firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 02 Oct 2022 16:03:11 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6fa2f2520e1a521d933565337b2b81de.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: gH7iDyXA_o7gLspRy1k99JrOBk6JEURY_ZYczyxA-WwfanReAYZsvA==
Age: 1451
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 60e4edea7b5f4d19f3547a3bb2d5df57
3ee076bab4da3416c2c5808f730cb316c28baef7
763e2dadfdd286a51327cd2000ca335e30cd0b9b7267875d22ca33f7556ba200
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763E2DADFDD286A51327CD2000CA335E30CD0B9B7267875D22CA33F7556BA200"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5948
Expires: Sun, 02 Oct 2022 18:06:30 GMT
Date: Sun, 02 Oct 2022 16:27:22 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 02 Oct 2022 03:33:17 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 329cb27be8d7871661ed5a94ecaacb28.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: cpERRxc1Bg1RYk-O99gYcgZperuSioTWRvFt6IlGkRn0IkmnWwlq7w==
age: 46446
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:22 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
javhd.today/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: javhd.today
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 02 Oct 2022 16:27:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 02 Oct 2022 17:27:22 GMT
Location: https://javhd.today/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FmYrrJm8sA1OItFhmE5DPV9yaP6an3p6YyE%2Bgdvfg4RGMaa8Uf9zcJv3GLK1IiEn9FoUJ0g%2FwYX97mTZtFFoWzaZRSvTKIdLJOlWQKYvR%2Fj%2BIaOxjr0uQ4%2FMbqx0Tg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 753ece1a8bb3fab8-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Cache-Control, Alert, Last-Modified, Backoff, Retry-After, Expires, Content-Length, Pragma, ETag
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Sun, 02 Oct 2022 15:32:53 GMT
Expires: Sun, 02 Oct 2022 15:32:59 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 19d5615c4d307c11803beb015d8f6562.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: kdCvdMhPeYO7tH3AvshJ-IaUxMhCiRIVOiFw8moQVrVZitGVrMiAMg==
Age: 3269
ocsp.digicert.com/
200 OK 471 B IP
Hash 4eb30b4a4234809cf7d5f89fa1f6ceeb
797242aab2f13c820050aa9accd11b7b950cd177
ce9d833a0ac321a908184b655d6632c481f758a04a9c936a7c303bb253444146
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4694
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:27:23 GMT
Last-Modified: Sun, 02 Oct 2022 15:09:09 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mRXs7qj1l87AP89a/0i9zA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: +MurwAW/VqHIYo8xdnfkqIzA2/g=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f5e503471cc78b95c0a3e75785615e5f
145b1e4d850c145a78577b5d7d4fadae9658d7a4
61bf2bddece68c7876ab5481c14ed1b1879343e55c86ee013b4f3a8d3353e6b4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5131
Expires: Sun, 02 Oct 2022 17:52:55 GMT
Date: Sun, 02 Oct 2022 16:27:24 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd4280e4-6b15-45b7-9469-d13ba14c37db.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd4280e4-6b15-45b7-9469-d13ba14c37db.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9dddb9d84a16a3004821d89836b83dc3
087521979efd5936416fd7f030779fa5725f0a8f
a6251ac43958031d765b5743d43e14bc04b1e465bed81f757c3609ee6f2bea66
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd4280e4-6b15-45b7-9469-d13ba14c37db.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6871
x-amzn-requestid: e1fdb2ee-c0e7-4a0c-ae26-d968aef00503
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEIOGp2IAMFxSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3ce-24b26a8048ffd84071a2ad57;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:30 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -svKnYBuiMSdWObzJyNah9TDIi6IuPP6VMzEJWmn0zxoZbFmwpzkJw==
via: 1.1 c07670802688417c8b871124c547eb0a.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:48:33 GMT
age: 67131
etag: "087521979efd5936416fd7f030779fa5725f0a8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 206fb65e75dbadf119512f71e0b78402
58ff0bf8ce7528b303d28bab01a80ad721705569
56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 04:41:00 GMT
age: 42384
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb5f775-a073-47ba-b076-ad1c96659b64.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb5f775-a073-47ba-b076-ad1c96659b64.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash edded48f558f739287a040151349ef67
d63b6ba630736d32c364b0e6a369274b2389b7ff
33b4a459df0ba7b36b907ba96d74e08660cc75640c42a5748b97d18ec2e9d533
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb5f775-a073-47ba-b076-ad1c96659b64.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11083
x-amzn-requestid: 53e2c961-bcc0-4977-8648-ee3c1aed9cde
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEHRFWfIAMFhlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3c7-070212d7386d5efa1b4aa8d3;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Z1KmxHJh9QNfg5x0enkqOjbmiqHvg7nlQiMnuDuCRNWQUBFEiKELbw==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:48:36 GMT
etag: "d63b6ba630736d32c364b0e6a369274b2389b7ff"
content-type: image/jpeg
age: 67128
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59054e54-a013-42c5-98a5-abe2b6af4fc6.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59054e54-a013-42c5-98a5-abe2b6af4fc6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 463bdcfbec5426e18ecef83b1c373b71
2e533332ee5c49143e58dad32ee3717a39179532
2c40befd28781482b9be249a792571612d68d7045324083d2c832fa5ec42f04b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59054e54-a013-42c5-98a5-abe2b6af4fc6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4987
x-amzn-requestid: 763edd04-7f8d-42ae-8864-482be3549958
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEHpFs4oAMFbqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3ca-2f7b67e85aa83b69183e62b5;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:26 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 2Zoggf30lA-Kvt5QYa-IdhGePHCNiphR7pfFiOaFvL8ZkWZIaiK4pA==
via: 1.1 f4367b41311e3e9a490d7461b7b85490.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:48:37 GMT
etag: "2e533332ee5c49143e58dad32ee3717a39179532"
content-type: image/jpeg
age: 67127
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91d14136-4e81-4e18-80ca-f688f18110b7.png
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91d14136-4e81-4e18-80ca-f688f18110b7.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91c43e8f8caa27091b10fc006c309e96
377251ce16059a304e1ada7e7bdade2eee86bfdb
81d98f635686a13e149a86149db28f794097b35fc0b7af82beb0199edfc82a38
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91d14136-4e81-4e18-80ca-f688f18110b7.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9073
x-amzn-requestid: 6337e85e-904c-4346-b11d-1cf213eba1a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWDf8EyIIAMF_Vw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b2cc-05c231ba25850508201eda0d;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:36:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 2WCasBR9fFvqGZ61uURK1W4vhzCBO81FTvpSCs6eKH8HBClVUFybpQ==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:48:26 GMT
etag: "377251ce16059a304e1ada7e7bdade2eee86bfdb"
content-type: image/jpeg
age: 67138
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fcf832b-84d6-4938-a540-280bf3205df1.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fcf832b-84d6-4938-a540-280bf3205df1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b11c8ecfed53e302ab48fa5f757513a4
b3cb36455b3cb0a160c705958add6c422a0a48a2
fb66239038dddd134d3c5c7a656c91c57737bc784fabefe15a5ef2981e68e2b0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fcf832b-84d6-4938-a540-280bf3205df1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9012
x-amzn-requestid: 4ea2bfb1-fc99-4777-aa98-0605d4a704ee
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWDpmEBlIAMFj2Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b30a-039358f5691f895941f485fd;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: l0e62S36B9SFUKCi0WA22gXNhfdCLjqD7c3cg_I_Y8-OVKkfwiJFgQ==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 22:25:06 GMT
etag: "b3cb36455b3cb0a160c705958add6c422a0a48a2"
content-type: image/jpeg
age: 64938
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
media.theporndude.com/graphics/tpd-b-24px.png
200 OK 1.2 kB URL HTTP/2 media.theporndude.com/graphics/tpd-b-24px.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 77248d6f52bf1310e4dc9fc85b96cc5f
a01e503d855e3daa75d4bc53dd0e1d86064bf898
65348d63f6d3c243da85d4c8486530c3ed8728d99089d103f45b4f551759fa4c
GET /graphics/tpd-b-24px.png HTTP/1.1
Host: media.theporndude.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:27 GMT
content-type: image/webp
content-length: 1202
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2363
content-disposition: inline; filename="tpd-b-24px.webp"
etag: "5e32eaa6-93b"
last-modified: Thu, 30 Jan 2020 14:39:34 GMT
vary: Accept
cf-cache-status: HIT
age: 2423417
expires: Mon, 02 Oct 2023 16:27:27 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
server: cloudflare
cf-ray: 753ece366a80b4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a2d3925dad8ae1248c7b5d96220bd00a
8b6326da45860d5f480504e23864de0c28523b61
421d30a538dc347afc7fc8eee0fa6502aa65d789eb2353eb9c9f8bd0c5f3b3d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:27:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash 13d90a79b10f12c03e015caf1347873b
60e423c0b4f7818bd8166751a085a92b1a9f5056
57aeaa5ad7d0a6345f54ae995a02d393a0812d95e6c390d245a11739f4f948bc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6440
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:27:27 GMT
Last-Modified: Sun, 02 Oct 2022 14:40:08 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 280
www.googletagmanager.com/gtag/js?id=UA-119594690-5
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-119594690-5
IP
File type ASCII text, with very long lines (2039)
Hash ede885818e18d368b38ae3fdc166eef1
b3b8fa76da73c05754d2c8b96d4bd702d70d1c6e
30aec0c361c3e4d81444b648b396c561bd9089f229ccbf346c49b897764605e0
GET /gtag/js?id=UA-119594690-5 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 16:27:27 GMT
expires: Sun, 02 Oct 2022 16:27:27 GMT
cache-control: private, max-age=900
last-modified: Sun, 02 Oct 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42364
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash b477fd4a2630df5c150f1e8186564276
66a44df59eb23973333a649b383b6bb9362ca71a
42b8b98df0a91b7c22321f40a7b126f8103a42694912c9bd6bdf28b562d695a2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Oct 2022 16:27:27 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 30 Sep 2022 20:27:05 GMT
Expires: Fri, 07 Oct 2022 20:27:04 GMT
Etag: "66a44df59eb23973333a649b383b6bb9362ca71a"
Cache-Control: max-age=445776,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 753ece375e660b39-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a2d3925dad8ae1248c7b5d96220bd00a
8b6326da45860d5f480504e23864de0c28523b61
421d30a538dc347afc7fc8eee0fa6502aa65d789eb2353eb9c9f8bd0c5f3b3d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:27:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
poweredby.jads.co/js/jads.js
301 Moved Permanently 178 B URL HTTP/1.1 poweredby.jads.co/js/jads.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 02 Oct 2022 16:27:27 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
poweredby.jads.co/js/jads2.js
200 OK 1.7 kB URL HTTP/1.1 poweredby.jads.co/js/jads2.js
IP
File type ASCII text, with very long lines (3758), with no line terminators
Hash 558e1b61fc513016183a3812938e79fb
5f72ea61a2aad8f7a0956321d3fd8524db70eddf
a79f8c0aabfc2d1d45e4df2a86ca9172d292b08987f7a9d5c10bd10abf3aef54
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javhd.today/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 02 Oct 2022 16:27:27 GMT
Content-Type: application/x-javascript
Last-Modified: Mon, 11 Jul 2022 00:36:11 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"62cb707b-eae"
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 320dc0f188c5a4b1668cdc4787fb75d9
22a4ac28802596f72198589244d91053c7d18721
32f8b35c2b4876677ea646d4e47b4a7acefcd32c67be5648f45c015deb167807
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "32F8B35C2B4876677EA646D4E47B4A7ACEFCD32C67BE5648F45C015DEB167807"
Last-Modified: Sat, 01 Oct 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18756
Expires: Sun, 02 Oct 2022 21:40:03 GMT
Date: Sun, 02 Oct 2022 16:27:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a8a30866be9ac649b00f750fee299a1
624ef5852c8e6178f1cc95b7a7eb87617b1a19d7
ec263cd4713dbb3c82baa523c0cb6c97164fc6bb1c95b8c012b938662c45855b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC263CD4713DBB3C82BAA523C0CB6C97164FC6BB1C95B8C012B938662C45855B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21049
Expires: Sun, 02 Oct 2022 22:18:16 GMT
Date: Sun, 02 Oct 2022 16:27:27 GMT
Connection: keep-alive
morrowfreezer.com/c8/ae/e9/c8aee90a8f4f1cb58c669a22797e52b5.js
200 OK 13 kB URL HTTP/1.1 morrowfreezer.com/c8/ae/e9/c8aee90a8f4f1cb58c669a22797e52b5.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37109), with no line terminators
Hash a73c62e2a5be1258f26b3f26dc7f386b
4d96d196919211fa52014aae98730c8d7bfdd9e5
07a66128c74b84b205233d8917ebc6ef0ed77d76cfa2b56449f671d3b52158a4
GET /c8/ae/e9/c8aee90a8f4f1cb58c669a22797e52b5.js HTTP/1.1
Host: morrowfreezer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 02 Oct 2022 16:27:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 219d2e616a8440e0ffed392344e0280a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 106a91f2030df7b9067cbcfa9a96a19f
631a41411cef01c6ef263875dba3888d20e42964
7cc07e22f110fd790bc436a4207bb89034b95e39ad0dff8095c37d74de6080ac
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Oct 2022 16:27:27 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Thu, 06 Oct 2022 13:50:54 GMT
ETag: "631a41411cef01c6ef263875dba3888d20e42964"
Last-Modified: Sun, 02 Oct 2022 13:50:55 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2338
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 753ece3a4ef7b517-OSL
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 106a91f2030df7b9067cbcfa9a96a19f
631a41411cef01c6ef263875dba3888d20e42964
7cc07e22f110fd790bc436a4207bb89034b95e39ad0dff8095c37d74de6080ac
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Oct 2022 16:27:27 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Thu, 06 Oct 2022 13:50:54 GMT
ETag: "631a41411cef01c6ef263875dba3888d20e42964"
Last-Modified: Sun, 02 Oct 2022 13:50:55 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2338
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 753ece3a5ca2b515-OSL
morrowfreezer.com/32/2c/ae/322cae0b6fec97fcf8bce24feea77ecf.js
200 OK 20 kB URL HTTP/1.1 morrowfreezer.com/32/2c/ae/322cae0b6fec97fcf8bce24feea77ecf.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (59377), with no line terminators
Hash c1e4346c6322d3adeaa4b78abdcbf4cd
deb9db81ad2705976006edca9933a1c39729a3ee
4e4c2d2f586cb1faccb6b188111caafdb5b39c3b81ff20c845b28ead2c289031
GET /32/2c/ae/322cae0b6fec97fcf8bce24feea77ecf.js HTTP/1.1
Host: morrowfreezer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 02 Oct 2022 16:27:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 29cc1298428fa48b6f3d9ab5da45d06a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 73b4a01fa28b7818979653c9b4f3827c
f1281a68d8e452f5d16d561ed601b9b2166dcad2
d22c5e2711704d4e1a30d9fbb9375c0322948fdd4df12d838dfec2c2c3a1df0d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "D22C5E2711704D4E1A30D9FBB9375C0322948FDD4DF12D838DFEC2C2C3A1DF0D"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3575
Expires: Sun, 02 Oct 2022 17:27:02 GMT
Date: Sun, 02 Oct 2022 16:27:27 GMT
Connection: keep-alive
cdn1.flyfuk.com/pics-1/30-09/g04BYQ.jpg
200 OK 29 kB URL HTTP/2 cdn1.flyfuk.com/pics-1/30-09/g04BYQ.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 655e50beeb3b8cdb9a4fe208c4768340
36433359ada0b4e2c3c9d8424c4a6c7bb6c440e0
71d43f05152e853e584ecd5ff4fe06225b08afb2e70252d341225339241daa57
GET /pics-1/30-09/g04BYQ.jpg HTTP/1.1
Host: cdn1.flyfuk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:21 GMT
content-type: image/jpeg
content-length: 28781
last-modified: Fri, 30 Sep 2022 15:46:44 GMT
etag: "63370f64-706d"
expires: Tue, 01 Nov 2022 16:27:21 GMT
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn1.flyfuk.com/pics-1/23-09/35rB11.jpg
200 OK 145 kB URL HTTP/2 cdn1.flyfuk.com/pics-1/23-09/35rB11.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x535, components 3\012- data
Size 145 kB (145181 bytes)
Hash 0c05dbae5e247f61c2420d8cd8e54a4d
e3dcbcab834196b1b69e6cd8f21cfa000bd62586
1b4c2ffc193f86dbe1ae53120cff761c1ed8f1fb01d6850ffc3bf116886f1885
GET /pics-1/23-09/35rB11.jpg HTTP/1.1
Host: cdn1.flyfuk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:21 GMT
content-type: image/jpeg
content-length: 145181
last-modified: Fri, 23 Sep 2022 03:23:21 GMT
etag: "632d26a9-2371d"
expires: Tue, 01 Nov 2022 16:27:21 GMT
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn1.flyfuk.com/pics-1/24-09/O2Wdmy.jpg
200 OK 156 kB URL HTTP/2 cdn1.flyfuk.com/pics-1/24-09/O2Wdmy.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x535, components 3\012- data
Size 156 kB (156214 bytes)
Hash 2ce20b502a0066b8754e81df0a9df426
5a9c867577fa39b51560f54f1f275fdce49b55c7
5b166b9e736429c88f50b5067a64649f31f42f9d11b90fff7fa344fcfb85465e
GET /pics-1/24-09/O2Wdmy.jpg HTTP/1.1
Host: cdn1.flyfuk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:21 GMT
content-type: image/jpeg
content-length: 156214
last-modified: Sat, 24 Sep 2022 15:59:43 GMT
etag: "632f296f-26236"
expires: Tue, 01 Nov 2022 16:27:21 GMT
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn1.flyfuk.com/pics-1/26-09/2aqv1W.jpg
200 OK 130 kB URL HTTP/2 cdn1.flyfuk.com/pics-1/26-09/2aqv1W.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x535, components 3\012- data
Size 130 kB (129579 bytes)
Hash 2f33ae8ee738fff956495d1de3eaf5e7
a712762894ec611e402462be1c16b7803a9fbf67
7fbb73b4a696b0c203983b482a7a48b63f149b16cb97054bd5a100824f4f4daf
GET /pics-1/26-09/2aqv1W.jpg HTTP/1.1
Host: cdn1.flyfuk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:21 GMT
content-type: image/jpeg
content-length: 129579
last-modified: Mon, 26 Sep 2022 02:36:48 GMT
etag: "63311040-1fa2b"
expires: Tue, 01 Nov 2022 16:27:21 GMT
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn1.flyfuk.com/pics-1/27-09/65qg10.jpg
200 OK 151 kB URL HTTP/2 cdn1.flyfuk.com/pics-1/27-09/65qg10.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x535, components 3\012- data
Size 151 kB (151023 bytes)
Hash d30b05626e130d81b6217761ff0e61c3
62ed39593f0826d24cd9895ee12b5da7e1f62175
ccca6c6bd2874dbc383c41155d2c82ca09f7aca11e11c37c94e71cb7519c52af
GET /pics-1/27-09/65qg10.jpg HTTP/1.1
Host: cdn1.flyfuk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:21 GMT
content-type: image/jpeg
content-length: 151023
last-modified: Tue, 27 Sep 2022 03:20:28 GMT
etag: "63326bfc-24def"
expires: Tue, 01 Nov 2022 16:27:21 GMT
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 606c558669146ba6d99d416b814455a8
9c49aea5039dcfdf01abba48f538350cf87f05ab
83b80756cb4f138174ba1020c487b4d10b6153bc994aba5b2d2ada322892da55
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 16:27:28 GMT
Last-Modified: Sun, 02 Oct 2022 14:49:46 GMT
Server: ECS (nyb/1D18)
X-Cache: Miss from cloudfront
Via: 1.1 04bb33465149b34afca4988622dca584.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: e0gZwPKrx-iuAxnw-0_DIYdqFBXTYJ7aas1yBpu71KKFTgflb8hEeg==
Age: 5862
cdn1.flyfuk.com/pics-1/27-09/eKOmAb.jpg
200 OK 117 kB URL HTTP/2 cdn1.flyfuk.com/pics-1/27-09/eKOmAb.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x535, components 3\012- data
Size 117 kB (117418 bytes)
Hash 3e7d1baa837af337f43fe92fe9b21c4b
686d714d369a6cae5aeee468af114d17ce17b9d7
9c13279ab227b982746687d1773f0bab9458f7988201b9e711ce97b2dd6dcb99
GET /pics-1/27-09/eKOmAb.jpg HTTP/1.1
Host: cdn1.flyfuk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:21 GMT
content-type: image/jpeg
content-length: 117418
last-modified: Tue, 27 Sep 2022 03:20:28 GMT
etag: "63326bfc-1caaa"
expires: Tue, 01 Nov 2022 16:27:21 GMT
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn1.flyfuk.com/pics-1/29-09/E2601x.jpg
200 OK 129 kB URL HTTP/2 cdn1.flyfuk.com/pics-1/29-09/E2601x.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x535, components 3\012- data
Size 129 kB (128730 bytes)
Hash 35b76f7b60214e39b02a077e54ad54c8
f00757e7f4453aecb03d3c4a3ab7c2d0e599b8a4
3fa84e63f706f08e416d11938cc07d678a0b23949fb11dfd5fca5d351dd7903e
GET /pics-1/29-09/E2601x.jpg HTTP/1.1
Host: cdn1.flyfuk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:21 GMT
content-type: image/jpeg
content-length: 128730
last-modified: Thu, 29 Sep 2022 02:06:30 GMT
etag: "6334fda6-1f6da"
expires: Tue, 01 Nov 2022 16:27:21 GMT
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn1.flyfuk.com/pics-1/21-09/qDJrge.jpg
200 OK 160 kB URL HTTP/2 cdn1.flyfuk.com/pics-1/21-09/qDJrge.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x535, components 3\012- data
Size 160 kB (159644 bytes)
Hash 8829ebd25287ffce5b1fa183bc3d26a3
2d82714feddfc55d3bf4933341118e5cffc5cef8
9794756620887c3e89cc70501d5fb4a0e73e13d2c48cda692a0a8b77b1403edf
GET /pics-1/21-09/qDJrge.jpg HTTP/1.1
Host: cdn1.flyfuk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:21 GMT
content-type: image/jpeg
content-length: 159644
last-modified: Wed, 21 Sep 2022 03:34:44 GMT
etag: "632a8654-26f9c"
expires: Tue, 01 Nov 2022 16:27:21 GMT
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn1.flyfuk.com/pics-1/30-09/458mKE.jpg
200 OK 130 kB URL HTTP/2 cdn1.flyfuk.com/pics-1/30-09/458mKE.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 840x472, components 3\012- data
Size 130 kB (129577 bytes)
Hash 2870dde60bc4491f14870dc956232c43
5102dad35d85822c0f83a622ac0d0fea9536ac64
55658e6733f5d8ed8de47141315a4d24a723487a84796f6e212f25a5261b642c
GET /pics-1/30-09/458mKE.jpg HTTP/1.1
Host: cdn1.flyfuk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:21 GMT
content-type: image/jpeg
content-length: 129577
last-modified: Fri, 30 Sep 2022 15:46:43 GMT
etag: "63370f63-1fa29"
expires: Tue, 01 Nov 2022 16:27:21 GMT
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn1.flyfuk.com/pics-1/30-09/1B80yJ.jpg
200 OK 155 kB URL HTTP/2 cdn1.flyfuk.com/pics-1/30-09/1B80yJ.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 840x472, components 3\012- data
Size 155 kB (155200 bytes)
Hash 9a18cf92838341c9a0385609fdab8f38
17cdbcfb40c075d5ff20e27403b0c4dc15e5bc18
b493c12fe684a56d22ad42b3af89d2c7c41259f182446172b3b59c00782da20f
GET /pics-1/30-09/1B80yJ.jpg HTTP/1.1
Host: cdn1.flyfuk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:21 GMT
content-type: image/jpeg
content-length: 155200
last-modified: Fri, 30 Sep 2022 15:46:43 GMT
etag: "63370f63-25e40"
expires: Tue, 01 Nov 2022 16:27:21 GMT
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn1.flyfuk.com/pics-1/30-09/D2Oe3k.jpg
200 OK 32 kB URL HTTP/2 cdn1.flyfuk.com/pics-1/30-09/D2Oe3k.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 35e008bba9578ad8aaddff8917b7f20a
c7d661c057949dfcee10a7b6c776f745de4417a8
c55289ea8a5409b22735733abd3a0b61e9a995aafcfa04fc0e426360e4df2047
GET /pics-1/30-09/D2Oe3k.jpg HTTP/1.1
Host: cdn1.flyfuk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:21 GMT
content-type: image/jpeg
content-length: 31708
last-modified: Fri, 30 Sep 2022 15:46:44 GMT
etag: "63370f64-7bdc"
expires: Tue, 01 Nov 2022 16:27:21 GMT
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn1.flyfuk.com/pics-1/30-09/akqPyp.jpg
200 OK 53 kB URL HTTP/2 cdn1.flyfuk.com/pics-1/30-09/akqPyp.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 1fa39ceecd923a8a89c694359d3915df
3d133d49a304c384b3c54bbf4d9daca33d4fcb6f
d9731e992d57772d69b837cb6dee47af06efaaffceb897779d0417560274d900
GET /pics-1/30-09/akqPyp.jpg HTTP/1.1
Host: cdn1.flyfuk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:21 GMT
content-type: image/jpeg
content-length: 52842
last-modified: Fri, 30 Sep 2022 15:46:44 GMT
etag: "63370f64-ce6a"
expires: Tue, 01 Nov 2022 16:27:21 GMT
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 606c558669146ba6d99d416b814455a8
9c49aea5039dcfdf01abba48f538350cf87f05ab
83b80756cb4f138174ba1020c487b4d10b6153bc994aba5b2d2ada322892da55
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 16:27:28 GMT
Last-Modified: Sun, 02 Oct 2022 14:59:14 GMT
Server: ECS (nyb/1D19)
X-Cache: Miss from cloudfront
Via: 1.1 6fa2f2520e1a521d933565337b2b81de.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: 2B5tH5PZxTtpDMncmGz6rq-wDafpU_t4NsUuy05P7nUandDY9YaHhA==
Age: 5294
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 558d0c338434df6ebaac6910154efc50
ff2225e96a03f69aaeaa4b024698614c03539579
07a850f1d4dc2d4c6680405912cef78ad4cccafc8be4ba2a367379676085c71d
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javhd.today
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://javhd.today
access-control-allow-credentials: true
set-cookie: uid_id2=978113a1-502b-4a9c-8ef2-29227c10beb9:3:1; expires=Wed, 29 Sep 2032 16:27:28 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 73b4a01fa28b7818979653c9b4f3827c
f1281a68d8e452f5d16d561ed601b9b2166dcad2
d22c5e2711704d4e1a30d9fbb9375c0322948fdd4df12d838dfec2c2c3a1df0d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "D22C5E2711704D4E1A30D9FBB9375C0322948FDD4DF12D838DFEC2C2C3A1DF0D"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3574
Expires: Sun, 02 Oct 2022 17:27:02 GMT
Date: Sun, 02 Oct 2022 16:27:28 GMT
Connection: keep-alive
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash e2b215e73118e9609263202977b4d6ab
556c8f23f19d3137c45ac73463fd406249e99a1f
6937a6babe04fb73d0ba50656922ab1fc9c0c2393a0d81249c9f6268e696552f
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javhd.today
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://javhd.today
access-control-allow-credentials: true
set-cookie: uid_id2=f91bd263-b2b1-4645-97b0-fc61d055f78e:2:1; expires=Wed, 29 Sep 2032 16:27:28 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6c293cc90e2d4290a171292dcd80c279
0933e31e029e5e01b597ac13cc445d0e1a19ff9a
0d187eb3d23ba72cedc24c9298aa81595c766228b7081f24d2074fbf6bb2d0eb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0D187EB3D23BA72CEDC24C9298AA81595C766228B7081F24D2074FBF6BB2D0EB"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17885
Expires: Sun, 02 Oct 2022 21:25:33 GMT
Date: Sun, 02 Oct 2022 16:27:28 GMT
Connection: keep-alive
faultspiano.com/pixel/purst?dl=0&th=0&sc=0&rs=5594&rd=5594&fd=1044&bv=22.8.v.1&tmpl=70
200 OK 0 B URL HTTP/1.1 faultspiano.com/pixel/purst?dl=0&th=0&sc=0&rs=5594&rd=5594&fd=1044&bv=22.8.v.1&tmpl=70
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/purst?dl=0&th=0&sc=0&rs=5594&rd=5594&fd=1044&bv=22.8.v.1&tmpl=70 HTTP/1.1
Host: faultspiano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 02 Oct 2022 16:27:28 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
pics.dmm.co.jp/digital/video/homa00012/homa00012pl.jpg
200 OK 182 kB URL HTTP/2 pics.dmm.co.jp/digital/video/homa00012/homa00012pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x535, components 3\012- data
Size 182 kB (182274 bytes)
Hash 168c901ecb1ea8912f648a0c61c5d79d
1c78db0e2ace6d99a8b781a6e3d637d0e3ef14ff
7fd7b0ad66889b5c60c8e04479ea4f6b223618abd273ff68007a97ae57574611
GET /digital/video/homa00012/homa00012pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:27 GMT
content-type: image/jpeg
content-length: 182274
last-modified: Tue, 21 Feb 2017 07:47:01 GMT
etag: "58abf075-2c802"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u+8NjiwqJQLJAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/digital/video/juy00172/juy00172pl.jpg
200 OK 168 kB URL HTTP/2 pics.dmm.co.jp/digital/video/juy00172/juy00172pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 168 kB (167687 bytes)
Hash cf05c6d1a5a9ab5db02b95b6b29baf2a
886a1d536381da7dc90b82f5f37770ddda05c32b
2db74defbd400def7e3f7f5a76aeebfd6d833780814d99fe7e8af19076dd6183
GET /digital/video/juy00172/juy00172pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:27 GMT
content-type: image/jpeg
content-length: 167687
last-modified: Tue, 25 Apr 2017 00:21:41 GMT
etag: "58fe9695-28f07"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u+8NjiwqJQLKAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
akmxts.com/get/1872197?zoneid=1872197&pid=_cb-1872197_0&jp=_cl8fvjootyvxwob4hvm19h&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=1516474500940987
200 OK 1.8 kB URL HTTP/2 akmxts.com/get/1872197?zoneid=1872197&pid=_cb-1872197_0&jp=_cl8fvjootyvxwob4hvm19h&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=1516474500940987
IP
Hash 71bf39b26d2f538a0b3de04977c45e95
218e2f6d9c42a3d868f2b1690a2bd6ae9825cb9a
5adbd229a3ae7c326de0ff6422611c302bed7a8a481e44f4d911df479312dfd2
GET /get/1872197?zoneid=1872197&pid=_cb-1872197_0&jp=_cl8fvjootyvxwob4hvm19h&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=1516474500940987 HTTP/1.1
Host: akmxts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2210021127320552695b914982b27999bf20; Path=/; Expires=Mon, 02 Oct 2023 16:27:28 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
t.dtscout.com/i/?l=https%3A%2F%2Fjavhd.today%2F&j=
200 OK 2.1 kB URL HTTP/1.1 t.dtscout.com/i/?l=https%3A%2F%2Fjavhd.today%2F&j=
IP
File type ASCII text, with very long lines (2077)
Hash 51bd741af3fcc4984d1a753eebfa1141
534664acf69cbbb5c9b97c96b63dd37bdc580da2
3e9c8e5dcf3cbff9e1b7211551a31fe388f1b8e607fd78a0a34855be65da721c
GET /i/?l=https%3A%2F%2Fjavhd.today%2F&j= HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Date: Sun, 02 Oct 2022 16:27:29 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: close
X-S: ger1
Set-Cookie: m=1; Domain=dtscout.com; Expires=Sun, 02-Oct-2022 17:50:49 GMT; Max-Age=5000; Path=/; SameSite=None; Secure
oa=1; Domain=dtscout.com; Expires=Sun, 02-Oct-2022 20:27:29 GMT; Max-Age=14400; Path=/; SameSite=None; Secure
df=1664728049; Domain=dtscout.com; Expires=Tue, 10-Jan-2023 16:27:29 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure
X-T: 0.51
Expires: Sun, 02 Oct 2022 16:27:28 GMT
Cache-Control: no-cache
akmxts.com/get/1872197?zoneid=1872197&pid=_cb-1872197_6&jp=_cl55ci8qjn0pm9hqiim4n0&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=953524547501074
200 OK 1.3 kB URL HTTP/2 akmxts.com/get/1872197?zoneid=1872197&pid=_cb-1872197_6&jp=_cl55ci8qjn0pm9hqiim4n0&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=953524547501074
IP
Hash 8df356d349839e80cdf626d6e8bda53e
69052ffd47b529a737e85592c6a610c2256ce9c2
ad7c134c6d88398f3579ada9a544711e23b0fb3365302d946e2059c372b90b90
GET /get/1872197?zoneid=1872197&pid=_cb-1872197_6&jp=_cl55ci8qjn0pm9hqiim4n0&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=953524547501074 HTTP/1.1
Host: akmxts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Cookie: UID=2210021127b1c4b9b529044085885ee4fd4f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
pics.dmm.co.jp/digital/video/pgd00954/pgd00954pl.jpg
200 OK 160 kB URL HTTP/2 pics.dmm.co.jp/digital/video/pgd00954/pgd00954pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 160 kB (159804 bytes)
Hash 6fa59b9259cbb39bb7e9721aa3c1dfb9
04dc49d659234ba226bc27e2f4c499b05ebebacc
b2d79894eafa68f258885be2e4ded8dde09055a1308ea8b24590b2e2b32a5037
GET /digital/video/pgd00954/pgd00954pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:27 GMT
content-type: image/jpeg
content-length: 159804
last-modified: Fri, 07 Apr 2017 00:20:10 GMT
etag: "58e6db3a-2703c"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u+8NjiwqJQLLAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/118onez350/118onez350pl.jpg
200 OK 178 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/118onez350/118onez350pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x534, components 3\012- data
Size 178 kB (177887 bytes)
Hash 4c306440a2947330eb15ab752a5b6e42
9410c84b2dfa4650d429759d6749c37f774ecf8c
754d90a60e6c46fde78fa278b6301fd35082326d94dd38ab9f982f22cb656fba
GET /mono/movie/adult/118onez350/118onez350pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:27 GMT
content-type: image/jpeg
content-length: 177887
last-modified: Tue, 13 Sep 2022 06:40:53 GMT
etag: "632025f5-2b6df"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u+8NjiwqJQLMAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
2qj7mq3w4uxe.com/solid.gif?z=1881613&abvar=0
200 OK 43 B URL HTTP/2 2qj7mq3w4uxe.com/solid.gif?z=1881613&abvar=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1881613&abvar=0 HTTP/1.1
Host: 2qj7mq3w4uxe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javhd.today
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 230b1302fb1bd49f9b79a53cdcdd3ad5
cecda5313aaab70ceefe8e29d8589b0afb6f95af
b0418f01054dbf7131f276a7bf61e2c22b61d034becffd6e758346032b98e7d2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4487
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:27:29 GMT
Last-Modified: Sun, 02 Oct 2022 15:12:42 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 278
faultspiano.com/pixel/pure
204 No Content 0 B URL HTTP/1.1 faultspiano.com/pixel/pure
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pixel/pure HTTP/1.1
Host: faultspiano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://javhd.today/
Origin: https://javhd.today
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.17.6
Date: Sun, 02 Oct 2022 16:27:29 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
Content-Type: text/plain; charset=utf-8
Content-Length: 0
cdn.bncloudfl.com/bn/2bf/d00/9b8/2bfd009b8687d19052c37079e60511614eab924c.gif
200 OK 44 kB URL HTTP/2 cdn.bncloudfl.com/bn/2bf/d00/9b8/2bfd009b8687d19052c37079e60511614eab924c.gif
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 981f62658a8a6a136154d1e8626d4b4d
85404ae09c2c9967f4f8feb7862ce5496d42fa64
3e7224a48b51428e4f8cec250278817d3e58977f51efc3b0f96633cbf35a6fb3
GET /bn/2bf/d00/9b8/2bfd009b8687d19052c37079e60511614eab924c.gif HTTP/1.1
Host: cdn.bncloudfl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: image/webp
content-length: 43700
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=432000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=gif, origSize=56495
content-disposition: inline; filename="2bfd009b8687d19052c37079e60511614eab924c.webp"
etag: f74ed52d8592a3fac2e6a76f5a92b636
expires: Mon, 03 Oct 2022 03:16:07 GMT
last-modified: Sun, 25 Sep 2022 14:52:20 GMT
vary: Accept
x-openstack-request-id: tx998cbc4bb2584827995af-0063306f09
x-proxy-cache: HIT
x-timestamp: 1664117539.78309
x-trans-id: tx998cbc4bb2584827995af-0063306f09
cf-cache-status: HIT
age: 133882
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 753ece44ed38b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2qj7mq3w4uxe.com/solid.gif?z=1881613&abvar=0
200 OK 43 B URL HTTP/2 2qj7mq3w4uxe.com/solid.gif?z=1881613&abvar=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1881613&abvar=0 HTTP/1.1
Host: 2qj7mq3w4uxe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javhd.today
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
faultspiano.com/pixel/pure
200 OK 0 B URL HTTP/1.1 faultspiano.com/pixel/pure
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pixel/pure HTTP/1.1
Host: faultspiano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 72
Origin: https://javhd.today
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 02 Oct 2022 16:27:29 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
2qj7mq3w4uxe.com/solid.gif?z=1881613&abvar=0
200 OK 43 B URL HTTP/2 2qj7mq3w4uxe.com/solid.gif?z=1881613&abvar=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1881613&abvar=0 HTTP/1.1
Host: 2qj7mq3w4uxe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javhd.today
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 230b1302fb1bd49f9b79a53cdcdd3ad5
cecda5313aaab70ceefe8e29d8589b0afb6f95af
b0418f01054dbf7131f276a7bf61e2c22b61d034becffd6e758346032b98e7d2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4487
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:27:29 GMT
Last-Modified: Sun, 02 Oct 2022 15:12:42 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 278
2qj7mq3w4uxe.com/solid.gif?z=1881613&abvar=0
200 OK 43 B URL HTTP/2 2qj7mq3w4uxe.com/solid.gif?z=1881613&abvar=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1881613&abvar=0 HTTP/1.1
Host: 2qj7mq3w4uxe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javhd.today
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
2qj7mq3w4uxe.com/solid.gif?z=1881613&abvar=0
200 OK 43 B URL HTTP/2 2qj7mq3w4uxe.com/solid.gif?z=1881613&abvar=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1881613&abvar=0 HTTP/1.1
Host: 2qj7mq3w4uxe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javhd.today
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
2qj7mq3w4uxe.com/solid.gif?z=1881613&abvar=0
200 OK 43 B URL HTTP/2 2qj7mq3w4uxe.com/solid.gif?z=1881613&abvar=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1881613&abvar=0 HTTP/1.1
Host: 2qj7mq3w4uxe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javhd.today
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
2qj7mq3w4uxe.com/solid.gif?z=1881613&abvar=0
200 OK 43 B URL HTTP/2 2qj7mq3w4uxe.com/solid.gif?z=1881613&abvar=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1881613&abvar=0 HTTP/1.1
Host: 2qj7mq3w4uxe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javhd.today
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
2qj7mq3w4uxe.com/solid.gif?z=1881613&abvar=0
200 OK 43 B URL HTTP/2 2qj7mq3w4uxe.com/solid.gif?z=1881613&abvar=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1881613&abvar=0 HTTP/1.1
Host: 2qj7mq3w4uxe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javhd.today
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
akmxts.com/chicken.gif?z=1872197&pid=_cb-1872197_6&pb=b8145f1e3480787b26dd69778f93d12a1664735249&psp=8saFtgjgS2vTt24u15KDwRYKf_xaSWPUzJMSNiueI-4MPPqUarNGpdkLSxulKUJUsEiCV5M7RDaIg-pKBTg8yD8qePhwMRuEHzlFXpeA5PDLi-uTv1mHRMa1OLDQoDaJqIq2q5lDw0564FTjILVnfuHPyElREiBj5vOgX24Nm3pU-rgs4Q5AMjFTIl-Txu50TuM6g841_cm_3lmqk6q2INWC4cQKoAiCJ8cmZ3RotxhD2GXfb_lBa1G2KKyC4mrgyaYEcewh3KHunax94qeuqNvd5tO-sh9tzlqYlVolWD5M_oHqBhJprRc0K62R_gOgdCSUNDFeyfHe9kY69SBZqutsJXGtO82LG_BO5Jn1m86tDyeSJco84DvAbspUG4xaomNv921j_u_RWj9Rf_uq6z7KtXVJUeHeFik7BTi8dV2VmXaeBxpoGFw74Csa_esgroQmIrgXuZjNlROGnBYjvH7-ia1Ge5_uowKqK-Ss3UwnYqNFv6Qj4inKXZRBpH-nevit1fviaMFr6CQy-ZAWuWldFvcaSNWNNYEKwLrSsYgOs4VWLdppy3IqSAJKRA3UR3g9iXjIsFA5gIJk4KVQMgfFqFrgg0BzeVd7k3FIXxM0cG_6zTsbhdS8TLtwitf2Empqb2b6scgljoVBNzXvS3_qli2ro7ZKHLaRoK9J8xo57xrfbRP6U_zBabl6IAxnPbuUt5OGCwxFWSA-p6HzQGY1lOVkYhhRwSqk0xIxAXoxetDGY8Vv-sOooSPdBcxWGVdjtXT6Fnxu0lHE-79zmcmIlTXmPkmE9pZ214JDhjKLW59GUd0qQkXA7EjkmaoJ_3H-cb5CUH4qnFCNl5mxF0AHJMb8o8BefBtti6LuTjg8UwZX0LQL2f-lPNOLDGkJOWXZbBIMPiGwL1e-udsQlRErZkAX4He6XJFVVpBa&abvar=0&os=0
200 OK 43 B URL HTTP/2 akmxts.com/chicken.gif?z=1872197&pid=_cb-1872197_6&pb=b8145f1e3480787b26dd69778f93d12a1664735249&psp=8saFtgjgS2vTt24u15KDwRYKf_xaSWPUzJMSNiueI-4MPPqUarNGpdkLSxulKUJUsEiCV5M7RDaIg-pKBTg8yD8qePhwMRuEHzlFXpeA5PDLi-uTv1mHRMa1OLDQoDaJqIq2q5lDw0564FTjILVnfuHPyElREiBj5vOgX24Nm3pU-rgs4Q5AMjFTIl-Txu50TuM6g841_cm_3lmqk6q2INWC4cQKoAiCJ8cmZ3RotxhD2GXfb_lBa1G2KKyC4mrgyaYEcewh3KHunax94qeuqNvd5tO-sh9tzlqYlVolWD5M_oHqBhJprRc0K62R_gOgdCSUNDFeyfHe9kY69SBZqutsJXGtO82LG_BO5Jn1m86tDyeSJco84DvAbspUG4xaomNv921j_u_RWj9Rf_uq6z7KtXVJUeHeFik7BTi8dV2VmXaeBxpoGFw74Csa_esgroQmIrgXuZjNlROGnBYjvH7-ia1Ge5_uowKqK-Ss3UwnYqNFv6Qj4inKXZRBpH-nevit1fviaMFr6CQy-ZAWuWldFvcaSNWNNYEKwLrSsYgOs4VWLdppy3IqSAJKRA3UR3g9iXjIsFA5gIJk4KVQMgfFqFrgg0BzeVd7k3FIXxM0cG_6zTsbhdS8TLtwitf2Empqb2b6scgljoVBNzXvS3_qli2ro7ZKHLaRoK9J8xo57xrfbRP6U_zBabl6IAxnPbuUt5OGCwxFWSA-p6HzQGY1lOVkYhhRwSqk0xIxAXoxetDGY8Vv-sOooSPdBcxWGVdjtXT6Fnxu0lHE-79zmcmIlTXmPkmE9pZ214JDhjKLW59GUd0qQkXA7EjkmaoJ_3H-cb5CUH4qnFCNl5mxF0AHJMb8o8BefBtti6LuTjg8UwZX0LQL2f-lPNOLDGkJOWXZbBIMPiGwL1e-udsQlRErZkAX4He6XJFVVpBa&abvar=0&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1872197&pid=_cb-1872197_6&pb=b8145f1e3480787b26dd69778f93d12a1664735249&psp=8saFtgjgS2vTt24u15KDwRYKf_xaSWPUzJMSNiueI-4MPPqUarNGpdkLSxulKUJUsEiCV5M7RDaIg-pKBTg8yD8qePhwMRuEHzlFXpeA5PDLi-uTv1mHRMa1OLDQoDaJqIq2q5lDw0564FTjILVnfuHPyElREiBj5vOgX24Nm3pU-rgs4Q5AMjFTIl-Txu50TuM6g841_cm_3lmqk6q2INWC4cQKoAiCJ8cmZ3RotxhD2GXfb_lBa1G2KKyC4mrgyaYEcewh3KHunax94qeuqNvd5tO-sh9tzlqYlVolWD5M_oHqBhJprRc0K62R_gOgdCSUNDFeyfHe9kY69SBZqutsJXGtO82LG_BO5Jn1m86tDyeSJco84DvAbspUG4xaomNv921j_u_RWj9Rf_uq6z7KtXVJUeHeFik7BTi8dV2VmXaeBxpoGFw74Csa_esgroQmIrgXuZjNlROGnBYjvH7-ia1Ge5_uowKqK-Ss3UwnYqNFv6Qj4inKXZRBpH-nevit1fviaMFr6CQy-ZAWuWldFvcaSNWNNYEKwLrSsYgOs4VWLdppy3IqSAJKRA3UR3g9iXjIsFA5gIJk4KVQMgfFqFrgg0BzeVd7k3FIXxM0cG_6zTsbhdS8TLtwitf2Empqb2b6scgljoVBNzXvS3_qli2ro7ZKHLaRoK9J8xo57xrfbRP6U_zBabl6IAxnPbuUt5OGCwxFWSA-p6HzQGY1lOVkYhhRwSqk0xIxAXoxetDGY8Vv-sOooSPdBcxWGVdjtXT6Fnxu0lHE-79zmcmIlTXmPkmE9pZ214JDhjKLW59GUd0qQkXA7EjkmaoJ_3H-cb5CUH4qnFCNl5mxF0AHJMb8o8BefBtti6LuTjg8UwZX0LQL2f-lPNOLDGkJOWXZbBIMPiGwL1e-udsQlRErZkAX4He6XJFVVpBa&abvar=0&os=0 HTTP/1.1
Host: akmxts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2210021127b1c4b9b529044085885ee4fd4f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OAICAP=AC4KjgAAAAAAAAAB; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OAIBLOCK=AC4KjgAAAABjORrQ; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OACICAP=ACIvfwAAAAAAAAAB; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OACIBLOCK=ACIvfwAAAABjORrQ; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Mon, 03 Oct 2022 16:27:29 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
akmxts.com/chicken.gif?z=1872197&pid=_cb-1872197_1&pb=19c2b1bcb8e6415aade478dece9b66171664735248&psp=Ifw1K1WDa--ovOd7UUB7cGj836p4VkablvZ5WfARmfNR0b8TwrFvSQksZJms2VW6xG8kpFkP-ez45DZoMioQBUXEAgKwTCDpxknkWQC9x8ss6joW6AbM1Kh2T0V8QFzCPbUvcKnivrj--VA-CA1JkzMDV4fqAANZTDrwKe4xEx-BxeJu3aziMs9Jm0VBPh0_WgtZtIJC_9KcOpSR-TLcAi7wqcwKsjefX_T3n1j-kErRfNN6bYK2p3ifvROAyowk7bAmp2en_ARgszu6YguIBeNuYL6FDm-uy8a0y4JVUZJyLOLLOlFSpfL1H-waeSZHdQyt69AnVvW27YXejXpjCQBkWDjvEkZMnUqTY9kDWUVPke-XbTnYmXh_jaGVT__OUiP3h55AOb4gEa1Sy_Jz94FhinRT25A1aJJV-dyzeS7hPspOcHQLbax1S-_7HUw1G2qbXmVWXYyy7zFQX0InnGubvYbFxc103hz5sBDnwDnfrNM0Mm8AinQTcOXCc5f1J7N0Eb4BmjFyhhV4GVZozsdzIL7NiphVtcTXRwuS_i4zPNJZzIRxwrj_i6ee304qOiTlETlxmeMHgWWk57Pmy6KjdxagJViOlIMsPQ-d5C9jqZUdEZPt3olRnxurJo4j6nov6F-w5ggcYafnhVT3MvN3v9crL0TYHm_MhZ5jL7IpzQOqmfh2LUzylTKuMgPtRCvymTV9hnRw2Jv7pAmYL2pwG5LiV6SuMaAS5q_-LEG_Rpgvx9jhxPuzEHq-hEUxISZXP59gEQF2-nBmizwGZ-8G33qZbaa-e_2AGbvW7VNZVjO9liBfMTiJBxakLIQVAEfjtJRWYn8ueqxvy4KUKZAW5XDk5pA8nsZfqSVlZrhV9ykMOSPk4ZYDxaJRGR7l-OEwAHtK6BnGLKO8WojfIMlH32WtoZQJNkKKZK28&abvar=15&os=0
200 OK 43 B URL HTTP/2 akmxts.com/chicken.gif?z=1872197&pid=_cb-1872197_1&pb=19c2b1bcb8e6415aade478dece9b66171664735248&psp=Ifw1K1WDa--ovOd7UUB7cGj836p4VkablvZ5WfARmfNR0b8TwrFvSQksZJms2VW6xG8kpFkP-ez45DZoMioQBUXEAgKwTCDpxknkWQC9x8ss6joW6AbM1Kh2T0V8QFzCPbUvcKnivrj--VA-CA1JkzMDV4fqAANZTDrwKe4xEx-BxeJu3aziMs9Jm0VBPh0_WgtZtIJC_9KcOpSR-TLcAi7wqcwKsjefX_T3n1j-kErRfNN6bYK2p3ifvROAyowk7bAmp2en_ARgszu6YguIBeNuYL6FDm-uy8a0y4JVUZJyLOLLOlFSpfL1H-waeSZHdQyt69AnVvW27YXejXpjCQBkWDjvEkZMnUqTY9kDWUVPke-XbTnYmXh_jaGVT__OUiP3h55AOb4gEa1Sy_Jz94FhinRT25A1aJJV-dyzeS7hPspOcHQLbax1S-_7HUw1G2qbXmVWXYyy7zFQX0InnGubvYbFxc103hz5sBDnwDnfrNM0Mm8AinQTcOXCc5f1J7N0Eb4BmjFyhhV4GVZozsdzIL7NiphVtcTXRwuS_i4zPNJZzIRxwrj_i6ee304qOiTlETlxmeMHgWWk57Pmy6KjdxagJViOlIMsPQ-d5C9jqZUdEZPt3olRnxurJo4j6nov6F-w5ggcYafnhVT3MvN3v9crL0TYHm_MhZ5jL7IpzQOqmfh2LUzylTKuMgPtRCvymTV9hnRw2Jv7pAmYL2pwG5LiV6SuMaAS5q_-LEG_Rpgvx9jhxPuzEHq-hEUxISZXP59gEQF2-nBmizwGZ-8G33qZbaa-e_2AGbvW7VNZVjO9liBfMTiJBxakLIQVAEfjtJRWYn8ueqxvy4KUKZAW5XDk5pA8nsZfqSVlZrhV9ykMOSPk4ZYDxaJRGR7l-OEwAHtK6BnGLKO8WojfIMlH32WtoZQJNkKKZK28&abvar=15&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1872197&pid=_cb-1872197_1&pb=19c2b1bcb8e6415aade478dece9b66171664735248&psp=Ifw1K1WDa--ovOd7UUB7cGj836p4VkablvZ5WfARmfNR0b8TwrFvSQksZJms2VW6xG8kpFkP-ez45DZoMioQBUXEAgKwTCDpxknkWQC9x8ss6joW6AbM1Kh2T0V8QFzCPbUvcKnivrj--VA-CA1JkzMDV4fqAANZTDrwKe4xEx-BxeJu3aziMs9Jm0VBPh0_WgtZtIJC_9KcOpSR-TLcAi7wqcwKsjefX_T3n1j-kErRfNN6bYK2p3ifvROAyowk7bAmp2en_ARgszu6YguIBeNuYL6FDm-uy8a0y4JVUZJyLOLLOlFSpfL1H-waeSZHdQyt69AnVvW27YXejXpjCQBkWDjvEkZMnUqTY9kDWUVPke-XbTnYmXh_jaGVT__OUiP3h55AOb4gEa1Sy_Jz94FhinRT25A1aJJV-dyzeS7hPspOcHQLbax1S-_7HUw1G2qbXmVWXYyy7zFQX0InnGubvYbFxc103hz5sBDnwDnfrNM0Mm8AinQTcOXCc5f1J7N0Eb4BmjFyhhV4GVZozsdzIL7NiphVtcTXRwuS_i4zPNJZzIRxwrj_i6ee304qOiTlETlxmeMHgWWk57Pmy6KjdxagJViOlIMsPQ-d5C9jqZUdEZPt3olRnxurJo4j6nov6F-w5ggcYafnhVT3MvN3v9crL0TYHm_MhZ5jL7IpzQOqmfh2LUzylTKuMgPtRCvymTV9hnRw2Jv7pAmYL2pwG5LiV6SuMaAS5q_-LEG_Rpgvx9jhxPuzEHq-hEUxISZXP59gEQF2-nBmizwGZ-8G33qZbaa-e_2AGbvW7VNZVjO9liBfMTiJBxakLIQVAEfjtJRWYn8ueqxvy4KUKZAW5XDk5pA8nsZfqSVlZrhV9ykMOSPk4ZYDxaJRGR7l-OEwAHtK6BnGLKO8WojfIMlH32WtoZQJNkKKZK28&abvar=15&os=0 HTTP/1.1
Host: akmxts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2210021127b1c4b9b529044085885ee4fd4f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OAICAP=AC4KjgAAAAAAAAAB; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OAIBLOCK=AC4KjgAAAABjORrQ; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OACICAP=ACIvfwAAAAAAAAAB; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OACIBLOCK=ACIvfwAAAABjORrQ; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Mon, 03 Oct 2022 16:27:29 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
akmxts.com/chicken.gif?z=1872197&pid=_cb-1872197_0&pb=19c2b1bcb8e6415aade478dece9b66171664735248&psp=5kYQtEyvk24KrI0b8oBMYglfPUjWPbMQHE7CtRsqi2JdBHeWiwuV-HFaFqjHbpQ_V3uNJc9vMe8zEhc4EiUZXfd-yKK0SjQcCUMT9ZvwvcTSkjHXI5fbhVFqrNy3UT9eowziHFPRiV2dGdKaW_RLlCj1UY8S6NMZEGJw5aOxDI7Lv4EARc45QpCvKgVyc4PGbPrTJWhAdMrKHIjGLKzNy7czzeU66moZKcx5Mye4Rq7jF1igardu-X8T6MwiZl8ydjQtCH6k4Ad9cOp5_6jSigmwPKgzqiRnwPj9TgjfTFECxnXsF9ekY0_REZOtcJTN6MOaD_OWqUSc-z5BwIeuN_2Bp0I50L2WXBFcgrcKUYNDTjReGPhjgn2uWTV9QepWFESxToDlvOPBAzkjm8NXECmX65MOnS1hx6BiEmMrYMNnWKqKJVUTHbzbuFjy5sxfqBsNIoiQ29iJOOf0l7sk8PRG0OK0R2TEkSGvm_Q2FkDFq6-Pjx81sr_wV86IIFhF4eQfMtPRrRwYLgrz7rQ1Oh6QEdHGUA9rqBZK263B0lnazXX17E20ncafgZE5p4paryaf-D0btSlBDHgTXXIajB7DNQyY2kjbjJ-swkmWPtFjmJDS9VN0MtxBSFb5DFAg7LzIIjVGV2rf0l_CUozp1AUm6sa23jsdSm5m5v33nrmh3G4MWmvc3DjH85AHqFiw-bPrwnNEnrBo76E-T7ky_37QiRD9xx_Javiwyr2Clrnk9YdgU_9L9WTdIYl_Ss_fvqTOoTEbFqv8hRaEN5UpTMqD_w11cShUJtx2PGmhYN0w89glurALHKZybLaEFOtQgx5SkQyDbWg572BTC0hlBJEPiWujMS_xyRh5ZoOAp-SOHGSRiyNlkFGey0hWIGcPOPGNnok8sJgbfJ5cmx9hK9fGNpRatZVyFRzyna-o&abvar=0&os=0
200 OK 43 B URL HTTP/2 akmxts.com/chicken.gif?z=1872197&pid=_cb-1872197_0&pb=19c2b1bcb8e6415aade478dece9b66171664735248&psp=5kYQtEyvk24KrI0b8oBMYglfPUjWPbMQHE7CtRsqi2JdBHeWiwuV-HFaFqjHbpQ_V3uNJc9vMe8zEhc4EiUZXfd-yKK0SjQcCUMT9ZvwvcTSkjHXI5fbhVFqrNy3UT9eowziHFPRiV2dGdKaW_RLlCj1UY8S6NMZEGJw5aOxDI7Lv4EARc45QpCvKgVyc4PGbPrTJWhAdMrKHIjGLKzNy7czzeU66moZKcx5Mye4Rq7jF1igardu-X8T6MwiZl8ydjQtCH6k4Ad9cOp5_6jSigmwPKgzqiRnwPj9TgjfTFECxnXsF9ekY0_REZOtcJTN6MOaD_OWqUSc-z5BwIeuN_2Bp0I50L2WXBFcgrcKUYNDTjReGPhjgn2uWTV9QepWFESxToDlvOPBAzkjm8NXECmX65MOnS1hx6BiEmMrYMNnWKqKJVUTHbzbuFjy5sxfqBsNIoiQ29iJOOf0l7sk8PRG0OK0R2TEkSGvm_Q2FkDFq6-Pjx81sr_wV86IIFhF4eQfMtPRrRwYLgrz7rQ1Oh6QEdHGUA9rqBZK263B0lnazXX17E20ncafgZE5p4paryaf-D0btSlBDHgTXXIajB7DNQyY2kjbjJ-swkmWPtFjmJDS9VN0MtxBSFb5DFAg7LzIIjVGV2rf0l_CUozp1AUm6sa23jsdSm5m5v33nrmh3G4MWmvc3DjH85AHqFiw-bPrwnNEnrBo76E-T7ky_37QiRD9xx_Javiwyr2Clrnk9YdgU_9L9WTdIYl_Ss_fvqTOoTEbFqv8hRaEN5UpTMqD_w11cShUJtx2PGmhYN0w89glurALHKZybLaEFOtQgx5SkQyDbWg572BTC0hlBJEPiWujMS_xyRh5ZoOAp-SOHGSRiyNlkFGey0hWIGcPOPGNnok8sJgbfJ5cmx9hK9fGNpRatZVyFRzyna-o&abvar=0&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1872197&pid=_cb-1872197_0&pb=19c2b1bcb8e6415aade478dece9b66171664735248&psp=5kYQtEyvk24KrI0b8oBMYglfPUjWPbMQHE7CtRsqi2JdBHeWiwuV-HFaFqjHbpQ_V3uNJc9vMe8zEhc4EiUZXfd-yKK0SjQcCUMT9ZvwvcTSkjHXI5fbhVFqrNy3UT9eowziHFPRiV2dGdKaW_RLlCj1UY8S6NMZEGJw5aOxDI7Lv4EARc45QpCvKgVyc4PGbPrTJWhAdMrKHIjGLKzNy7czzeU66moZKcx5Mye4Rq7jF1igardu-X8T6MwiZl8ydjQtCH6k4Ad9cOp5_6jSigmwPKgzqiRnwPj9TgjfTFECxnXsF9ekY0_REZOtcJTN6MOaD_OWqUSc-z5BwIeuN_2Bp0I50L2WXBFcgrcKUYNDTjReGPhjgn2uWTV9QepWFESxToDlvOPBAzkjm8NXECmX65MOnS1hx6BiEmMrYMNnWKqKJVUTHbzbuFjy5sxfqBsNIoiQ29iJOOf0l7sk8PRG0OK0R2TEkSGvm_Q2FkDFq6-Pjx81sr_wV86IIFhF4eQfMtPRrRwYLgrz7rQ1Oh6QEdHGUA9rqBZK263B0lnazXX17E20ncafgZE5p4paryaf-D0btSlBDHgTXXIajB7DNQyY2kjbjJ-swkmWPtFjmJDS9VN0MtxBSFb5DFAg7LzIIjVGV2rf0l_CUozp1AUm6sa23jsdSm5m5v33nrmh3G4MWmvc3DjH85AHqFiw-bPrwnNEnrBo76E-T7ky_37QiRD9xx_Javiwyr2Clrnk9YdgU_9L9WTdIYl_Ss_fvqTOoTEbFqv8hRaEN5UpTMqD_w11cShUJtx2PGmhYN0w89glurALHKZybLaEFOtQgx5SkQyDbWg572BTC0hlBJEPiWujMS_xyRh5ZoOAp-SOHGSRiyNlkFGey0hWIGcPOPGNnok8sJgbfJ5cmx9hK9fGNpRatZVyFRzyna-o&abvar=0&os=0 HTTP/1.1
Host: akmxts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2210021127b1c4b9b529044085885ee4fd4f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OAICAP=AC4KjgAAAAAAAAAB; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OAIBLOCK=AC4KjgAAAABjORrQ; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OACICAP=ACIvfwAAAAAAAAAB; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OACIBLOCK=ACIvfwAAAABjORrQ; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Mon, 03 Oct 2022 16:27:29 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
akmxts.com/chicken.gif?z=1872197&pid=_cb-1872197_3&pb=19c2b1bcb8e6415aade478dece9b66171664735248&psp=A-FoIpuyjVOghOmGYkqu1uICj0ce3YYftIsMsWCLykYhyCrAkoxp64wwF70kVRAKxgUvvbD6pyB5LRBLAOORvTuelTxEOC32_3f8uaJp2rtBwZOpARpOGOiu72gk_f8YHw8qlBuPIbMYfe9J-0-kAa3ibrYJB0uIIRabh_F_psNUSUitA17wNfRIrV1VoLbsoqggriA24aJ2kjkluxpC1DCE4Bb4UX_1HEg-LYcBg3Oiv4W7bA2aupd8CJ7mqZtUbP3ivfysKmIDBgo2hctchYVL194E5slYUkGc_2UCBVzMZgVv4cxEB8hUK8O-rCxVuc83bVa5CcxbBvrF0Nt6Vb96ZfVvljBWnT1X5-SKQO5JZVOMZrx8iTxU2cEKCP1nH8Ce3oyUaCrOUXAoO2y11Q7VS0aokslzFJOiMA_X_ssDCr0cDZ5Zk8vxs8qOKk3NsKBr3vDSS4xA0kDJ1NFVOcJv9ZBEzXJOtaUPU9B11N355dXnyzCPXzF-ItjnTiMTdbBxEK-p97sCP3iRlqO5WUUorqe1WPwNCuTCOquN_nqYzITLhYfhsTfdze4CY-cm-iMWiCo3hSOH3UNMn9gcd24nXLTmfD2HC-jyQdSiwDNWlg6DHYI_p0HQvG0qqn-WuyN1dpH_YnqP1NUvIWofIOnDglzdra7M03_X_OCqKUi0j71ZavkwPBKNb6x3ZsD_ZTlkHFMJTnh7aS2a8g5IFNctt_I4zkng3vqpdorzxVcjZJzyvV9UaXGOVDTdsJlVUxfR9tO5XIbPoS4ji6ucXVR-nVO95g0um2Kp8kzk_iZRiK1aCtORgcrrkIFHcAdmtqz0CAX1uwm93rOjwQnyXWCbfAjC7ix5M9_qj4OdME2hD3jiLtpA34WKH9ZCyPAm4Zns0GQSbjKu0m6-n9nytJLp247doFiPaN5JXx1f&abvar=0&os=0
200 OK 43 B URL HTTP/2 akmxts.com/chicken.gif?z=1872197&pid=_cb-1872197_3&pb=19c2b1bcb8e6415aade478dece9b66171664735248&psp=A-FoIpuyjVOghOmGYkqu1uICj0ce3YYftIsMsWCLykYhyCrAkoxp64wwF70kVRAKxgUvvbD6pyB5LRBLAOORvTuelTxEOC32_3f8uaJp2rtBwZOpARpOGOiu72gk_f8YHw8qlBuPIbMYfe9J-0-kAa3ibrYJB0uIIRabh_F_psNUSUitA17wNfRIrV1VoLbsoqggriA24aJ2kjkluxpC1DCE4Bb4UX_1HEg-LYcBg3Oiv4W7bA2aupd8CJ7mqZtUbP3ivfysKmIDBgo2hctchYVL194E5slYUkGc_2UCBVzMZgVv4cxEB8hUK8O-rCxVuc83bVa5CcxbBvrF0Nt6Vb96ZfVvljBWnT1X5-SKQO5JZVOMZrx8iTxU2cEKCP1nH8Ce3oyUaCrOUXAoO2y11Q7VS0aokslzFJOiMA_X_ssDCr0cDZ5Zk8vxs8qOKk3NsKBr3vDSS4xA0kDJ1NFVOcJv9ZBEzXJOtaUPU9B11N355dXnyzCPXzF-ItjnTiMTdbBxEK-p97sCP3iRlqO5WUUorqe1WPwNCuTCOquN_nqYzITLhYfhsTfdze4CY-cm-iMWiCo3hSOH3UNMn9gcd24nXLTmfD2HC-jyQdSiwDNWlg6DHYI_p0HQvG0qqn-WuyN1dpH_YnqP1NUvIWofIOnDglzdra7M03_X_OCqKUi0j71ZavkwPBKNb6x3ZsD_ZTlkHFMJTnh7aS2a8g5IFNctt_I4zkng3vqpdorzxVcjZJzyvV9UaXGOVDTdsJlVUxfR9tO5XIbPoS4ji6ucXVR-nVO95g0um2Kp8kzk_iZRiK1aCtORgcrrkIFHcAdmtqz0CAX1uwm93rOjwQnyXWCbfAjC7ix5M9_qj4OdME2hD3jiLtpA34WKH9ZCyPAm4Zns0GQSbjKu0m6-n9nytJLp247doFiPaN5JXx1f&abvar=0&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1872197&pid=_cb-1872197_3&pb=19c2b1bcb8e6415aade478dece9b66171664735248&psp=A-FoIpuyjVOghOmGYkqu1uICj0ce3YYftIsMsWCLykYhyCrAkoxp64wwF70kVRAKxgUvvbD6pyB5LRBLAOORvTuelTxEOC32_3f8uaJp2rtBwZOpARpOGOiu72gk_f8YHw8qlBuPIbMYfe9J-0-kAa3ibrYJB0uIIRabh_F_psNUSUitA17wNfRIrV1VoLbsoqggriA24aJ2kjkluxpC1DCE4Bb4UX_1HEg-LYcBg3Oiv4W7bA2aupd8CJ7mqZtUbP3ivfysKmIDBgo2hctchYVL194E5slYUkGc_2UCBVzMZgVv4cxEB8hUK8O-rCxVuc83bVa5CcxbBvrF0Nt6Vb96ZfVvljBWnT1X5-SKQO5JZVOMZrx8iTxU2cEKCP1nH8Ce3oyUaCrOUXAoO2y11Q7VS0aokslzFJOiMA_X_ssDCr0cDZ5Zk8vxs8qOKk3NsKBr3vDSS4xA0kDJ1NFVOcJv9ZBEzXJOtaUPU9B11N355dXnyzCPXzF-ItjnTiMTdbBxEK-p97sCP3iRlqO5WUUorqe1WPwNCuTCOquN_nqYzITLhYfhsTfdze4CY-cm-iMWiCo3hSOH3UNMn9gcd24nXLTmfD2HC-jyQdSiwDNWlg6DHYI_p0HQvG0qqn-WuyN1dpH_YnqP1NUvIWofIOnDglzdra7M03_X_OCqKUi0j71ZavkwPBKNb6x3ZsD_ZTlkHFMJTnh7aS2a8g5IFNctt_I4zkng3vqpdorzxVcjZJzyvV9UaXGOVDTdsJlVUxfR9tO5XIbPoS4ji6ucXVR-nVO95g0um2Kp8kzk_iZRiK1aCtORgcrrkIFHcAdmtqz0CAX1uwm93rOjwQnyXWCbfAjC7ix5M9_qj4OdME2hD3jiLtpA34WKH9ZCyPAm4Zns0GQSbjKu0m6-n9nytJLp247doFiPaN5JXx1f&abvar=0&os=0 HTTP/1.1
Host: akmxts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2210021127b1c4b9b529044085885ee4fd4f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OAICAP=AC4KjgAAAAAAAAAB; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OAIBLOCK=AC4KjgAAAABjORrQ; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OACICAP=ACIvfwAAAAAAAAAB; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OACIBLOCK=ACIvfwAAAABjORrQ; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Mon, 03 Oct 2022 16:27:29 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
akmxts.com/chicken.gif?z=1872197&pid=_cb-1872197_7&pb=b8145f1e3480787b26dd69778f93d12a1664735249&psp=GGUYIfh7SchR7qAN6NF9nPooJqbB8_R640ptnR3T0u2I8FMvtvRa4YzHrMCOiKeUxDOMRhL7_3weUCrhhMyJB1RfazBzyBvRb0IcKzhpwbjn9HlMph2WwcqNNofIGCoMU2jMi7t_K5w4akNUDG_PWyxmfvLU8oai1LU8UaVUXoIBJeXfsqBiLKhi0lAA6UBeu64QOxskB2_7aGhmbFED4Pwj8BIO_cbOvz8l1Z5OFRkKWqfVDtWtu5s1RSEDy-EFT-xVmIo7AVv0__dVymugClulD200d2ZtA6prcD7YjdMCNWwjUm7HhTX4K-O7whjSPJaKhEMFH78FXXpobZla2J3tmAob7cLQlckA2lr_kR6dF9ZEZAgUtPlzNCt62IJ7iqysc_1jjzIjmzYnJ3UV2gT1fZW-LbXJJObc4FW6D2rlth0C7qikNJNrL10j8r2yq8FqEAJp8caTF7W7GHFbEAqejnarg0u8rt45vQrJ8thyxisVP3I_kzTjseGH7fJh_4dvrzX-VEnftdm2SPpSb13tN_-YgY8DtV5GX_JcuAYnQKyTYNxHTQqI39QjDuEn9tBGgDIpLuOY6fD-PAj27Yza1jrsKmZb5WszMrKTZesPsGk2nRH6ryZbkhZEtghyLMY31O6h_dg6g2pMS_8dBTy0Yxi66PUtoNTUH0NALeCJZUWHIXgXiwsJYyQ0L3AV6UMS2dRpRiHe-YNhtANGzJtwXdDxb4dgHcRMQIjg7i0sAMuNJ1rhBn-naIVWMiZfFcuxmFNjsb1xRm4zA7N_EcoUz0rpYpzmz9FRFW-WkYueIHOrA3xpDQ03V7C0-7saJl39GPsDGIp0IppBDcECEUUC0vOGP635NwmvHe0OMWHxehRDopbGPbiv4pdjVy-Aa8pCHhUCleXqycpTZ288bgtocqqW9K8I73UdGLqX&abvar=0&os=0
200 OK 43 B URL HTTP/2 akmxts.com/chicken.gif?z=1872197&pid=_cb-1872197_7&pb=b8145f1e3480787b26dd69778f93d12a1664735249&psp=GGUYIfh7SchR7qAN6NF9nPooJqbB8_R640ptnR3T0u2I8FMvtvRa4YzHrMCOiKeUxDOMRhL7_3weUCrhhMyJB1RfazBzyBvRb0IcKzhpwbjn9HlMph2WwcqNNofIGCoMU2jMi7t_K5w4akNUDG_PWyxmfvLU8oai1LU8UaVUXoIBJeXfsqBiLKhi0lAA6UBeu64QOxskB2_7aGhmbFED4Pwj8BIO_cbOvz8l1Z5OFRkKWqfVDtWtu5s1RSEDy-EFT-xVmIo7AVv0__dVymugClulD200d2ZtA6prcD7YjdMCNWwjUm7HhTX4K-O7whjSPJaKhEMFH78FXXpobZla2J3tmAob7cLQlckA2lr_kR6dF9ZEZAgUtPlzNCt62IJ7iqysc_1jjzIjmzYnJ3UV2gT1fZW-LbXJJObc4FW6D2rlth0C7qikNJNrL10j8r2yq8FqEAJp8caTF7W7GHFbEAqejnarg0u8rt45vQrJ8thyxisVP3I_kzTjseGH7fJh_4dvrzX-VEnftdm2SPpSb13tN_-YgY8DtV5GX_JcuAYnQKyTYNxHTQqI39QjDuEn9tBGgDIpLuOY6fD-PAj27Yza1jrsKmZb5WszMrKTZesPsGk2nRH6ryZbkhZEtghyLMY31O6h_dg6g2pMS_8dBTy0Yxi66PUtoNTUH0NALeCJZUWHIXgXiwsJYyQ0L3AV6UMS2dRpRiHe-YNhtANGzJtwXdDxb4dgHcRMQIjg7i0sAMuNJ1rhBn-naIVWMiZfFcuxmFNjsb1xRm4zA7N_EcoUz0rpYpzmz9FRFW-WkYueIHOrA3xpDQ03V7C0-7saJl39GPsDGIp0IppBDcECEUUC0vOGP635NwmvHe0OMWHxehRDopbGPbiv4pdjVy-Aa8pCHhUCleXqycpTZ288bgtocqqW9K8I73UdGLqX&abvar=0&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1872197&pid=_cb-1872197_7&pb=b8145f1e3480787b26dd69778f93d12a1664735249&psp=GGUYIfh7SchR7qAN6NF9nPooJqbB8_R640ptnR3T0u2I8FMvtvRa4YzHrMCOiKeUxDOMRhL7_3weUCrhhMyJB1RfazBzyBvRb0IcKzhpwbjn9HlMph2WwcqNNofIGCoMU2jMi7t_K5w4akNUDG_PWyxmfvLU8oai1LU8UaVUXoIBJeXfsqBiLKhi0lAA6UBeu64QOxskB2_7aGhmbFED4Pwj8BIO_cbOvz8l1Z5OFRkKWqfVDtWtu5s1RSEDy-EFT-xVmIo7AVv0__dVymugClulD200d2ZtA6prcD7YjdMCNWwjUm7HhTX4K-O7whjSPJaKhEMFH78FXXpobZla2J3tmAob7cLQlckA2lr_kR6dF9ZEZAgUtPlzNCt62IJ7iqysc_1jjzIjmzYnJ3UV2gT1fZW-LbXJJObc4FW6D2rlth0C7qikNJNrL10j8r2yq8FqEAJp8caTF7W7GHFbEAqejnarg0u8rt45vQrJ8thyxisVP3I_kzTjseGH7fJh_4dvrzX-VEnftdm2SPpSb13tN_-YgY8DtV5GX_JcuAYnQKyTYNxHTQqI39QjDuEn9tBGgDIpLuOY6fD-PAj27Yza1jrsKmZb5WszMrKTZesPsGk2nRH6ryZbkhZEtghyLMY31O6h_dg6g2pMS_8dBTy0Yxi66PUtoNTUH0NALeCJZUWHIXgXiwsJYyQ0L3AV6UMS2dRpRiHe-YNhtANGzJtwXdDxb4dgHcRMQIjg7i0sAMuNJ1rhBn-naIVWMiZfFcuxmFNjsb1xRm4zA7N_EcoUz0rpYpzmz9FRFW-WkYueIHOrA3xpDQ03V7C0-7saJl39GPsDGIp0IppBDcECEUUC0vOGP635NwmvHe0OMWHxehRDopbGPbiv4pdjVy-Aa8pCHhUCleXqycpTZ288bgtocqqW9K8I73UdGLqX&abvar=0&os=0 HTTP/1.1
Host: akmxts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2210021127b1c4b9b529044085885ee4fd4f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OAICAP=AC4KjgAAAAAAAAAB; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OAIBLOCK=AC4KjgAAAABjORrQ; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OACICAP=ACIvfwAAAAAAAAAB; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OACIBLOCK=ACIvfwAAAABjORrQ; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Mon, 03 Oct 2022 16:27:29 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
akmxts.com/chicken.gif?z=1872197&pid=_cb-1872197_5&pb=b8145f1e3480787b26dd69778f93d12a1664735249&psp=_ToQYK4lJDjXruzicVKrmYa3yVdpWu7ez1_12vTxflKb-qnMGGnwIO9g7zPj5hA4AbCjdO8_rAZjri9IXJ2TcXU012N7tguzYIrWTSk-0qubiA22slfc4H-lvA80jLwaMWi1_ZHxay9TBavMImsfVhPk1V77ews54zqsyoQIHl_0o8wjhZX1Oy9onKaKaPkwOjoU-DmpZKwzjiHkUJgf1eyJwCZhDa0IyRpzFKDOmY3AV7UPa7_flIFa6pU3m1IVgB85Bvg2dAUBS_95w4fohdBeQvULvIg6x688iEjV1P7o_s-UoXxsYccU-pbAy5W5kLCSRWc1dUjExb-wJgwxLgMfcvTpyToLYJ141DCQcSnY4cbY42PMec3hEV_sr5vatFrD4lhl_1e4AvSfbUbRn0m1ExY82kyYX78lPx0OyCgrwYYzb2m8MKkPdYkUT6hdkNEGnXAyH69e5NfB2Am0et26cSDMsF14bhmzFU32yHJ-0FK9wT4jZwX2sCehDZTy2nCdV7-l1yj9YIeedKoynUVM_kTUWQ9CX9dYe7No0ZYWUIwiMDdwuLHar-5Z5aL-6nlRDj5NM7DJN_4bnIf0OObO-CiPXM9Sn9mSsI9BZ49Bu_3MD-HmEGzNQlcTKwo3fzzsB208B26zAOUoSQTCMsWef2Z_z3j4yCOgifNN9ff385mM3b98JoWG-jjD_6Vd05S3Ekv-_nv0ej26wSzYwgTXVsecLXFxhsuEAQNPDo2PUUZx6LChfkWegQZdsvdXo11yRTjazLjfiSdlm6bgMbJjmePx76GohtmiclfNJtuNS55wfxpZRGGlAvmRnOby3NFbdCeA80vwIwNaAx1ptjWGs0HlX8N0v44qAsuEEak-mN8hr-fofJeIBtvup1rw2UfnLDgsc11JPvgPhSx-R8JOFwO5Gjsc-G34Wnqv&abvar=0&os=0
200 OK 43 B URL HTTP/2 akmxts.com/chicken.gif?z=1872197&pid=_cb-1872197_5&pb=b8145f1e3480787b26dd69778f93d12a1664735249&psp=_ToQYK4lJDjXruzicVKrmYa3yVdpWu7ez1_12vTxflKb-qnMGGnwIO9g7zPj5hA4AbCjdO8_rAZjri9IXJ2TcXU012N7tguzYIrWTSk-0qubiA22slfc4H-lvA80jLwaMWi1_ZHxay9TBavMImsfVhPk1V77ews54zqsyoQIHl_0o8wjhZX1Oy9onKaKaPkwOjoU-DmpZKwzjiHkUJgf1eyJwCZhDa0IyRpzFKDOmY3AV7UPa7_flIFa6pU3m1IVgB85Bvg2dAUBS_95w4fohdBeQvULvIg6x688iEjV1P7o_s-UoXxsYccU-pbAy5W5kLCSRWc1dUjExb-wJgwxLgMfcvTpyToLYJ141DCQcSnY4cbY42PMec3hEV_sr5vatFrD4lhl_1e4AvSfbUbRn0m1ExY82kyYX78lPx0OyCgrwYYzb2m8MKkPdYkUT6hdkNEGnXAyH69e5NfB2Am0et26cSDMsF14bhmzFU32yHJ-0FK9wT4jZwX2sCehDZTy2nCdV7-l1yj9YIeedKoynUVM_kTUWQ9CX9dYe7No0ZYWUIwiMDdwuLHar-5Z5aL-6nlRDj5NM7DJN_4bnIf0OObO-CiPXM9Sn9mSsI9BZ49Bu_3MD-HmEGzNQlcTKwo3fzzsB208B26zAOUoSQTCMsWef2Z_z3j4yCOgifNN9ff385mM3b98JoWG-jjD_6Vd05S3Ekv-_nv0ej26wSzYwgTXVsecLXFxhsuEAQNPDo2PUUZx6LChfkWegQZdsvdXo11yRTjazLjfiSdlm6bgMbJjmePx76GohtmiclfNJtuNS55wfxpZRGGlAvmRnOby3NFbdCeA80vwIwNaAx1ptjWGs0HlX8N0v44qAsuEEak-mN8hr-fofJeIBtvup1rw2UfnLDgsc11JPvgPhSx-R8JOFwO5Gjsc-G34Wnqv&abvar=0&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1872197&pid=_cb-1872197_5&pb=b8145f1e3480787b26dd69778f93d12a1664735249&psp=_ToQYK4lJDjXruzicVKrmYa3yVdpWu7ez1_12vTxflKb-qnMGGnwIO9g7zPj5hA4AbCjdO8_rAZjri9IXJ2TcXU012N7tguzYIrWTSk-0qubiA22slfc4H-lvA80jLwaMWi1_ZHxay9TBavMImsfVhPk1V77ews54zqsyoQIHl_0o8wjhZX1Oy9onKaKaPkwOjoU-DmpZKwzjiHkUJgf1eyJwCZhDa0IyRpzFKDOmY3AV7UPa7_flIFa6pU3m1IVgB85Bvg2dAUBS_95w4fohdBeQvULvIg6x688iEjV1P7o_s-UoXxsYccU-pbAy5W5kLCSRWc1dUjExb-wJgwxLgMfcvTpyToLYJ141DCQcSnY4cbY42PMec3hEV_sr5vatFrD4lhl_1e4AvSfbUbRn0m1ExY82kyYX78lPx0OyCgrwYYzb2m8MKkPdYkUT6hdkNEGnXAyH69e5NfB2Am0et26cSDMsF14bhmzFU32yHJ-0FK9wT4jZwX2sCehDZTy2nCdV7-l1yj9YIeedKoynUVM_kTUWQ9CX9dYe7No0ZYWUIwiMDdwuLHar-5Z5aL-6nlRDj5NM7DJN_4bnIf0OObO-CiPXM9Sn9mSsI9BZ49Bu_3MD-HmEGzNQlcTKwo3fzzsB208B26zAOUoSQTCMsWef2Z_z3j4yCOgifNN9ff385mM3b98JoWG-jjD_6Vd05S3Ekv-_nv0ej26wSzYwgTXVsecLXFxhsuEAQNPDo2PUUZx6LChfkWegQZdsvdXo11yRTjazLjfiSdlm6bgMbJjmePx76GohtmiclfNJtuNS55wfxpZRGGlAvmRnOby3NFbdCeA80vwIwNaAx1ptjWGs0HlX8N0v44qAsuEEak-mN8hr-fofJeIBtvup1rw2UfnLDgsc11JPvgPhSx-R8JOFwO5Gjsc-G34Wnqv&abvar=0&os=0 HTTP/1.1
Host: akmxts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2210021127b1c4b9b529044085885ee4fd4f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OAICAP=AC4KjgAAAAAAAAAB; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OAIBLOCK=AC4KjgAAAABjORrQ; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OACICAP=ACIvfwAAAAAAAAAB; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OACIBLOCK=ACIvfwAAAABjORrQ; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Mon, 03 Oct 2022 16:27:29 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
akmxts.com/chicken.gif?z=1872197&pid=_cb-1872197_2&pb=19c2b1bcb8e6415aade478dece9b66171664735248&psp=D6SUktQG6OJN4jLwjizUXPyOOb8oUJ3qhf1UCd0lAtA9YhLvf6V7GjCNKWBf8skn3hbE5tYvh5I-No6r5wbLbMveg5H-Nr0porF7TwO2zRrZGb9OMRHXkDua1MQ4_-nhZ60rwVeaqby2L_Iq4PVa6gDg896scEPV78gpI21vETW77CxqvDNyMhP7sExrZ9OzyfUDXD5jFa2tvea_Fviw5hUGTcVcgd6mXOUP_2K6hmJSInJxbpz18wggMUGhHyr7VZ23lDPD7JRrZwUstfkqmQvHzv4bBMRdtns-ttCE40GIY8jo-lNzDKMR2n6UNSYCHi92jnN-HWqu_fOCGny640WnVFZ3TDNrl4LMAUiVkM-VnaM2mdoKmk2kd9T2hgD-84y50U9h6rO2kZTvDXC11iAU2tWP6JrW0MvrX4e116Bu3G97ixY2STeGE0YdFoQYH5r5SwEatjy8CoFRW67GOAtO-o4bZgaYIp6qV3FecFbumtRSNLNViiFpdhVYwq-4i4wqmgbmZHl3OKTF-7fbLs-YQrojQNu0x88UzPRG9YveYHdc9XAKqvF9UVJ5jjqQ5qoXYuAFmxslZs52x2p1DPGYm3Flv1kz4rLsBE8PWgxlkOmwEPyRG5QqSn7S-ygweO4HLHmqb6y_S3d0NWtCDgiTD4CIxYSeqS1GUd4cj4a-gWGJVqc3aMNlftzSO5Q2pA8YQgoxHzfGoQtjGBOysGDDjGlWu8cwNiMLIvF3JNuTCTFVCkyPtKYf6Zo0XpTlwDIUoCKQm6yuJOPwaiFMIA_AJuKscVMHrb8qHk95ga2BoMr16ZDhVLDCAeje4CZhC429dMEXMnqxHHRnHzENZ3jA7aN9G2TV4xO1oftr6oWQVDMKQTt5o0mFvR2w_ahloyUhTom6GNodr094101UPPHQXHpMqeTQTLEVrN_0&abvar=0&os=0
200 OK 43 B URL HTTP/2 akmxts.com/chicken.gif?z=1872197&pid=_cb-1872197_2&pb=19c2b1bcb8e6415aade478dece9b66171664735248&psp=D6SUktQG6OJN4jLwjizUXPyOOb8oUJ3qhf1UCd0lAtA9YhLvf6V7GjCNKWBf8skn3hbE5tYvh5I-No6r5wbLbMveg5H-Nr0porF7TwO2zRrZGb9OMRHXkDua1MQ4_-nhZ60rwVeaqby2L_Iq4PVa6gDg896scEPV78gpI21vETW77CxqvDNyMhP7sExrZ9OzyfUDXD5jFa2tvea_Fviw5hUGTcVcgd6mXOUP_2K6hmJSInJxbpz18wggMUGhHyr7VZ23lDPD7JRrZwUstfkqmQvHzv4bBMRdtns-ttCE40GIY8jo-lNzDKMR2n6UNSYCHi92jnN-HWqu_fOCGny640WnVFZ3TDNrl4LMAUiVkM-VnaM2mdoKmk2kd9T2hgD-84y50U9h6rO2kZTvDXC11iAU2tWP6JrW0MvrX4e116Bu3G97ixY2STeGE0YdFoQYH5r5SwEatjy8CoFRW67GOAtO-o4bZgaYIp6qV3FecFbumtRSNLNViiFpdhVYwq-4i4wqmgbmZHl3OKTF-7fbLs-YQrojQNu0x88UzPRG9YveYHdc9XAKqvF9UVJ5jjqQ5qoXYuAFmxslZs52x2p1DPGYm3Flv1kz4rLsBE8PWgxlkOmwEPyRG5QqSn7S-ygweO4HLHmqb6y_S3d0NWtCDgiTD4CIxYSeqS1GUd4cj4a-gWGJVqc3aMNlftzSO5Q2pA8YQgoxHzfGoQtjGBOysGDDjGlWu8cwNiMLIvF3JNuTCTFVCkyPtKYf6Zo0XpTlwDIUoCKQm6yuJOPwaiFMIA_AJuKscVMHrb8qHk95ga2BoMr16ZDhVLDCAeje4CZhC429dMEXMnqxHHRnHzENZ3jA7aN9G2TV4xO1oftr6oWQVDMKQTt5o0mFvR2w_ahloyUhTom6GNodr094101UPPHQXHpMqeTQTLEVrN_0&abvar=0&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1872197&pid=_cb-1872197_2&pb=19c2b1bcb8e6415aade478dece9b66171664735248&psp=D6SUktQG6OJN4jLwjizUXPyOOb8oUJ3qhf1UCd0lAtA9YhLvf6V7GjCNKWBf8skn3hbE5tYvh5I-No6r5wbLbMveg5H-Nr0porF7TwO2zRrZGb9OMRHXkDua1MQ4_-nhZ60rwVeaqby2L_Iq4PVa6gDg896scEPV78gpI21vETW77CxqvDNyMhP7sExrZ9OzyfUDXD5jFa2tvea_Fviw5hUGTcVcgd6mXOUP_2K6hmJSInJxbpz18wggMUGhHyr7VZ23lDPD7JRrZwUstfkqmQvHzv4bBMRdtns-ttCE40GIY8jo-lNzDKMR2n6UNSYCHi92jnN-HWqu_fOCGny640WnVFZ3TDNrl4LMAUiVkM-VnaM2mdoKmk2kd9T2hgD-84y50U9h6rO2kZTvDXC11iAU2tWP6JrW0MvrX4e116Bu3G97ixY2STeGE0YdFoQYH5r5SwEatjy8CoFRW67GOAtO-o4bZgaYIp6qV3FecFbumtRSNLNViiFpdhVYwq-4i4wqmgbmZHl3OKTF-7fbLs-YQrojQNu0x88UzPRG9YveYHdc9XAKqvF9UVJ5jjqQ5qoXYuAFmxslZs52x2p1DPGYm3Flv1kz4rLsBE8PWgxlkOmwEPyRG5QqSn7S-ygweO4HLHmqb6y_S3d0NWtCDgiTD4CIxYSeqS1GUd4cj4a-gWGJVqc3aMNlftzSO5Q2pA8YQgoxHzfGoQtjGBOysGDDjGlWu8cwNiMLIvF3JNuTCTFVCkyPtKYf6Zo0XpTlwDIUoCKQm6yuJOPwaiFMIA_AJuKscVMHrb8qHk95ga2BoMr16ZDhVLDCAeje4CZhC429dMEXMnqxHHRnHzENZ3jA7aN9G2TV4xO1oftr6oWQVDMKQTt5o0mFvR2w_ahloyUhTom6GNodr094101UPPHQXHpMqeTQTLEVrN_0&abvar=0&os=0 HTTP/1.1
Host: akmxts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2210021127b1c4b9b529044085885ee4fd4f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OAICAP=AC4KjgAAAAAAAAAB; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OAIBLOCK=AC4KjgAAAABjORrQ; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OACICAP=ACIvfwAAAAAAAAAB; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OACIBLOCK=ACIvfwAAAABjORrQ; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Mon, 03 Oct 2022 16:27:29 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
akmxts.com/chicken.gif?z=1872197&pid=_cb-1872197_4&pb=b8145f1e3480787b26dd69778f93d12a1664735249&psp=GKzZirRM_KyCqpywwKr3mlepclpYGbsmAPQFHGssPrb1LArzl72Pe8RV5ykYYTBnxtQvc9IZhc_ZHoeEq7NBagXnytucNPJVKAW_Sz-TV7ceBPhADIxnjhfxw4cL9E16BoUIFtR31dAGKAOUHimlAgHDdH6_lK_7kM-BsjcYagFpM_iWk3wRK5k64iSI3KmUuE1MlANErVcY1tbbX52Jvb_0TFsmyLz4sQcTWzEFEV0ToNJ_DtZ_8S_lysiKdJ4zGKBdC3up7l7hdhiKQk_OotlTPiJ2Xj8173ia26NL61ccY1plHICeurEOHQwERo1eS8km0qRaTPKqibcvu0Q21fA_6CDSmkBYK1usr_VerIVuE2O5nejF1xz3DAzumAZsu6l4hOFRRo6l5xWlTDln6oDYvkZKaajI9DfD8s6fFLfjF84UMkAtkWN1i-y7Z49Mo_2kJ-O1aEsfuFpeRW-p4zy78Sd-xD266KMea7SqXQQQB3OxrrcnNI0KcAstAM8ilTpZxi5bSLkx5S-fLvUzkcUXVREOp9XTQ_rlRgPLh0pm6HmMZ4daWzmHPmpsUn-DuxuRd8H4Ep84Nu8rgr6mpNxdjYhxKLoU2JCAT_j6oAHK6NEH1BBCa7xRXagna4BPFvqEhymmfvZZAiHXYsm-AuxYTUibLM7k-P7C-mqwjyTWwilXIAJjPWR6Y4PUmnUYC0G6pVF-ZHIMzqqRZwcE-hAqvoAt_PkkmTiBf_dghiTK9Gvyp1l9cSC-8WsyD_wDSSVrtWvcj43wb2RNet5Y7KCRENTARZX6TbaP_LrPhMYxMJ34rdsw5_FBQEJT2gtrk2nmiTmaLeli7LIiQ5dBxpcv-rEMh7bAZuZ6VfwmZIc8sMiE_hvS20UUCjPiqHhdnjXLOjBpz7dV0zCLv8lFCuYUIXDmvzguUdmWnJeP&abvar=0&os=0
200 OK 43 B URL HTTP/2 akmxts.com/chicken.gif?z=1872197&pid=_cb-1872197_4&pb=b8145f1e3480787b26dd69778f93d12a1664735249&psp=GKzZirRM_KyCqpywwKr3mlepclpYGbsmAPQFHGssPrb1LArzl72Pe8RV5ykYYTBnxtQvc9IZhc_ZHoeEq7NBagXnytucNPJVKAW_Sz-TV7ceBPhADIxnjhfxw4cL9E16BoUIFtR31dAGKAOUHimlAgHDdH6_lK_7kM-BsjcYagFpM_iWk3wRK5k64iSI3KmUuE1MlANErVcY1tbbX52Jvb_0TFsmyLz4sQcTWzEFEV0ToNJ_DtZ_8S_lysiKdJ4zGKBdC3up7l7hdhiKQk_OotlTPiJ2Xj8173ia26NL61ccY1plHICeurEOHQwERo1eS8km0qRaTPKqibcvu0Q21fA_6CDSmkBYK1usr_VerIVuE2O5nejF1xz3DAzumAZsu6l4hOFRRo6l5xWlTDln6oDYvkZKaajI9DfD8s6fFLfjF84UMkAtkWN1i-y7Z49Mo_2kJ-O1aEsfuFpeRW-p4zy78Sd-xD266KMea7SqXQQQB3OxrrcnNI0KcAstAM8ilTpZxi5bSLkx5S-fLvUzkcUXVREOp9XTQ_rlRgPLh0pm6HmMZ4daWzmHPmpsUn-DuxuRd8H4Ep84Nu8rgr6mpNxdjYhxKLoU2JCAT_j6oAHK6NEH1BBCa7xRXagna4BPFvqEhymmfvZZAiHXYsm-AuxYTUibLM7k-P7C-mqwjyTWwilXIAJjPWR6Y4PUmnUYC0G6pVF-ZHIMzqqRZwcE-hAqvoAt_PkkmTiBf_dghiTK9Gvyp1l9cSC-8WsyD_wDSSVrtWvcj43wb2RNet5Y7KCRENTARZX6TbaP_LrPhMYxMJ34rdsw5_FBQEJT2gtrk2nmiTmaLeli7LIiQ5dBxpcv-rEMh7bAZuZ6VfwmZIc8sMiE_hvS20UUCjPiqHhdnjXLOjBpz7dV0zCLv8lFCuYUIXDmvzguUdmWnJeP&abvar=0&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1872197&pid=_cb-1872197_4&pb=b8145f1e3480787b26dd69778f93d12a1664735249&psp=GKzZirRM_KyCqpywwKr3mlepclpYGbsmAPQFHGssPrb1LArzl72Pe8RV5ykYYTBnxtQvc9IZhc_ZHoeEq7NBagXnytucNPJVKAW_Sz-TV7ceBPhADIxnjhfxw4cL9E16BoUIFtR31dAGKAOUHimlAgHDdH6_lK_7kM-BsjcYagFpM_iWk3wRK5k64iSI3KmUuE1MlANErVcY1tbbX52Jvb_0TFsmyLz4sQcTWzEFEV0ToNJ_DtZ_8S_lysiKdJ4zGKBdC3up7l7hdhiKQk_OotlTPiJ2Xj8173ia26NL61ccY1plHICeurEOHQwERo1eS8km0qRaTPKqibcvu0Q21fA_6CDSmkBYK1usr_VerIVuE2O5nejF1xz3DAzumAZsu6l4hOFRRo6l5xWlTDln6oDYvkZKaajI9DfD8s6fFLfjF84UMkAtkWN1i-y7Z49Mo_2kJ-O1aEsfuFpeRW-p4zy78Sd-xD266KMea7SqXQQQB3OxrrcnNI0KcAstAM8ilTpZxi5bSLkx5S-fLvUzkcUXVREOp9XTQ_rlRgPLh0pm6HmMZ4daWzmHPmpsUn-DuxuRd8H4Ep84Nu8rgr6mpNxdjYhxKLoU2JCAT_j6oAHK6NEH1BBCa7xRXagna4BPFvqEhymmfvZZAiHXYsm-AuxYTUibLM7k-P7C-mqwjyTWwilXIAJjPWR6Y4PUmnUYC0G6pVF-ZHIMzqqRZwcE-hAqvoAt_PkkmTiBf_dghiTK9Gvyp1l9cSC-8WsyD_wDSSVrtWvcj43wb2RNet5Y7KCRENTARZX6TbaP_LrPhMYxMJ34rdsw5_FBQEJT2gtrk2nmiTmaLeli7LIiQ5dBxpcv-rEMh7bAZuZ6VfwmZIc8sMiE_hvS20UUCjPiqHhdnjXLOjBpz7dV0zCLv8lFCuYUIXDmvzguUdmWnJeP&abvar=0&os=0 HTTP/1.1
Host: akmxts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2210021127b1c4b9b529044085885ee4fd4f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OAICAP=AC4KjgAAAAAAAAAB; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OAIBLOCK=AC4KjgAAAABjORrQ; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OACICAP=ACIvfwAAAAAAAAAB; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
OACIBLOCK=ACIvfwAAAABjORrQ; Path=/; Expires=Tue, 01 Nov 2022 16:27:29 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Mon, 03 Oct 2022 16:27:29 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
akmxts.com/lv/esnk/1872197/code.js?pid=_cb-1872197_3
200 OK 48 kB URL HTTP/2 akmxts.com/lv/esnk/1872197/code.js?pid=_cb-1872197_3
IP
File type ASCII text, with very long lines (65530)
Hash 79930cef6475e17e75d0cebe12cd62e1
30daf47fe962e2ff47caa02db8bbeeb9d7da8788
483306817cfb27a3da3c6399723865d7574bdc487ee406ec960f330e3d39c618
GET /lv/esnk/1872197/code.js?pid=_cb-1872197_3 HTTP/1.1
Host: akmxts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 14:00:58 GMT
vary: Accept-Encoding
etag: W/"6333021a-1e318"
x-js-ab1: current
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
faultspiano.com/pixel/pure
200 OK 0 B URL HTTP/1.1 faultspiano.com/pixel/pure
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pixel/pure HTTP/1.1
Host: faultspiano.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 72
Origin: https://javhd.today
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 02 Oct 2022 16:27:29 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
i.jads.co/network/user500/22340-1504877495.gif
200 OK 55 kB URL HTTP/2 i.jads.co/network/user500/22340-1504877495.gif
IP
File type GIF image data, version 89a, 300 x 250\012- data
Hash 6b47c0a6f361d95ef46510f4e04dfca9
0e03aa058a37707331fdf0749f5050c6a4534563
c96572215d908bfd1fdbd075846c19b1b7336e5e29c123a2a5049b16bf96ff64
GET /network/user500/22340-1504877495.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=67318d3f9484b2516578a8c7bedfe7d9; imps22340=1; juicy_data_1=YToxOntpOjU5MjU1NDtpOjE2NjQ5ODcyNDg7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:29 GMT
etag: "1504877495"
cache-control: max-age=29645757
content-length: 55337
content-type: image/gif
last-modified: Fri, 08 Sep 2017 13:31:35 GMT
accept-ranges: bytes
x-hw: 1664728049.dop228.sk1.t,1664728049.cds258.sk1.hn,1664728049.cds023.sk1.c
X-Firefox-Spdy: h2
akmxts.com/get/1872197?zoneid=1872197&pid=_cb-1872197_3&jp=_cl9pmu9zidr9s530ot5ycx&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=4894174221471783
200 OK 1.8 kB URL HTTP/2 akmxts.com/get/1872197?zoneid=1872197&pid=_cb-1872197_3&jp=_cl9pmu9zidr9s530ot5ycx&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=4894174221471783
IP
Hash 5b6af0d35c73d3e9eda7a38bf4ae9785
6c112ec71de284436d150d8e58686cd0c4a955d0
45d018a71765b6da12e88286d13fe3d9bacdd6569dca46c9558b3e558f6e7691
GET /get/1872197?zoneid=1872197&pid=_cb-1872197_3&jp=_cl9pmu9zidr9s530ot5ycx&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=4894174221471783 HTTP/1.1
Host: akmxts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Cookie: UID=2210021127320552695b914982b27999bf20
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/118skjk012/118skjk012pl.jpg
200 OK 169 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/118skjk012/118skjk012pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x538, components 3\012- data
Size 169 kB (169415 bytes)
Hash 2ef3b8f521f25e4af30266a1cb2d6760
e383301d541b99332e87cf577dfeedcc0218c263
ea75922ebbd4eb843e533ee8b606c29834a92a13c9b751e435760d9b071955c4
GET /mono/movie/adult/118skjk012/118skjk012pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 169415
last-modified: Tue, 13 Sep 2022 06:41:29 GMT
etag: "63202619-295c7"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLZAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL HTTP/1.1 banquetunarmedgrater.com/advertisers.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 02 Oct 2022 16:27:30 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a01926f1443e688f75ddfa4c436fdea9
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4d486cf5a702ad2648c7fdd6894d6d1f
94e77b8a747cd70093bb4ef99938b2307ec95241
a0d69eb7b090d0b4966e822176bc1365191c6bb8f9b4ab0502884645626af1b9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A0D69EB7B090D0B4966E822176BC1365191C6BB8F9B4AB0502884645626AF1B9"
Last-Modified: Sat, 01 Oct 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8955
Expires: Sun, 02 Oct 2022 18:56:45 GMT
Date: Sun, 02 Oct 2022 16:27:30 GMT
Connection: keep-alive
2qj7mq3w4uxe.com/get/1881613?zoneid=1881613&jp=_clnbm9urqbnkr9xpolv7e4&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=8271873942085797
200 OK 1.8 kB URL HTTP/2 2qj7mq3w4uxe.com/get/1881613?zoneid=1881613&jp=_clnbm9urqbnkr9xpolv7e4&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=8271873942085797
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1604), with CRLF, LF line terminators
Hash b348ce15c657c229cbd671a4c86d6f38
af5b1dfdf2df1d3ebb5ebfef29e55d846665e87f
92070e831971ef314bb9da330fb149ac2fbb93c5f46640fa66bbda3ec58d53d6
GET /get/1881613?zoneid=1881613&jp=_clnbm9urqbnkr9xpolv7e4&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=8271873942085797 HTTP/1.1
Host: 2qj7mq3w4uxe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: text/javascript
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2210021127fa7ca9bb8e0743c99e85abd5b4; Path=/; Expires=Mon, 02 Oct 2023 16:27:29 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
akmxts.com/lv/esnk/1872197/code.js?pid=_cb-1872197_1
200 OK 94 kB URL HTTP/2 akmxts.com/lv/esnk/1872197/code.js?pid=_cb-1872197_1
IP
Hash 8392a2bb534498c58ba8f4abd9d87a1f
8f678f992e5b8955574ff0210ddfab5a2165c670
0386b12abd0b3da1ab2b536a9a46888d18d518e5a581f33b739b2ab3c51d0ece
GET /lv/esnk/1872197/code.js?pid=_cb-1872197_1 HTTP/1.1
Host: akmxts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: application/javascript
last-modified: Wed, 28 Sep 2022 12:58:35 GMT
vary: Accept-Encoding
etag: W/"633444fb-1eb2b"
x-js-ab1: var15
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
akmxts.com/lv/esnk/1872197/code.js?pid=_cb-1872197_5
200 OK 95 kB URL HTTP/2 akmxts.com/lv/esnk/1872197/code.js?pid=_cb-1872197_5
IP
File type ASCII text, with very long lines (65530)
Hash 7c8712778a3452451240d7381591b492
a19b24cd7e0fc3ba745ab1eb000f470cc871dd90
4e5e314963fe09b82717726337b69b8709d1e0eb460b60f1848e0a0df3c46baf
GET /lv/esnk/1872197/code.js?pid=_cb-1872197_5 HTTP/1.1
Host: akmxts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 14:00:58 GMT
vary: Accept-Encoding
etag: W/"6333021a-1e318"
x-js-ab1: current
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
i.jads.co/network/user500/22340-1504877490.gif
200 OK 53 kB URL HTTP/2 i.jads.co/network/user500/22340-1504877490.gif
IP
File type GIF image data, version 89a, 300 x 250\012- data
Hash 98f7ca00fb07e8f0461945d015edf9f8
1b6250f93a74a48963406f3774b98386bb3e2bfe
6bbd17f01748337c7eaf0912874dd41370e5fccc4cc04ceb0057608178bf2611
GET /network/user500/22340-1504877490.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=67318d3f9484b2516578a8c7bedfe7d9; imps22340=1; juicy_data_1=YToxOntpOjU5MjU1MztpOjE2NjQ5ODcyNDg7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:30 GMT
etag: "1504877490"
cache-control: max-age=511902
content-length: 52984
content-type: image/gif
last-modified: Fri, 08 Sep 2017 13:31:30 GMT
accept-ranges: bytes
x-hw: 1664728050.dop228.sk1.t,1664728050.cds258.sk1.hn,1664728050.cds224.sk1.c
X-Firefox-Spdy: h2
2qj7mq3w4uxe.com/get/1881613?zoneid=1881613&jp=_cljhca5lempekcubrysa8w&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=672049570863115
200 OK 4.3 kB URL HTTP/2 2qj7mq3w4uxe.com/get/1881613?zoneid=1881613&jp=_cljhca5lempekcubrysa8w&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=672049570863115
IP
File type Unicode text, UTF-8 text, with very long lines (5938), with no line terminators
Hash f89e446cc1cddfc645f37bd7ee5776ad
9d03a8d929d1698766d7a3954c630c7db71853fa
2a596e6e9275ead98df13f63d7a4653a51f4dca7df1e34aba68471b14ba33e1f
GET /get/1881613?zoneid=1881613&jp=_cljhca5lempekcubrysa8w&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=672049570863115 HTTP/1.1
Host: 2qj7mq3w4uxe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: text/javascript
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=221002112709c3eca1c77a48b293aecf6890; Path=/; Expires=Mon, 02 Oct 2023 16:27:29 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/9ssis352/9ssis352pl.jpg
200 OK 156 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/9ssis352/9ssis352pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x439, components 3\012- data
Size 156 kB (156060 bytes)
Hash 2756e095397246828575fb02829d60ae
44a61c7651a23b50a4a1acce3096cc33776da973
81df3b21c2277ea29e702b3dfa70fe81f5183495ced7ad12a7f9920c9d85e387
GET /mono/movie/adult/9ssis352/9ssis352pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:27 GMT
content-type: image/jpeg
content-length: 156060
last-modified: Mon, 21 Feb 2022 11:12:21 GMT
etag: "62137395-2619c"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u+8NjiwqJQLNAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/pppd896/pppd896pl.jpg
200 OK 179 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/pppd896/pppd896pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 179 kB (178674 bytes)
Hash 4f2d85760ccbb7eac2686248e43eff67
7f6bc4dd4fe560461a07a3b9c0acbf796972f096
d6b0756eccfb4e84449663785b6aaac5cd2e9c2f7e8958690a45073d5e26fe5b
GET /mono/movie/adult/pppd896/pppd896pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:27 GMT
content-type: image/jpeg
content-length: 178674
last-modified: Thu, 17 Dec 2020 07:31:06 GMT
etag: "5fdb093a-2b9f2"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u+8NjiwqJQLOAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/aarm124/aarm124pl.jpg
200 OK 177 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/aarm124/aarm124pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x538, components 3\012- data
Size 177 kB (176819 bytes)
Hash 2887a29f8a7a375355bb07cdfa9405b8
97ed6e8338ede28e060ab20ba0e793b3a25077f7
7893410b8ffcc552ac2863ad5be7154ec3f5a335ba6e92321dda166f3822fd97
GET /mono/movie/adult/aarm124/aarm124pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:27 GMT
content-type: image/jpeg
content-length: 176819
last-modified: Wed, 31 Aug 2022 08:02:52 GMT
etag: "630f15ac-2b2b3"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u+8NjiwqJQLPAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/h_086kaad65/h_086kaad65pl.jpg
200 OK 170 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/h_086kaad65/h_086kaad65pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x540, components 3\012- data
Size 170 kB (169857 bytes)
Hash 7ddc43e75c9d5e23371ee4d44ace0101
454bb1d14d542646518f64f9e2d31a9320f8d8f6
3c5c5fd1482e4805aa5e2b2ff8af08897bba9d88d564f31ff4fd742d47832db5
GET /mono/movie/adult/h_086kaad65/h_086kaad65pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 169857
last-modified: Mon, 29 Aug 2022 07:40:13 GMT
etag: "630c6d5d-29781"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLUAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
javhd.today/
200 OK 187 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2543), with CR, LF line terminators
Size 187 kB (186578 bytes)
Hash a9daf43176fd88e458d3c0cd236fe865
04c8f9c0fa915e8f04a02b9be8722d5151531a10
fad412a86c0463e9394de41c6093918da1a39545072780456bab56c6bb91db25
GET / HTTP/1.1
Host: javhd.today
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:26 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: ASPro_a830e166eae51e65fca7725bb4ab3ca7=43e9469be173952a99fda905d0a57d56; path=/
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: EXPIRED
x-server-powered-by: Engintron
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tnQL521Wa9TVH09zby4OfMzB9SI%2FSiUoXCk6uTuB8oVSLJ2uReY5bVcXMJKqxLShidq4joRT033kiF%2BHJiRy8Sx2JHHy%2FHROfmdDqGlri2KuV5qximnBtLwvPJYIow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 753ece1aee85b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/waaa089/waaa089pl.jpg
200 OK 187 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/waaa089/waaa089pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x538, components 3\012- data
Size 187 kB (186712 bytes)
Hash 11dccac11e623bb2e84537acf82dca11
de00946ca6f5de7c0759b5ec0a9f8b1b1a88c9b7
d2169ae7c14397328dfe810d511c9d7045d6426338f5f9aaa42daa74f39fa224
GET /mono/movie/adult/waaa089/waaa089pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 186712
last-modified: Wed, 30 Jun 2021 12:25:42 GMT
etag: "60dc62c6-2d958"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLWAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/ssis356/ssis356pl.jpg
200 OK 177 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/ssis356/ssis356pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x538, components 3\012- data
Size 177 kB (176970 bytes)
Hash 72d8e2522de46be13198e8f1951acd05
96e092e420cf867498e6a2736fcdac995c93f6f4
b392228b8828075a32628138ff4338f34b7f1751b8579cda80a2b802f8879031
GET /mono/movie/adult/ssis356/ssis356pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 176970
last-modified: Mon, 21 Feb 2022 11:12:01 GMT
etag: "62137381-2b34a"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLXAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/miaa590/miaa590pl.jpg
200 OK 176 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/miaa590/miaa590pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x538, components 3\012- data
Size 176 kB (175675 bytes)
Hash 3c2deaff9e337e409188eeb36993cfe1
9d3d037ace83be1d3c247724a5e21906063c8ee1
ec7a4dab2d730a48ca38b8d2fc72f46eb10e2f5caec49a11f63d7aeefe483495
GET /mono/movie/adult/miaa590/miaa590pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 175675
last-modified: Mon, 31 Jan 2022 12:39:33 GMT
etag: "61f7d885-2ae3b"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLaAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/mide841/mide841pl.jpg
200 OK 165 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/mide841/mide841pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 165 kB (164581 bytes)
Hash db060a6f2d67a7f53bc7c1ec85c7fc7c
0217f6611747b749e35a7ce42f995705b8605449
338ff59c3c732fb0249957705196497e84d886d99b5379d80202edaad580985e
GET /mono/movie/adult/mide841/mide841pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 164581
last-modified: Wed, 30 Sep 2020 10:54:33 GMT
etag: "5f7463e9-282e5"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLbAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/1fsdss037/1fsdss037pl.jpg
200 OK 172 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/1fsdss037/1fsdss037pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x535, components 3\012- data
Size 172 kB (171613 bytes)
Hash 5d8780972e876278f3aa9dc85b476e3e
5bb84b8b24381fc1430b412ded1d48f3a2884e41
a8a5d55349412be5abc7916324325eb64f15818afc1baa75885d4c3cf52cc977
GET /mono/movie/adult/1fsdss037/1fsdss037pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 171613
last-modified: Wed, 01 Apr 2020 03:35:09 GMT
etag: "5e840bed-29e5d"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLcAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
prawnsimply.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSz2skRRTHq3dzEUF0yUVQmeMuyKS7Z6Znxj0sxhgJxs26q%2BhBkOqqmkkl1V1NVf%2BY5BRckD0Izv4Hne8kG3QX0Zv4Y5HOgoeAkPGUgwHBf0DFPXiSmR0cfdC89%2Fr7PXzee%2FXxfnZOXGT0bOUtvSuVokutulu7%2FL7nXa2tyzgb1Aad4MOgebVm8le6Qd29UntDsG295Lue63quV1uVRvT0YGkiQiYPul6969abft1rNTEw%2F%2B9t5sBSBzw%2FJ5cg%2BXjhkbMIySrE0Zcrwm6nOnn59ShTNNUGOT96N96OdREjmpc946AXH83c0PZ09SF0fDjFhc7%2FNYZyTJwfHyKMj2aQCPODKWeoIGKE%2FGkUeQWhKkhagenbkPyUAIzj%2Bgbi6N51bQq680SlE3VMFh7%2FCVmMycIvi4ijL5aVHNRuaZWlUscWg14JOagg%2BxWS7Bjp7gXI4hgs%2FQiS%2F0SWHq8jjg42rNKQvJzOLmUF2augxBDUOsgmn3SQ9RxkiYOIn9WY53ltlzPqdrqMNXhbhAF3PdruedRzgw4yNsEbIk2GYGoIZvaQmD1sy7tjQn59Bib7AXazhOUObDomztt7yHmJQhAUlqCgBIUkKFKCIi8PubK%2BLe9xZbPQm2V%2FlhvlSKf9fXqo076IyX5yTp6bLuf3S79hW5zVWIcK0XVpp9fseSxsdVgQdKnvt7tt0fLDFqwsIe2F6by7ckwWHY1kcrDga4T0GFYdg8lnQbMXQYtR23dBN0fNjovd%2BP4WzTd5PdWc7oDrEkm6gHTH2Vfn5PkpRuD%2FDcFOrn13%2Ba%2Fq0w%2BugJkSiSmxJR8R9NWd0U1dkIOburDkq40klZHcpZP73UppKi5%2B%2FqbYKbThayt2%2BNmrbCJMygfvCJuu05jLuG%2FJ%2FWXJuTCr2jBBvl%2Bz74nwRmY3lzMTZ8n6jddW16LECGuljitQeWo%2FAZNj8hTV04f5wtY3kKaCyUpE2QmZBaSuwJI92GROb%2FVFGDX3hImDIitHxg%2FnP5UkUGLe07CE%2FU8fzut9ewd98xJoehtxVCI3JXJVgqohbHZxlCbm5NrPjWkgVM4oVMY5CJVRd5%2Bs1sqzWrvRcGnQbXntNhXtsOl3eoHHKfWbgR8EtIHUjln32z%2F%2BAQAA%2F%2F8BAAD%2F%2FxQcnXhjBAAA
200 OK 7 B URL HTTP/1.1 prawnsimply.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSz2skRRTHq3dzEUF0yUVQmeMuyKS7Z6Znxj0sxhgJxs26q%2BhBkOqqmkkl1V1NVf%2BY5BRckD0Izv4Hne8kG3QX0Zv4Y5HOgoeAkPGUgwHBf0DFPXiSmR0cfdC89%2Fr7PXzee%2FXxfnZOXGT0bOUtvSuVokutulu7%2FL7nXa2tyzgb1Aad4MOgebVm8le6Qd29UntDsG295Lue63quV1uVRvT0YGkiQiYPul6969abft1rNTEw%2F%2B9t5sBSBzw%2FJ5cg%2BXjhkbMIySrE0Zcrwm6nOnn59ShTNNUGOT96N96OdREjmpc946AXH83c0PZ09SF0fDjFhc7%2FNYZyTJwfHyKMj2aQCPODKWeoIGKE%2FGkUeQWhKkhagenbkPyUAIzj%2Bgbi6N51bQq680SlE3VMFh7%2FCVmMycIvi4ijL5aVHNRuaZWlUscWg14JOagg%2BxWS7Bjp7gXI4hgs%2FQiS%2F0SWHq8jjg42rNKQvJzOLmUF2augxBDUOsgmn3SQ9RxkiYOIn9WY53ltlzPqdrqMNXhbhAF3PdruedRzgw4yNsEbIk2GYGoIZvaQmD1sy7tjQn59Bib7AXazhOUObDomztt7yHmJQhAUlqCgBIUkKFKCIi8PubK%2BLe9xZbPQm2V%2FlhvlSKf9fXqo076IyX5yTp6bLuf3S79hW5zVWIcK0XVpp9fseSxsdVgQdKnvt7tt0fLDFqwsIe2F6by7ckwWHY1kcrDga4T0GFYdg8lnQbMXQYtR23dBN0fNjovd%2BP4WzTd5PdWc7oDrEkm6gHTH2Vfn5PkpRuD%2FDcFOrn13%2Ba%2Fq0w%2BugJkSiSmxJR8R9NWd0U1dkIOburDkq40klZHcpZP73UppKi5%2B%2FqbYKbThayt2%2BNmrbCJMygfvCJuu05jLuG%2FJ%2FWXJuTCr2jBBvl%2Bz74nwRmY3lzMTZ8n6jddW16LECGuljitQeWo%2FAZNj8hTV04f5wtY3kKaCyUpE2QmZBaSuwJI92GROb%2FVFGDX3hImDIitHxg%2FnP5UkUGLe07CE%2FU8fzut9ewd98xJoehtxVCI3JXJVgqohbHZxlCbm5NrPjWkgVM4oVMY5CJVRd5%2Bs1sqzWrvRcGnQbXntNhXtsOl3eoHHKfWbgR8EtIHUjln32z%2F%2BAQAA%2F%2F8BAAD%2F%2FxQcnXhjBAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1SSz2skRRTHq3dzEUF0yUVQmeMuyKS7Z6Znxj0sxhgJxs26q%2BhBkOqqmkkl1V1NVf%2BY5BRckD0Izv4Hne8kG3QX0Zv4Y5HOgoeAkPGUgwHBf0DFPXiSmR0cfdC89%2Fr7PXzee%2FXxfnZOXGT0bOUtvSuVokutulu7%2FL7nXa2tyzgb1Aad4MOgebVm8le6Qd29UntDsG295Lue63quV1uVRvT0YGkiQiYPul6969abft1rNTEw%2F%2B9t5sBSBzw%2FJ5cg%2BXjhkbMIySrE0Zcrwm6nOnn59ShTNNUGOT96N96OdREjmpc946AXH83c0PZ09SF0fDjFhc7%2FNYZyTJwfHyKMj2aQCPODKWeoIGKE%2FGkUeQWhKkhagenbkPyUAIzj%2Bgbi6N51bQq680SlE3VMFh7%2FCVmMycIvi4ijL5aVHNRuaZWlUscWg14JOagg%2BxWS7Bjp7gXI4hgs%2FQiS%2F0SWHq8jjg42rNKQvJzOLmUF2augxBDUOsgmn3SQ9RxkiYOIn9WY53ltlzPqdrqMNXhbhAF3PdruedRzgw4yNsEbIk2GYGoIZvaQmD1sy7tjQn59Bib7AXazhOUObDomztt7yHmJQhAUlqCgBIUkKFKCIi8PubK%2BLe9xZbPQm2V%2FlhvlSKf9fXqo076IyX5yTp6bLuf3S79hW5zVWIcK0XVpp9fseSxsdVgQdKnvt7tt0fLDFqwsIe2F6by7ckwWHY1kcrDga4T0GFYdg8lnQbMXQYtR23dBN0fNjovd%2BP4WzTd5PdWc7oDrEkm6gHTH2Vfn5PkpRuD%2FDcFOrn13%2Ba%2Fq0w%2BugJkSiSmxJR8R9NWd0U1dkIOburDkq40klZHcpZP73UppKi5%2B%2FqbYKbThayt2%2BNmrbCJMygfvCJuu05jLuG%2FJ%2FWXJuTCr2jBBvl%2Bz74nwRmY3lzMTZ8n6jddW16LECGuljitQeWo%2FAZNj8hTV04f5wtY3kKaCyUpE2QmZBaSuwJI92GROb%2FVFGDX3hImDIitHxg%2FnP5UkUGLe07CE%2FU8fzut9ewd98xJoehtxVCI3JXJVgqohbHZxlCbm5NrPjWkgVM4oVMY5CJVRd5%2Bs1sqzWrvRcGnQbXntNhXtsOl3eoHHKfWbgR8EtIHUjln32z%2F%2BAQAA%2F%2F8BAAD%2F%2FxQcnXhjBAAA HTTP/1.1
Host: prawnsimply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Cookie: u_pl=15799012; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 02 Oct 2022 16:27:30 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 929296d1ec7edec5e58c842fb98a9a6e
Strict-Transport-Security: max-age=0; includeSubdomains
pics.dmm.co.jp/mono/movie/adult/adn387/adn387pl.jpg
200 OK 179 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/adn387/adn387pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x538, components 3\012- data
Size 179 kB (178551 bytes)
Hash 174bfee07ff88a0f44f33099b3407836
dd268085277e795bbe698acc29e94b650a810248
6a7ac97d1ff0c98c53d99a127c672ee8e56c77a60647b40675bc99a174428ae6
GET /mono/movie/adult/adn387/adn387pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 178551
last-modified: Mon, 28 Feb 2022 12:23:21 GMT
etag: "621cbeb9-2b977"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLeAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/9ssis362/9ssis362pl.jpg
200 OK 156 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/9ssis362/9ssis362pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x439, components 3\012- data
Size 156 kB (156474 bytes)
Hash 0c90b4a52f5c6ae7a9a32c0dafbcd91d
046b8084da0b41e4d123cfb0117e252ccee78a38
4f6a65d61e919a7d1566e3d34274a3ab83797cd6e340bccd3a48ee6d001d074a
GET /mono/movie/adult/9ssis362/9ssis362pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 156474
last-modified: Mon, 21 Feb 2022 11:11:24 GMT
etag: "6213735c-2633a"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLfAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/ssni992/ssni992pl.jpg
200 OK 177 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/ssni992/ssni992pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 177 kB (176605 bytes)
Hash cd86445ccdeebaf8def6d5374c8f4fc6
b94e334ce14e620a6ffd9d65b36a737578f32df2
fa00bc44786db323d112a97fc078da7665b4b5f37ecf21fdf708b5a76313cba8
GET /mono/movie/adult/ssni992/ssni992pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 176605
last-modified: Mon, 18 Jan 2021 11:35:58 GMT
etag: "6005729e-2b1dd"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLhAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/digital/video/jufd00744/jufd00744pl.jpg
200 OK 188 kB URL HTTP/2 pics.dmm.co.jp/digital/video/jufd00744/jufd00744pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 188 kB (187647 bytes)
Hash 82e7b04c1e6821869b2b9d40d7652025
87371fdcbb879b9318d847dd94daa40c06ed0c3e
2dfd471a4fb22d1b25f5c2e687ce76fa46877496336d9b5af7b6e951dc5afc09
GET /digital/video/jufd00744/jufd00744pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 187647
last-modified: Fri, 31 Mar 2017 00:22:36 GMT
etag: "58dda14c-2dcff"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLjAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/digital/video/1star00782/1star00782pl.jpg
200 OK 169 kB URL HTTP/2 pics.dmm.co.jp/digital/video/1star00782/1star00782pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 169 kB (168951 bytes)
Hash c46cfe34866919dea19f1e7e24eabf07
173c6bd4904d8db691091392af487b6602a96edb
8ffbb6f47e3a6dfac7b40cd5252b5dba4973f518983053c8d6b3cd31a710cf56
GET /digital/video/1star00782/1star00782pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 168951
last-modified: Tue, 02 May 2017 01:09:57 GMT
etag: "5907dc65-293f7"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLkAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/digital/video/13gvg00486/13gvg00486pl.jpg
200 OK 187 kB URL HTTP/2 pics.dmm.co.jp/digital/video/13gvg00486/13gvg00486pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x537, components 3\012- data
Size 187 kB (186838 bytes)
Hash dc145b227da78cc6d9ef9ddcb5a2b171
e31b4719dc868b158e6e9d9067fc6e3ea073cbac
833a70b8d36161ffdb078f11e392f7aa87bb53a98669f422cecf30c75d5f465e
GET /digital/video/13gvg00486/13gvg00486pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 186838
last-modified: Mon, 01 May 2017 00:15:48 GMT
etag: "59067e34-2d9d6"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLlAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/digital/video/sspd00137/sspd00137pl.jpg
200 OK 167 kB URL HTTP/2 pics.dmm.co.jp/digital/video/sspd00137/sspd00137pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 167 kB (166783 bytes)
Hash 9fc62e877e348153cabb9a81cb730797
982c0bbfc40f30b079e408799f58fc1faece72ca
6037ec88579521ed1e53f38d7cad6842d680fa2da4c8bab4d6b395c9bb9f2e0b
GET /digital/video/sspd00137/sspd00137pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 166783
last-modified: Tue, 02 May 2017 00:24:11 GMT
etag: "5907d1ab-28b7f"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLmAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/ipx643/ipx643pl.jpg
200 OK 207 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/ipx643/ipx643pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x538, components 3\012- data
Size 207 kB (207275 bytes)
Hash b2d969c5ddb2374fec4835748e49a85e
0d3b56f8fe671a056f39536638aeb3175dc4b5fc
a103d891d4d91a5e5306978a0cfe29fd44ad256986ec8bce9b1f0e8a90021aaa
GET /mono/movie/adult/ipx643/ipx643pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:27 GMT
content-type: image/jpeg
content-length: 207275
last-modified: Thu, 11 Mar 2021 10:02:16 GMT
etag: "6049eaa8-329ab"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u+8NjiwqJQLQAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/cawd362/cawd362pl.jpg
200 OK 197 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/cawd362/cawd362pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x538, components 3\012- data
Size 197 kB (197304 bytes)
Hash d214d530273f08a634e03e7c002ef613
660853e1f860e8830b4ebd7d53871c26c74b8591
72012f2cb49313dab912479091e709eb1c208e22b4bc481d9a78749e626b1bdf
GET /mono/movie/adult/cawd362/cawd362pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 197304
last-modified: Mon, 28 Feb 2022 12:23:33 GMT
etag: "621cbec5-302b8"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLTAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/waaa156/waaa156pl.jpg
200 OK 204 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/waaa156/waaa156pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x538, components 3\012- data
Size 204 kB (203906 bytes)
Hash 67d2a6675677a26d5a07bbf6e3f3472b
e57366cd2e856ba286faa3bba1db39697f743761
5ae17472d78cec10f56537867279804674ad101b3342e4e886012ddaf241a3a7
GET /mono/movie/adult/waaa156/waaa156pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 203906
last-modified: Mon, 28 Feb 2022 12:25:08 GMT
etag: "621cbf24-31c82"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLdAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/venu915/venu915pl.jpg
200 OK 198 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/venu915/venu915pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x540, components 3\012- data
Size 198 kB (197565 bytes)
Hash 596224a50868951367e5864b4cdd8919
ed8d0a8b3128dd327f186363d0821d491bd692e7
886735a8d790d6c706566b2db55f5372f09dac2e32f575235959cfa472593da1
GET /mono/movie/adult/venu915/venu915pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 197565
last-modified: Mon, 10 Feb 2020 01:07:44 GMT
etag: "5e40ace0-303bd"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLgAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/118gnab109/118gnab109pl.jpg
200 OK 228 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/118gnab109/118gnab109pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x538, components 3\012- data
Size 228 kB (227525 bytes)
Hash c192192965421d96bbc0a2593d92f081
9d4e88b4a3639b482c4c5990a11608778fa231da
2ebc20d763197bc00bf7ac9c62c8244e72862d3f5cd4307dc95c18ad193dc771
GET /mono/movie/adult/118gnab109/118gnab109pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 227525
last-modified: Tue, 13 Sep 2022 06:39:41 GMT
etag: "632025ad-378c5"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLiAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/jul886/jul886pl.jpg
200 OK 204 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/jul886/jul886pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x538, components 3\012- data
Size 204 kB (204543 bytes)
Hash 7244154d5fd929e544ed7d2cc8041edc
29540f90539d66ce3355ef5ccae83e248131d52f
1283a235c86989382956f6060cdbdba1cc3a0eb621016fe591652915d367b534
GET /mono/movie/adult/jul886/jul886pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 204543
last-modified: Mon, 07 Feb 2022 12:29:13 GMT
etag: "62011099-31eff"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLnAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
pics.dmm.co.jp/mono/movie/adult/aarm123/aarm123pl.jpg
200 OK 265 kB URL HTTP/2 pics.dmm.co.jp/mono/movie/adult/aarm123/aarm123pl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x538, components 3\012- data
Size 265 kB (265170 bytes)
Hash befaf11c8428926d5fa7689b38e28b29
7d5c59691a76aba94300b41824317c7998f3689d
5b590ed3e5a37d2cbc7d84d30a65c68f65ef7715316ed7d61a6a557b46e12f7e
GET /mono/movie/adult/aarm123/aarm123pl.jpg HTTP/1.1
Host: pics.dmm.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: image/jpeg
content-length: 265170
last-modified: Wed, 31 Aug 2022 08:02:52 GMT
etag: "630f15ac-40bd2"
x-pics-origin: digital-master
x-cache-status: HIT
set-cookie: app_uid=Z/6RlWM5u/ANjiwqJQLYAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dmm.co.jp; path=/
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d57574ab2c553a34711b5837bfd30b55
3f19cb2c27aa8a0187637660c2bc3a58cef2ceb4
4b042d4c99b987b3275e8dbd5b064f734e9c9d997081fa86f1137cd620c33288
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4B042D4C99B987B3275E8DBD5B064F734E9C9D997081FA86F1137CD620C33288"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20941
Expires: Sun, 02 Oct 2022 22:16:31 GMT
Date: Sun, 02 Oct 2022 16:27:30 GMT
Connection: keep-alive
akmxts.com/lv/esnk/1872197/code.js?pid=_cb-1872197_2
200 OK 49 kB URL HTTP/2 akmxts.com/lv/esnk/1872197/code.js?pid=_cb-1872197_2
IP
Hash f429cf19b46f10c65efed9c40d887c22
12db79b5319ab32b7a9616877c3b345eaa802d44
eea0f9d426eedf9eaf654c3f9ccd40e7a9ee328142cdbaf2a42cacc332bbe252
GET /lv/esnk/1872197/code.js?pid=_cb-1872197_2 HTTP/1.1
Host: akmxts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 14:00:58 GMT
vary: Accept-Encoding
etag: W/"6333021a-1e318"
x-js-ab1: current
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Sun, 02 Oct 2022 14:41:09 GMT
expires: Sun, 02 Oct 2022 16:41:09 GMT
cache-control: public, max-age=7200
age: 6381
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 6b2fd94fd0b2607df5a0aa20419566b7
65f275db36cda005a73cf806b613eefbbee602c9
78f5297fe8ca20edcfb24ca602e17c525e7961ab3fba14c6f64cec0236c63cae
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "78F5297FE8CA20EDCFB24CA602E17C525E7961AB3FBA14C6F64CEC0236C63CAE"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5494
Expires: Sun, 02 Oct 2022 17:59:05 GMT
Date: Sun, 02 Oct 2022 16:27:31 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 6b2fd94fd0b2607df5a0aa20419566b7
65f275db36cda005a73cf806b613eefbbee602c9
78f5297fe8ca20edcfb24ca602e17c525e7961ab3fba14c6f64cec0236c63cae
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "78F5297FE8CA20EDCFB24CA602E17C525E7961AB3FBA14C6F64CEC0236C63CAE"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5494
Expires: Sun, 02 Oct 2022 17:59:05 GMT
Date: Sun, 02 Oct 2022 16:27:31 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 6b2fd94fd0b2607df5a0aa20419566b7
65f275db36cda005a73cf806b613eefbbee602c9
78f5297fe8ca20edcfb24ca602e17c525e7961ab3fba14c6f64cec0236c63cae
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "78F5297FE8CA20EDCFB24CA602E17C525E7961AB3FBA14C6F64CEC0236C63CAE"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5494
Expires: Sun, 02 Oct 2022 17:59:05 GMT
Date: Sun, 02 Oct 2022 16:27:31 GMT
Connection: keep-alive
prawnsimply.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fb6%2Fcf%2F48%2Fb6cf48ca3e8ab4bdbcfaa2279b0fb2bc%2F1613726822.html&l=1274&fd=450
200 OK 0 B URL HTTP/1.1 prawnsimply.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fb6%2Fcf%2F48%2Fb6cf48ca3e8ab4bdbcfaa2279b0fb2bc%2F1613726822.html&l=1274&fd=450
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fb6%2Fcf%2F48%2Fb6cf48ca3e8ab4bdbcfaa2279b0fb2bc%2F1613726822.html&l=1274&fd=450 HTTP/1.1
Host: prawnsimply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Cookie: u_pl=15799012; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 02 Oct 2022 16:27:31 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 6b2fd94fd0b2607df5a0aa20419566b7
65f275db36cda005a73cf806b613eefbbee602c9
78f5297fe8ca20edcfb24ca602e17c525e7961ab3fba14c6f64cec0236c63cae
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "78F5297FE8CA20EDCFB24CA602E17C525E7961AB3FBA14C6F64CEC0236C63CAE"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5494
Expires: Sun, 02 Oct 2022 17:59:05 GMT
Date: Sun, 02 Oct 2022 16:27:31 GMT
Connection: keep-alive
cdn.sb4you1.com/sb/ssp/utility/social-media/facebook/css/animate.css
200 OK 4.8 kB URL HTTP/2 cdn.sb4you1.com/sb/ssp/utility/social-media/facebook/css/animate.css
IP
Hash 21eb7a65c17a2c22ba104a7ecbf1dc0f
ea8c53be54889c7489aed04e30e3eb83af64dec9
090bd9ceb9a58da038e5ed4a39dfbb63ece49ed4f4f0656ce35f7faa41a3b237
GET /sb/ssp/utility/social-media/facebook/css/animate.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javhd.today
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:31 GMT
content-type: text/css
last-modified: Sat, 20 Feb 2021 08:44:40 GMT
etag: W/"6030cbf8-1358d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2611106
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V6Mk09HurO2f0SqxyOpkxTG%2F%2F5%2BeAyYYrvR5HJdtofSRMClW%2B8o02Z6QNu5BZnFFiOuTqXVI0NKxo9psmJtdxUq7HEFmMeFszaVWx8O1WV8P9Z4xV68ZCJEc4MaMvnvfTN8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 753ece4f3c52d180-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 165b2dbf56e36edf32811cc7eea70f58
f9e101da2c4f0f6dcca9cb9d0b36a7b77ef3114e
fcd8956f2d96a85e696ee4ba5eb8d575ad3319bc84c543188f3997ea1079c4e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:27:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2qj7mq3w4uxe.com/get/1881613?zoneid=1881613&jp=_cl3907p59oyctw70pzndb3&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=4894174221525654
200 OK 57 B URL HTTP/2 2qj7mq3w4uxe.com/get/1881613?zoneid=1881613&jp=_cl3907p59oyctw70pzndb3&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=4894174221525654
IP
File type ASCII text, with no line terminators
Hash 02a7eedcf29cefdbd3486efc1a2904b6
69736d08b55132406eb58820d02098ecf8b9a96d
361dd0e92cf15e662e9720472730b3be0d26a13bdcf2ea5ae90b130e5196d988
GET /get/1881613?zoneid=1881613&jp=_cl3907p59oyctw70pzndb3&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=4894174221525654 HTTP/1.1
Host: 2qj7mq3w4uxe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: text/javascript
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=22100211271a7cd150cf5045d0a8ad6dd859; Path=/; Expires=Mon, 02 Oct 2023 16:27:29 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/ssp/utility/social-media/facebook/js/script.js
200 OK 7.4 kB URL HTTP/2 cdn.sb4you1.com/sb/ssp/utility/social-media/facebook/js/script.js
IP
Hash c424f8f1510f1cd89b4f1718b58030e3
cf0f49af238a46cbe59559e21aa61fe246c1b7b1
e5d7584978e702fd3a4c1914bfa622383155b0b9dadaa65410b601b580bbad60
GET /sb/ssp/utility/social-media/facebook/js/script.js HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javhd.today
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:31 GMT
content-type: application/javascript
last-modified: Sat, 20 Feb 2021 08:47:14 GMT
etag: W/"6030cc92-1bc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 5206250
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D%2BIJXquONFPGNKrU5DlMZ0XX5SUS8SU0%2Fm945%2Bx0DyWveOjsoQYxvgWgKiEMP86GGNfkVCJ%2FID5%2B08ZzEc5MpqQWtSwXaNFw6zi7of7vD%2FEVfeuX7CzY5ym%2F1wGiHTZe%2FcU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 753ece4f1c23d180-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/a5/38/82/a538823dc3936f2d56da6943c137a79d/1658144826.jpg
200 OK 17 kB URL HTTP/2 cdn.cloudimagesb.com/si/a5/38/82/a538823dc3936f2d56da6943c137a79d/1658144826.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 11e8fa77a29b9c78b6a9b759abff4667
b67f409f364c567805e7fcd0d9f14fe882cf0592
27e7345cc77747f44f5acbc02bf5afbebb0d831a4e4f06a171d7876382ffd049
GET /si/a5/38/82/a538823dc3936f2d56da6943c137a79d/1658144826.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:31 GMT
content-type: image/jpeg
content-length: 16913
server: nginx/1.17.6
last-modified: Mon, 18 Jul 2022 11:47:14 GMT
etag: "62d54842-4211"
expires: Tue, 04 Oct 2022 16:27:31 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
prawnsimply.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fcss%2Fanimate.css&l=79245&fd=121
200 OK 0 B URL HTTP/1.1 prawnsimply.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fcss%2Fanimate.css&l=79245&fd=121
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fcss%2Fanimate.css&l=79245&fd=121 HTTP/1.1
Host: prawnsimply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Cookie: u_pl=15799012; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 02 Oct 2022 16:27:31 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 83f9407574c75ca600c57af0637cb200
4ebabbc1900b8f575e90186e2024e48097b0c8d2
1e166ac737e5c3c015e0dc0c68115ebc5eeb53958682a9b77928ddb647137ac1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:27:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
200 OK 676 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
Hash 5f4c1d525be4ddcecb7a50ed75be3d14
c88953bcaa12c991b0d1da54b4f12a6ce973f67e
1edc036f5923fe2080b425253d020ccbc577f30018e899e05cf126dd48a1671c
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 02 Oct 2022 16:27:31 GMT
date: Sun, 02 Oct 2022 16:27:31 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
prawnsimply.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fcss%2Fstyle.css&l=6334&fd=119
200 OK 0 B URL HTTP/1.1 prawnsimply.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fcss%2Fstyle.css&l=6334&fd=119
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fcss%2Fstyle.css&l=6334&fd=119 HTTP/1.1
Host: prawnsimply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Cookie: u_pl=15799012; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 02 Oct 2022 16:27:31 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e251a53-c5b8-4c0a-b486-8ef8a6fd4d77.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e251a53-c5b8-4c0a-b486-8ef8a6fd4d77.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6299d2938a1195b694844a0556a569b3
82123a6c3e74a7ff90b5db0cb8a333a64cefe71c
b65f713b3c94586b0d09a04b6873004d8cdfe6a13d364863fc1a6cd2d1ceac83
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e251a53-c5b8-4c0a-b486-8ef8a6fd4d77.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5503
x-amzn-requestid: e5e2b912-6deb-4736-b455-c9e37e1701ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWDgdHE-oAMFq3Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b2cf-12a1f95320eadd1105daba75;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:36:15 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: zHzIjHe7MqjqSn1ejlTA-tD_gJBAizq91U3sI_prwcx7Vx4ai4B0DQ==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:48:26 GMT
etag: "82123a6c3e74a7ff90b5db0cb8a333a64cefe71c"
content-type: image/jpeg
age: 67145
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb2de1a6c4c76b62bd9b5844ac8f0711
205f8666f86cf5f699ed5c8252c46004492fa88e
d0f5a54640474e3d0383d5302a9899e8060456287379906d2359925c6d36c46b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:27:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
prawnsimply.com/impr.gif?sid=H4sIAAAAAAAC%2F1SSy2skVRTGb81kI4LokI2g0ssZkE5Vp5%2FOYjDGSDBOxhlFF4LcV3VucqtucW89OlkFB2QWgj3%2FQeXrZILOILoTH4NUBlwEhLSrLAwI%2FgMqzsKVdE%2Bw9UBxzqnvW%2FzOOffjveyM%2BMjo6fJbZkdpTRdadb92%2Bf0guFpbU3E2qA267Q%2Fbzas1m7%2FSa9f9K7U3JN8yCw0%2F8P3AD2orysrQDBYmIlTyoBfUe3692agHrSYG9v%2B9yzw46kHkZ%2BQSlBjPPfLmoXiFOPpyWbqt1CQvvx5lmqbGIheH78ZbsSliRLMytB7C%2BPDcDeNOVh7CxAdTXJj8XyNTY%2BL9%2BBAsPjyHBMv3p5xMQ8Zg4mkUeQWpKyhagZvbUOKEAFzg%2Bjri6N51Ywu6%2FUSlE3VM5h7%2FCVWMydwv84ijL5a0GtRuGZ2lysQOg7CEGlRQ%2FQpJdoR05wJUcQSefgQlfiILj9cQR%2FvrThsoUU5nV6qCCitoOQR1HrLJpzxkoYcs8RCJ0xoPgqDjC079bo%2FzRdGRrC38gHbCgAZ%2Bu4uMT%2FCGSJMhuB6C210kdhdb6u6YkF%2Bfgc1%2BgNso4YQHl46J9%2FYuclGikASFIygoQaEIipSgyMsDoV3DlfeEdhkLznPjPC%2BWI5P29%2BiBSfsyJnvJGXluupzfL%2F2GLXla410qZc%2Bn3bAZBpy1urzd7tFGo9PryFaDteBUCeUuTOfdUWMy7xkkk4O1vwajR3D6CFw9C5q9CFqMOg0fdGPU7PrYie9v0nxD1FMj6DaEKZGkc0i3vT19Rp6fYrQbf0Py42vfXf6r%2BvSDK%2BC2RGJLbKpHBH19Z3TTFGT%2Fpikc%2BWo9SVWkdujkfrdSmsqLn78ptwtjxeqyG372Kp8Ik%2FLBO9KlazQWKu47cn9JCSHtirFcku9X3XuS3cjcxlJm4yxZu%2FHaymqUWOmcMnEFqk7cJ%2BBqTJ6iZvowX9j8BspWsFmJKDsm5wFlKvBkFy6Z0TtzEVbPPCzxUGTlyDbY7KdWBFrOespKuP%2F0bFbvuTvo25dA09uIoxK5LZHrElQP4bKLozSxx9d%2BXpwGmPZGTFtvn2mr7z5ZrVOntUVfdJgMZYfJZqsZSi5Yq8V8HnK2KLpdjtSNee%2FbP%2F4BAAD%2F%2FwEAAP%2F%2FlMhIkGMEAAA%3D
200 OK 7 B URL HTTP/1.1 prawnsimply.com/impr.gif?sid=H4sIAAAAAAAC%2F1SSy2skVRTGb81kI4LokI2g0ssZkE5Vp5%2FOYjDGSDBOxhlFF4LcV3VucqtucW89OlkFB2QWgj3%2FQeXrZILOILoTH4NUBlwEhLSrLAwI%2FgMqzsKVdE%2Bw9UBxzqnvW%2FzOOffjveyM%2BMjo6fJbZkdpTRdadb92%2Bf0guFpbU3E2qA267Q%2Fbzas1m7%2FSa9f9K7U3JN8yCw0%2F8P3AD2orysrQDBYmIlTyoBfUe3692agHrSYG9v%2B9yzw46kHkZ%2BQSlBjPPfLmoXiFOPpyWbqt1CQvvx5lmqbGIheH78ZbsSliRLMytB7C%2BPDcDeNOVh7CxAdTXJj8XyNTY%2BL9%2BBAsPjyHBMv3p5xMQ8Zg4mkUeQWpKyhagZvbUOKEAFzg%2Bjri6N51Ywu6%2FUSlE3VM5h7%2FCVWMydwv84ijL5a0GtRuGZ2lysQOg7CEGlRQ%2FQpJdoR05wJUcQSefgQlfiILj9cQR%2FvrThsoUU5nV6qCCitoOQR1HrLJpzxkoYcs8RCJ0xoPgqDjC079bo%2FzRdGRrC38gHbCgAZ%2Bu4uMT%2FCGSJMhuB6C210kdhdb6u6YkF%2Bfgc1%2BgNso4YQHl46J9%2FYuclGikASFIygoQaEIipSgyMsDoV3DlfeEdhkLznPjPC%2BWI5P29%2BiBSfsyJnvJGXluupzfL%2F2GLXla410qZc%2Bn3bAZBpy1urzd7tFGo9PryFaDteBUCeUuTOfdUWMy7xkkk4O1vwajR3D6CFw9C5q9CFqMOg0fdGPU7PrYie9v0nxD1FMj6DaEKZGkc0i3vT19Rp6fYrQbf0Py42vfXf6r%2BvSDK%2BC2RGJLbKpHBH19Z3TTFGT%2Fpikc%2BWo9SVWkdujkfrdSmsqLn78ptwtjxeqyG372Kp8Ik%2FLBO9KlazQWKu47cn9JCSHtirFcku9X3XuS3cjcxlJm4yxZu%2FHaymqUWOmcMnEFqk7cJ%2BBqTJ6iZvowX9j8BspWsFmJKDsm5wFlKvBkFy6Z0TtzEVbPPCzxUGTlyDbY7KdWBFrOespKuP%2F0bFbvuTvo25dA09uIoxK5LZHrElQP4bKLozSxx9d%2BXpwGmPZGTFtvn2mr7z5ZrVOntUVfdJgMZYfJZqsZSi5Yq8V8HnK2KLpdjtSNee%2FbP%2F4BAAD%2F%2FwEAAP%2F%2FlMhIkGMEAAA%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1SSy2skVRTGb81kI4LokI2g0ssZkE5Vp5%2FOYjDGSDBOxhlFF4LcV3VucqtucW89OlkFB2QWgj3%2FQeXrZILOILoTH4NUBlwEhLSrLAwI%2FgMqzsKVdE%2Bw9UBxzqnvW%2FzOOffjveyM%2BMjo6fJbZkdpTRdadb92%2Bf0guFpbU3E2qA267Q%2Fbzas1m7%2FSa9f9K7U3JN8yCw0%2F8P3AD2orysrQDBYmIlTyoBfUe3692agHrSYG9v%2B9yzw46kHkZ%2BQSlBjPPfLmoXiFOPpyWbqt1CQvvx5lmqbGIheH78ZbsSliRLMytB7C%2BPDcDeNOVh7CxAdTXJj8XyNTY%2BL9%2BBAsPjyHBMv3p5xMQ8Zg4mkUeQWpKyhagZvbUOKEAFzg%2Bjri6N51Ywu6%2FUSlE3VM5h7%2FCVWMydwv84ijL5a0GtRuGZ2lysQOg7CEGlRQ%2FQpJdoR05wJUcQSefgQlfiILj9cQR%2FvrThsoUU5nV6qCCitoOQR1HrLJpzxkoYcs8RCJ0xoPgqDjC079bo%2FzRdGRrC38gHbCgAZ%2Bu4uMT%2FCGSJMhuB6C210kdhdb6u6YkF%2Bfgc1%2BgNso4YQHl46J9%2FYuclGikASFIygoQaEIipSgyMsDoV3DlfeEdhkLznPjPC%2BWI5P29%2BiBSfsyJnvJGXluupzfL%2F2GLXla410qZc%2Bn3bAZBpy1urzd7tFGo9PryFaDteBUCeUuTOfdUWMy7xkkk4O1vwajR3D6CFw9C5q9CFqMOg0fdGPU7PrYie9v0nxD1FMj6DaEKZGkc0i3vT19Rp6fYrQbf0Py42vfXf6r%2BvSDK%2BC2RGJLbKpHBH19Z3TTFGT%2Fpikc%2BWo9SVWkdujkfrdSmsqLn78ptwtjxeqyG372Kp8Ik%2FLBO9KlazQWKu47cn9JCSHtirFcku9X3XuS3cjcxlJm4yxZu%2FHaymqUWOmcMnEFqk7cJ%2BBqTJ6iZvowX9j8BspWsFmJKDsm5wFlKvBkFy6Z0TtzEVbPPCzxUGTlyDbY7KdWBFrOespKuP%2F0bFbvuTvo25dA09uIoxK5LZHrElQP4bKLozSxx9d%2BXpwGmPZGTFtvn2mr7z5ZrVOntUVfdJgMZYfJZqsZSi5Yq8V8HnK2KLpdjtSNee%2FbP%2F4BAAD%2F%2FwEAAP%2F%2FlMhIkGMEAAA%3D HTTP/1.1
Host: prawnsimply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Cookie: u_pl=15799012; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 02 Oct 2022 16:27:31 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 428ddb3b6e44a4c08374fc494f5f2f5e
Strict-Transport-Security: max-age=0; includeSubdomains
prawnsimply.com/pixel/sbs?c=1
200 OK 0 B URL HTTP/1.1 prawnsimply.com/pixel/sbs?c=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: prawnsimply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Cookie: u_pl=15799012; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 02 Oct 2022 16:27:31 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://javhd.today
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Sep 2022 19:34:08 GMT
expires: Thu, 28 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 334403
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb2de1a6c4c76b62bd9b5844ac8f0711
205f8666f86cf5f699ed5c8252c46004492fa88e
d0f5a54640474e3d0383d5302a9899e8060456287379906d2359925c6d36c46b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:27:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://javhd.today
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Sep 2022 19:34:08 GMT
expires: Thu, 28 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 334403
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 11 kB IP
Hash 67849733a625d9840221b8978f1a3df4
c49fb4c4c93011e51b3b685751b1b6e057168a1d
6a91dc5f41ff3cadd3145130b7c430f447733b2ce73ade394564a422ce25dd1f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:27:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
roomimg.stream.highwebmedia.com/riw/amandamedrano.jpg?1664728050
200 OK 7.6 kB URL HTTP/2 roomimg.stream.highwebmedia.com/riw/amandamedrano.jpg?1664728050
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 548x549, segment length 16, progressive, precision 8, 480x270, components 3\012- data
Hash 4d125ca8654f6ba69244d505e0a1f1e2
308ce36724434f7b6a65dfbf607a716ffa2d3af4
82e6e92b17c706e4763667ef3dc338a1f66be2c0a978c069c12f9cabcd14e57d
GET /riw/amandamedrano.jpg?1664728050 HTTP/1.1
Host: roomimg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:31 GMT
content-type: image/jpeg
content-length: 7587
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
cache-control: public, max-age=30
cf-bgj: imgq:100,h2pri
cf-polished: origSize=7651
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 3
last-modified: Sun, 02 Oct 2022 16:27:28 GMT
expires: Sun, 02 Oct 2022 16:28:01 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HSP%2FxOsokcPh1Xv4I%2FABdjIfPSvkdekdbVps1LyP%2Fq%2B5dgZrZmom9F5OoKKNaqf4HI8ocI728rVQg6ZxTwELzMUPJnLmzVBi1dO6TMODc3pnCOVKr6%2FZ6teTfFf44cjXwCIz60cRsc9L33ppJXTfsYY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=i1xuvfwsbIYA3wKt6MK8IhcaBT1w07V8jA239r7AJIo-1664728051711-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 753ece532fa1b51e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
roomimg.stream.highwebmedia.com/riw/annemanifique.jpg?1664728050
200 OK 17 kB URL HTTP/2 roomimg.stream.highwebmedia.com/riw/annemanifique.jpg?1664728050
IP
Hash 9fb91b310a7046836262feceeab6246b
15e02bd7fb9a9a44387511899fac5474d1a7bb00
5940020ffc9df9dd29218507f921dba013d20fd59814b88277152ce6f042ed37
GET /riw/annemanifique.jpg?1664728050 HTTP/1.1
Host: roomimg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:31 GMT
content-type: image/jpeg
content-length: 15404
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
cache-control: public, max-age=30
cf-bgj: imgq:100,h2pri
cf-polished: origSize=15458
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 28
last-modified: Sun, 02 Oct 2022 16:27:03 GMT
expires: Sun, 02 Oct 2022 16:28:01 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BL7g1ABeaqHGFTs%2F8z582R9KZRT9rN%2B448yMvEzeYj1%2FMmr3jkZRR9ZzM4sEHrhYDMlU4L%2B2Xe%2BTMjnligbefTV8jwNfL65CwNH6qK2XeQUQZLRaK1P23qM5POP5JmCfpQprfQM106Lok%2FIMnzO%2FGwo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=na7dHj2lWRhlg7w5zf0O4G8cNvmHBy3kjRtpfsZXJ1s-1664728051721-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 753ece532fabb51e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
chaturbate.com/tours/3/?tour=x1Rd&campaign=NcAyU&c=3&p=0&gender=f&disable_sound=0
200 OK 27 kB URL HTTP/2 chaturbate.com/tours/3/?tour=x1Rd&campaign=NcAyU&c=3&p=0&gender=f&disable_sound=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (31162)
Hash bc2ea149964e83943471c96ab075fb5b
e013fa538f807da9d897aa00d6a063602d0343d9
515c0cd163e5e713a60073589121fae232177b419c1d077338dbafe47bdb5fca
GET /tours/3/?tour=x1Rd&campaign=NcAyU&c=3&p=0&gender=f&disable_sound=0 HTTP/1.1
Host: chaturbate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cams.gratis/
Connection: keep-alive
Cookie: __cf_bm=6G5Yre6IcrvLCZlD1UACpnmzLrMKogJ1TNGMcn2ShyI-1664728051-0-AcRQDJwWsgywgLmUO1QPhn6GRJbbAZxpD2PUxvtAK1rtOod85x0VVju7Ry4ap4jVFYaPpFosud6dMqR/B9sDByg=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:31 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding, Accept-Language, Cookie
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
content-language: en
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.google.com/cv/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/cv/ https://www.gstatic.com/eureka/ https://www.gstatic.com/cast/ https://*.nr-data.net https://certify-js.alexametrics.com https://player.vimeo.com/api/player.js http://static.hotjar.com https://static.hotjar.com https://script.hotjar.com ; style-src 'self' data: 'unsafe-inline' https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.googleapis.com ; img-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://*.stream.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.nr-data.net https://certify.alexametrics.com https://stats.g.doubleclick.net https://cbgames.s3.amazonaws.com https://player.vimeo.com https://script.hotjar.com http://script.hotjar.com ; font-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.gstatic.com http://script.hotjar.com https://script.hotjar.com ; connect-src 'self' blob: blob https://*.mmcdn.com wss://*.mmcdn.com wss://*.mmcdn.com:8443 https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://*.nr-data.net https://*.chaturbate.com https://chaturbate.com https://www.google-analytics.com https://cbvideoupload.s3-accelerate.amazonaws.com https://stats.g.doubleclick.net https://internet-up.ably-realtime.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://tls-use1.fpapi.io http://*.hotjar.com:* https://*.hotjar.com:* https://vc.hotjar.io:* https://surveystats.hotjar.io wss://*.hotjar.com ; media-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com; object-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://download.macromedia.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ; frame-src 'self' https://*.mmcdn.com https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://*.wnu.com https://wnu.com https://checkout.2000charge.com https://www.sofort.com https://*.girogate.de https://player.vimeo.com https://vars.hotjar.com ; child-src 'self' blob: blob ; worker-src 'self' blob: blob ; form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://www.coinpayments.net https://*.wnu.com https://wnu.com https://devportal.cb.dev https://*.web.amer-1.jumio.ai https://smartpay.coinsmart.com ; manifest-src 'self' https://*.mmcdn.com https://*.highwebmedia.com ; report-uri https://report-uri.mmcdn.com/r/t/csp/enforce;
report-to: {"group":"default","max_age":2592000,"endpoints":[{"url":"https://report-uri.mmcdn.com/a/t/g"}],"include_subdomains":true}
nel: {"report_to":"default","max_age":2592000,"include_subdomains":true}
cache-control: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block; report=https://report-uri.highwebmedia.com/r/t/xss/enforce
referrer-policy: strict-origin-when-cross-origin
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
set-cookie: stcki="pOtSwZ=0\054FqPd9a=1\0546pduSG=0\054aDBbcK=0"; expires=Tue, 01-Nov-2022 16:27:31 GMT; Max-Age=2592000; Path=/
affkey="eJyrVipSslJQyigpKSi20tdPTswt1ksvSizJLNZXqgUAilAJow=="; Domain=.chaturbate.com; expires=Tue, 01-Nov-2022 16:27:31 GMT; Max-Age=2592000; Path=/
sbr=sec:sbr806f746d-b7db-43be-aad3-330fe26d3502:1of1oR:ntG7dYAQYAJBo-zY-S2yk-FR3NU; Domain=.chaturbate.com; expires=Fri, 27-Jun-2025 16:27:31 GMT; HttpOnly; Max-Age=86313600; Path=/; Secure
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 753ece512e1fb512-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash d5ce904ce1f49834aa1b03ad1b92502f
82c3d8f78da6d5c05302436fffed55fdf12ff549
9a677f3f89344f7c78b5d47684b33523f8662291c92e4c8ee1f195ec382b12be
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5966
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:27:31 GMT
Last-Modified: Sun, 02 Oct 2022 14:48:05 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 278
creative.xlirdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&buttonColor=&campaignId=banner2609start&creativeId=&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=%2324d7d7&modelsCountry=&modelsLanguage=&showButton=1&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&sourceId=&tag=females&targetDomain=&thumbSizeKey=small&trackOff=1&userId=b47aedc2c088e2f21e0cc23e0318384c557941461efdbc48212e7282df45f2f4
200 OK 80 kB URL HTTP/2 creative.xlirdr.com/widgets/v4/Universal/?actionButtonPlacement=bottom&buttonColor=&campaignId=banner2609start&creativeId=&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=%2324d7d7&modelsCountry=&modelsLanguage=&showButton=1&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&sourceId=&tag=females&targetDomain=&thumbSizeKey=small&trackOff=1&userId=b47aedc2c088e2f21e0cc23e0318384c557941461efdbc48212e7282df45f2f4
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c5832e9e2590dbd7f3e8b402fbdc2895
cadd120c74297bced2ef220029a75f0c81883424
6e46e3850373cc8ce47417698e5f8ae849782141fa2d19f44ff141c9ad23c053
GET /widgets/v4/Universal/?actionButtonPlacement=bottom&buttonColor=&campaignId=banner2609start&creativeId=&domain=stripchat&hideButtonOnSmallSpots=1&hideModelNameOnSmallSpots=0&hideTitleOnSmallSpots=1&isXhDesign=0&liveBadgeColor=%2324d7d7&modelsCountry=&modelsLanguage=&showButton=1&showLiveBadge=1&showModelName=1&showTitle=0&sound=off&sourceId=&tag=females&targetDomain=&thumbSizeKey=small&trackOff=1&userId=b47aedc2c088e2f21e0cc23e0318384c557941461efdbc48212e7282df45f2f4 HTTP/1.1
Host: creative.xlirdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cams.gratis/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:31 GMT
content-type: text/html
last-modified: Mon, 26 Sep 2022 07:32:09 GMT
expires: Sun, 02 Oct 2022 16:27:32 GMT
cache-control: max-age=10
strict-transport-security: max-age=15768000
pragma: public
report-to: { "endpoints":[{ "url": "https://go.stripchat.com/report" }], "group": "default", "max_age": 1048576 }
cf-cache-status: HIT
age: 4
vary: Accept-Encoding
server: cloudflare
cf-ray: 753ece5059b6b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img.strpst.com/thumbs/1664727638/76204319
200 OK 21 kB URL HTTP/2 img.strpst.com/thumbs/1664727638/76204319
IP
Hash 79596fd1be3af7acd4da7d74a17f49f7
25b7ecce54d2cc8b8c563b57b092179b55a6161e
076f55b055610e7a664254c9c39890ecc457752bd9f8d47805915e592ed18396
GET /thumbs/1664727638/76204319 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xlirdr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:31 GMT
content-type: image/jpeg
content-length: 16328
cf-bgj: imgq:100,h2pri
cf-polished: origSize=17074, status=webp_bigger
etag: "4e2af3e8529f22c1eb482db4f876933d"
last-modified: Sun, 02 Oct 2022 16:20:42 GMT
cf-cache-status: HIT
age: 376
expires: Sun, 02 Oct 2022 16:32:31 GMT
cache-control: public, max-age=300
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 753ece541ec3b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2qj7mq3w4uxe.com/get/1881613?zoneid=1881613&jp=_cla6fp0mlf6a3monrsiqe4&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=6583024081813224
200 OK 57 B URL HTTP/2 2qj7mq3w4uxe.com/get/1881613?zoneid=1881613&jp=_cla6fp0mlf6a3monrsiqe4&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=6583024081813224
IP
File type ASCII text, with no line terminators
Hash 02a7eedcf29cefdbd3486efc1a2904b6
69736d08b55132406eb58820d02098ecf8b9a96d
361dd0e92cf15e662e9720472730b3be0d26a13bdcf2ea5ae90b130e5196d988
GET /get/1881613?zoneid=1881613&jp=_cla6fp0mlf6a3monrsiqe4&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=6583024081813224 HTTP/1.1
Host: 2qj7mq3w4uxe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: text/javascript
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2210021127f5cc90cacc554f2698a4e5ad5e; Path=/; Expires=Mon, 02 Oct 2023 16:27:29 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
2qj7mq3w4uxe.com/get/1881613?zoneid=1881613&jp=_clinj4ntgqbwe9qfgximh0&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=3486799338000465
200 OK 0 B URL HTTP/2 2qj7mq3w4uxe.com/get/1881613?zoneid=1881613&jp=_clinj4ntgqbwe9qfgximh0&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=3486799338000465
IP
GET /get/1881613?zoneid=1881613&jp=_clinj4ntgqbwe9qfgximh0&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=3486799338000465 HTTP/1.1
Host: 2qj7mq3w4uxe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: text/javascript
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=22100211278d60bbf675464cefaec7146004; Path=/; Expires=Mon, 02 Oct 2023 16:27:29 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
2qj7mq3w4uxe.com/get/1881613?zoneid=1881613&jp=_cliv45biwoulq03gz4tvz5&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=5457124174952117
200 OK 0 B URL HTTP/2 2qj7mq3w4uxe.com/get/1881613?zoneid=1881613&jp=_cliv45biwoulq03gz4tvz5&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=5457124174952117
IP
GET /get/1881613?zoneid=1881613&jp=_cliv45biwoulq03gz4tvz5&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=5457124174952117 HTTP/1.1
Host: 2qj7mq3w4uxe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: text/javascript
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=221002112776e68784cb294e99930c8be037; Path=/; Expires=Mon, 02 Oct 2023 16:27:29 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
2qj7mq3w4uxe.com/aas/r45d/vki/1881613/105dadc5.js
200 OK 0 B URL HTTP/2 2qj7mq3w4uxe.com/aas/r45d/vki/1881613/105dadc5.js
IP
GET /aas/r45d/vki/1881613/105dadc5.js HTTP/1.1
Host: 2qj7mq3w4uxe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 14:00:58 GMT
vary: Accept-Encoding
etag: W/"6333021a-10a29"
x-js-ab1: current
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
2qj7mq3w4uxe.com/get/1881613?zoneid=1881613&jp=_clyb3c6z9riyaxtbs2btv8&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=2642374407829212
200 OK 0 B URL HTTP/2 2qj7mq3w4uxe.com/get/1881613?zoneid=1881613&jp=_clyb3c6z9riyaxtbs2btv8&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=2642374407829212
IP
GET /get/1881613?zoneid=1881613&jp=_clyb3c6z9riyaxtbs2btv8&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=2642374407829212 HTTP/1.1
Host: 2qj7mq3w4uxe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: text/javascript
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2210021127433f5092387f491186cdd0c40d; Path=/; Expires=Mon, 02 Oct 2023 16:27:29 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
cams.gratis/banner/300x250.php?site=juicy300250-174839
200 OK 0 B URL HTTP/2 cams.gratis/banner/300x250.php?site=juicy300250-174839
IP
GET /banner/300x250.php?site=juicy300250-174839 HTTP/1.1
Host: cams.gratis
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://poweredby.jads.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:31 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding,User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NiFpbLAbTTGvNqHMo1O9eDd%2FIgP%2BJ76%2BRAytfY5qTltpVmwmkRh58ckfEFR60lz68gTRdqaFKn9yHc1CBroFGK1APutG%2FV%2FWAktRpKqTVk%2B%2BDnJslQ1N%2Bv%2FKfm1H9g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 753ece4efdeeb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/ssp/utility/social-media/facebook/img/close.svg
200 OK 0 B URL HTTP/2 cdn.sb4you1.com/sb/ssp/utility/social-media/facebook/img/close.svg
IP
GET /sb/ssp/utility/social-media/facebook/img/close.svg HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:31 GMT
content-type: image/svg+xml
last-modified: Thu, 11 Feb 2021 15:13:59 GMT
etag: W/"602549b7-52a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 5206991
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OjB14DJMSLswW%2BF61c7rsInIx9TpLl1dOFQQhJGXH470zDeujOswExT8pcWCddBJNpYk8uKRP7bFdium52rfvhQ8025jYuw6hht5RhR7LLLEyWuCGzkiWVwFL2qqUDk7teU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 753ece4f9d3ad180-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
waust.at/s.js
200 OK 0 B IP
GET /s.js HTTP/1.1
Host: waust.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:27 GMT
content-type: application/x-javascript
last-modified: Mon, 29 Aug 2022 18:12:33 GMT
etag: W/"630d0191-2142"
expires: Mon, 03 Oct 2022 16:22:09 GMT
cache-control: max-age=86400
access-control-allow-origin: *
cf-cache-status: HIT
age: 317
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5%2Bkfq0Vx8pB8VU67OGuNibv2YgyIa%2BHlb7fS8UoXdBN6OWF7nlKkeDy7K3p1XuNb4ztA7sIaQ80DtfVGepUyKB88FbN91fMm1ewVfUAyHGlfeUIpLITtNgVX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 753ece376ae5b4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
static-assets.highwebmedia.com/CACHE/js/output.6f6724a00cb8.js
200 OK 0 B URL HTTP/2 static-assets.highwebmedia.com/CACHE/js/output.6f6724a00cb8.js
IP
GET /CACHE/js/output.6f6724a00cb8.js HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:31 GMT
content-type: application/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
etag: W/"a708027bfbbde438a72a93082d4bc4b5"
last-modified: Thu, 24 Jun 2021 21:24:05 GMT
x-amz-id-2: JSy2VAlm3gAahvlCm5/iqNOQuasckcIrq13CGup8iDmNjJ/I2mSXsAw6q4OzSeK3RH88h3oFZ3U=
x-amz-meta-s3cmd-attrs: md5:a708027bfbbde438a72a93082d4bc4b5
x-amz-request-id: 2D5V5B3Y2TWH6PZC
cf-cache-status: HIT
age: 1278010
expires: Tue, 01 Nov 2022 16:27:31 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BLp1xL6twRET%2B9%2FeqncMMrWnEMsxJqO0YBqUkFT6nXKUbwdyT6rN9wTeOWbUsiBW2q2MgHJUYSTQVFOMLLtylJtyWxKkNuAGp0Btw0kHVlwH1EhAYe%2BYaPI7lj8dE8Ggjmtp0WlhLogCcjyNWc4sKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=XzP_ijg4EgtsxV_CEs_v8VhNuFakwPZwVyy598FCj.E-1664728051745-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 753ece534c0eb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
akmxts.com/get/1872197?zoneid=1872197&pid=_cb-1872197_2&jp=_clqd7s0umnhcbda43g4776&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=1797949477621973
200 OK 0 B URL HTTP/2 akmxts.com/get/1872197?zoneid=1872197&pid=_cb-1872197_2&jp=_clqd7s0umnhcbda43g4776&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=1797949477621973
IP
GET /get/1872197?zoneid=1872197&pid=_cb-1872197_2&jp=_clqd7s0umnhcbda43g4776&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=1797949477621973 HTTP/1.1
Host: akmxts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Cookie: UID=2210021127320552695b914982b27999bf20
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
whos.amung.us/pingjs/?k=fy7gredtoy&t=Javhd%20-%20Watch%20Free%20Jav%20Streaming%20Online%20%7C%20Japanese%20tube%20-%20Japanese%20Sex&c=s&x=https%3A%2F%2Fjavhd.today%2F&y=&a=0&d=6.647&v=27&r=7451
200 OK 0 B URL HTTP/2 whos.amung.us/pingjs/?k=fy7gredtoy&t=Javhd%20-%20Watch%20Free%20Jav%20Streaming%20Online%20%7C%20Japanese%20tube%20-%20Japanese%20Sex&c=s&x=https%3A%2F%2Fjavhd.today%2F&y=&a=0&d=6.647&v=27&r=7451
IP
GET /pingjs/?k=fy7gredtoy&t=Javhd%20-%20Watch%20Free%20Jav%20Streaming%20Online%20%7C%20Japanese%20tube%20-%20Japanese%20Sex&c=s&x=https%3A%2F%2Fjavhd.today%2F&y=&a=0&d=6.647&v=27&r=7451 HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:31 GMT
content-type: text/javascript;charset=UTF-8
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 753ece4e4a40b521-OSL
X-Firefox-Spdy: h2
akmxts.com/lv/esnk/1872197/code.js?pid=_cb-1872197_4
200 OK 0 B URL HTTP/2 akmxts.com/lv/esnk/1872197/code.js?pid=_cb-1872197_4
IP
GET /lv/esnk/1872197/code.js?pid=_cb-1872197_4 HTTP/1.1
Host: akmxts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 14:00:58 GMT
vary: Accept-Encoding
etag: W/"6333021a-1e318"
x-js-ab1: current
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
akmxts.com/get/1872197?zoneid=1872197&pid=_cb-1872197_1&jp=_clhpm6uqmk07n7xtfju56x&nojs=0&ix=0&abvar=15&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=4612699244742241
200 OK 0 B URL HTTP/2 akmxts.com/get/1872197?zoneid=1872197&pid=_cb-1872197_1&jp=_clhpm6uqmk07n7xtfju56x&nojs=0&ix=0&abvar=15&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=4612699244742241
IP
GET /get/1872197?zoneid=1872197&pid=_cb-1872197_1&jp=_clhpm6uqmk07n7xtfju56x&nojs=0&ix=0&abvar=15&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=4612699244742241 HTTP/1.1
Host: akmxts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2210021127b1c4b9b529044085885ee4fd4f; Path=/; Expires=Mon, 02 Oct 2023 16:27:28 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
2qj7mq3w4uxe.com/get/1881613?zoneid=1881613&jp=_clmcbjvgz5fs94vsgmbetv&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=4049749291419335
200 OK 0 B URL HTTP/2 2qj7mq3w4uxe.com/get/1881613?zoneid=1881613&jp=_clmcbjvgz5fs94vsgmbetv&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=4049749291419335
IP
GET /get/1881613?zoneid=1881613&jp=_clmcbjvgz5fs94vsgmbetv&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&isRef=1&sp=0&cid=4049749291419335 HTTP/1.1
Host: 2qj7mq3w4uxe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: text/javascript
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2210021127d834b376387e447abc5392db0b; Path=/; Expires=Mon, 02 Oct 2023 16:27:29 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
creepingbrings.com/sfp.js
200 OK 0 B URL HTTP/2 creepingbrings.com/sfp.js
IP
GET /sfp.js HTTP/1.1
Host: creepingbrings.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:28 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 2dd2456ea81026be2befa392ee6b1eee
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sun, 02 Oct 2022 16:27:27 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WbwEn02aE33HvULSp0XJw4VpxxSX4vLU2CSbh6779N8KmJFElBWAkhdf%2BMkYhVnSL0jtHfAMWjABmjY%2FA%2FSYkoZ43Xyw6KzdhBY4OWUVzzNUWPBHAOmsPCkQfveHXpEzYkJ89Dc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 753ece3bf8d67707-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.barscreative1.com/sb/au/b6/cf/48/b6cf48ca3e8ab4bdbcfaa2279b0fb2bc/1613726822.html
200 OK 0 B URL HTTP/2 cdn.barscreative1.com/sb/au/b6/cf/48/b6cf48ca3e8ab4bdbcfaa2279b0fb2bc/1613726822.html
IP
ASN #39572 DataWeb Global Group B.V.
Analyzer Verdict Alert fortinet Phishing
GET /sb/au/b6/cf/48/b6cf48ca3e8ab4bdbcfaa2279b0fb2bc/1613726822.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javhd.today
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:30 GMT
content-type: text/html; charset=utf-8
server: nginx/1.17.6
last-modified: Fri, 19 Feb 2021 09:27:09 GMT
etag: W/"602f846d-4fa"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Sun, 02 Oct 2022 17:27:30 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/ssp/utility/social-media/facebook/css/style.css
200 OK 0 B URL HTTP/2 cdn.sb4you1.com/sb/ssp/utility/social-media/facebook/css/style.css
IP
GET /sb/ssp/utility/social-media/facebook/css/style.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javhd.today
Connection: keep-alive
Referer: https://javhd.today/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:31 GMT
content-type: text/css
last-modified: Fri, 27 Aug 2021 12:19:14 GMT
etag: W/"6128d842-18be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 5206250
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vrrFISeLFhOjJtCxcERHL0NH0zoDAmhvfXnorT80aebFWdLNxLw9VWipM8zNbbNBNacR5l3aA7Vf4oRkuuKudtKRIS3igRoUHfM9y4Z%2Fy%2BV%2F677h6ptiphpczTxCelSe6iQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 753ece4f3c53d180-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static-assets.highwebmedia.com/CACHE/css/output.5c1e955e3832.css
200 OK 0 B URL HTTP/2 static-assets.highwebmedia.com/CACHE/css/output.5c1e955e3832.css
IP
GET /CACHE/css/output.5c1e955e3832.css HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:27:31 GMT
content-type: text/css
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=63849
etag: W/"03c072147fa475d9bd57bcc9b73d3260"
last-modified: Thu, 22 Sep 2022 16:22:00 GMT
x-amz-id-2: src6WemkBrmxeGDZVP+4ipre01PPVsPb7jxfzfVQ0ssDy7l2IzQ439zT3Wf7YWS5u4ixFo+mPb4=
x-amz-meta-s3cmd-attrs: md5:03c072147fa475d9bd57bcc9b73d3260
x-amz-request-id: 12Q62S61BDK4RBY8
cf-cache-status: HIT
age: 864151
expires: Tue, 01 Nov 2022 16:27:31 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IQD2XJG1G7obTatwrb6C7f15UzSwJXk813vK%2Ft5yfxjV1vMpSRl72ROz6EJNptgpJjMp4%2BQUmejR9JSB9Cl%2B6HXSP0wXnra0cl0UT3OggoHiUDyJVhQmzEqzOpl5l%2BOc8bLF3EinAPtyGEIfeIoyVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=gseN.5N10MQBvatPinjyft6bvcxhJqzQhPZugWxpdRg-1664728051727-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 753ece533bedb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
akmxts.com/get/1872197?zoneid=1872197&pid=_cb-1872197_5&jp=_clslfeb9oncp9yx231evpv&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=672049570812620
200 OK 0 B URL HTTP/2 akmxts.com/get/1872197?zoneid=1872197&pid=_cb-1872197_5&jp=_clslfeb9oncp9yx231evpv&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=672049570812620
IP
GET /get/1872197?zoneid=1872197&pid=_cb-1872197_5&jp=_clslfeb9oncp9yx231evpv&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=672049570812620 HTTP/1.1
Host: akmxts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://javhd.today/
Cookie: UID=2210021127b1c4b9b529044085885ee4fd4f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:27:29 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
104.21.6.97
93.184.220.29
18.165.196.143
103.254.145.149
104.21.6.97
185.94.237.102
52.29.95.124
23.36.77.32