thu, 08 Dec 2022 10:17:51 GMT
content-length: 40
server: fasthttp
access-control-allow-origin: http://fbjav.javhardcore.net
access-control-allow-credentials: true
set-cookie: uid_id2=efccf22e-f3b0-4360-aa71-480c2e95afe0:1:1; expires=Sun, 05 Dec 2032 10:17:51 GMT; secure; SameSite=None
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   40
Md5:    0c83cd4e020ca1603d034ef3a316892e
Sha1:   58165227f0527b3218819c0fd061020ff47c33aa
Sha256: 73da77b708dc689ab88a49156ce230b48f6f1a4aec0041cfaf7abbc4dda5ee7f
                                        
                                            GET /stats HTTP/1.1 
Host: simplewebanalysis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://fbjav.javhardcore.net
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             18.185.190.54
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Thu, 08 Dec 2022 10:17:51 GMT
content-length: 40
server: fasthttp
access-control-allow-origin: http://fbjav.javhardcore.net
access-control-allow-credentials: true
set-cookie: uid_id2=00052751-44e3-4989-958d-eb1be607a657:2:1; expires=Sun, 05 Dec 2032 10:17:51 GMT; secure; SameSite=None
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   40
Md5:    03dd87b7fabebefa39fdd59c61ff94e3
Sha1:   5766eed32ca9ef2d1cc8f154f87bdcfb15f63fe7
Sha256: 0046ce0bc709ad13ec1fef854a68f872525accee28409ea5581d49a05204d019
                                        
                                            POST /api/report HTTP/1.1 
Host: tartator.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------39467609991773888269489756229
Content-Length: 511
Origin: http://fbjav.javhardcore.net
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             178.162.196.156
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                            
Server: nginx/1.14.1
Date: Thu, 08 Dec 2022 10:17:51 GMT
Content-Length: 2
Connection: keep-alive
Cache-Control: no-store, max-age=0
Accept-Ch: Sec-CH-UA-Platform-Version
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    e0aa021e21dddbd6d8cecec71e9cf564
Sha1:   9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
Sha256: 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Cache-Control: max-age=121010
Date: Thu, 08 Dec 2022 10:17:51 GMT
Etag: "6390ef81-117"
Expires: Fri, 09 Dec 2022 19:54:41 GMT
Last-Modified: Wed, 07 Dec 2022 19:54:41 GMT
Server: nginx
Content-Length: 279

                                        
                                            GET /wp-content/themes/fbjav/assets/fonts/glyphicons-halflings-regular.ttf HTTP/1.1 
Host: fbjav.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://fbjav.javhardcore.net
Connection: keep-alive
Referer: https://fbjav.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             172.67.153.211
HTTP/2 200 OK
content-type: application/octet-stream
                                            
date: Thu, 08 Dec 2022 10:17:51 GMT
content-length: 45404
last-modified: Sun, 08 Apr 2018 04:01:40 GMT
etag: "5ac99424-b15c"
expires: Sat, 07 Jan 2023 10:17:51 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IMwW7B6%2F9esp%2B8qSzs6KsLQgwhQzyQKosf9%2BfF%2BZfE8HJbmHLp2ln8TTulvnjUuKcaEhYVC%2FK8wIhgpWowsLGUhdoZIKtDrVth1z%2FFhPHB7cil25zOMXf13%2BPyY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7764c0ee3ff61c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  TrueType Font data, 15 tables, 1st "FFTM", 16 names, Macintosh, type 19 string, www.glyphicons.com\012- data
Size:   45404
Md5:    e18bbf611f2a2e43afc071aa2f4e1512
Sha1:   44bc1850f570972267b169ae18f1cb06b611ffa2
Sha256: e395044093757d82afcb138957d06a1ea9361bdcf0b442d06a18a8051af57456
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13897
Expires: Thu, 08 Dec 2022 14:09:28 GMT
Date: Thu, 08 Dec 2022 10:17:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13897
Expires: Thu, 08 Dec 2022 14:09:28 GMT
Date: Thu, 08 Dec 2022 10:17:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13897
Expires: Thu, 08 Dec 2022 14:09:28 GMT
Date: Thu, 08 Dec 2022 10:17:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13897
Expires: Thu, 08 Dec 2022 14:09:28 GMT
Date: Thu, 08 Dec 2022 10:17:51 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15e59c3f-fa3a-4698-96c2-2e89662ffa9f.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8179
x-amzn-requestid: 39aa4016-4f48-4d2a-b94b-05432980d66a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czCruHckIAMFkHg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639117e4-1953985a5c8d2da8239ec8e8;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 22:47:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qKaRX4QpQU2U8J-jk1lWjhAooObsgxfHuNXv5Bbc69IEMCXAyIESeQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:50:01 GMT
age: 41270
etag: "979910df445a5c4d3513c8c25e289800335f646d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8179
Md5:    311cb4353566dfb426dbc692fde93223
Sha1:   979910df445a5c4d3513c8c25e289800335f646d
Sha256: 5ecd5c12620c0b8b6bbf456cb6c016168479a735f4eb67a9a1047677b9d798fb
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10164
x-amzn-requestid: a0cb7259-0a07-44f5-91cd-e96b8d9c9cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cnAPOGSnoAMFUUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c472e-799b6ee425e29fb70ff7e4ea;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 07:07:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5Q2LRCrEYVZz_KldQARUQ26O1mv0G7rMAPQXGkBzUnERF-WjtZPMJA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 10:23:11 GMT
age: 86080
etag: "9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10164
Md5:    3d44d17585c9a536c8da0e75ed90d175
Sha1:   9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1
Sha256: 6d14a5b5c43b39244434560a83a2bfea6604a4d072943b6147293b7adfd1b7b7
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8659
x-amzn-requestid: 6f420d07-65d5-4bb2-9f1f-e56025de497b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFSYFArIAMF46w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c0f-0a295e5c48228d5806b4f107;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TSh1BNzzIPhWCfYEiqvQJckSPAyhHobe-HK6msEVeEJ1ruX-_rMSSA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:33:19 GMT
age: 38672
etag: "c4f26846b8b72293368ff16915d49297cf12bbb9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8659
Md5:    b87d6543345f73653ed4a49b37d7c959
Sha1:   c4f26846b8b72293368ff16915d49297cf12bbb9
Sha256: aee6aa42e4b5b83b81f74801ff8f0039fc6d38036f42ee81875813c856cf5eef
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e6c8e9d-aef1-4772-8747-82ef7e4ceeb1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6110
x-amzn-requestid: 2ebf542a-dacc-472a-81c0-0c69cb1ec143
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctEQAH2doAMFljA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb3ff-7173ff7941b57fa163e3cc6b;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:16:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Bo1JGLLmbH9LRrcXA4i8qVD1ilMqHxNWq1u52RhGMAdAhywK42lMPA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 01:57:38 GMT
age: 30013
etag: "c3b915cb579b651db25442fea0bbedd0d292c0fc"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6110
Md5:    fb1ea0161d261518c99909aff49e6f58
Sha1:   c3b915cb579b651db25442fea0bbedd0d292c0fc
Sha256: d877a21abfd883a368da0136c4e56d7f590fa9e9ea09dec3675823211fe56385
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb40390-82ef-453b-afca-e37aa7674ed3.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9058
x-amzn-requestid: 1f7fdd3d-1e65-46f7-8ef2-d164bf81e72b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctlz4FtuIAMFjsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ee9b2-4866b3fd61fdb35d34317038;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 07:05:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6ET1Tfo1QXRpjkWyOE7jfYnWToK8h7ojB31efNc09awacwlCIYEPjA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 05:05:36 GMT
age: 18735
etag: "98556b27bc3759d0ceb8200ff5bc7b9567e428a5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9058
Md5:    f0c8a8dbe6c3ae6eaa2e464296708f5c
Sha1:   98556b27bc3759d0ceb8200ff5bc7b9567e428a5
Sha256: bfc64a0e18c0137360f746eca256f464e26d23a04521ea629c46ae50ea6af173
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3236488e-3e39-44b6-b864-0f7ede8ee3f5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9376
x-amzn-requestid: bf2f33a6-7f13-4f5b-ba9c-da33282135b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctERHFRSoAMFgYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb406-121af6ba1b7b6a3066ffa103;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:16:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: yTLFIBUWHjudn2h6VKM79RUnXfuUTmQBkYSCFrRuY7_biVW5bEKZfA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 17:39:05 GMT
age: 59926
etag: "e9106fec14ddda290951c61eda64a69ada9a244a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9376
Md5:    3cbac0c7e45d3f33c38dbf3af4de05ba
Sha1:   e9106fec14ddda290951c61eda64a69ada9a244a
Sha256: 98d3785eb167ea6bbba3782ab3cfd8cc9c7715f493265ac6d59494c00d3b002e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=121010
Date: Thu, 08 Dec 2022 10:17:51 GMT
Etag: "6390ef81-117"
Expires: Fri, 09 Dec 2022 19:54:41 GMT
Last-Modified: Wed, 07 Dec 2022 19:54:41 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /wp-content/s/2021/05/3wanz042pl-360x241.jpg HTTP/1.1 
Host: fbjav.javhardcore.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/nfdm-245/
Cookie: PHPSESSID=hgdriv4v7c0ij7ev8n2gplf2cl

                                        
                                             104.21.40.252
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Thu, 08 Dec 2022 10:17:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: *
CF-Cache-Status: BYPASS
Set-Cookie: view=1; expires=Fri, 09-Dec-2022 10:17:50 GMT; Max-Age=86400
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WqxpStxoxbzELhMylDsSEkSgbJrpUoJAsAc7XJTidywIMBYLT0DvOHmo%2Fz4nZ9SzaCROpWl5KlCWaywCsdE0jyabQA1K0TAX5MhNWcMmN6EBFInL5QnCI%2B0inzuQT%2B0NPJusBXUJzSo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7764c0eb18f5b4f1-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8855)
Size:   28906
Md5:    6b3302d6690b40064e022dd14f4a934a
Sha1:   dbde5e5cd71707ee2b987d9aa737ad8a3837a021
Sha256: 7fa0602ab2abbbc2e142adaf9d165972325c5d61b6e6d48065a790ddcc6015e1
                                        
                                            GET /wp-content/themes/fbjav/assets/js/jasny-bootstrap.min.js HTTP/1.1 
Host: fbjav.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             172.67.153.211
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 08 Dec 2022 10:17:50 GMT
last-modified: Sun, 08 Apr 2018 04:01:46 GMT
vary: Accept-Encoding
etag: W/"5ac9942a-418c"
expires: Tue, 06 Jun 2023 22:21:47 GMT
cache-control: public, max-age=31536000
pragma: public
x-powered-by: W3 Total Cache/2.1.1
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 15940563
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mwoBtaJK%2BGeLGTihtMsVQliP90ASroyDtbpUZ7tGDU1IoVuAvLaOjYO579Qat0yJruAuJpIymCx%2FONlpVbLbRykmBok25Fq4G%2FQJlX1IkEYO7lrsXj2c5dTe8W4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7764c0eacce01c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (16587)
Size:   4966
Md5:    5e5a00079001f03c2e7ace8582c13be3
Sha1:   ecf590059f035a2f1302ba0052f0ce00c717f97d
Sha256: 12722b0481660f3c530192f347baea1a6940953033f3e0923d9a2a79be653a5b
                                        
                                            POST /user.php HTTP/1.1 
Host: fbjav.javhardcore.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 39
Origin: http://fbjav.javhardcore.net
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/nfdm-245/
Cookie: PHPSESSID=hgdriv4v7c0ij7ev8n2gplf2cl

                                        
                                             104.21.40.252
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Date: Thu, 08 Dec 2022 10:17:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WSz6V61Z2U5UXtFcXK1gMumQiy0Uub9jatDrhtl5e9340Rv4EW1boNNnqNO%2BJOndmr1IUI%2FAkldUUfJrBpXN6gESxvFalikgbO0rTdCMl6CpAlIrq%2F0BqDWn493lwUe7YXecHd8DKGA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7764c0f14a27b4f1-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

                                        
                                            GET /asset/default/player/base.js?v=1574240836 HTTP/1.1 
Host: imfb.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imfb.xyz/v/40oxr8-lyo8/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.21.17.7
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
date: Thu, 08 Dec 2022 10:17:51 GMT
last-modified: Fri, 24 Jul 2020 16:22:00 GMT
vary: Accept-Encoding
etag: W/"5f1b0aa8-30eae"
access-control-allow-credentials: true
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1657069
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0R6EQmNeQ010fHaSaMsYofvA3NX1g2klkD5mspSCpf93mdDV8IbT3J0NADBA8M7uUDB18Mu8Ts5rGWWv2QmbG9uWnqDtj5t%2F9yPRzXb5xw0OQZ7SfKy11c3BCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7764c0f13fad1c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   66956
Md5:    b0e12cbf313b19d2c5297256d7e41d6c
Sha1:   357a6d92bb9c41406a480c2e9f318b48aa07e5f2
Sha256: ced535c6109ddf90cfe00cec73879e25d2fa6531c946483c9c5eae1ece155810
                                        
                                            GET /adshow.php?adzone=891573 HTTP/1.1 
Host: poweredby.jads.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Upgrade-Insecure-Requests: 1

                                        
                                             185.94.237.64
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: nginx
Date: Thu, 08 Dec 2022 10:17:51 GMT
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=adaf3e357cf40d48c5bde13c85355cae; expires=Fri, 08-Dec-2023 10:17:50 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co imps53989=1; expires=Fri, 09-Dec-2022 10:17:51 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co juicy_data_1=YToxOntpOjE1MTExMTc7aToxNjcwNzUzODcwO30%3D; expires=Sun, 11-Dec-2022 10:17:50 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Sun, 11-Dec-2022 10:17:50 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1602), with CRLF, LF line terminators
Size:   1851
Md5:    19bd0f016f3d421a9ca4a5b3fca27f2b
Sha1:   c6cb74b811d06e5c79c7170a650ee10586dada7a
Sha256: a32c2d3a469efe3eb073b2d9bd30191c1b8fc7f65553316fe5d5f41588f46329
                                        
                                            GET /1x1.gif HTTP/1.1 
Host: i.jads.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://poweredby.jads.co/

                                        
                                             69.16.175.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Date: Thu, 08 Dec 2022 10:17:51 GMT
Connection: Keep-Alive
ETag: "1457030838"
Cache-Control: max-age=16730595
Content-Length: 43
Last-Modified: Thu, 03 Mar 2016 18:47:18 GMT
Accept-Ranges: bytes
X-HW: 1670494671.dop204.sk1.t,1670494671.cds217.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    9bb191c6827273aa978cab39a3587950
Sha1:   25d8043336eb799e52b1a0e15ff6b95e09c24e35
Sha256: 24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
                                        
                                            GET /network/user144161/53915-1669341990-0365458001669341990.gif HTTP/1.1 
Host: i.jads.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://poweredby.jads.co/

                                        
                                             69.16.175.42
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Date: Thu, 08 Dec 2022 10:17:51 GMT
Connection: Keep-Alive
ETag: "1669341990"
Cache-Control: max-age=30416006
Content-Length: 164414
Last-Modified: Fri, 25 Nov 2022 02:06:30 GMT
Accept-Ranges: bytes
X-HW: 1670494671.dop224.sk1.t,1670494671.cds213.sk1.c


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250\012- data
Size:   164414
Md5:    018748440eec5693565aaf51afc1e477
Sha1:   d31d7f1f68641379f51d86d12c799bee0b568b90
Sha256: cd5eb864e9de035d23952a5e01108af760d5d1c86b49e4248d292c5b2f724ff7
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             151.101.2.133
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Connection: keep-alive
Content-Length: 939
Server: nginx
Expires: Mon, 12 Dec 2022 10:05:01 GMT
ETag: "17280dd02c29b043289221fd7dc94473bc4dd3a9"
Last-Modified: Thu, 08 Dec 2022 10:05:02 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 08 Dec 2022 10:17:51 GMT
Age: 769
X-Served-By: cache-qpg1244-QPG, cache-bma1661-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3, 20
X-Timer: S1670494672.869521,VS0,VE0

                                        
                                            POST /g/collect?v=2&tid=G-CTMY1WN5BN&gtm=2oebu0&_p=1161642441&cid=651943674.1670494671&ul=en-us&sr=1280x1024&_s=1&sid=1670494670&sct=1&seg=0&dl=http%3A%2F%2Ffbjav.javhardcore.net%2Fnfdm-245%2F&dt=Gauze%20Footjob%20Clinic%20Erogenous%20M%20New%20Sensation&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://fbjav.javhardcore.net
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                        
                                             216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                            
access-control-allow-origin: http://fbjav.javhardcore.net
date: Thu, 08 Dec 2022 10:17:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 10:17:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /metrika/tag.js HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imfb.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             93.158.134.119
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 73266
date: Thu, 08 Dec 2022 10:17:51 GMT
access-control-allow-origin: *
etag: "638eb36c-11e32"
expires: Thu, 08 Dec 2022 11:17:51 GMT
last-modified: Tue, 06 Dec 2022 06:13:48 GMT
cache-control: max-age=3600
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (586)
Size:   73266
Md5:    a4567a1e52f99c2b3870f58375ec8cac
Sha1:   dbfc795e71fc19f7e45e8637abc4ac770f639a48
Sha256: 2b13b5716855040bd9a08972b0e61369e50c6daa402ed937e18f6795f82429c8
                                        
                                            GET /sbar.json?key=1b8ad19e5b8faa97b5af717e65b0bdee HTTP/1.1 
Host: verdictdisingenuousfruitless.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://fbjav.javhardcore.net
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             192.243.59.13
HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
                                            
Server: nginx/1.17.6
Date: Thu, 08 Dec 2022 10:17:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://fbjav.javhardcore.net
Access-Control-Allow-Origin: http://fbjav.javhardcore.net
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16091052; expires=Fri, 09 Dec 2022 10:17:51 GMT; secure; SameSite=None pdhtkv=true; expires=Fri, 09 Dec 2022 10:17:52 GMT; secure; SameSite=None uncs=1; expires=Fri, 09 Dec 2022 10:17:52 GMT; secure; SameSite=None pdhtkv29=true; expires=Fri, 09 Dec 2022 10:17:52 GMT; secure; SameSite=None uncs29=1; expires=Fri, 09 Dec 2022 10:17:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4543bd0b7f10656627c3ffabeeec8ae4
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (6060), with no line terminators
Size:   3369
Md5:    f19d82d7a091af83ccab27d7dac8cf4f
Sha1:   0cb6c817a0c4e40556945ed5e130271f2a17ac0a
Sha256: 6608b257ab84008c3bd0dc032138bb34283b5b5580c45526179aa4d395d1aba9

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /metrika/advert.gif HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imfb.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 43
date: Thu, 08 Dec 2022 10:17:52 GMT
access-control-allow-origin: *
etag: "638eb36c-2b"
expires: Thu, 08 Dec 2022 11:17:52 GMT
accept-ranges: bytes
last-modified: Tue, 06 Dec 2022 06:13:48 GMT
cache-control: max-age=3600
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1269
Md5:    19809bb822d30c376dbb623b718a06a8
Sha1:   5289e21ccd36e93b4eaff1173874aca054c5b25b
Sha256: 2a6e80288c37dfb74fea41abe7059c690ac7cf9643b77b223bc378578143c5dc
                                        
                                            GET /watch/88698312 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imfb.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             93.158.134.119
HTTP/2 302 Found
                                            
location: /watch/88698312/1
date: Thu, 08 Dec 2022 10:17:52 GMT
set-cookie: yabs-sid=2353367251670494672; Path=/; SameSite=None; Secure i=Z1P/cbtVKD7E1aBskjkZiPusexcPSXWger6kv/XF3rTcUiIAJyNxHCmFj/g89maWPBsxKvG5EwdBfUjhIH7UWENjlPk=; Expires=Sun, 05-Dec-2032 10:17:50 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=719819031670494672; Expires=Fri, 08-Dec-2023 10:17:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yuidss=719819031670494672; Expires=Fri, 08-Dec-2023 10:17:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure ymex=1702030672.yc.1670494672#1702030672.yrts.1670494672#1702030672.yrtsi.1670494672; Expires=Fri, 08-Dec-2023 10:17:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 08-Dec-2022 10:17:52 GMT
last-modified: Thu, 08-Dec-2022 10:17:52 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A71B25190BB6FF84EECA8DA0A090A7F51E6C703F190EFB94BEC0DD7AB5F272DA"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15510
Expires: Thu, 08 Dec 2022 14:36:22 GMT
Date: Thu, 08 Dec 2022 10:17:52 GMT
Connection: keep-alive

                                        
                                            GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuu3t3fJT8PKiJ4EAdPCjLpno%2FMzC5L2LhGgzGJuyu5WtVVPSlTU9VUdU9PcgouuBFEJzePnWeSDWr82KOCsEwEkYC47WHNwdzyF4h7lpkMRF%2Boep%2Bq5y14nvetj3bTU%2BIjpScr75hNqRSdrpf90iurUnOTudLSnVLgl%2F1rpVWpZ2rXSr3RZrtXA79e9l8tvSnCdTNd8QPfD%2FygNC%2BtiExvesxCxoetoNzyy7VKOajX0LP%2FPbvUg6MeePeUPAvJi%2F%2Bt%2FfIAMhxCd767Kdx6YuLX3uikiibGossP3tPr2mQanQsYWQ%2BRPphUw7iCkM8vweiDiQOY7t7IAZgsiPc4ANMHE5lg3f1zpUxBaDD%2Bf2TdIYQaQtIhQnMXkj8iQMixtAzdub9kbEY3zlk6Ygty5clfkFlBrvz5HHTnmzkle6XbRqWJNNqhF%2BWQvSFke4g4PUKy6UFmRwiTDyH5r2T6ySJ0Z2%2FZKQPJ87F7KYeQ0RBK9EGdh3S0pIc08pDGHjr8pETrrcj3GxGLqtVmLQzDajUM680ZXufVWjPykYYjeX0kcR%2Bh6iO0W4jtFtblTkHIt2%2FBpg%2Fh1nI47sElBfHe3UKX58gEQeYIMkqQSYIsIci6%2BT5XruLy%2B1y5lAWTXJnkaj4wSXuX7pukLTTZjU%2FJM%2BPm%2FH3vEOvipBSwJuVBS9RZM6K01WB1GjWChpipM59xIeBkDukujf1uyoI8f%2FYDYlkQ8tkfYPQITh0hlE%2BDpi%2BCZoNGxQddG9SaPjb117GxOramt1GmcQxucsTJFSQb3q46JS%2BMhVy9%2FhREeDz789T1ePB4CqHNEdscH8ifCNpqe3DLZGTvlskcebAcJ7IjN%2BlogrcTmojLX74tNjJj%2BcJN1%2F%2FiRjgiRvDwjnDJItVc6rYjX81JzoWdNzYU5McFtyrYSurW5lKr03hx5fX5hU5shXPS6CGofOQ%2BQSgLMrX96fhvvvSyhrRD2DRHJz0mk4A0Q4TxFlx8od4ZAqsualjsIUvzga2wi0slC1K7dwYljmcfnr1%2F4%2BPGIijL4cS%2FHl7gXbeNtvVAk7vQnRxdm6OrclDVh0svD5LYHs%2F%2BXh0HmPIGTFlvjymrds7b6%2BRJSdQjPxJ%2BRbCoxaIG9XkrqrUYbQViNPMAiSvCne9%2F%2BwcAAP%2F%2FAQAA%2F%2F%2Ftl%2BsydwQAAA%3D%3D HTTP/1.1 
Host: verdictdisingenuousfruitless.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Cookie: u_pl=16091052; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             192.243.59.13
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: nginx/1.17.6
Date: Thu, 08 Dec 2022 10:17:52 GMT
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ba693991972a5ba703c975286a54bb48
Strict-Transport-Security: max-age=0; includeSubdomains


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   7
Md5:    132d6af1b46048b45cf86cdee7991d31
Sha1:   eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
Sha256: ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /wp-content/themes/fbjav/assets/css/bootstrap.min.css HTTP/1.1 
Host: fbjav.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.67.153.211
HTTP/2 200 OK
content-type: text/css
                                            
date: Thu, 08 Dec 2022 10:17:50 GMT
last-modified: Sun, 09 Sep 2018 05:24:42 GMT
vary: Accept-Encoding
etag: W/"5b94ae9a-1cd94"
expires: Tue, 06 Jun 2023 21:33:09 GMT
cache-control: public, max-age=31536000
pragma: public
x-powered-by: W3 Total Cache/2.1.1
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 15943481
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VEMZRGlOzLFHdUew8NtR%2FOFT%2BDuMY6D6XBEfivE6ERWeu9HGDI5YEtxhkojps44VT1DwwM%2BW5hDMWQpyQr%2BpoKZ1MN49acTo3z%2BPoArv9pzLvxq31tJCNhQTqyg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7764c0eadcec1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65177)
Size:   20608
Md5:    d6c733569d5202bdc01f9a0c6a542b72
Sha1:   8d97ba852ce544b23fce3c88929ca994034dc0ec
Sha256: 0178991038515b72bc4a5e77329c5eedb24e67b89c28c38e6d05ab1848ac777a
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "A096E53A81068E99D5CAA600D62AE48D28B3F841598DFD85BFB61D5E050F890E"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12827
Expires: Thu, 08 Dec 2022 13:51:39 GMT
Date: Thu, 08 Dec 2022 10:17:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "A096E53A81068E99D5CAA600D62AE48D28B3F841598DFD85BFB61D5E050F890E"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12827
Expires: Thu, 08 Dec 2022 13:51:39 GMT
Date: Thu, 08 Dec 2022 10:17:52 GMT
Connection: keep-alive

                                        
                                            GET /wp-content/themes/fbjav/assets/css/main.min.css?v270421 HTTP/1.1 
Host: fbjav.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.67.153.211
HTTP/2 200 OK
content-type: text/css
                                            
date: Thu, 08 Dec 2022 10:17:50 GMT
last-modified: Mon, 26 Apr 2021 17:30:35 GMT
vary: Accept-Encoding
etag: W/"6086f8bb-ad46"
expires: Tue, 06 Jun 2023 21:33:09 GMT
cache-control: public, max-age=31536000
pragma: public
x-powered-by: W3 Total Cache/2.1.1
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 15943481
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sXMhtFdAE1pPtWF1tlyPaYvvFHYLUvDZYty6G9k7V%2Bb1ezLlj6dJ%2Bdx3QH7fFi4%2F2FtOdqJ%2FKYUU9KQhZL6w9D9YtN7wA9lr21rYlDvcW9l5I4rTt25pRWNLna0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7764c0eaccde1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (44358), with no line terminators
Size:   10196
Md5:    62878f85b5a500da03a3e11756f85497
Sha1:   1e4cfd83a76833b6d8641bf4f6a59f1ff33c8cb6
Sha256: 78c06d11ed67212b5bc0278b173c54db95f0746049a018a629caff10c7a51ecd
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "EC4B08D6A0C6FD5733C3CEAF542B37EBA10869511C0A782ECE7C75BD74EE1084"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14904
Expires: Thu, 08 Dec 2022 14:26:16 GMT
Date: Thu, 08 Dec 2022 10:17:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "A096E53A81068E99D5CAA600D62AE48D28B3F841598DFD85BFB61D5E050F890E"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12827
Expires: Thu, 08 Dec 2022 13:51:39 GMT
Date: Thu, 08 Dec 2022 10:17:52 GMT
Connection: keep-alive

                                        
                                            GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F5d%2F1e%2F66%2F5d1e6654b79f5bf053b789353432e45e%2F1613739250.html&l=1274&fd=110 HTTP/1.1 
Host: verdictdisingenuousfruitless.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/

                                        
                                             192.243.59.13
HTTP/1.1 200 OK
                                            
Server: nginx/1.17.6
Date: Thu, 08 Dec 2022 10:17:52 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /si/a5/d9/c0/a5d9c0712d47dec60831362fa254b3e2/1669388502.png HTTP/1.1 
Host: cdn.cloudimagesb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             45.133.44.10
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 08 Dec 2022 10:17:52 GMT
content-length: 75990
server: nginx/1.17.6
last-modified: Fri, 25 Nov 2022 15:01:51 GMT
etag: "6380d8df-128d6"
expires: Sat, 10 Dec 2022 10:17:52 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Size:   75990
Md5:    43fb624febca734b137b3fbff47d71c0
Sha1:   8b8d429494d314b9b822df5de2469a7c956214f3
Sha256: 16139ff8be9ad5ac2b476df153e23355e5296bbfccb9816ae83cbc3976aefe0b
                                        
                                            GET /asset/userdata/199535/poster/4/0o/40oxr8-lyo8.png?v=1558638004 HTTP/1.1 
Host: thumb.fvs.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://imfb.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.23.135.25
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 08 Dec 2022 10:17:52 GMT
content-length: 135363
last-modified: Thu, 23 May 2019 19:00:04 GMT
etag: "5ce6edb4-210c3"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7764c0f52a3fb51e-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 640 x 360, 8-bit colormap, non-interlaced\012- data
Size:   135363
Md5:    83d07bbcd7317dac384c64d5b8d9e78c
Sha1:   35794e28386fdb87a200a39b93c3226849447a45
Sha256: b110713d52bfef51a7512c575050acef4bd9fe556c7543454b1964f2ae2a01a9
                                        
                                            GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Fwhatsapp%2Fcss%2Fanimate.css&l=79245&fd=243 HTTP/1.1 
Host: verdictdisingenuousfruitless.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/

                                        
                                             192.243.59.13
HTTP/1.1 200 OK
                                            
Server: nginx/1.17.6
Date: Thu, 08 Dec 2022 10:17:52 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /sb/ssp/utility/social-media/whatsapp/css/animate.css HTTP/1.1 
Host: cdn.creative-bars1.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://fbjav.javhardcore.net
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             172.64.109.13
HTTP/2 200 OK
content-type: text/css
                                            
date: Thu, 08 Dec 2022 10:17:52 GMT
last-modified: Sat, 20 Feb 2021 08:44:40 GMT
etag: W/"6030cbf8-1358d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=COYeU%2B8UVJGllgRiFHBC%2BHnRVezMph3n6LhscG%2FRY28ulFcWgrTb2etYa02JwGiLNNXrPCdJgY7lqvtwfiAAUXppLZIHHrFLmHhzh10LpHpXaBrR%2FNur5MUOdxlSIbnpqzg%2Fe9gzSqFo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7764c0f7ab4476d8-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   4815
Md5:    21eb7a65c17a2c22ba104a7ecbf1dc0f
Sha1:   ea8c53be54889c7489aed04e30e3eb83af64dec9
Sha256: 090bd9ceb9a58da038e5ed4a39dfbb63ece49ed4f4f0656ce35f7faa41a3b237
                                        
                                            GET /sb/au/5d/1e/66/5d1e6654b79f5bf053b789353432e45e/1613739250.html HTTP/1.1 
Host: cdn.barscreative1.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://fbjav.javhardcore.net
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             45.133.44.4
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                            
date: Thu, 08 Dec 2022 10:17:52 GMT
server: nginx/1.17.6
last-modified: Fri, 19 Feb 2021 12:54:16 GMT
etag: W/"602fb4f8-4fa"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Thu, 08 Dec 2022 11:17:52 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   17885
Md5:    5efc0a61f28a0f1fa306e60e111e2da5
Sha1:   5caf06887b8642834d2a7aed2b9c06363fba98ea
Sha256: 04ac15e744c63b102501b92b64b09db2e1e8ef2a122864573ba6089d60fedbb2

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://fbjav.javhardcore.net
Connection: keep-alive
Referer: http://fonts.googleapis.com/

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: font/woff2
                                            
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15744
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 07 Dec 2022 21:13:27 GMT
Expires: Thu, 07 Dec 2023 21:13:27 GMT
Cache-Control: public, max-age=31536000
Age: 47066
Last-Modified: Wed, 11 May 2022 19:24:48 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Fwhatsapp%2Fcss%2Fstyle.css&l=6334&fd=380 HTTP/1.1 
Host: verdictdisingenuousfruitless.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/

                                        
                                             192.243.59.13
HTTP/1.1 200 OK
                                            
Server: nginx/1.17.6
Date: Thu, 08 Dec 2022 10:17:53 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuu3t3fJT8PKiJ4EAdPCjLpno%2FMzC5L2LhGgzGJuyu5Wl1VPSlTU9VUdU9PcgouuBFEJzePnWeSDWr82KOCsEwEkYC47WHNwdzyF4h7lpkMRF%2Boep%2Bq5y14nrfej3bTU%2BIjpScr75hNqRSdrpf90iurUnOTudLSnVLgl%2F1rpVWpZ2rXSr3RZrtXA79e9l8tvSnYupmu%2BIHvB35QmpdWRKY3PWYh48NWUG755VqlHNRr6Nn%2Fnl3qwVEPvHtKnoXkxf%2FWfnkAyYbQne9uCreemPi1Nzqpoomx6PKD9%2FS6NplG5wJG1kOkDybVMK4g5PNLMPpg4gCmuzdygFAWxHscINQHE5kIu%2FvnSkMFoRHy%2FyPrDiHUEJIOwcxdSP6IAIxjaRm6c3%2FJ2IxunLN0xBbkypO%2FILOCXPnzOejON3NK9kq3jUoTabRDL8ohe0PI9hBxeoRk04PMjsCSDyH5r2T6ySJ0Z2%2FZKQPJ87F7KYeQ0RBK9EGdh3S0pIc08pDGHjr8pETrrcj3G1EYVavNGmOsWmWs3pzhdV6tNSMfKRvJ6yOJ%2B2CqD2a3ENstrMudgpBv34JNH8Kt5XDcg0sK4r27hS7PkQmCzBFklCCTBFlCkHXzfa5cxeX3uXJpGExyZZKr%2BcAk7V26b5K20GQ3PiXPjJvz971DrIuTUhA2KQ9aoh42I0pbjbBOo0bQEDP10A%2B5EHAyh3SXxn43ZUGeP%2FsBsSwI%2BewPhPQITh2ByadB0xdBs0Gj4oOuDWpNH5v669hYHVvT2yjTOAY3OeLkCpINb1edkhfGQq5efwqCHc%2F%2BPHU9HjyeArM5YpvjA%2FkTQVttD26ZjOzdMpkjD5bjRHbkJh394O2EJuLyl2%2BLjcxYvnDT9b%2B4wUbECB7eES5ZpJpL3XbkqznJubDzxjJBflxwqyJcSd3aXGp1Gi%2BuvD6%2F0ImtcE4aPQSVj9wnYLIgU9ufjmfzpZc1pB3Cpjk66TGZBKQZgsVbcPGFemcIrLqoCWMPWZoPbCW8uFSyILV7Z1DiePbh2fs3Pm4sgoY5nPjXwwu867bRth5oche6k6Nrc3RVDqr6cOnlQRLb49nfq%2BNAqLxBqKy3Fyqrds7b6%2BRJqR7URDNsNhjnoWA8aFSqzarvVzivNVoiaCFxBdv5%2Frd%2FAAAA%2F%2F8BAAD%2F%2F%2FmfZdR3BAAA HTTP/1.1 
Host: verdictdisingenuousfruitless.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Cookie: u_pl=16091052; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             192.243.59.13
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: nginx/1.17.6
Date: Thu, 08 Dec 2022 10:17:53 GMT
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 428088053f7c6a4fedbfc8d6ce702daf
Strict-Transport-Security: max-age=0; includeSubdomains


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   7
Md5:    132d6af1b46048b45cf86cdee7991d31
Sha1:   eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
Sha256: ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /wp-content/s/2021/05/miad586pl-360x241.jpg HTTP/1.1 
Host: fbjav.javhardcore.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/nfdm-245/
Cookie: PHPSESSID=hgdriv4v7c0ij7ev8n2gplf2cl

                                        
                                             104.21.40.252
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Thu, 08 Dec 2022 10:17:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: *
CF-Cache-Status: BYPASS
Set-Cookie: view=1; expires=Fri, 09-Dec-2022 10:17:50 GMT; Max-Age=86400
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vRKYZE6ktOlw3%2B44%2FssA75FiV5b0raNKhTg60YNm4ZbJS3jwHQxqxCxUph0xrMhISg3KDEpGYB2bdyZnLRc9%2FuWESKrFBER3of6s4m1T5mJlAUDZkn3%2FJeh2iLwyTjErT9kscmwj8HI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7764c0eaf8cf0b55-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8855)
Size:   28903
Md5:    43127213161565fe39f4f8ea3bfe640b
Sha1:   78100ff3d1208acbb4c50178daf03898bdeee33e
Sha256: 71c38241bcde9d6974e13a2508f319fa84195d866d11308dcc5522c0f85c35f2
                                        
                                            GET /sb/ssp/utility/social-media/whatsapp/js/script.js HTTP/1.1 
Host: cdn.creative-bars1.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://fbjav.javhardcore.net
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             172.64.109.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 08 Dec 2022 10:17:52 GMT
last-modified: Sat, 20 Feb 2021 08:47:14 GMT
etag: W/"6030cc92-1bc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o1UBDysFVLUsjdvOdP7HbAmdCZKzWmEZS2KgXpXl0YkJV2lqcuFipklq8YF2WGn6%2Fd6DDpitKGeAOSs8ZkwCxVxycMfnUxfVmYJmvVDRG1JGLkbkcF4SqF%2BH3abV8nNzJ1HCf5fQQ6hn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7764c0f7ab4a76d8-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   210
Md5:    14c6a15c2c7729c885b33c990f37d2a5
Sha1:   865d9621a3a4c2b446ec535471412bf491a1e60e
Sha256: bd7b0405bc197d2564e68c4366fdbfc06c0711a10231877d33c8c6cdd05fe7f0
                                        
                                            GET /wp-content/s/2021/05/cnd109pl-360x241.jpg HTTP/1.1 
Host: fbjav.javhardcore.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/nfdm-245/
Cookie: PHPSESSID=hgdriv4v7c0ij7ev8n2gplf2cl

                                        
                                             104.21.40.252
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Thu, 08 Dec 2022 10:17:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: *
CF-Cache-Status: BYPASS
Set-Cookie: view=1; expires=Fri, 09-Dec-2022 10:17:50 GMT; Max-Age=86400
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7hQlSa7u8lqF4sljNzgm7egvdGmBDaQo8A4QEvVxBpzo%2BectvQVenNhQIYKX%2F37PyjNhgMRb93tcughppgz6zO07GsX4HNPrWgvSRHYGnXZmz6t%2F8Sq%2Bi5C9ZdELw4fwXfUammJfl3E%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7764c0eb3b4eb515-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8855)
Size:   28900
Md5:    a3ec1e971531c0b5d9cabf81ec2d8357
Sha1:   bfb97b0414bd0cdc7588fa21959a2043714f0d3c
Sha256: 2e12a3ace09fc1f6df18d16fb426f4e640304030ccd19b1a1282e94720c1b9e4
                                        
                                            GET /watch/49788082?wmode=7&page-url=https%3A%2F%2Fimfb.xyz%2Fv%2F40oxr8-lyo8%2F&page-ref=http%3A%2F%2Ffbjav.javhardcore.net%2F&charset=utf-8&site-info=%7B%22owner%22%3A%22199535%22%7D&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A446%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A1469075298609%3Ahid%3A714052353%3Az%3A0%3Ai%3A20221208101754%3Aet%3A1670494675%3Arn%3A794592515%3Arqn%3A1%3Au%3A1670494672985805679%3Aw%3A863x485%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C1%2C0%2C%2C106%2C0%2C1639%2C1639%2C1%2C526%3Aco%3A0%3Ans%3A1670494670516%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670494675%3At%3AVideo%20freedom%20nfdm-245%20(cloned)&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://imfb.xyz
Connection: keep-alive
Referer: https://imfb.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             93.158.134.119
HTTP/2 302 Found
                                            
location: /watch/49788082/1?wmode=7&page-url=https%3A%2F%2Fimfb.xyz%2Fv%2F40oxr8-lyo8%2F&page-ref=http%3A%2F%2Ffbjav.javhardcore.net%2F&charset=utf-8&site-info=%7B%22owner%22%3A%22199535%22%7D&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A446%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A1469075298609%3Ahid%3A714052353%3Az%3A0%3Ai%3A20221208101754%3Aet%3A1670494675%3Arn%3A794592515%3Arqn%3A1%3Au%3A1670494672985805679%3Aw%3A863x485%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C1%2C0%2C%2C106%2C0%2C1639%2C1639%2C1%2C526%3Aco%3A0%3Ans%3A1670494670516%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670494675%3At%3AVideo%20freedom%20nfdm-245%20%28cloned%29&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Thu, 08 Dec 2022 10:17:55 GMT
access-control-allow-origin: https://imfb.xyz
set-cookie: yabs-sid=980032851670494675; Path=/; SameSite=None; Secure i=d6yPcTbUUeGygSEHoEZDiRc85J1r9+ufgO5v9OBQaGh/J+DJJlmMitVvXEhZhkYirV7TT5fdBzA9xh8JS5kA/D8N5AA=; Expires=Sun, 05-Dec-2032 10:17:51 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=518429361670494675; Expires=Fri, 08-Dec-2023 10:17:55 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yuidss=518429361670494675; Expires=Fri, 08-Dec-2023 10:17:55 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure ymex=1702030675.yc.1670494675#1702030675.yrts.1670494675#1702030675.yrtsi.1670494675; Expires=Fri, 08-Dec-2023 10:17:55 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 08-Dec-2022 10:17:55 GMT
last-modified: Thu, 08-Dec-2022 10:17:55 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Size:   419
Md5:    bb9004c73d1306ebf68fa9db7a7f63ff
Sha1:   92e43f118de453051157e55fc8243198085ef02a
Sha256: 1f4561c03d73c238de988eef7839ac5839922c7252543a3d7ef1b705dd2c5439
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.239.38.178
HTTP/2 200 OK
content-type: text/javascript
                                            
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 08 Dec 2022 08:41:08 GMT
expires: Thu, 08 Dec 2022 10:41:08 GMT
cache-control: public, max-age=7200
age: 5807
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            GET /watch/90328877?wmode=7&page-url=http%3A%2F%2Ffbjav.javhardcore.net%2Fnfdm-245%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A1980%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A191967792662%3Ahid%3A1006773606%3Az%3A0%3Ai%3A20221208101754%3Aet%3A1670494675%3Ac%3A1%3Arn%3A555866297%3Arqn%3A1%3Au%3A1670494675800511912%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C1%2C1269%2C0%2C-4%2C0%2C%2C861%2C15%2C%2C%2C%2C2192%3Aco%3A0%3Ans%3A1670494668320%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670494675%3At%3AGauze%20Footjob%20Clinic%20Erogenous%20M%20New%20Sensation&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://fbjav.javhardcore.net
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             93.158.134.119
HTTP/2 302 Found
                                            
location: /watch/90328877/1?wmode=7&page-url=http%3A%2F%2Ffbjav.javhardcore.net%2Fnfdm-245%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A1980%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A191967792662%3Ahid%3A1006773606%3Az%3A0%3Ai%3A20221208101754%3Aet%3A1670494675%3Ac%3A1%3Arn%3A555866297%3Arqn%3A1%3Au%3A1670494675800511912%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C1%2C1269%2C0%2C-4%2C0%2C%2C861%2C15%2C%2C%2C%2C2192%3Aco%3A0%3Ans%3A1670494668320%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670494675%3At%3AGauze%20Footjob%20Clinic%20Erogenous%20M%20New%20Sensation&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Thu, 08 Dec 2022 10:17:55 GMT
access-control-allow-origin: http://fbjav.javhardcore.net
set-cookie: yabs-sid=786033371670494675; Path=/; SameSite=None; Secure i=UwyE4uDeP4E4y7X7NB+sFvJCOsxid00rVXQQE61PdgcyoiSJHYx/7OJMblUgV8+On3wx0BkLXX4aD3jaswzfCpkYZTc=; Expires=Sun, 05-Dec-2032 10:17:53 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=6984995801670494675; Expires=Fri, 08-Dec-2023 10:17:55 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yuidss=6984995801670494675; Expires=Fri, 08-Dec-2023 10:17:55 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure ymex=1702030675.yc.1670494675#1702030675.yrts.1670494675#1702030675.yrtsi.1670494675; Expires=Fri, 08-Dec-2023 10:17:55 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 08-Dec-2022 10:17:55 GMT
last-modified: Thu, 08-Dec-2022 10:17:55 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Size:   407
Md5:    dfa17e0b7b5a6b8cd8cea4b68cc38073
Sha1:   e982716849e7b08950ff7872f1a642caf4b8bdf5
Sha256: 7550b23f0471267d2d529bcc6ba8486d10db1bbd5950ed0d3020f2bf545df5d7
                                        
                                            GET /wp-content/themes/fbjav/favicon.ico HTTP/1.1 
Host: fbjav.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             172.67.153.211
HTTP/2 200 OK
content-type: image/x-icon
                                            
date: Thu, 08 Dec 2022 10:17:55 GMT
last-modified: Sat, 08 Sep 2018 16:07:48 GMT
vary: Accept-Encoding
etag: W/"5b93f3d4-10be"
expires: Wed, 04 Jan 2023 19:23:55 GMT
cache-control: public, max-age=31536000
pragma: public
x-powered-by: W3 Total Cache/2.1.1
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 29170440
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3Xnqv6R0AGXV2LdrHngtGIgWsOmR2V4vCnC5uwv59nJAQ8LhbvikuvRKfKo3qkEIBS4WxIuRZuKfaOe3aBpE%2FfPnzruyKtQcr97flTYaGSb08KSZsmhimPOeqyo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7764c1084f491c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Size:   2902
Md5:    7d660ef1cbe1f3b447dc2274e0bef42e
Sha1:   b09f02e8cd7bb50a43d70800babf060453f7cb5c
Sha256: 65e639400e18d5698997bc0bb7f1a21f86f090f51b027f2c8887270bd5c1d3c4
                                        
                                            GET /wp-content/s/2021/05/hery015pl-360x241.jpg HTTP/1.1 
Host: fbjav.javhardcore.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/nfdm-245/
Cookie: PHPSESSID=hgdriv4v7c0ij7ev8n2gplf2cl

                                        
                                             104.21.40.252
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Thu, 08 Dec 2022 10:17:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: *
CF-Cache-Status: BYPASS
Set-Cookie: view=1; expires=Fri, 09-Dec-2022 10:17:50 GMT; Max-Age=86400
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QkxpYsoQ6zA9eC0FDIGurndoCcE6fO%2FUjBLiXlgVp%2BtFkJ0inSAgYWsHRQfKBN2eN0bZdR1koCSsKKzB4c04ueWh%2Fa7co4GdslGVYGIeq%2B7%2BThAkAAQuJBOOt0eMVS0rPkBCoMvsGtM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7764c0eaf9ab1c0e-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8855)
Size:   28903
Md5:    e31a12d5ee63c717e9ffda1906c40e82
Sha1:   ceff8dc6a002979adaaca518d2de06ffb0d1bde3
Sha256: ab091d653505fa04e1527b6cc0b632926af8758781c532295dce2b3af8b6b915
                                        
                                            GET /wp-content/s/2021/05/miad609pl-360x241.jpg HTTP/1.1 
Host: fbjav.javhardcore.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/nfdm-245/
Cookie: PHPSESSID=hgdriv4v7c0ij7ev8n2gplf2cl

                                        
                                             104.21.40.252
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Thu, 08 Dec 2022 10:17:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: *
CF-Cache-Status: BYPASS
Set-Cookie: view=1; expires=Fri, 09-Dec-2022 10:17:50 GMT; Max-Age=86400
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DnH87lByY5zjBSM%2F%2BbvIbGK4xqbIdCOd1yZRAsdQZcMy%2BYmCUm%2B1SVwxW8qNXQvKmdMM5pPtVB%2BP0gHNZ17ohrnfBn6CgFrGxtRGBHGgsQ70lcYxvVMqbo%2FtbmSMKr9wXhh0iCuxiSY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7764c0eb6cf7b52d-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8855)
Size:   28903
Md5:    d8de9ac2efab8015a1e2adfdfee97d8e
Sha1:   fa0e9af88ad8a8c2a5f49b3d41ae1b993a15e02c
Sha256: d7fbab7c35c2cb13989d5800a9ebced6127893a38817ad08430ff6e9ab6c1046
                                        
                                            GET /v/40oxr8-lyo8/ HTTP/1.1 
Host: imfb.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             104.21.17.7
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Thu, 08 Dec 2022 10:17:51 GMT
last-modified: Sun, 29 Mar 2020 13:32:03 GMT
vary: Accept-Encoding
etag: W/"5e80a353-1bc4"
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wS%2BPjlIcFdNm5RsT7PJ8QRoiuEIE3pvtxIrfB5xA7Yc1ZKM5w8yB2pe2BhUf%2BkYCrXB6itsxxULhjFhZ67dAYj64jQmZPell3wrPRjTEEA5j3MadjKkjehOuLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7764c0ef7de71c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /wp-content/themes/fbjav/assets/css/jasny-bootstrap.min.css HTTP/1.1 
Host: fbjav.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.67.153.211
HTTP/2 200 OK
content-type: text/css
                                            
date: Thu, 08 Dec 2022 10:17:50 GMT
last-modified: Sun, 08 Apr 2018 04:01:36 GMT
vary: Accept-Encoding
etag: W/"5ac99420-36ad"
expires: Wed, 04 Jan 2023 19:23:46 GMT
cache-control: public, max-age=31536000
pragma: public
x-powered-by: W3 Total Cache/2.1.1
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 29170444
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PDZmwFsJRc1JGXCj13%2B%2FUkQ1faJzAxfiTmJxEqdpgMTONttKlOc20vQcw2WaD9mdYMbfsZotWNOL1MozpWZeCmPB0jeRhKtJ7nPCt0CEe93P%2BvwZqkLvp8B6EA4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7764c0eaecff1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /wp-content/themes/fbjav/assets/js/jquery-1.12.4.min.js HTTP/1.1 
Host: fbjav.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.67.153.211
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 08 Dec 2022 10:17:50 GMT
last-modified: Sun, 08 Apr 2018 04:01:48 GMT
vary: Accept-Encoding
etag: W/"5ac9942c-17b9f"
expires: Tue, 06 Jun 2023 22:21:46 GMT
cache-control: public, max-age=31536000
pragma: public
x-powered-by: W3 Total Cache/2.1.1
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 15940563
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S9nysyYev14m0IP%2FZjZrV6vH81oojmJTpb2faTzOa9A%2FEIQaSONs2sKiu9qrZqO4AzRHIF%2FYI5965kh9AtFfZzc8EBlimBDtukbqEsCNiD20SvixS2RLvy0K3Nk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7764c0eaed001c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /wp-content/plugins/wordpress-popular-posts/assets/css/wpp.css HTTP/1.1 
Host: fbjav.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.67.153.211
HTTP/2 200 OK
content-type: text/css
                                            
date: Thu, 08 Dec 2022 10:17:50 GMT
last-modified: Tue, 15 Sep 2020 15:43:55 GMT
vary: Accept-Encoding
etag: W/"5f60e13b-5e5"
expires: Wed, 04 Jan 2023 19:23:46 GMT
cache-control: public, max-age=31536000
pragma: public
x-powered-by: W3 Total Cache/2.1.1
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 29170444
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FK6FzWWHepKvIMqE6koAyhEc1TQD4oUHxq9LxClHxxPz3iJVwHUzPGYT0DEwEQqsTE5c9QrSNv8BQfVIxHBUuUYHqFrP9ixtLBERDFmhY3i60dd31vPLYz2K2Hs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7764c0eafd081c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /ads.js HTTP/1.1 
Host: a.realsrv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fbjav.javhardcore.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.76.9.15
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 08 Dec 2022 10:17:50 GMT
etag: W/"f4fddb85b686269b678e3caf766"
expires: Thu, 08 Dec 2022 12:51:43 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1670503977
server: CDN77-Turbo
x-77-nzt: AblMCQ1kjgn/1QUAAA
x-77-nzt-ray: c0a4cc28513f5f44ceb99163253f111b
x-cache: HIT
x-age: 1493
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: