r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 150792cfc458af013998f4ef6bdf5f74
d5179b2dcb11d06f82606bf6eb6648319998d63e
72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3031
Expires: Sun, 27 Nov 2022 03:32:05 GMT
Date: Sun, 27 Nov 2022 02:41:34 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 15b59d5e62caedb4bec3ba6724906c1e
960f801e608a56fdd11449f4face29f62cad2b21
8c72a45737c2eeddf328b0ed3236f3243551d904e94ec9dd7254972ebfb9229e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4984
Cache-Control: max-age=119558
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:41:34 GMT
Etag: "6381eaec-1d7"
Expires: Mon, 28 Nov 2022 11:54:12 GMT
Last-Modified: Sat, 26 Nov 2022 10:31:08 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 02:19:19 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1335
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10007
Expires: Sun, 27 Nov 2022 05:28:21 GMT
Date: Sun, 27 Nov 2022 02:41:34 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: EVICdxF63kFmunFF0xxvSmv5geUcJYKWX4NQ/nfmUQJ4NdaR3etpxScGFVj3PC9BKvZ7y9aBFaw=
x-amz-request-id: QDJZY7V2390WQ6DV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 01:44:27 GMT
age: 3427
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:41:34 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 02:11:12 GMT
cache-control: public,max-age=3600
age: 1823
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d3df71aab146eefc49acb608796aab63
8401892995193919376dfcd798b09c8261579454
a616c1e54e896576601e6107c1814adbebf35364d8ed807cdd89ac36b8200c88
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1590
Cache-Control: max-age=111106
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:41:35 GMT
Etag: "6381d72b-1d7"
Expires: Mon, 28 Nov 2022 09:33:21 GMT
Last-Modified: Sat, 26 Nov 2022 09:06:51 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Fjitj48vyPOYfAgIc564RQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 1zndSDCbUnf+BQxyQpHUOJ9VJ+E=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10831
Expires: Sun, 27 Nov 2022 05:42:07 GMT
Date: Sun, 27 Nov 2022 02:41:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10831
Expires: Sun, 27 Nov 2022 05:42:07 GMT
Date: Sun, 27 Nov 2022 02:41:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10831
Expires: Sun, 27 Nov 2022 05:42:07 GMT
Date: Sun, 27 Nov 2022 02:41:36 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1db6041a0bdb2319ae85afcc30caaeec
3b0ec6a7188dadf986f72fda8110296d9abd6f35
05f1f9b7834e7268dc34e3233434217f58cb68ee43a403cd08d0bb0ab4f37815
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13049
x-amzn-requestid: 2755f206-af23-4597-b4b9-7dae5001d6be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBsvpHDJoAMFhFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d5b30-600008f573bd7e0024585eb1;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 23:28:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: y0ofyT6UcPjB8mfRR1VMjHSTW64Qb_EQ0rrjsOdbby1CG-xMIFJMPw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:49:19 GMT
age: 17537
etag: "3b0ec6a7188dadf986f72fda8110296d9abd6f35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31dafe91-0b1b-40e9-927c-c01863516712.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31dafe91-0b1b-40e9-927c-c01863516712.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ccb536b51f31391c89fb2abe3be6c749
c9a5ab962bfdd174aecd4809d770f0fe305ab8e4
b4b6f70603ab79399aeda1d8b7e8f2662da37b51a2d076b8e754c812b6fa5b47
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31dafe91-0b1b-40e9-927c-c01863516712.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9073
x-amzn-requestid: 6cf20b75-6b27-4a34-97a8-017d7169f31b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b8JuVHY7IAMFtRg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637b2328-1ca76b3537613fb26358b8f2;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 07:05:12 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: lg8rdnHT_ndB-9CMrHcVN8a2xZCubuTEpUQ2m6i77l-NfdNfhfITEQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 cca7d60248a961ff8fc8c5640024b652.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 14:36:38 GMT
age: 43498
etag: "c9a5ab962bfdd174aecd4809d770f0fe305ab8e4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 76c00eceed956377d7469ef58b0815cb
97a135335f5b1b042adeb385718f8808cb78528b
81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7380
x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iEegIAMFeuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "97a135335f5b1b042adeb385718f8808cb78528b"
content-type: image/jpeg
age: 17962
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 741ddfb19764ac9a77509e7e87cfbfb2
308c08784ce4a0757cbd112807555b83e17a1d56
e9271a76da94d8b655860c3b00d111396c5d3a227fd2f19e0ef400fd5e84d87e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8817
x-amzn-requestid: 33d3ca17-7878-4897-a634-5f626a64e820
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cJ40OEOqIAMFaOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6380a1b4-040288d571fc10b96d893fa4;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 11:06:28 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: f_U8KSYET6kaKAPbEV7sHW0tO6JGijsqUvghniwzFCRd2YGQjVlFoA==
via: 1.1 f313d3df80c4dab8f5399614116801cc.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 10:16:33 GMT
etag: "308c08784ce4a0757cbd112807555b83e17a1d56"
content-type: image/jpeg
age: 59103
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
age: 17962
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde03fed4-26de-4471-bc0e-a0c0483636ce.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde03fed4-26de-4471-bc0e-a0c0483636ce.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6ee5071a31d351c552aa651e40b16189
6fca9136030ea6f67be44e428ea39c34ff3e28e7
8d52f14267b8bd47119954796ff6c5d54eb6aa5d23c6e8bbd246108a5b89c1d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde03fed4-26de-4471-bc0e-a0c0483636ce.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8254
x-amzn-requestid: e12624ea-58c6-4f39-826c-8a1d87ebc5ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFySQGegIAMF-HA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637efda7-2c5e216a0d8a1502615186a8;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 05:14:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0Ylris3tg94-66p8L5kYl2zgnVZ4mCc04ju96DslaB97Dfr-6nTyfA==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
age: 17962
etag: "6fca9136030ea6f67be44e428ea39c34ff3e28e7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 13c265f2c258e0bcea2ac1149188d332
3d42f91eec1fae7ff5e243d2a35afdd5a6d58db0
26666f4ea8fe16648ef9593216b725f692a1cb913763b186cd19d59e7875a930
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4757
Cache-Control: max-age=106732
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:41:41 GMT
Etag: "6381b9bc-117"
Expires: Mon, 28 Nov 2022 08:20:33 GMT
Last-Modified: Sat, 26 Nov 2022 07:01:16 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 13c265f2c258e0bcea2ac1149188d332
3d42f91eec1fae7ff5e243d2a35afdd5a6d58db0
26666f4ea8fe16648ef9593216b725f692a1cb913763b186cd19d59e7875a930
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4757
Cache-Control: max-age=106732
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:41:41 GMT
Etag: "6381b9bc-117"
Expires: Mon, 28 Nov 2022 08:20:33 GMT
Last-Modified: Sat, 26 Nov 2022 07:01:16 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 13c265f2c258e0bcea2ac1149188d332
3d42f91eec1fae7ff5e243d2a35afdd5a6d58db0
26666f4ea8fe16648ef9593216b725f692a1cb913763b186cd19d59e7875a930
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4757
Cache-Control: max-age=106732
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:41:41 GMT
Etag: "6381b9bc-117"
Expires: Mon, 28 Nov 2022 08:20:33 GMT
Last-Modified: Sat, 26 Nov 2022 07:01:16 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 13c265f2c258e0bcea2ac1149188d332
3d42f91eec1fae7ff5e243d2a35afdd5a6d58db0
26666f4ea8fe16648ef9593216b725f692a1cb913763b186cd19d59e7875a930
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6245
Cache-Control: max-age=108220
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:41:41 GMT
Etag: "6381b9bc-117"
Expires: Mon, 28 Nov 2022 08:45:21 GMT
Last-Modified: Sat, 26 Nov 2022 07:01:16 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
freepornitaly.gigixo.com/
200 OK 15 kB URL HTTP/1.1 freepornitaly.gigixo.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5532)
Hash f874838f8bca86ea63a739669f4ba0bf
dc058c589deccf07550fb335f7c8aba35f25dd46
c71f637f7ef7ce89f2272f809859268818203c9c2dab9e90ba6e5308c9bce8d1
GET / HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:41 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
Vary: Accept-Encoding
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:41:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e388353a642bc503beff27c23339e2b5
7849301df8cbfa3f9c019b1d4033b66e0f44c4bd
5e595e9ce96c6147c3ff79ebba0068ddb0d997237a671936cb05d9575c59a424
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:41:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.tubecorp.com/b/loader.js?v=3
200 OK 831 B URL HTTP/1.1 cdn.tubecorp.com/b/loader.js?v=3
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (1745), with no line terminators
Hash 8143f2c692706afd858455911eb34152
0e9051df8fcf7a51281db01a28185679f5c32c81
03959f368154cb76dbd9d598d9a7efde0005a1f5fb62d5cd60d6e874bbb7abce
GET /b/loader.js?v=3 HTTP/1.1
Host: cdn.tubecorp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 02:41:41 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.20.1
Last-Modified: Wed, 14 Oct 2020 08:55:58 GMT
ETag: W/"5f86bd1e-6d1"
Cache-Control: max-age=3600
X-Request-ID: fcf2ffedfa7ab8fb037af1f8f32a431b
Content-Encoding: gzip
Expires: Sun, 27 Nov 2022 03:41:41 GMT
X-Proxy-Cache: HIT
Access-Control-Allow-Origin: *
ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js
200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js
IP
File type ASCII text, with very long lines (32025)
Hash 83b3b5729cdff3976db52c51831e96b8
d23dc823e37f58e5366340be755730f3fa9a850d
675fa88b39008a09994460a93b310a7d4593735009a9b24b6f176c347ad12421
GET /ajax/libs/jquery/2.1.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://freepornitaly.gigixo.com
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29725
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 16:58:49 GMT
expires: Sun, 26 Nov 2023 16:58:49 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 34972
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-98275526-8
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-98275526-8
IP
File type ASCII text, with very long lines (1921)
Hash ca98c04e60a127f1f09f65ef7f87c10a
29a7b56a5d159ebd332d96ec476fdd86f0dd1511
bd7dfcaa2d51f84ea85d0c3667ec4d2c1e62157d5cd53a2ad101fdac8a955bb9
GET /gtag/js?id=UA-98275526-8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 27 Nov 2022 02:41:41 GMT
expires: Sun, 27 Nov 2022 02:41:41 GMT
cache-control: private, max-age=900
last-modified: Sun, 27 Nov 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43723
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
200 OK 6.4 kB URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (27303)
Hash 994fc061437b9403c192040badc24cdb
63249cf0cce0c7792e2c348bcd2dde39917d7c9d
0e19022925f66ff13426b84566024fc584c1277ee4b43e9a694dfc2d03cacd4b
GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://freepornitaly.gigixo.com
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 02:41:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"4fbd15cb6047af93373f4f895639c8bf"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 11/11/2022 02:14:45
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1047
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 7a59aba80e97a926a2dd1678d092f4e7
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7707819b7fbb0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.tsyndicate.com/sdk/v1/bi.js
200 OK 3.3 kB URL HTTP/1.1 cdn.tsyndicate.com/sdk/v1/bi.js
IP
File type C source, ASCII text, with very long lines (7738)
Hash 0439debac0978cddb5304c4f6b0d7deb
542ca4fb5d775696582a8af12a99cbbec5589669
79379112c5cef45681c02982c1e4746986e8f0f80bad6852bfb94b8f8fd1bf6c
GET /sdk/v1/bi.js HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 12:39:23 GMT
Content-Type: application/javascript
Content-Length: 3314
Connection: keep-alive
Last-Modified: Tue, 15 Nov 2022 12:24:35 GMT
Server: nginx
X-Robots-Tag: noindex, nofollow
Content-Encoding: gzip
Vary: Accept-Encoding
ETag: W/"63738503-1e83"
Age: 1000938
Accept-Ranges: bytes
maxcdn.bootstrapcdn.com/bootswatch/3.3.7/flatly/bootstrap.min.css
200 OK 22 kB URL HTTP/2 maxcdn.bootstrapcdn.com/bootswatch/3.3.7/flatly/bootstrap.min.css
IP
File type ASCII text, with very long lines (65152)
Hash 8173552663de556cbf79d3ada0febcfc
99d6dcbbb4de0d01dc5c15a6d70295cfb42e632a
afeb44ea73f9d989657bea0ed15d34298553750b7a6ff0b6fd86706dd119b724
GET /bootswatch/3.3.7/flatly/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://freepornitaly.gigixo.com
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 02:41:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"b053ba621cf19e20793c1ef8cd227a15"
last-modified: Mon, 25 Jan 2021 22:04:28 GMT
cdn-cachedat: 11/18/2022 06:19:16
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 752
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: c59f17912daa3be68f526d4437983024
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7707819b9fd50b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e388353a642bc503beff27c23339e2b5
7849301df8cbfa3f9c019b1d4033b66e0f44c4bd
5e595e9ce96c6147c3ff79ebba0068ddb0d997237a671936cb05d9575c59a424
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:41:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 472 B IP
Hash 0a92b8f6c070c94f33e5ef034b529219
8651b4d4d93ae308142eb3a9f7bde8d9c0713430
bb5c972bac7af526cb38cff177cd2f1e5e22d7eeb68c3e99d0c0becdb37341c8
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 02:41:41 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 20:27:05 GMT
Expires: Fri, 02 Dec 2022 20:27:04 GMT
Etag: "8651b4d4d93ae308142eb3a9f7bde8d9c0713430"
Cache-Control: max-age=495322,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7707819baa980afa-OSL
poweredby.jads.co/js/jads.js
301 Moved Permanently 178 B URL HTTP/1.1 poweredby.jads.co/js/jads.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 27 Nov 2022 02:41:41 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
ocsp.sectigo.com/
200 OK 471 B IP
Hash 415c72c976c717830f628327c3f063bd
401b73b4a61e542ca258e336d27f34b7ed9b4282
f10086f7445b7981f5136251c37caebe4eec4738a8847c3e117c59f17ba25d57
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 02:41:41 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 24 Nov 2022 12:20:46 GMT
Expires: Thu, 01 Dec 2022 12:20:45 GMT
Etag: "401b73b4a61e542ca258e336d27f34b7ed9b4282"
Cache-Control: max-age=379743,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7707819cfb020afa-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:41:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css
200 OK 44 kB URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65371)
Hash 8db2f59970cd7c4e2f856f009143f15f
20537c9d6ad8cb1eb97bbe8d6958982d8a089a71
383dc6a64a7308d10b4590850ce05d3fcfc267ba4e64ba41d8547c48f53659a5
GET /bootstrap/3.3.6/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://freepornitaly.gigixo.com
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 02:41:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"2f624089c65f12185e79925bc5a7fc42"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 11/18/2022 06:18:39
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 755
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 423c05fba120d8c4685518a0c5d8a1ad
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7707819b8fc90b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:41:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
poweredby.jads.co/js/jads2.js
200 OK 1.7 kB URL HTTP/1.1 poweredby.jads.co/js/jads2.js
IP
File type ASCII text, with very long lines (3758), with no line terminators
Hash 558e1b61fc513016183a3812938e79fb
5f72ea61a2aad8f7a0956321d3fd8524db70eddf
a79f8c0aabfc2d1d45e4df2a86ca9172d292b08987f7a9d5c10bd10abf3aef54
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://freepornitaly.gigixo.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Type: application/x-javascript
Last-Modified: Mon, 11 Jul 2022 00:36:11 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"62cb707b-eae"
Content-Encoding: gzip
freepornitaly.gigixo.com/api2/2b24d434ea.php
200 OK 1.4 kB URL HTTP/1.1 freepornitaly.gigixo.com/api2/2b24d434ea.php
IP
File type ASCII text, with very long lines (9996), with no line terminators
Hash 79b496c4f5ba468e8531789ffd78441f
3a618a92e0406e5e9de3c2d270fbfceca925e95a
ebcb640cb2750dd55c13af74b1b736bd258d0c3b13e612b2ca41f00ec20b0ff3
GET /api2/2b24d434ea.php HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Type: application/javascript
Content-Length: 1411
Connection: keep-alive
X-Powered-By: PHP/7.4.30
Vary: Accept-Encoding
Content-Encoding: gzip
X-Frontend: un-pl1
p395024.clksite.com/adServe/banners?tid=395024_794246_2
301 Moved Permanently 162 B URL HTTP/2 p395024.clksite.com/adServe/banners?tid=395024_794246_2
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /adServe/banners?tid=395024_794246_2 HTTP/1.1
Host: p395024.clksite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Sun, 27 Nov 2022 02:41:42 GMT
content-type: text/html
content-length: 162
location: https://mybettermb.com/adServe/banners?tid=395024_794246_2
X-Firefox-Spdy: h2
cdn.tsyndicate.com/sdk/v1/bi.js
304 Not Modified 0 B URL HTTP/1.1 cdn.tsyndicate.com/sdk/v1/bi.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/bi.js HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
If-Modified-Since: Tue, 15 Nov 2022 12:24:35 GMT
If-None-Match: W/"63738503-1e83"
HTTP/1.1 304 Not Modified
Date: Tue, 15 Nov 2022 12:39:23 GMT
Connection: keep-alive
Last-Modified: Tue, 15 Nov 2022 12:24:35 GMT
Server: nginx
X-Robots-Tag: noindex, nofollow
Vary: Accept-Encoding
ETag: W/"63738503-1e83"
Age: 1000939
freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b554b5d564b52535355555154534b52535355555154533b5454553b0654565c4a0e1403
200 167 B URL HTTP/1.1 freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b554b5d564b52535355555154534b52535355555154533b5454553b0654565c4a0e1403
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 353b078eb77e5ee068e83b7503f3c75b
d0b2207fea4313a3ea391b94880f1d01e5ab1c89
297488a03131e435cb999248b75ed4ac78ae3bbf4c3366d8d57c821b2548dd8d
GET /viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b554b5d564b52535355555154534b52535355555154533b5454553b0654565c4a0e1403 HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b100c11090649145d4a1c0c07000a4a070b094b054b2b05553b0d28092f3153172c291c0b541335000553354b5454544b50555d4b5755534b535c5d3b555454544a0e1403
200 167 B URL HTTP/1.1 freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b100c11090649145d4a1c0c07000a4a070b094b054b2b05553b0d28092f3153172c291c0b541335000553354b5454544b50555d4b5755534b535c5d3b555454544a0e1403
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 353b078eb77e5ee068e83b7503f3c75b
d0b2207fea4313a3ea391b94880f1d01e5ab1c89
297488a03131e435cb999248b75ed4ac78ae3bbf4c3366d8d57c821b2548dd8d
GET /viewImage3?data=0c101014175e4b4b100c11090649145d4a1c0c07000a4a070b094b054b2b05553b0d28092f3153172c291c0b541335000553354b5454544b50555d4b5755534b535c5d3b555454544a0e1403 HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
maxcdn.bootstrapcdn.com/bootswatch/3.3.7/fonts/glyphicons-halflings-regular.woff2
200 OK 18 kB URL HTTP/2 maxcdn.bootstrapcdn.com/bootswatch/3.3.7/fonts/glyphicons-halflings-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18028, version 1.589\012- data
Hash 448c34a56d699c29117adc64c43affeb
ca35b697d99cae4d1b60f2d60fcd37771987eb07
fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c
GET /bootswatch/3.3.7/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://freepornitaly.gigixo.com
Connection: keep-alive
Referer: https://maxcdn.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 02:41:42 GMT
content-type: font/woff2
content-length: 18028
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "448c34a56d699c29117adc64c43affeb"
last-modified: Mon, 25 Jan 2021 22:04:28 GMT
cdn-cachedat: 11/12/2022 05:26:36
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1049
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 8c73e1afa6ddbb7cc145672925947944
cdn-cache: HIT
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7707819e98eb0b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
freepornitaly.gigixo.com/s3/wc_oct20/0028.jpeg
200 OK 47 kB URL HTTP/1.1 freepornitaly.gigixo.com/s3/wc_oct20/0028.jpeg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=469, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=704], baseline, precision 8, 200x200, components 3\012- data
Hash 28c68ad5acaf459657d65922d29fb9fe
414481261c8df6be1e7c5a6f13ccdd6705a29372
cc6af29db71644e9071319ca244516a32bc5a7087f30803f699c7d23b6397cf7
GET /s3/wc_oct20/0028.jpeg HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:41 GMT
Content-Type: image/jpeg
Content-Length: 47414
Connection: keep-alive
Last-Modified: Fri, 09 Oct 2020 20:52:17 GMT
ETag: "5f80cd81-b936"
X-Cluster: web-cdn2
X-Cache: HIT
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MCBnyABNrtdu0VQ1LnryaXCgvgYN3S62SYaj%2B17riMKssAbH%2BD47o2JiDpsGQkxw%2FDCuu7mv8P%2FAnHG8%2FR4b8o4%2Bew1mJDsaEhqoLNd8HkmBC4YPdVLioHZurK3%2BEsE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
CF-RAY: 7706290b2c17634b-ORD
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Cache-Status: REVALIDATED
Cache-Control: max-age=14400, max-age=31536000
Accept-Ranges: bytes
wrathfultower.pro/cIDk9r6zb.2_5/lsSmW/QC9yNfDUIi2QN/zfMI4lNpgr
301 Moved Permanently 162 B URL HTTP/1.1 wrathfultower.pro/cIDk9r6zb.2_5/lsSmW/QC9yNfDUIi2QN/zfMI4lNpgr
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert quad9 Sinkholed
GET /cIDk9r6zb.2_5/lsSmW/QC9yNfDUIi2QN/zfMI4lNpgr HTTP/1.1
Host: wrathfultower.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://wrathfultower.pro/cIDk9r6zb.2_5/lsSmW/QC9yNfDUIi2QN/zfMI4lNpgr
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
cdn.tubecorp.com/b/tcbanner.js?v=9
200 OK 18 kB URL HTTP/1.1 cdn.tubecorp.com/b/tcbanner.js?v=9
IP
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (50685), with no line terminators
Hash cdf1ca2de3be908c01fc475c284bd396
41d93ac6b9d836e4ee2317d00b977bc4edd6a294
14b531a858232cd186a0a4c7070ddde07e950a8e7adf0940835f6adf86600590
GET /b/tcbanner.js?v=9 HTTP/1.1
Host: cdn.tubecorp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.20.1
Last-Modified: Sat, 20 Nov 2021 06:50:35 GMT
ETag: W/"61989abb-c604"
Cache-Control: max-age=3600
X-Request-ID: 6f1daecf978b48536956fdbfd14a730e
Content-Encoding: gzip
Expires: Sun, 27 Nov 2022 03:41:42 GMT
X-Proxy-Cache: HIT
Access-Control-Allow-Origin: *
go.eabids.com/banner.go?spaceid=5589988
200 OK 1.7 kB URL HTTP/1.1 go.eabids.com/banner.go?spaceid=5589988
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1703), with no line terminators
Hash 7ca6c0aab257956c33705f4887215290
3721673fafe2cfa5e6108c966b7253afe55cf4c6
720f74691e09f08252d7c9195fa535accb2a5b110c26bb36bc9cc39382fa6395
GET /banner.go?spaceid=5589988 HTTP/1.1
Host: go.eabids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1703
Connection: keep-alive
Expires: Mon, 03 Jul 2001 06:00:00 GMT
Last-Modified: Sun, 27 11 2022 02:41:42 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0,post-check=0, pre-check=0
Pragma: no-cache
X-Backend-Server: nl2-web-202
tsyndicate.com/iframes2/58b27ab589cd4f6fb77ba36de8de2cad.html?keywords=Everyone,loves,horny,sex,pics,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,incredible,women,boob,bondage,step,leaves,amateur,bare,ema,freeones,xxxy,palm,claydon,insertion,list,person,masset,facials,friends,group,double,ass,carey,360,sodom,693,sex,ryan,ash,fakes,phone,extreme,dresses,sharing,animal,diamond,spreading,wide,escorts,price,story,trini,goldbabys,cock,homeade,toying,synthia,rpg,frat,spice,tube,sites,hides,sucked,hairy,for,angeles,best,mothers,amazing,hingis,site,showing,sim,very,take,slave,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,inc&adb=0&clientjs=1&w=1280&h=1024&tz=0
200 OK 2.7 kB URL HTTP/1.1 tsyndicate.com/iframes2/58b27ab589cd4f6fb77ba36de8de2cad.html?keywords=Everyone,loves,horny,sex,pics,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,incredible,women,boob,bondage,step,leaves,amateur,bare,ema,freeones,xxxy,palm,claydon,insertion,list,person,masset,facials,friends,group,double,ass,carey,360,sodom,693,sex,ryan,ash,fakes,phone,extreme,dresses,sharing,animal,diamond,spreading,wide,escorts,price,story,trini,goldbabys,cock,homeade,toying,synthia,rpg,frat,spice,tube,sites,hides,sucked,hairy,for,angeles,best,mothers,amazing,hingis,site,showing,sim,very,take,slave,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,inc&adb=0&clientjs=1&w=1280&h=1024&tz=0
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4344)
Hash f22cb4db1903a2776b1741198997f405
9b84a895e7ea7be90d5b0428023c2f7cad859aff
2302edf010d6dc72a911b810ac8bd2fd9b2288970051f40e23dba31fa375a5d9
GET /iframes2/58b27ab589cd4f6fb77ba36de8de2cad.html?keywords=Everyone,loves,horny,sex,pics,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,incredible,women,boob,bondage,step,leaves,amateur,bare,ema,freeones,xxxy,palm,claydon,insertion,list,person,masset,facials,friends,group,double,ass,carey,360,sodom,693,sex,ryan,ash,fakes,phone,extreme,dresses,sharing,animal,diamond,spreading,wide,escorts,price,story,trini,goldbabys,cock,homeade,toying,synthia,rpg,frat,spice,tube,sites,hides,sucked,hairy,for,angeles,best,mothers,amazing,hingis,site,showing,sim,very,take,slave,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,inc&adb=0&clientjs=1&w=1280&h=1024&tz=0 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding, *
X-Api-Version: 2
Link: <http://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
X-Request-Id: fae18217c5d74982
Set-Cookie: ts_uid=d2de5cb4-1d90-4ffe-a361-d064b8be3658; expires=Sat, 27 May 2023 02:41:42 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
Cache-Control: no-cache, no-store, no-transform, must-revalidate, no-transform
X-Robots-Tag: none, noindex, nofollow
Report-To: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
Content-Encoding: gzip
go.eabids.com/banner.go?spaceid=2194679&keywords=&maincat=
200 OK 1.7 kB URL HTTP/1.1 go.eabids.com/banner.go?spaceid=2194679&keywords=&maincat=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1650), with no line terminators
Hash 6d22682172a3c378dbe8587bbf890c23
e75c19ee4ed6a083c8ad175d8d61ea90eccac5ac
c380b7a6e4e2d93d0d7a548de40f5acb45ec53799d7e0fbe3bbe637d4a0fe351
GET /banner.go?spaceid=2194679&keywords=&maincat= HTTP/1.1
Host: go.eabids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1650
Connection: keep-alive
Expires: Mon, 03 Jul 2001 06:00:00 GMT
Last-Modified: Sun, 27 11 2022 02:41:42 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0,post-check=0, pre-check=0
Pragma: no-cache
X-Backend-Server: nl2-web-200
freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b100c1109064914554a1c0c07000a4a070b094b054b54305105163c37203707213528170056273255032d134b5454544b5053574b5654514b5c53553b555454544a0e1403
200 54 kB URL HTTP/1.1 freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b100c1109064914554a1c0c07000a4a070b094b054b54305105163c37203707213528170056273255032d134b5454544b5053574b5654514b5c53553b555454544a0e1403
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 575x754, components 3\012- data
Hash 3493070d99352530d0c83c2528cde9f0
e6f6c95ceeb4ea19eb32e764d8c2cd0c50bb6ee0
49ed9e0e85ff9494f55f29046e185f84ab11507c6494d88f0ad95f189194b2c5
GET /viewImage3?data=0c101014175e4b4b100c1109064914554a1c0c07000a4a070b094b054b54305105163c37203707213528170056273255032d134b5454544b5053574b5654514b5c53553b555454544a0e1403 HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Length: 53647
Connection: keep-alive
Cache-Control: max-age=31418383
tsyndicate.com/iframes2/9d1e13394347478aa7505e5c4801aade.html?keywords=Everyone,loves,horny,sex,pics,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,incredible,women,boob,bondage,step,leaves,amateur,bare,ema,freeones,xxxy,palm,claydon,insertion,list,person,masset,facials,friends,group,double,ass,carey,360,sodom,693,sex,ryan,ash,fakes,phone,extreme,dresses,sharing,animal,diamond,spreading,wide,escorts,price,story,trini,goldbabys,cock,homeade,toying,synthia,rpg,frat,spice,tube,sites,hides,sucked,hairy,for,angeles,best,mothers,amazing,hingis,site,showing,sim,very,take,slave,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,inc&adb=0&clientjs=1&w=1280&h=1024&tz=0
200 OK 3.2 kB URL HTTP/1.1 tsyndicate.com/iframes2/9d1e13394347478aa7505e5c4801aade.html?keywords=Everyone,loves,horny,sex,pics,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,incredible,women,boob,bondage,step,leaves,amateur,bare,ema,freeones,xxxy,palm,claydon,insertion,list,person,masset,facials,friends,group,double,ass,carey,360,sodom,693,sex,ryan,ash,fakes,phone,extreme,dresses,sharing,animal,diamond,spreading,wide,escorts,price,story,trini,goldbabys,cock,homeade,toying,synthia,rpg,frat,spice,tube,sites,hides,sucked,hairy,for,angeles,best,mothers,amazing,hingis,site,showing,sim,very,take,slave,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,inc&adb=0&clientjs=1&w=1280&h=1024&tz=0
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3861)
Hash 91271771c9eb0d07237c4cff956597d0
237390102bf9cabe52989ca8dc747606e030d8e1
3549e2bd5cad317512a34344236fc6a6800265dff7976ae7b48c5552e588bd72
GET /iframes2/9d1e13394347478aa7505e5c4801aade.html?keywords=Everyone,loves,horny,sex,pics,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,incredible,women,boob,bondage,step,leaves,amateur,bare,ema,freeones,xxxy,palm,claydon,insertion,list,person,masset,facials,friends,group,double,ass,carey,360,sodom,693,sex,ryan,ash,fakes,phone,extreme,dresses,sharing,animal,diamond,spreading,wide,escorts,price,story,trini,goldbabys,cock,homeade,toying,synthia,rpg,frat,spice,tube,sites,hides,sucked,hairy,for,angeles,best,mothers,amazing,hingis,site,showing,sim,very,take,slave,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,inc&adb=0&clientjs=1&w=1280&h=1024&tz=0 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding, *
X-Api-Version: 2
Link: <http://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script, <https://lcdn.tsyndicate.com/images/7/9/5171e0b61c11e69664002590c57f96/main.gif>; rel=preload; as=image
X-Request-Id: b4751e78067cafe9
Set-Cookie: ts_uid=2276937e-62ae-48d1-9b44-ea4dc276d634; expires=Sat, 27 May 2023 02:41:42 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
Cache-Control: no-cache, no-store, no-transform, must-revalidate, no-transform
X-Robots-Tag: none, noindex, nofollow
Report-To: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
Content-Encoding: gzip
freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b100c11090649145d4a1c0c07000a4a070b094b054b28563c0e25282b020e1c21301436201d2234090217354b5454544b5053514b5153574b53535d3b555454544a0e1403
200 110 kB URL HTTP/1.1 freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b100c11090649145d4a1c0c07000a4a070b094b054b28563c0e25282b020e1c21301436201d2234090217354b5454544b5053514b5153574b53535d3b555454544a0e1403
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x1000, components 3\012- data
Size 110 kB (110224 bytes)
Hash 46bf6ff6bc8b9d3fec96726f33d829e4
dcab7c95df1c90e8faebfd084b7cc66d72312053
02a871b2ab7682195b93f33f3d9455ed4e180acfeb0960eae54bb03c6b65b1d6
GET /viewImage3?data=0c101014175e4b4b100c11090649145d4a1c0c07000a4a070b094b054b28563c0e25282b020e1c21301436201d2234090217354b5454544b5053514b5153574b53535d3b555454544a0e1403 HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Length: 110224
Connection: keep-alive
Cache-Control: max-age=31418383
X-CORE: core4
X-LB: core4
freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b100c1109064914504a1c0c07000a4a070b094b054b1717330622372e0f0131301d06262d500950111652034b5454544b5052554b565d544b575c503b555454544a0e1403
200 38 kB URL HTTP/1.1 freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b100c1109064914504a1c0c07000a4a070b094b054b1717330622372e0f0131301d06262d500950111652034b5454544b5052554b565d544b575c503b555454544a0e1403
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 575x431, components 3\012- data
Hash a547ad89f6dd9bcdb41836f200a32717
612928a2835a28b92a25906c1adc61af978ca7ff
fe4d29c0dfd1e43294723d54f7a9ec629a82086b0a7f1e53f4bad152d231198c
GET /viewImage3?data=0c101014175e4b4b100c1109064914504a1c0c07000a4a070b094b054b1717330622372e0f0131301d06262d500950111652034b5454544b5052554b565d544b575c503b555454544a0e1403 HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Length: 38540
Connection: keep-alive
Cache-Control: max-age=31418383
X-CORE: core4
X-LB: core4
static.eabids.com/data/bannerpools/112022/34094.gif
200 OK 24 kB URL HTTP/1.1 static.eabids.com/data/bannerpools/112022/34094.gif
IP
File type GIF image data, version 89a, 160 x 600\012- data
Hash 325fa577b032b0847fc13b9e86108bb3
8b2055b70855093d31bb9a71fc29f6becfff2878
9c9efc00b6329d620dd00042411429159a663a3f3ecad450a3de2702e03a327c
GET /data/bannerpools/112022/34094.gif HTTP/1.1
Host: static.eabids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://go.eabids.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Type: image/gif
Content-Length: 24324
Last-Modified: Thu, 28 Apr 2022 14:46:26 GMT
Connection: keep-alive
ETag: "626aa8c2-5f04"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Backend-Server: nl2-static-221
Accept-Ranges: bytes
static.eabids.com/data/bannerpools/112022/34093.gif
200 OK 24 kB URL HTTP/1.1 static.eabids.com/data/bannerpools/112022/34093.gif
IP
File type GIF image data, version 89a, 160 x 600\012- data
Hash 325fa577b032b0847fc13b9e86108bb3
8b2055b70855093d31bb9a71fc29f6becfff2878
9c9efc00b6329d620dd00042411429159a663a3f3ecad450a3de2702e03a327c
GET /data/bannerpools/112022/34093.gif HTTP/1.1
Host: static.eabids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://go.eabids.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Type: image/gif
Content-Length: 24324
Last-Modified: Thu, 28 Apr 2022 14:46:26 GMT
Connection: keep-alive
ETag: "626aa8c2-5f04"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Backend-Server: nl2-static-222
Accept-Ranges: bytes
wrathfultower.pro/cIDk9r6zb.2_5/lsSmW/QC9yNfDUIi2QN/zfMI4lNpgr
200 OK 18 kB URL HTTP/2 wrathfultower.pro/cIDk9r6zb.2_5/lsSmW/QC9yNfDUIi2QN/zfMI4lNpgr
IP
File type Unicode text, UTF-8 text, with very long lines (5600)
Hash 4dd5e8ce8779938f8abaa6f0cf2a3d18
f1ff79f011b0e765b15f31a58dd6d44718cd0fff
713add94cc1a76604165049ccf719faa17d13d352a3538798f08c42fb0d070e7
Analyzer Verdict Alert quad9 Sinkholed
GET /cIDk9r6zb.2_5/lsSmW/QC9yNfDUIi2QN/zfMI4lNpgr HTTP/1.1
Host: wrathfultower.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://freepornitaly.gigixo.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:41:42 GMT
content-type: application/javascript
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-methods: GET
last-modified: Sun, 27 Nov 2022 02:41:42 GMT
access-control-allow-origin: *
set-cookie: kadSlcJ=eyJ0aW1lU3RhbXAiOjE2Njk1MDM0OTksInpvbmVzIjp7IjQyNDIxODAiOls0MjQyMTgwLDEsMTY2OTQ1NDIxMV0sIjQyNTg5NTIiOls0MjU4OTUyLDEsMTY2OTQ5OTA0Nl0sIjQyNjczODYiOls0MjY3Mzg2LDEsMTY2OTUxNjkwMl0sIjQ0MzUxODUiOls0NDM1MTg1LDEsMTY2OTQ5MzkwNV0sIjQ0NDU1ODkiOls0NDQ1NTg5LDMsMTY2OTQ2NDI1M10sIjQ0NzU0NDYiOls0NDc1NDQ2LDEsMTY2OTQ4ODI0OV0sIjQ0NzU2MjQiOls0NDc1NjI0LDEsMTY2OTQ1MzU3OF0sIjQ1NzQyNjYiOls0NTc0MjY2LDEsMTY2OTQ2Mzk4NF19fQ==; max-age=1701052902; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
304 Not Modified 0 B URL HTTP/1.1 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tsyndicate.com/
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
HTTP/1.1 304 Not Modified
Date: Tue, 08 Mar 2022 10:11:03 GMT
Connection: keep-alive
Last-Modified: Tue, 22 Feb 2022 13:07:15 GMT
Server: nginx
X-Robots-Tag: noindex, nofollow
Vary: Accept-Encoding
ETag: W/"6214e003-1eb1"
Age: 22782639
go.xxxijmp.com/smartpop/c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&sourceId=226439&memberId=-q8S0pE-WgOLr6_MLnbn6KObIW7To8QGPTEWRXKn-ekAOzqhsHBh8oD3WFxkZWnylPO2snqpWdUj9q08bbAhVrdveSRgKE_zAKyYFrQ_gUIDRUi&p1=3841229
301 Moved Permanently 0 B URL HTTP/1.1 go.xxxijmp.com/smartpop/c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&sourceId=226439&memberId=-q8S0pE-WgOLr6_MLnbn6KObIW7To8QGPTEWRXKn-ekAOzqhsHBh8oD3WFxkZWnylPO2snqpWdUj9q08bbAhVrdveSRgKE_zAKyYFrQ_gUIDRUi&p1=3841229
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smartpop/c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&sourceId=226439&memberId=-q8S0pE-WgOLr6_MLnbn6KObIW7To8QGPTEWRXKn-ekAOzqhsHBh8oD3WFxkZWnylPO2snqpWdUj9q08bbAhVrdveSRgKE_zAKyYFrQ_gUIDRUi&p1=3841229 HTTP/1.1
Host: go.xxxijmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tsyndicate.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 27 Nov 2022 02:41:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 27 Nov 2022 03:41:42 GMT
Location: https://go.xxxijmp.com/smartpop/c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&sourceId=226439&memberId=-q8S0pE-WgOLr6_MLnbn6KObIW7To8QGPTEWRXKn-ekAOzqhsHBh8oD3WFxkZWnylPO2snqpWdUj9q08bbAhVrdveSRgKE_zAKyYFrQ_gUIDRUi&p1=3841229
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770781a13dd7fac0-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a4a140b160a140d07174a070b094b140d0717554b565455504955554956574b565c505d57563b5455060d034a0e1403
200 19 kB URL HTTP/1.1 freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a4a140b160a140d07174a070b094b140d0717554b565455504955554956574b565c505d57563b5455060d034a0e1403
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=17, height=4912, bps=0, PhotometricIntepretation=RGB, manufacturer=NIKON CORPORATION, model=NIKON D800, orientation=upper-left, width=7360]\012- data
Hash 7f816712c960077fd7914353cfd92723
f68f0d19b6634141f5ecf1fd9fd14af4e25e9f00
f4df6ad3459afab575a3b5e7fe40a933472b0a89b4853ca37904aff026636bfd
GET /viewImage3?data=0c101014175e4b4b07000a4a140b160a140d07174a070b094b140d0717554b565455504955554956574b565c505d57563b5455060d034a0e1403 HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Length: 18569
Connection: keep-alive
Cache-Control: max-age=31418383
ocsp.sectigo.com/
200 OK 472 B IP
Hash bbb0f4db8cf5afadcf6aff6e3efd84f5
306a448867377ee652726a0ca8f45112ed46f3d2
f3793d646b320f22c02cde1bee7423484fba1abc89cce4667754107416ab640f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 15:56:29 GMT
Expires: Sat, 03 Dec 2022 15:56:28 GMT
Etag: "306a448867377ee652726a0ca8f45112ed46f3d2"
Cache-Control: max-age=565485,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770781a12c270b06-OSL
lcdn.tsyndicate.com/images/7/9/5171e0b61c11e69664002590c57f96/main.gif
200 OK 49 kB URL HTTP/2 lcdn.tsyndicate.com/images/7/9/5171e0b61c11e69664002590c57f96/main.gif
IP
File type GIF image data, version 89a, 728 x 90\012- data
Hash d0a3287a281e6f37dad50ab7c0deb063
094524267a96553b3f1bde17974d48b4342ef044
ed65a597c92257c035a4009c63f81f4ca42b7c3088a1cc918e61a591c0d849d1
GET /images/7/9/5171e0b61c11e69664002590c57f96/main.gif HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://tsyndicate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 02:41:42 GMT
content-type: image/gif
content-length: 49340
etag: "6055c06d-c0bc"
last-modified: Sat, 20 Mar 2021 09:29:17 GMT
server: nginx
x-robots-tag: noindex, nofollow
age: 21871500
accept-ranges: bytes
X-Firefox-Spdy: h2
freepornitaly.gigixo.com/s3/ad_amt1_v-01/1279.jpg
200 OK 46 kB URL HTTP/1.1 freepornitaly.gigixo.com/s3/ad_amt1_v-01/1279.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 133x600, components 3\012- data
Hash b1648314f2511df1c4b9974df0c37bb9
97bf26f360246a3bd57a6d8116a06b40b161e3f3
df339b57a17820cb35068274c3d44ca204d281b717096282a282d6e9406b52ae
GET /s3/ad_amt1_v-01/1279.jpg HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Type: image/jpeg
Content-Length: 46129
Connection: keep-alive
Last-Modified: Wed, 31 Mar 2021 20:30:42 GMT
ETag: "6064dbf2-b431"
X-Cluster: web-cdn2
X-Cache: HIT
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RYZci%2FVRtXjKklZsS9DPzwnTEAmD%2BFvbd3MEVYdpoa5t1Bk4CSwk7MUzx0tVpv%2B2EeVDU79Pf5A%2BPbIVfB8Un7%2FPfCJThEh4NOYgY6sbW5ZRTjRX57wesNeAEtppnCo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
CF-RAY: 7707819f3d91870a-ORD
alt-svc: h2=":443"; ma=60
X-Cache-Status: MISS
Cache-Control: max-age=14400, max-age=31536000
Accept-Ranges: bytes
go.xxxijmp.com/smartpop/c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&sourceId=226439&memberId=-q8S0pE-WgOLr6_MLnbn6KObIW7To8QGPTEWRXKn-ekAOzqhsHBh8oD3WFxkZWnylPO2snqpWdUj9q08bbAhVrdveSRgKE_zAKyYFrQ_gUIDRUi&p1=3841229
302 Found 0 B URL HTTP/2 go.xxxijmp.com/smartpop/c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&sourceId=226439&memberId=-q8S0pE-WgOLr6_MLnbn6KObIW7To8QGPTEWRXKn-ekAOzqhsHBh8oD3WFxkZWnylPO2snqpWdUj9q08bbAhVrdveSRgKE_zAKyYFrQ_gUIDRUi&p1=3841229
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smartpop/c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&sourceId=226439&memberId=-q8S0pE-WgOLr6_MLnbn6KObIW7To8QGPTEWRXKn-ekAOzqhsHBh8oD3WFxkZWnylPO2snqpWdUj9q08bbAhVrdveSRgKE_zAKyYFrQ_gUIDRUi&p1=3841229 HTTP/1.1
Host: go.xxxijmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://tsyndicate.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 27 Nov 2022 02:41:42 GMT
content-length: 0
location: https://creative.xxxvjmp.com/widgets/v4/Universal?campaignId=c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88&campaignType=smartpop&creativeId=1390687f9dbb037f152ef0b7b5cb740bd85b1b21c87ca9ad9ed9fb9e87960e09&iterationId=280514&masterSmartpopId=1605&memberId=-q8S0pE-WgOLr6_MLnbn6KObIW7To8QGPTEWRXKn-ekAOzqhsHBh8oD3WFxkZWnylPO2snqpWdUj9q08bbAhVrdveSRgKE_zAKyYFrQ_gUIDRUi&p1=3841229&ruleId=3&smartpopId=1547&sourceId=226439&tag=-girls%2Findian&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=29750
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: DYNAMIC
set-cookie: _var=808613.29750; Path=/; HttpOnly; SameSite=Strict
__cflb=02DiuDfsBaY2bRYJiCddNhqGgfsRfgxdZvHyJB4UAn1pg; SameSite=None; Secure; path=/; expires=Mon, 28-Nov-22 01:41:42 GMT; HttpOnly
server: cloudflare
cf-ray: 770781a18a1ab50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b514b5656524b515d5d54535751544b515d5d54535751543b5454553b570106024a0e1403
200 167 B URL HTTP/1.1 freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b514b5656524b515d5d54535751544b515d5d54535751543b5454553b570106024a0e1403
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 353b078eb77e5ee068e83b7503f3c75b
d0b2207fea4313a3ea391b94880f1d01e5ab1c89
297488a03131e435cb999248b75ed4ac78ae3bbf4c3366d8d57c821b2548dd8d
GET /viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b514b5656524b515d5d54535751544b515d5d54535751543b5454553b570106024a0e1403 HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 975f9e96e24b881d24f1f617e52f32bc
a1cb17f0a158952fcf1eeb01fda593232bf5508b
0e26fd25605bdc2f607bb1775f3808dfa47bc9f8a96b303bcd1e410a4978817a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6427
Cache-Control: max-age=95393
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:41:42 GMT
Etag: "638186ec-117"
Expires: Mon, 28 Nov 2022 05:11:35 GMT
Last-Modified: Sat, 26 Nov 2022 03:24:28 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zCyGGmVHGDIwxN1qIqVHDTAsaYWKEHAkjJJkZZG6YiVGmhoyCN0Q8DFNnTMYYYWjcCCMGZgsYZmiQOTnDRg2RMmLIEDljRgwcZnLUEENDTBidEMnYWXjjIZw6YhbaiKFyJxw4FGfkoPFwDpyJOpriEHoDxsMxbeDqkIEDhtWdZMwslDHjoRg3bijaWCuDrog2bjAynCFDhl8RcDBrdkqjoog6cthQlFHjRg0bZU_LyIiGDh04c3S8eHFHogs2adyseTEG-Jg1P8b0KJNHCZokat7MYDJEiR3ob_A00ZNlThI3QdI8UeMkB5c6MGDIsFE8zfE0ZHrIUXKkCXUpOQzHaHPjTvUmbOTxxhBz4DDHG1lcYUcOSZDRxBtMSBFDC3Y0YYYTRJwhXRRqRFFDG1Pk4YYeQpxhxxlV1BGGeE3IkYYSUKiBhhVFtHBEG0TIEYQSN-AgRw5qqKGFGjOMMcMbcAjxxBBI1LHEDFp8gWISREhRRRpgkfFGGxmZIUcZZcDxhhxupEFHGAG6cEYaa-LxhgtjbAnWGGHgtUVFMrDQWFk4sCCVn43FQFdbjOnpF2ddOKaYDjC4AINpctgh2Ayf1VEHljqI0NkNNuQwww1ltGCDDGGESgMOZEyYA1c0tFCQUmPIwCkZNsxAA1hpCCZCDjG4kJ8LNMjgQkO3PiTHF7lmxKuvjQY7bA3FnvZVpg_qkQYbbITxQg2OgoDCFcFpecccIDhBBQgxNArDDiCA64YNNLCLB7zsRsoQDNzCkAIIR5Rx3BsveJbuo4-CYEQaX5qR3Qvp5junT5k68QRYY34xBsQiSAwWGxgX4USWZdjxxZeqMdRaj3qlZ-wZkQ1WAw6xHSSyGHIshEOfIsj8RRtvkLEYDms9RIYcbyzUmAhvKKSDZXAQjUceC1mWMG22waHbC16CKSaZZqKZh5pspuEmnFu-ANYdPxEGA1ho_KRetHNEmhHRZ9IxZgt1lElHCzPg4AIZY0iVJcYHfQG44BZxydBkWsXQqXqJz7Z4pzU4nl9lVyE2chl2fVGnZJRbDrkIIXvOBkJ0KL2FrYlCJAZeOXfEExsTmcXxQp-NoRkMfSgQEA%3D%3D&s=ab4db4add71b63c0c0ea634d319d187a7273ee7e448ae9c3d849d66fdef4005e1669516902&w=t&r=1&d=54&priv=false
200 OK 24 B URL HTTP/1.1 pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zCyGGmVHGDIwxN1qIqVHDTAsaYWKEHAkjJJkZZG6YiVGmhoyCN0Q8DFNnTMYYYWjcCCMGZgsYZmiQOTnDRg2RMmLIEDljRgwcZnLUEENDTBidEMnYWXjjIZw6YhbaiKFyJxw4FGfkoPFwDpyJOpriEHoDxsMxbeDqkIEDhtWdZMwslDHjoRg3bijaWCuDrog2bjAynCFDhl8RcDBrdkqjoog6cthQlFHjRg0bZU_LyIiGDh04c3S8eHFHogs2adyseTEG-Jg1P8b0KJNHCZokat7MYDJEiR3ob_A00ZNlThI3QdI8UeMkB5c6MGDIsFE8zfE0ZHrIUXKkCXUpOQzHaHPjTvUmbOTxxhBz4DDHG1lcYUcOSZDRxBtMSBFDC3Y0YYYTRJwhXRRqRFFDG1Pk4YYeQpxhxxlV1BGGeE3IkYYSUKiBhhVFtHBEG0TIEYQSN-AgRw5qqKGFGjOMMcMbcAjxxBBI1LHEDFp8gWISREhRRRpgkfFGGxmZIUcZZcDxhhxupEFHGAG6cEYaa-LxhgtjbAnWGGHgtUVFMrDQWFk4sCCVn43FQFdbjOnpF2ddOKaYDjC4AINpctgh2Ayf1VEHljqI0NkNNuQwww1ltGCDDGGESgMOZEyYA1c0tFCQUmPIwCkZNsxAA1hpCCZCDjG4kJ8LNMjgQkO3PiTHF7lmxKuvjQY7bA3FnvZVpg_qkQYbbITxQg2OgoDCFcFpecccIDhBBQgxNArDDiCA64YNNLCLB7zsRsoQDNzCkAIIR5Rx3BsveJbuo4-CYEQaX5qR3Qvp5junT5k68QRYY34xBsQiSAwWGxgX4USWZdjxxZeqMdRaj3qlZ-wZkQ1WAw6xHSSyGHIshEOfIsj8RRtvkLEYDms9RIYcbyzUmAhvKKSDZXAQjUceC1mWMG22waHbC16CKSaZZqKZh5pspuEmnFu-ANYdPxEGA1ho_KRetHNEmhHRZ9IxZgt1lElHCzPg4AIZY0iVJcYHfQG44BZxydBkWsXQqXqJz7Z4pzU4nl9lVyE2chl2fVGnZJRbDrkIIXvOBkJ0KL2FrYlCJAZeOXfEExsTmcXxQp-NoRkMfSgQEA%3D%3D&s=ab4db4add71b63c0c0ea634d319d187a7273ee7e448ae9c3d849d66fdef4005e1669516902&w=t&r=1&d=54&priv=false
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zCyGGmVHGDIwxN1qIqVHDTAsaYWKEHAkjJJkZZG6YiVGmhoyCN0Q8DFNnTMYYYWjcCCMGZgsYZmiQOTnDRg2RMmLIEDljRgwcZnLUEENDTBidEMnYWXjjIZw6YhbaiKFyJxw4FGfkoPFwDpyJOpriEHoDxsMxbeDqkIEDhtWdZMwslDHjoRg3bijaWCuDrog2bjAynCFDhl8RcDBrdkqjoog6cthQlFHjRg0bZU_LyIiGDh04c3S8eHFHogs2adyseTEG-Jg1P8b0KJNHCZokat7MYDJEiR3ob_A00ZNlThI3QdI8UeMkB5c6MGDIsFE8zfE0ZHrIUXKkCXUpOQzHaHPjTvUmbOTxxhBz4DDHG1lcYUcOSZDRxBtMSBFDC3Y0YYYTRJwhXRRqRFFDG1Pk4YYeQpxhxxlV1BGGeE3IkYYSUKiBhhVFtHBEG0TIEYQSN-AgRw5qqKGFGjOMMcMbcAjxxBBI1LHEDFp8gWISREhRRRpgkfFGGxmZIUcZZcDxhhxupEFHGAG6cEYaa-LxhgtjbAnWGGHgtUVFMrDQWFk4sCCVn43FQFdbjOnpF2ddOKaYDjC4AINpctgh2Ayf1VEHljqI0NkNNuQwww1ltGCDDGGESgMOZEyYA1c0tFCQUmPIwCkZNsxAA1hpCCZCDjG4kJ8LNMjgQkO3PiTHF7lmxKuvjQY7bA3FnvZVpg_qkQYbbITxQg2OgoDCFcFpecccIDhBBQgxNArDDiCA64YNNLCLB7zsRsoQDNzCkAIIR5Rx3BsveJbuo4-CYEQaX5qR3Qvp5junT5k68QRYY34xBsQiSAwWGxgX4USWZdjxxZeqMdRaj3qlZ-wZkQ1WAw6xHSSyGHIshEOfIsj8RRtvkLEYDms9RIYcbyzUmAhvKKSDZXAQjUceC1mWMG22waHbC16CKSaZZqKZh5pspuEmnFu-ANYdPxEGA1ho_KRetHNEmhHRZ9IxZgt1lElHCzPg4AIZY0iVJcYHfQG44BZxydBkWsXQqXqJz7Z4pzU4nl9lVyE2chl2fVGnZJRbDrkIIXvOBkJ0KL2FrYlCJAZeOXfEExsTmcXxQp-NoRkMfSgQEA%3D%3D&s=ab4db4add71b63c0c0ea634d319d187a7273ee7e448ae9c3d849d66fdef4005e1669516902&w=t&r=1&d=54&priv=false HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tsyndicate.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 24
Connection: keep-alive
X-Robots-Tag: noindex, nofollow
ocsp.digicert.com/
200 OK 279 B IP
Hash 975f9e96e24b881d24f1f617e52f32bc
a1cb17f0a158952fcf1eeb01fda593232bf5508b
0e26fd25605bdc2f607bb1775f3808dfa47bc9f8a96b303bcd1e410a4978817a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6427
Cache-Control: max-age=95393
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:41:42 GMT
Etag: "638186ec-117"
Expires: Mon, 28 Nov 2022 05:11:35 GMT
Last-Modified: Sat, 26 Nov 2022 03:24:28 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7cb8cd179aa7f27494457fe167fdfa19
901525861fe033da18dfaed8836f257cd0b8f534
19720d7ef97fb3bb6110bb5b2f2b973d0ea5aee6e1c8c254af9fe0a94fbfe3d2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "19720D7EF97FB3BB6110BB5B2F2B973D0EA5AEE6E1C8C254AF9FE0A94FBFE3D2"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8198
Expires: Sun, 27 Nov 2022 04:58:20 GMT
Date: Sun, 27 Nov 2022 02:41:42 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 472 B IP
Hash 077b945d3a829a4bc425221cde262257
64eedf0134098a56933783caae12ccf93b8e5194
6f90a7776c0b56af2d29c19f2d34bb0ff42a30abda0d526cbda2ff8984d42215
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 24 Nov 2022 07:25:45 GMT
Expires: Thu, 01 Dec 2022 07:25:44 GMT
Etag: "64eedf0134098a56933783caae12ccf93b8e5194"
Cache-Control: max-age=362041,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770781a11c2b0afa-OSL
freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b070d4a140c0a07000a4a070b094b140d07174b0508061109174b5451544b5056564b5253564b5255555257545656564b4c095901491d0505231505054d4c090c593e01035757230f3b2651221d0b3454374d0b160d030d0a05083b5255555257545656564a0e1403
200 96 kB URL HTTP/1.1 freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b070d4a140c0a07000a4a070b094b140d07174b0508061109174b5451544b5056564b5253564b5255555257545656564b4c095901491d0505231505054d4c090c593e01035757230f3b2651221d0b3454374d0b160d030d0a05083b5255555257545656564a0e1403
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 575x862, components 3\012- data
Hash 8bd6b239174a243c2af8c59466ef147b
a514c5cfb9910f8cc6e4a0bd88d58e27bae93f40
c31127b7d81a20a03c4e16249edf2293beb444d69091a67451e70923338246eb
GET /viewImage3?data=0c101014175e4b4b070d4a140c0a07000a4a070b094b140d07174b0508061109174b5451544b5056564b5253564b5255555257545656564b4c095901491d0505231505054d4c090c593e01035757230f3b2651221d0b3454374d0b160d030d0a05083b5255555257545656564a0e1403 HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Length: 95466
Connection: keep-alive
Cache-Control: max-age=31418383
pxl.tsyndicate.com/api/v1/elapsedtime?f=banner%20728x90&sc=9d1e13394347478aa7505e5c4801aade&hn=freepornitaly.gigixo.com&et=232
200 OK 0 B URL HTTP/1.1 pxl.tsyndicate.com/api/v1/elapsedtime?f=banner%20728x90&sc=9d1e13394347478aa7505e5c4801aade&hn=freepornitaly.gigixo.com&et=232
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/elapsedtime?f=banner%20728x90&sc=9d1e13394347478aa7505e5c4801aade&hn=freepornitaly.gigixo.com&et=232 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Length: 0
Connection: keep-alive
X-Robots-Tag: noindex, nofollow
maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js
200 OK 12 kB URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (32003)
Hash 8387b9b0f25cbd7b6d8b6f91dc0019c9
97a4a40ab697b86c171fcff04093db029d2ee0c2
f8cd666a2300704f0ea40e7ad7d16c9d4b62323d2efdef279cb075005516ddff
GET /bootstrap/3.3.6/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://freepornitaly.gigixo.com
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 02:41:41 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"c5b5b2fa19bd66ff23211d9f844e0131"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 08/20/2022 02:30:10
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 874
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: dd10b3de55726fc0de799b603cbb3d79
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7707819b9fd40b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
poweredby.jads.co/adshow.php?adzone=907232
200 OK 1.8 kB URL HTTP/1.1 poweredby.jads.co/adshow.php?adzone=907232
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1589), with CRLF, LF line terminators
Hash a065abb81adecc012d73483f3e6cd9f9
087c455a93581545a64eb062f5643a9897bdfcac
7caf76af241f63f226c36c692cb240bd39ab268f5957f4a521cf287988c95a5e
GET /adshow.php?adzone=907232 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=c459ffd45ef1d2c7b986ea43c61fabba; expires=Mon, 27-Nov-2023 02:41:42 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps53761=1; expires=Mon, 28-Nov-2022 02:41:42 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjE1MDg2Nzg7aToxNjY5Nzc2MTAyO30%3D; expires=Wed, 30-Nov-2022 02:41:42 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Wed, 30-Nov-2022 02:41:42 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
freepornitaly.gigixo.com/viewImage3?data=0c1010145e4b4b0d4a17011c114a070b094b17011c1149100c110906174b00564b565456545257535d4b575c49565c541c5551534a0e1403
200 13 kB URL HTTP/1.1 freepornitaly.gigixo.com/viewImage3?data=0c1010145e4b4b0d4a17011c114a070b094b17011c1149100c110906174b00564b565456545257535d4b575c49565c541c5551534a0e1403
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x157, components 3\012- data
Hash 654a33c1c416482715cb5f80eba2e847
c76e9bb0ba31d38eeb73a3872c1b76b9a9998d11
75a0f35ea453e477853b7a4ede0e65b81748435a6cdea2d7b348b91ea2cf9ae1
GET /viewImage3?data=0c1010145e4b4b0d4a17011c114a070b094b17011c1149100c110906174b00564b565456545257535d4b575c49565c541c5551534a0e1403 HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Length: 13282
Connection: keep-alive
Cache-Control: max-age=31418383
cdn.tsyndicate.com/sdk/v1/bi.js
304 Not Modified 0 B URL HTTP/1.1 cdn.tsyndicate.com/sdk/v1/bi.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/bi.js HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
If-Modified-Since: Tue, 15 Nov 2022 12:24:35 GMT
If-None-Match: W/"63738503-1e83"
HTTP/1.1 304 Not Modified
Date: Tue, 15 Nov 2022 12:39:23 GMT
Connection: keep-alive
Last-Modified: Tue, 15 Nov 2022 12:24:35 GMT
Server: nginx
X-Robots-Tag: noindex, nofollow
Vary: Accept-Encoding
ETag: W/"63738503-1e83"
Age: 1000939
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WUkWHDTJgwYm60GDOjRpgWNGKIIdMCR5mNIzvGyCEGh5gaNsLEEPEwTJ0xGcvUqFHGjAwYIsXYuCEDZRgbLHPAIHNSRg0zJWuQqXHjxhgZPCGSsUMRB40cOB7CqSNmoY0YMW70hAOH4owcNB7OgTNRxwyzMWTIyPFwTJu6OgTboHG3JxkzbiuKEOPGDUUbNmAsnfGwjRuMDGcIhqHWM2gbNVI-rLNTx0A6dODM0fHixZk3LvDoTqPmsIsxb9q8mNMmjJzYb-C8IOlxBg2mOGBwdSk1TI4yOEDGKGNDRvQxMMrMeFtDBg0yDWOQGSPGDHcxN0PKmOG-DF6v2HH8qDMHYRIyPZRBBg3i0XDWUTKEYWAYHuEQwwwNIWUdegnGMEYO3YkWAw6ZlUFDe2N89ZFKM8ygEw445HCDUuFxUQcMMHA0xxt1yDFGGf_1oBhjObgII0dtlNGGGP4B6EYMVnwhQxBzkEHGDVDEMMcURRghgxox2HEGFTDI8YUadGCRRhV0vEFHHVKcIUMeNKxhwxlXhHGEGC1siYUSa9AxBBt6nLEGHmfkAUMMWUARBxNhGIHDGUnE4d4XdjQxxBFMwIEHEnfEYMMbb8AghhIyoHFdG2fY4EQTadDwxRlVJEGEFFWk4WOMNsARQw9_pSRYDmGREVxGZsjxEhxvyOFGGnSEwUYeLpyRhrN44AZcG2GNEUZfW1QkAwucyZVWYCw8GG5ecbEwH7ekidbFQ-0tBIMLgz4khx2IzUCaCHXUkUZGZMhwUA3s0dCCelKhZIZ7LYQxXgwtkKHZhzaJhxoOYaWBmAg5xOCCVC7QIIMLDdEQlpcWZ5Txxu96DHJqYdURRkZNvKFHGmywEcYLNcALAgpXpOGGr3fMAYITVIAQw7sw7ABCz24spjQeToMwL0PSwZsCCEeUMcYab7xw1NGDDgqCEWkIa8YbeLxwdM4wVAuUa048EVaxX4SYUdxhsfG2CEU40WsZdnwhLBsUcXUDDuNFd68cZ1iWWA04yCXCQYGLIcdCKD5E-RdtvEHGQt69pbkcbyzEmQhvKKRDXiLAQToeeSzEutkZoQEbHLS9EOywxR6b7LLNPptGtL8F90JYd2QUWHRhoaF8jCLrNW9GpCdbphwt1OE7Sjm4sF5gve590Bffg2URtQxhlkMNmkq1rQh0tAFW-jas336M9qYlluBl7PXFtZepH_vqF6OHAO5_bEAIHVS3BeesCyJi6MvkiuITNkxELXpzV2FAA4M-KCAg&s=cbb1c648c4cf6fb5a7034ba6786dd9005f4f579521ae5e6649fffb4b322478181669516902&w=t&r=1&d=366&priv=false
200 OK 24 B URL HTTP/1.1 pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WUkWHDTJgwYm60GDOjRpgWNGKIIdMCR5mNIzvGyCEGh5gaNsLEEPEwTJ0xGcvUqFHGjAwYIsXYuCEDZRgbLHPAIHNSRg0zJWuQqXHjxhgZPCGSsUMRB40cOB7CqSNmoY0YMW70hAOH4owcNB7OgTNRxwyzMWTIyPFwTJu6OgTboHG3JxkzbiuKEOPGDUUbNmAsnfGwjRuMDGcIhqHWM2gbNVI-rLNTx0A6dODM0fHixZk3LvDoTqPmsIsxb9q8mNMmjJzYb-C8IOlxBg2mOGBwdSk1TI4yOEDGKGNDRvQxMMrMeFtDBg0yDWOQGSPGDHcxN0PKmOG-DF6v2HH8qDMHYRIyPZRBBg3i0XDWUTKEYWAYHuEQwwwNIWUdegnGMEYO3YkWAw6ZlUFDe2N89ZFKM8ygEw445HCDUuFxUQcMMHA0xxt1yDFGGf_1oBhjObgII0dtlNGGGP4B6EYMVnwhQxBzkEHGDVDEMMcURRghgxox2HEGFTDI8YUadGCRRhV0vEFHHVKcIUMeNKxhwxlXhHGEGC1siYUSa9AxBBt6nLEGHmfkAUMMWUARBxNhGIHDGUnE4d4XdjQxxBFMwIEHEnfEYMMbb8AghhIyoHFdG2fY4EQTadDwxRlVJEGEFFWk4WOMNsARQw9_pSRYDmGREVxGZsjxEhxvyOFGGnSEwUYeLpyRhrN44AZcG2GNEUZfW1QkAwucyZVWYCw8GG5ecbEwH7ekidbFQ-0tBIMLgz4khx2IzUCaCHXUkUZGZMhwUA3s0dCCelKhZIZ7LYQxXgwtkKHZhzaJhxoOYaWBmAg5xOCCVC7QIIMLDdEQlpcWZ5Txxu96DHJqYdURRkZNvKFHGmywEcYLNcALAgpXpOGGr3fMAYITVIAQw7sw7ABCz24spjQeToMwL0PSwZsCCEeUMcYab7xw1NGDDgqCEWkIa8YbeLxwdM4wVAuUa048EVaxX4SYUdxhsfG2CEU40WsZdnwhLBsUcXUDDuNFd68cZ1iWWA04yCXCQYGLIcdCKD5E-RdtvEHGQt69pbkcbyzEmQhvKKRDXiLAQToeeSzEutkZoQEbHLS9EOywxR6b7LLNPptGtL8F90JYd2QUWHRhoaF8jCLrNW9GpCdbphwt1OE7Sjm4sF5gve590Bffg2URtQxhlkMNmkq1rQh0tAFW-jas336M9qYlluBl7PXFtZepH_vqF6OHAO5_bEAIHVS3BeesCyJi6MvkiuITNkxELXpzV2FAA4M-KCAg&s=cbb1c648c4cf6fb5a7034ba6786dd9005f4f579521ae5e6649fffb4b322478181669516902&w=t&r=1&d=366&priv=false
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WUkWHDTJgwYm60GDOjRpgWNGKIIdMCR5mNIzvGyCEGh5gaNsLEEPEwTJ0xGcvUqFHGjAwYIsXYuCEDZRgbLHPAIHNSRg0zJWuQqXHjxhgZPCGSsUMRB40cOB7CqSNmoY0YMW70hAOH4owcNB7OgTNRxwyzMWTIyPFwTJu6OgTboHG3JxkzbiuKEOPGDUUbNmAsnfGwjRuMDGcIhqHWM2gbNVI-rLNTx0A6dODM0fHixZk3LvDoTqPmsIsxb9q8mNMmjJzYb-C8IOlxBg2mOGBwdSk1TI4yOEDGKGNDRvQxMMrMeFtDBg0yDWOQGSPGDHcxN0PKmOG-DF6v2HH8qDMHYRIyPZRBBg3i0XDWUTKEYWAYHuEQwwwNIWUdegnGMEYO3YkWAw6ZlUFDe2N89ZFKM8ygEw445HCDUuFxUQcMMHA0xxt1yDFGGf_1oBhjObgII0dtlNGGGP4B6EYMVnwhQxBzkEHGDVDEMMcURRghgxox2HEGFTDI8YUadGCRRhV0vEFHHVKcIUMeNKxhwxlXhHGEGC1siYUSa9AxBBt6nLEGHmfkAUMMWUARBxNhGIHDGUnE4d4XdjQxxBFMwIEHEnfEYMMbb8AghhIyoHFdG2fY4EQTadDwxRlVJEGEFFWk4WOMNsARQw9_pSRYDmGREVxGZsjxEhxvyOFGGnSEwUYeLpyRhrN44AZcG2GNEUZfW1QkAwucyZVWYCw8GG5ecbEwH7ekidbFQ-0tBIMLgz4khx2IzUCaCHXUkUZGZMhwUA3s0dCCelKhZIZ7LYQxXgwtkKHZhzaJhxoOYaWBmAg5xOCCVC7QIIMLDdEQlpcWZ5Txxu96DHJqYdURRkZNvKFHGmywEcYLNcALAgpXpOGGr3fMAYITVIAQw7sw7ABCz24spjQeToMwL0PSwZsCCEeUMcYab7xw1NGDDgqCEWkIa8YbeLxwdM4wVAuUa048EVaxX4SYUdxhsfG2CEU40WsZdnwhLBsUcXUDDuNFd68cZ1iWWA04yCXCQYGLIcdCKD5E-RdtvEHGQt69pbkcbyzEmQhvKKRDXiLAQToeeSzEutkZoQEbHLS9EOywxR6b7LLNPptGtL8F90JYd2QUWHRhoaF8jCLrNW9GpCdbphwt1OE7Sjm4sF5gve590Bffg2URtQxhlkMNmkq1rQh0tAFW-jas336M9qYlluBl7PXFtZepH_vqF6OHAO5_bEAIHVS3BeesCyJi6MvkiuITNkxELXpzV2FAA4M-KCAg&s=cbb1c648c4cf6fb5a7034ba6786dd9005f4f579521ae5e6649fffb4b322478181669516902&w=t&r=1&d=366&priv=false HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tsyndicate.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 24
Connection: keep-alive
X-Robots-Tag: noindex, nofollow
cdn.tsyndicate.com/sdk/v1/bi.js
304 Not Modified 0 B URL HTTP/1.1 cdn.tsyndicate.com/sdk/v1/bi.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/bi.js HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
If-Modified-Since: Tue, 15 Nov 2022 12:24:35 GMT
If-None-Match: W/"63738503-1e83"
HTTP/1.1 304 Not Modified
Date: Tue, 15 Nov 2022 12:39:23 GMT
Connection: keep-alive
Last-Modified: Tue, 15 Nov 2022 12:24:35 GMT
Server: nginx
X-Robots-Tag: noindex, nofollow
Vary: Accept-Encoding
ETag: W/"63738503-1e83"
Age: 1000940
i.jads.co/1x1.gif
200 OK 43 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /1x1.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://poweredby.jads.co/
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 02:41:43 GMT
Connection: Keep-Alive
ETag: "1457030838"
Cache-Control: max-age=17708363
Content-Length: 43
Content-Type: image/gif
Last-Modified: Thu, 03 Mar 2016 18:47:18 GMT
Accept-Ranges: bytes
X-HW: 1669516903.dop225.sk1.t,1669516903.cds217.sk1.c
ocsp.digicert.com/
200 OK 279 B IP
Hash 4140b2d6919d3a6390479f548c86bba7
fde2e1a18b9ce7d89417d0c59557de4924b9c7d2
c89cf6cb185fac66684309b982581a9bd4ceb93b6e1fdc5e9348d7b42f15bcc5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1328
Cache-Control: max-age=87469
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:41:43 GMT
Etag: "63817be4-117"
Expires: Mon, 28 Nov 2022 02:59:32 GMT
Last-Modified: Sat, 26 Nov 2022 02:37:24 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
rtbrennab.com/banner/in/show/?mid=4717727844039991415&pid=0&site=5422&sc=NO&usage_type=DCH&subid=1134153787&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=freepornitaly.gigixo.com&hostname=auc-banner-hz-3&site_id=0&spot_id=0&utm_source=tcban_s&utm_medium=5422&utm_campaign=17794&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB24&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=1&ml=&tag_ab=&ttl=&space_id=1010&banner_width=160&banner_height=600&accel=0&gyr=0&iabcat=IAB24&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D0%26source%3D1134153787%26idzone%3D3902650%26w%3D160%26h%3D600%26mo%3D%26ve%3D%26site_id%3D5422%26utm1%3Dtcban_s%26utm2%3D5422%26utm3%3D17794%26utm4%3D%26ad_tags%3D%26spot_id%3D0%26p%3Dhttp%253A%252F%252Ffreepornitaly.gigixo.com%252F%26katds_labels%3D%26btype%3D0%26score%3D1%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=&stratagem=&ssp=3758
302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=4717727844039991415&pid=0&site=5422&sc=NO&usage_type=DCH&subid=1134153787&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=freepornitaly.gigixo.com&hostname=auc-banner-hz-3&site_id=0&spot_id=0&utm_source=tcban_s&utm_medium=5422&utm_campaign=17794&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB24&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=1&ml=&tag_ab=&ttl=&space_id=1010&banner_width=160&banner_height=600&accel=0&gyr=0&iabcat=IAB24&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D0%26source%3D1134153787%26idzone%3D3902650%26w%3D160%26h%3D600%26mo%3D%26ve%3D%26site_id%3D5422%26utm1%3Dtcban_s%26utm2%3D5422%26utm3%3D17794%26utm4%3D%26ad_tags%3D%26spot_id%3D0%26p%3Dhttp%253A%252F%252Ffreepornitaly.gigixo.com%252F%26katds_labels%3D%26btype%3D0%26score%3D1%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=&stratagem=&ssp=3758
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=4717727844039991415&pid=0&site=5422&sc=NO&usage_type=DCH&subid=1134153787&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=freepornitaly.gigixo.com&hostname=auc-banner-hz-3&site_id=0&spot_id=0&utm_source=tcban_s&utm_medium=5422&utm_campaign=17794&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB24&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=1&ml=&tag_ab=&ttl=&space_id=1010&banner_width=160&banner_height=600&accel=0&gyr=0&iabcat=IAB24&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D0%26source%3D1134153787%26idzone%3D3902650%26w%3D160%26h%3D600%26mo%3D%26ve%3D%26site_id%3D5422%26utm1%3Dtcban_s%26utm2%3D5422%26utm3%3D17794%26utm4%3D%26ad_tags%3D%26spot_id%3D0%26p%3Dhttp%253A%252F%252Ffreepornitaly.gigixo.com%252F%26katds_labels%3D%26btype%3D0%26score%3D1%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=&stratagem=&ssp=3758 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtbbnr.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.16.0
date: Sun, 27 Nov 2022 02:41:43 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=0&source=1134153787&idzone=3902650&w=160&h=600&mo=&ve=&site_id=5422&utm1=tcban_s&utm2=5422&utm3=17794&utm4=&ad_tags=&spot_id=0&p=http%3A%2F%2Ffreepornitaly.gigixo.com%2F&katds_labels=&btype=0&score=1&bf=0.0001
X-Firefox-Spdy: h2
www.sizokiwhe.pro/ddd053/896c4467b56b.js
200 OK 125 kB URL HTTP/2 www.sizokiwhe.pro/ddd053/896c4467b56b.js
IP
ASN #61107 Toonbox Studio Ltd
File type ASCII text, with very long lines (65536), with no line terminators
Size 125 kB (124568 bytes)
Hash 626d8b6ef11c080d71dc5063cbf8723d
be9a134c33d808d6cb8cb394c056b324a41659e4
ac539a887ba3e6a9dc7aa0e7607cfe829dc1e8c65111dc76cf1c59971960e017
GET /ddd053/896c4467b56b.js HTTP/1.1
Host: www.sizokiwhe.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Origin: http://freepornitaly.gigixo.com
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ucdn/1.22.1
date: Sun, 27 Nov 2022 02:41:42 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315357498, public
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsr3uaLidETSLqKazNe79F20wMSOOHFcT6gp5oCgf4zgLSW9G0bgBQkxYucKEX6fKtb93GfiwdDVJfpgFbaGtVoq
x-served-from: l1
x-vhostid: 6537, 24860
content-encoding: br
X-Firefox-Spdy: h2
creative.xxxvjmp.com/widgets/v4/Universal/main.9a7cab7e17725c785312.css
200 OK 4.2 kB URL HTTP/2 creative.xxxvjmp.com/widgets/v4/Universal/main.9a7cab7e17725c785312.css
IP
File type ASCII text, with very long lines (13315), with no line terminators
Hash 09a7f31f27985420b77e81c2dc6c3eb3
4082488ce21590dfad251bf70fcecd9d66443960
ede2019b6a0073ac7c9ba053444b2944f881821deeeda31e9941b3499bcfb12a
GET /widgets/v4/Universal/main.9a7cab7e17725c785312.css HTTP/1.1
Host: creative.xxxvjmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xxxvjmp.com/widgets/v4/Universal?campaignId=c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88&campaignType=smartpop&creativeId=1390687f9dbb037f152ef0b7b5cb740bd85b1b21c87ca9ad9ed9fb9e87960e09&iterationId=280514&masterSmartpopId=1605&memberId=-q8S0pE-WgOLr6_MLnbn6KObIW7To8QGPTEWRXKn-ekAOzqhsHBh8oD3WFxkZWnylPO2snqpWdUj9q08bbAhVrdveSRgKE_zAKyYFrQ_gUIDRUi&p1=3841229&ruleId=3&smartpopId=1547&sourceId=226439&tag=-girls%2Findian&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=29750
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 02:41:42 GMT
content-type: text/css
last-modified: Wed, 16 Nov 2022 07:59:45 GMT
etag: W/"63749871-3403"
expires: Sun, 27 Nov 2022 02:41:35 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 9
vary: Accept-Encoding
server: cloudflare
cf-ray: 770781a25f62b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.jads.co/network/user179029/53761-1668593370-0865398001668593370.gif
200 OK 170 kB URL HTTP/1.1 i.jads.co/network/user179029/53761-1668593370-0865398001668593370.gif
IP
File type GIF image data, version 89a, 728 x 90\012- data
Size 170 kB (169836 bytes)
Hash 0a51c3decfa9c6fa11d142ed91566fd5
0d034c4ac6abcfca12fcb17aefc5faa21d9b8b56
bbd834dc638b22a05dc4106e1607fe2ad12a93aceee347d060f193acfd93024d
GET /network/user179029/53761-1668593370-0865398001668593370.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://poweredby.jads.co/
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 02:41:43 GMT
Connection: Keep-Alive
ETag: "1668593370"
Cache-Control: max-age=30673314
Content-Length: 169836
Content-Type: image/gif
Last-Modified: Wed, 16 Nov 2022 10:09:30 GMT
Accept-Ranges: bytes
X-HW: 1669516903.dop213.sk1.t,1669516903.cds258.sk1.c
freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b534b5053514b5c56545c525457524b5c56545c525457523b5454503b515c54024a0e1403
200 97 kB URL HTTP/1.1 freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b534b5053514b5c56545c525457524b5c56545c525457523b5454503b515c54024a0e1403
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 853x1280, components 3\012- data
Hash 1c29149d8904e4d2d0a965f66b28aa08
a3ad2f4b838fc54ce50400a3df3a414adcad5a06
46ce82c787d1e4fd308bfbbeff0580820ae8b86edf86cf36b2a613d35e8be71f
GET /viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b534b5053514b5c56545c525457524b5c56545c525457523b5454503b515c54024a0e1403 HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Length: 97070
Connection: keep-alive
Cache-Control: max-age=31418383
pxl.tsyndicate.com/api/v1/elapsedtime?f=banner%20250x150&sc=58b27ab589cd4f6fb77ba36de8de2cad&hn=freepornitaly.gigixo.com&et=120
200 OK 0 B URL HTTP/1.1 pxl.tsyndicate.com/api/v1/elapsedtime?f=banner%20250x150&sc=58b27ab589cd4f6fb77ba36de8de2cad&hn=freepornitaly.gigixo.com&et=120
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/elapsedtime?f=banner%20250x150&sc=58b27ab589cd4f6fb77ba36de8de2cad&hn=freepornitaly.gigixo.com&et=120 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:43 GMT
Content-Length: 0
Connection: keep-alive
X-Robots-Tag: noindex, nofollow
biptolyla.com/auW.ZNyzQu2r9FkyZnT/9U6gbE2C5mlFS/WvQT9RNPDlE/4OMrjrk/0HN/Cc0N0/MLT/g/yNOkTTQK1ZJPnEB-1KcV2-hiaRbO2/5/lGS/WeQs9iNIDeEZ4rMtjTkS0/NVCI0R0UMWT/gwy/OlTQQ/1R
301 Moved Permanently 162 B URL HTTP/1.1 biptolyla.com/auW.ZNyzQu2r9FkyZnT/9U6gbE2C5mlFS/WvQT9RNPDlE/4OMrjrk/0HN/Cc0N0/MLT/g/yNOkTTQK1ZJPnEB-1KcV2-hiaRbO2/5/lGS/WeQs9iNIDeEZ4rMtjTkS0/NVCI0R0UMWT/gwy/OlTQQ/1R
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /auW.ZNyzQu2r9FkyZnT/9U6gbE2C5mlFS/WvQT9RNPDlE/4OMrjrk/0HN/Cc0N0/MLT/g/yNOkTTQK1ZJPnEB-1KcV2-hiaRbO2/5/lGS/WeQs9iNIDeEZ4rMtjTkS0/NVCI0R0UMWT/gwy/OlTQQ/1R HTTP/1.1
Host: biptolyla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 27 Nov 2022 02:41:43 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://biptolyla.com/auW.ZNyzQu2r9FkyZnT/9U6gbE2C5mlFS/WvQT9RNPDlE/4OMrjrk/0HN/Cc0N0/MLT/g/yNOkTTQK1ZJPnEB-1KcV2-hiaRbO2/5/lGS/WeQs9iNIDeEZ4rMtjTkS0/NVCI0R0UMWT/gwy/OlTQQ/1R
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
go.xxxvjmp.com/config?url=https%3A%2F%2Fcreative.xxxvjmp.com%2Fwidgets%2Fv4%2FUniversal%3FcampaignId%3Dc3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88%26campaignType%3Dsmartpop%26creativeId%3D1390687f9dbb037f152ef0b7b5cb740bd85b1b21c87ca9ad9ed9fb9e87960e09%26iterationId%3D280514%26masterSmartpopId%3D1605%26memberId%3D-q8S0pE-WgOLr6_MLnbn6KObIW7To8QGPTEWRXKn-ekAOzqhsHBh8oD3WFxkZWnylPO2snqpWdUj9q08bbAhVrdveSRgKE_zAKyYFrQ_gUIDRUi%26p1%3D3841229%26ruleId%3D3%26smartpopId%3D1547%26sourceId%3D226439%26tag%3D-girls%252Findian%26userId%3Ded4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e%26variationId%3D29750
200 OK 2.0 kB URL HTTP/2 go.xxxvjmp.com/config?url=https%3A%2F%2Fcreative.xxxvjmp.com%2Fwidgets%2Fv4%2FUniversal%3FcampaignId%3Dc3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88%26campaignType%3Dsmartpop%26creativeId%3D1390687f9dbb037f152ef0b7b5cb740bd85b1b21c87ca9ad9ed9fb9e87960e09%26iterationId%3D280514%26masterSmartpopId%3D1605%26memberId%3D-q8S0pE-WgOLr6_MLnbn6KObIW7To8QGPTEWRXKn-ekAOzqhsHBh8oD3WFxkZWnylPO2snqpWdUj9q08bbAhVrdveSRgKE_zAKyYFrQ_gUIDRUi%26p1%3D3841229%26ruleId%3D3%26smartpopId%3D1547%26sourceId%3D226439%26tag%3D-girls%252Findian%26userId%3Ded4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e%26variationId%3D29750
IP
File type JSON data\012- , ASCII text
Hash 87d3ded0251099e37b8e43a4816937e1
32266da5ce308ef1d8fe239bd86b52ff03afb222
23923f567495d9538ea2dc155b5b760ed9af58fdd983c46c2c233a9f5ae9644e
GET /config?url=https%3A%2F%2Fcreative.xxxvjmp.com%2Fwidgets%2Fv4%2FUniversal%3FcampaignId%3Dc3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88%26campaignType%3Dsmartpop%26creativeId%3D1390687f9dbb037f152ef0b7b5cb740bd85b1b21c87ca9ad9ed9fb9e87960e09%26iterationId%3D280514%26masterSmartpopId%3D1605%26memberId%3D-q8S0pE-WgOLr6_MLnbn6KObIW7To8QGPTEWRXKn-ekAOzqhsHBh8oD3WFxkZWnylPO2snqpWdUj9q08bbAhVrdveSRgKE_zAKyYFrQ_gUIDRUi%26p1%3D3841229%26ruleId%3D3%26smartpopId%3D1547%26sourceId%3D226439%26tag%3D-girls%252Findian%26userId%3Ded4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e%26variationId%3D29750 HTTP/1.1
Host: go.xxxvjmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.xxxvjmp.com/
Origin: https://creative.xxxvjmp.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 02:41:43 GMT
content-type: application/json
access-control-allow-origin: *
last-modified: Sun, 27 Nov 2022 02:41:43 GMT
cf-cache-status: MISS
set-cookie: __cflb=02DiuDfsBaY2bRYJiCg3Rc4wrBy1LXpo8ujFULkyqhXKz; SameSite=None; Secure; path=/; expires=Mon, 28-Nov-22 01:41:43 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 770781a3ba9efab4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b514b56575d4b555154545d5c50574b555154545d5c50573b5454553b5c0656554a0e1403
200 127 kB URL HTTP/1.1 freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b514b56575d4b555154545d5c50574b555154545d5c50573b5454553b5c0656554a0e1403
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=18, description= , manufacturer=SONY, model=DSC-W290, orientation=upper-left, xresolution=278, yresolution=286, resolutionunit=2, datetime=2009:02:11 21:10:56], baseline, precision 8, 768x1024, components 3\012- data
Size 127 kB (126862 bytes)
Hash 543236eab3a54c5275503b53863844c3
1ee0c85528144117242580346712e4474127f5eb
54b4e745f73c895c85bfdd80cc5d9f521dd2e063ab092ff4933f1bf03afcc177
GET /viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b514b56575d4b555154545d5c50574b555154545d5c50573b5454553b5c0656554a0e1403 HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Length: 126862
Connection: keep-alive
Cache-Control: max-age=31418383
freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b070d4a140c0a07000a4a070b094b140d07174b0508061109174b5456574b515d544b5450564b5754525451515751564b4c0959062e500c000505010705054d4c090c593c3c173d122d0653290a34071c5c17074d0b160d030d0a05083b5754525451515751564a0e1403
200 69 kB URL HTTP/1.1 freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b070d4a140c0a07000a4a070b094b140d07174b0508061109174b5456574b515d544b5450564b5754525451515751564b4c0959062e500c000505010705054d4c090c593c3c173d122d0653290a34071c5c17074d0b160d030d0a05083b5754525451515751564a0e1403
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 534x709, components 3\012- data
Hash a5a9ea8121eb846d1913174ebef26482
c046d2f413bbe78f377bd354aeb86debfd0056d3
31ce8af5c7213f776119f88858ca082028e6c7378f02b1e07569100dccd0dc1e
GET /viewImage3?data=0c101014175e4b4b070d4a140c0a07000a4a070b094b140d07174b0508061109174b5456574b515d544b5450564b5754525451515751564b4c0959062e500c000505010705054d4c090c593c3c173d122d0653290a34071c5c17074d0b160d030d0a05083b5754525451515751564a0e1403 HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Length: 69332
Connection: keep-alive
Cache-Control: max-age=31418383
X-CORE: core4
X-LB: core4
tsyndicate.com/iframes2/6a91f85098294907941c239ca45e3b90.html?keywords=Everyone,loves,horny,sex,pics,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,incredible,women,boob,bondage,step,leaves,amateur,bare,ema,freeones,xxxy,palm,claydon,insertion,list,person,masset,facials,friends,group,double,ass,carey,360,sodom,693,sex,ryan,ash,fakes,phone,extreme,dresses,sharing,animal,diamond,spreading,wide,escorts,price,story,trini,goldbabys,cock,homeade,toying,synthia,rpg,frat,spice,tube,sites,hides,sucked,hairy,for,angeles,best,mothers,amazing,hingis,site,showing,sim,very,take,slave,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,inc&adb=0&clientjs=1&w=1280&h=1024&tz=0
200 OK 1.2 kB URL HTTP/1.1 tsyndicate.com/iframes2/6a91f85098294907941c239ca45e3b90.html?keywords=Everyone,loves,horny,sex,pics,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,incredible,women,boob,bondage,step,leaves,amateur,bare,ema,freeones,xxxy,palm,claydon,insertion,list,person,masset,facials,friends,group,double,ass,carey,360,sodom,693,sex,ryan,ash,fakes,phone,extreme,dresses,sharing,animal,diamond,spreading,wide,escorts,price,story,trini,goldbabys,cock,homeade,toying,synthia,rpg,frat,spice,tube,sites,hides,sucked,hairy,for,angeles,best,mothers,amazing,hingis,site,showing,sim,very,take,slave,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,inc&adb=0&clientjs=1&w=1280&h=1024&tz=0
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2029)
Hash f52f417eab671263260fb239deb27273
342223f95efe028892c439b15f9e2a8d6100263c
19b3088928254b01263117aa6d79a645be2d2cb401ad9f730356b256cc1717ed
GET /iframes2/6a91f85098294907941c239ca45e3b90.html?keywords=Everyone,loves,horny,sex,pics,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,incredible,women,boob,bondage,step,leaves,amateur,bare,ema,freeones,xxxy,palm,claydon,insertion,list,person,masset,facials,friends,group,double,ass,carey,360,sodom,693,sex,ryan,ash,fakes,phone,extreme,dresses,sharing,animal,diamond,spreading,wide,escorts,price,story,trini,goldbabys,cock,homeade,toying,synthia,rpg,frat,spice,tube,sites,hides,sucked,hairy,for,angeles,best,mothers,amazing,hingis,site,showing,sim,very,take,slave,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,inc&adb=0&clientjs=1&w=1280&h=1024&tz=0 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:43 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding, *
X-Api-Version: 2
Link: <http://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
X-Request-Id: 6a5bbae83be8257f
Cache-Control: no-cache, no-store, no-transform, must-revalidate, no-transform
X-Robots-Tag: none, noindex, nofollow
Report-To: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
Content-Encoding: gzip
poweredby.jads.co/adshow.php?adzone=962231
200 OK 1.7 kB URL HTTP/1.1 poweredby.jads.co/adshow.php?adzone=962231
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (445), with CRLF, LF line terminators
Hash 81cec3d7a3872b156900504efe12e77c
d204afdac62acac37bd62ccf88a149ee8196902c
c7b7a4b06ef8ba8caf4844cc437205d45c80d7f336f0427724a0777ad3ecd3ea
GET /adshow.php?adzone=962231 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=c459ffd45ef1d2c7b986ea43c61fabba; expires=Mon, 27-Nov-2023 02:41:42 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps12957=1; expires=Mon, 28-Nov-2022 02:41:42 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjc5NTQ1NTtpOjE2Njk3NzYxMDI7fQ%3D%3D; expires=Wed, 30-Nov-2022 02:41:42 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Wed, 30-Nov-2022 02:41:42 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f219e1474db0fb4e253ab723c8867905
ea41fb7bcd83c75b46bc49eafdc7bb34b219a46c
d48e2f08a910e8a3be4bf8518735ae3f205921cab09c2f8f372f93f303293033
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D48E2F08A910E8A3BE4BF8518735AE3F205921CAB09C2F8F372F93F303293033"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4573
Expires: Sun, 27 Nov 2022 03:57:56 GMT
Date: Sun, 27 Nov 2022 02:41:43 GMT
Connection: keep-alive
lcdn.tsyndicate.com/sdk/v1/b.b.js
304 Not Modified 0 B URL HTTP/1.1 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tsyndicate.com/
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
HTTP/1.1 304 Not Modified
Date: Tue, 08 Mar 2022 10:11:03 GMT
Connection: keep-alive
Last-Modified: Tue, 22 Feb 2022 13:07:15 GMT
Server: nginx
X-Robots-Tag: noindex, nofollow
Vary: Accept-Encoding
ETag: W/"6214e003-1eb1"
Age: 22782640
btds.zog.link/in/912/?sid=0&source=1134153787&idzone=3902650&w=160&h=600&mo=&ve=&site_id=5422&utm1=tcban_s&utm2=5422&utm3=17794&utm4=&ad_tags=&spot_id=0&p=http%3A%2F%2Ffreepornitaly.gigixo.com%2F&katds_labels=&btype=0&score=1&bf=0.0001
302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=0&source=1134153787&idzone=3902650&w=160&h=600&mo=&ve=&site_id=5422&utm1=tcban_s&utm2=5422&utm3=17794&utm4=&ad_tags=&spot_id=0&p=http%3A%2F%2Ffreepornitaly.gigixo.com%2F&katds_labels=&btype=0&score=1&bf=0.0001
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=0&source=1134153787&idzone=3902650&w=160&h=600&mo=&ve=&site_id=5422&utm1=tcban_s&utm2=5422&utm3=17794&utm4=&ad_tags=&spot_id=0&p=http%3A%2F%2Ffreepornitaly.gigixo.com%2F&katds_labels=&btype=0&score=1&bf=0.0001 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbbnr.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.20.1
date: Sun, 27 Nov 2022 02:41:43 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://12007250.pix-cdn.org/a/pjexo.html?idzone=3902650&w=160&h=600&ad_sub=&ad_tags=
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: *
set-cookie: 912.0=1; expires=Mon, 28 Nov 2022 02:41:43 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
i.jads.co/network/user47819/12957-1568843901-0603067001568843901.gif
200 OK 137 kB URL HTTP/1.1 i.jads.co/network/user47819/12957-1568843901-0603067001568843901.gif
IP
Size 137 kB (136641 bytes)
Hash 8b9b86d2dd70422b207640a384d23aca
4bd4cd1783c0b9bd328357d1314c3bd12709c967
c56edda9520b10ff4699e86ed64d06c78fbe6e07e155c7ae484781834210642b
GET /network/user47819/12957-1568843901-0603067001568843901.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://poweredby.jads.co/
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 02:41:43 GMT
Connection: Keep-Alive
ETag: "1568843901"
Cache-Control: max-age=23931562
Content-Length: 135898
Content-Type: image/gif
Last-Modified: Wed, 18 Sep 2019 21:58:21 GMT
Accept-Ranges: bytes
X-HW: 1669516903.dop213.sk1.t,1669516903.cds255.sk1.c
poweredby.jads.co/adshow.php?adzone=910225
200 OK 1.7 kB URL HTTP/1.1 poweredby.jads.co/adshow.php?adzone=910225
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (416), with CRLF, LF line terminators
Hash 2d447f47a5358e86ecd19c1650a884be
fefcdb62cf22433fef1f650a20ba94a91949f364
72c4cab0d80eb1b3f832bd66de4eec070e54a99ded3cfce5847aa2196611f246
GET /adshow.php?adzone=910225 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=c459ffd45ef1d2c7b986ea43c61fabba; expires=Mon, 27-Nov-2023 02:41:42 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps161=1; expires=Mon, 28-Nov-2022 02:41:42 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
imps22340=1; expires=Mon, 28-Nov-2022 02:41:42 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToyOntpOjExOTY3MTM7aToxNjY5Nzc2MTAyO2k6NTkyOTgyO2k6MTY2OTc3NjEwMjt9; expires=Wed, 30-Nov-2022 02:41:42 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Wed, 30-Nov-2022 02:41:42 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
freepornitaly.gigixo.com/s3/ad_tf1/5443.jpg
200 OK 45 kB URL HTTP/1.1 freepornitaly.gigixo.com/s3/ad_tf1/5443.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x851, components 3\012- data
Hash 1341a1404c43271e2925e7c13171f5de
01304456ff45fd767fb9726b11ababc7c8d09bb5
06fbda10da01d4823cc44f0db4b2f4f312bb409ac1a69d730610ed1950b77fa6
GET /s3/ad_tf1/5443.jpg HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:43 GMT
Content-Type: image/jpeg
Content-Length: 45172
Connection: keep-alive
Last-Modified: Tue, 20 Apr 2021 20:23:29 GMT
ETag: "607f3841-b074"
X-Cluster: web-cdn2
X-Cache: HIT
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F3fH2IW4IQCH71%2BXpM1YFDSoMU9FpDW7VAb4GKCdeNxznCoBbZubiXL3%2BQU6jq%2BDJR%2Fc1UM1U8SDszhEevo4illDE%2Fn1PxM3zcXC1T58KGr4aRnBDz9GhBNv5qIp6dc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
CF-RAY: 770781a4dc6b6380-ORD
alt-svc: h2=":443"; ma=60
X-Cache-Status: MISS
Cache-Control: max-age=14400, max-age=31536000
Accept-Ranges: bytes
poweredby.jads.co/adshow.php?adzone=962246
200 OK 1.7 kB URL HTTP/1.1 poweredby.jads.co/adshow.php?adzone=962246
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (419), with CRLF, LF line terminators
Hash a369e8d60225166a4317440530004e95
5ed845d3cb0bc38df4ec66c05cc813ab32df126a
b29986b20a15233698b7c16950af8db0cb486aad10b448f8167029338850300d
GET /adshow.php?adzone=962246 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=c459ffd45ef1d2c7b986ea43c61fabba; expires=Mon, 27-Nov-2023 02:41:42 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps22821=1; expires=Mon, 28-Nov-2022 02:41:42 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
imps22340=1; expires=Mon, 28-Nov-2022 02:41:42 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToyOntpOjU4OTQ3MjtpOjE2Njk3NzYxMDI7aTo1OTI5ODI7aToxNjY5Nzc2MTAyO30%3D; expires=Wed, 30-Nov-2022 02:41:42 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Wed, 30-Nov-2022 02:41:42 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 280 B IP
Hash 80c1709175560e5074dc93bbbdc4bf6e
aa583682ed3be0fdcf62457e1524a9b938da82c0
0b1394fe9d54b6c3b7067db2560f87f16d8d253f5530ba0189463e8df62d44bc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6523
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:41:43 GMT
Last-Modified: Sun, 27 Nov 2022 00:53:00 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 280
tsyndicate.com/iframes2/6a91f85098294907941c239ca45e3b90.html?keywords=Everyone,loves,horny,sex,pics,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,incredible,women,boob,bondage,step,leaves,amateur,bare,ema,freeones,xxxy,palm,claydon,insertion,list,person,masset,facials,friends,group,double,ass,carey,360,sodom,693,sex,ryan,ash,fakes,phone,extreme,dresses,sharing,animal,diamond,spreading,wide,escorts,price,story,trini,goldbabys,cock,homeade,toying,synthia,rpg,frat,spice,tube,sites,hides,sucked,hairy,for,angeles,best,mothers,amazing,hingis,site,showing,sim,very,take,slave,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,inc&adb=0&clientjs=1&w=1280&h=1024&tz=0
200 OK 1.2 kB URL HTTP/1.1 tsyndicate.com/iframes2/6a91f85098294907941c239ca45e3b90.html?keywords=Everyone,loves,horny,sex,pics,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,incredible,women,boob,bondage,step,leaves,amateur,bare,ema,freeones,xxxy,palm,claydon,insertion,list,person,masset,facials,friends,group,double,ass,carey,360,sodom,693,sex,ryan,ash,fakes,phone,extreme,dresses,sharing,animal,diamond,spreading,wide,escorts,price,story,trini,goldbabys,cock,homeade,toying,synthia,rpg,frat,spice,tube,sites,hides,sucked,hairy,for,angeles,best,mothers,amazing,hingis,site,showing,sim,very,take,slave,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,inc&adb=0&clientjs=1&w=1280&h=1024&tz=0
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2029)
Hash f52f417eab671263260fb239deb27273
342223f95efe028892c439b15f9e2a8d6100263c
19b3088928254b01263117aa6d79a645be2d2cb401ad9f730356b256cc1717ed
GET /iframes2/6a91f85098294907941c239ca45e3b90.html?keywords=Everyone,loves,horny,sex,pics,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,incredible,women,boob,bondage,step,leaves,amateur,bare,ema,freeones,xxxy,palm,claydon,insertion,list,person,masset,facials,friends,group,double,ass,carey,360,sodom,693,sex,ryan,ash,fakes,phone,extreme,dresses,sharing,animal,diamond,spreading,wide,escorts,price,story,trini,goldbabys,cock,homeade,toying,synthia,rpg,frat,spice,tube,sites,hides,sucked,hairy,for,angeles,best,mothers,amazing,hingis,site,showing,sim,very,take,slave,gone,black,personality,ahh,formal,high,transexual,suburban,movie,drunk,shy,selfies,clips,valory,jesse,swan,stepsis,wall,woman,pamela,bizzarre,brazzer,moblie,rabo,shanin,spanking,futile,game,naked,network,older,pics,los,inc&adb=0&clientjs=1&w=1280&h=1024&tz=0 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:43 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding, *
X-Api-Version: 2
Link: <http://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
X-Request-Id: 6cdb95207c795934
Cache-Control: no-cache, no-store, no-transform, must-revalidate, no-transform
X-Robots-Tag: none, noindex, nofollow
Report-To: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
Content-Encoding: gzip
img.strpst.com/thumbs/1669516621/83546471
200 OK 47 kB URL HTTP/2 img.strpst.com/thumbs/1669516621/83546471
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 640x360, components 3\012- data
Hash 6e775e84278cb37917fd90424c48c221
fef54b534cdb097d64d2511d0133a7f82fe32275
089737fd2a97cc9e106f3430a59941905038ce6701275dfeb6a317ca59290cae
GET /thumbs/1669516621/83546471 HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xxxvjmp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 02:41:43 GMT
content-type: image/jpeg
content-length: 47039
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: PUT, POST, GET, DELETE, OPTIONS
access-control-allow-origin: *
cf-bgj: imgq:100,h2pri
cf-polished: origSize=48174, status=webp_bigger
etag: "1355107e10818710e494e3743d7cd9dd"
last-modified: Sun, 27 Nov 2022 02:37:10 GMT
cf-cache-status: HIT
age: 36
expires: Sun, 27 Nov 2022 02:42:43 GMT
cache-control: public, max-age=60
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770781a62fc8b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 80c1709175560e5074dc93bbbdc4bf6e
aa583682ed3be0fdcf62457e1524a9b938da82c0
0b1394fe9d54b6c3b7067db2560f87f16d8d253f5530ba0189463e8df62d44bc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6523
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 02:41:43 GMT
Last-Modified: Sun, 27 Nov 2022 00:53:00 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 280
lcdn.tsyndicate.com/error/banner.html
200 OK 355 B URL HTTP/1.1 lcdn.tsyndicate.com/error/banner.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 8b1f15be621db10926fe9a4cf5e065a7
cbf25705dce9a6cdc92fca1b42924c31a4325b09
0a9c708f0537719d5a20bfaa8343363a0283320fb1776657d913a6a4f2030287
GET /error/banner.html HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tsyndicate.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 00:07:36 GMT
Content-Type: text/html
Content-Length: 355
Connection: keep-alive
Last-Modified: Thu, 28 Jul 2022 14:10:05 GMT
Server: nginx
X-Robots-Tag: noindex, nofollow
Content-Encoding: gzip
Vary: Accept-Encoding
ETag: W/"62e298bd-297"
Age: 7439647
Accept-Ranges: bytes
freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b554b5552564b53555150555257564b53555150555257563b5454553b015553054a0e1403
200 427 kB URL HTTP/1.1 freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b554b5552564b53555150555257564b53555150555257563b5454553b015553054a0e1403
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, copyright=mplstudios.com 2011], baseline, precision 8, 801x1200, components 3\012- data
Size 427 kB (426719 bytes)
Hash 44a61f10bff0507b9cc4edce3f56f22e
a90acbf5c62edca9a674cf95f526f063e96bfcb7
cf6af077761916daee22fea881f9d9cfd973492f61958c571be25008821b5b77
GET /viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b554b5552564b53555150555257564b53555150555257563b5454553b015553054a0e1403 HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200
Server: nginx
Date: Sun, 27 Nov 2022 02:41:42 GMT
Content-Length: 426719
Connection: keep-alive
Cache-Control: max-age=31418383
X-CORE: core4
X-LB: core4
www.highperformancedisplayformat.com/11115435c35e6b966b90a5f936e0edcc/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.highperformancedisplayformat.com/11115435c35e6b966b90a5f936e0edcc/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26990), with no line terminators
Hash 79253166273f68a4463bbc02863c3a9e
c686fee925b09c48683cea4f53ba28340069747e
4a8412003a6e40affcc6ba3bfe40b46c2851f889b68fcadb43daa71bd6396d04
Analyzer Verdict Alert quad9 Sinkholed
GET /11115435c35e6b966b90a5f936e0edcc/invoke.js HTTP/1.1
Host: www.highperformancedisplayformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 27 Nov 2022 02:41:43 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: faa81f80c399037bcd75caba45021273
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b534b505c554b525653575355575c4b525653575355575c3b5454563b5c0202024a0e1403
200 389 kB URL HTTP/1.1 freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b534b505c554b525653575355575c4b525653575355575c3b5454563b5c0202024a0e1403
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95", baseline, precision 8, 853x1280, components 3\012- data
Size 389 kB (388741 bytes)
Hash a04030049d1898aeebae2c2a24be8fe8
c05672e3f458afc729b8175fc440381e8b3cac1e
7db4b92ce3475774697ce41d4ff3ea25cfb89d7af2fd469c718487eaf7904475
GET /viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b534b505c554b525653575355575c4b525653575355575c3b5454563b5c0202024a0e1403 HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200
Server: nginx
Date: Sun, 27 Nov 2022 02:41:43 GMT
Content-Length: 388741
Connection: keep-alive
Cache-Control: max-age=31418383
freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b514b5553554b52535c56515c55574b52535c56515c55573b5454553b055c56024a0e1403
200 132 kB URL HTTP/1.1 freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b514b5553554b52535c56515c55574b52535c56515c55573b5454553b055c56024a0e1403
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 683x1024, components 3\012- data
Size 132 kB (132393 bytes)
Hash a0ace0473bab2646f2b2b8d9c630649a
3fcc8dae86b7976d18ce062d6737eb3d10219314
7e140fb1455bc2b069be276a7f8bd57e99c5127c37004cebd04934aad3988f1d
GET /viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b514b5553554b52535c56515c55574b52535c56515c55573b5454553b055c56024a0e1403 HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200
Server: nginx
Date: Sun, 27 Nov 2022 02:41:43 GMT
Content-Length: 132393
Connection: keep-alive
Cache-Control: max-age=31418383
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0d3329a080aec7219acc6f2d56183d41
9cdb3140331896bbeacb730a75766fa4fb7b2588
7a9612606876cb01d61267165fa437473a8d8f4ff5aa28280c601ffb65c0ede6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7A9612606876CB01D61267165FA437473A8D8F4FF5AA28280C601FFB65C0EDE6"
Last-Modified: Sat, 26 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5682
Expires: Sun, 27 Nov 2022 04:16:25 GMT
Date: Sun, 27 Nov 2022 02:41:43 GMT
Connection: keep-alive
lcdn.tsyndicate.com/sdk/v1/b.b.js
304 Not Modified 0 B URL HTTP/1.1 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://tsyndicate.com/
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
HTTP/1.1 304 Not Modified
Date: Tue, 08 Mar 2022 10:11:03 GMT
Connection: keep-alive
Last-Modified: Tue, 22 Feb 2022 13:07:15 GMT
Server: nginx
X-Robots-Tag: noindex, nofollow
Vary: Accept-Encoding
ETag: W/"6214e003-1eb1"
Age: 22782640
freepornitaly.gigixo.com/s3/gam_oct20/0075.gif
200 OK 420 kB URL HTTP/1.1 freepornitaly.gigixo.com/s3/gam_oct20/0075.gif
IP
File type GIF image data, version 89a, 300 x 250\012- data
Size 420 kB (420159 bytes)
Hash 9489303f636edff9b22cb815a1cc3e12
c92709040c2463e6372b89bb7c829bd422f2c24a
892fdb17dc219ccce5ee65a9a35f50b97876ead02cfb8c60fa330476dc73153e
GET /s3/gam_oct20/0075.gif HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:43 GMT
Content-Type: image/gif
Content-Length: 420159
Connection: keep-alive
Last-Modified: Fri, 09 Oct 2020 20:18:09 GMT
ETag: "5f80c581-6693f"
X-Cluster: web-cdn2
X-Cache: HIT
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3bCr2GQDdmz1fEaFNAbAUU822T7s65%2FAty7J4Nvm7GRbAU96QbEXIhH2%2Fimg056O9F%2BxyBEcr%2B7uMQhc6HlhuIWN5EhaXTkQuKAIXHaUYQC6JDDy%2FulbVc9uo1sjCLE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
CF-RAY: 770781a5a8902d40-ORD
alt-svc: h2=":443"; ma=60
X-Cache-Status: MISS
Cache-Control: max-age=14400, max-age=31536000
Accept-Ranges: bytes
i.jads.co/network/user1037/1-1619547642-0028094001619547642.jpg
200 OK 55 kB URL HTTP/1.1 i.jads.co/network/user1037/1-1619547642-0028094001619547642.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 160x600, components 3\012- data
Hash dc758a7ea885c9e45ccbf2bb315cf2fa
e00e03b7f8648b660ca4d485ec65b6439d4b0762
86bb80e5cee68b62da1c0f9d3a9c80940f39812d43dd00b671f6a2acce62e8ff
GET /network/user1037/1-1619547642-0028094001619547642.jpg HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://poweredby.jads.co/
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 02:41:43 GMT
Connection: Keep-Alive
ETag: "1619547642"
Cache-Control: max-age=13125104
Content-Length: 55292
Content-Type: image/jpeg
Last-Modified: Tue, 27 Apr 2021 18:20:42 GMT
Accept-Ranges: bytes
X-HW: 1669516903.dop213.sk1.t,1669516903.cds250.sk1.c
i.jads.co/network/user500/22821-1503675878.jpg
200 OK 104 kB URL HTTP/1.1 i.jads.co/network/user500/22821-1503675878.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 160x600, components 3\012- data
Size 104 kB (103642 bytes)
Hash b0634f2367fb176eccf7d30b414bdf20
3c4db31d9b98defec777793500d8531f6ec6b17e
8e1a52c6528f4f30d8071ebb4b9c7424957e7cf2e79f0214114226a18e27af7d
GET /network/user500/22821-1503675878.jpg HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://poweredby.jads.co/
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 02:41:43 GMT
Connection: Keep-Alive
ETag: "1503675878"
Cache-Control: max-age=14924346
Content-Length: 103642
Content-Type: image/jpeg
Last-Modified: Fri, 25 Aug 2017 15:44:38 GMT
Accept-Ranges: bytes
X-HW: 1669516903.dop213.sk1.t,1669516903.cds211.sk1.c
pxl.tsyndicate.com/api/v1/elapsedtime?f=banner%20300x250&sc=6a91f85098294907941c239ca45e3b90&hn=freepornitaly.gigixo.com&et=200
200 OK 0 B URL HTTP/1.1 pxl.tsyndicate.com/api/v1/elapsedtime?f=banner%20300x250&sc=6a91f85098294907941c239ca45e3b90&hn=freepornitaly.gigixo.com&et=200
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/elapsedtime?f=banner%20300x250&sc=6a91f85098294907941c239ca45e3b90&hn=freepornitaly.gigixo.com&et=200 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 02:41:43 GMT
Content-Length: 0
Connection: keep-alive
X-Robots-Tag: noindex, nofollow
fonts.googleapis.com/css?family=Lato:400,700,400italic
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lato:400,700,400italic
IP
GET /css?family=Lato:400,700,400italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://maxcdn.bootstrapcdn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 27 Nov 2022 02:41:41 GMT
date: Sun, 27 Nov 2022 02:41:41 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
12007250.pix-cdn.org/a/pjexo.html?idzone=3902650&w=160&h=600&ad_sub=&ad_tags=
200 OK 0 B URL HTTP/2 12007250.pix-cdn.org/a/pjexo.html?idzone=3902650&w=160&h=600&ad_sub=&ad_tags=
IP
ASN #39572 DataWeb Global Group B.V.
GET /a/pjexo.html?idzone=3902650&w=160&h=600&ad_sub=&ad_tags= HTTP/1.1
Host: 12007250.pix-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rtbbnr.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 02:41:43 GMT
content-type: text/html; charset=UTF-8
last-modified: Wed, 20 May 2020 13:08:32 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kPbh%2FxCBFmqEl08sHdhmlQ8kGoKeNgQaVze7ntoBEo2qNrgXVpW3elJAI17KNteq5d6NvFL069Y0WSQ0f6%2FS2pN0FLqJTjFFuc9XJFrl%2FPFDMc6qn%2BLSJT7gbHq8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 752345a2c96dcab1-HAM
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
expires: Sun, 27 Nov 2022 03:41:43 GMT
cache-control: max-age=3600
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b554b5754524b5c515550545257574b5c515550545257573b5454553b535557524a0e1403
200 0 B URL HTTP/1.1 freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b554b5754524b5c515550545257574b5c515550545257573b5454553b535557524a0e1403
IP
GET /viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b554b5754524b5c515550545257574b5c515550545257573b5454553b535557524a0e1403 HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200
Server: nginx
Date: Sun, 27 Nov 2022 02:41:43 GMT
Content-Length: 247962
Connection: keep-alive
Cache-Control: max-age=31418383
creative.xxxvjmp.com/widgets/v4/Universal/main.9a7cab7e17725c785312.js
200 OK 0 B URL HTTP/2 creative.xxxvjmp.com/widgets/v4/Universal/main.9a7cab7e17725c785312.js
IP
GET /widgets/v4/Universal/main.9a7cab7e17725c785312.js HTTP/1.1
Host: creative.xxxvjmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://creative.xxxvjmp.com/widgets/v4/Universal?campaignId=c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88&campaignType=smartpop&creativeId=1390687f9dbb037f152ef0b7b5cb740bd85b1b21c87ca9ad9ed9fb9e87960e09&iterationId=280514&masterSmartpopId=1605&memberId=-q8S0pE-WgOLr6_MLnbn6KObIW7To8QGPTEWRXKn-ekAOzqhsHBh8oD3WFxkZWnylPO2snqpWdUj9q08bbAhVrdveSRgKE_zAKyYFrQ_gUIDRUi&p1=3841229&ruleId=3&smartpopId=1547&sourceId=226439&tag=-girls%2Findian&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=29750
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 02:41:42 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Nov 2022 07:59:45 GMT
etag: W/"63749871-42c0d"
expires: Sun, 27 Nov 2022 02:41:39 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 9
vary: Accept-Encoding
server: cloudflare
cf-ray: 770781a26f71b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
biptolyla.com/auW.ZNyzQu2r9FkyZnT/9U6gbE2C5mlFS/WvQT9RNPDlE/4OMrjrk/0HN/Cc0N0/MLT/g/yNOkTTQK1ZJPnEB-1KcV2-hiaRbO2/5/lGS/WeQs9iNIDeEZ4rMtjTkS0/NVCI0R0UMWT/gwy/OlTQQ/1R
200 OK 0 B URL HTTP/2 biptolyla.com/auW.ZNyzQu2r9FkyZnT/9U6gbE2C5mlFS/WvQT9RNPDlE/4OMrjrk/0HN/Cc0N0/MLT/g/yNOkTTQK1ZJPnEB-1KcV2-hiaRbO2/5/lGS/WeQs9iNIDeEZ4rMtjTkS0/NVCI0R0UMWT/gwy/OlTQQ/1R
IP
GET /auW.ZNyzQu2r9FkyZnT/9U6gbE2C5mlFS/WvQT9RNPDlE/4OMrjrk/0HN/Cc0N0/MLT/g/yNOkTTQK1ZJPnEB-1KcV2-hiaRbO2/5/lGS/WeQs9iNIDeEZ4rMtjTkS0/NVCI0R0UMWT/gwy/OlTQQ/1R HTTP/1.1
Host: biptolyla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://freepornitaly.gigixo.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:41:43 GMT
content-type: application/javascript
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
creative.xxxvjmp.com/widgets/v4/Universal?campaignId=c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88&campaignType=smartpop&creativeId=1390687f9dbb037f152ef0b7b5cb740bd85b1b21c87ca9ad9ed9fb9e87960e09&iterationId=280514&masterSmartpopId=1605&memberId=-q8S0pE-WgOLr6_MLnbn6KObIW7To8QGPTEWRXKn-ekAOzqhsHBh8oD3WFxkZWnylPO2snqpWdUj9q08bbAhVrdveSRgKE_zAKyYFrQ_gUIDRUi&p1=3841229&ruleId=3&smartpopId=1547&sourceId=226439&tag=-girls%2Findian&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=29750
200 OK 0 B URL HTTP/2 creative.xxxvjmp.com/widgets/v4/Universal?campaignId=c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88&campaignType=smartpop&creativeId=1390687f9dbb037f152ef0b7b5cb740bd85b1b21c87ca9ad9ed9fb9e87960e09&iterationId=280514&masterSmartpopId=1605&memberId=-q8S0pE-WgOLr6_MLnbn6KObIW7To8QGPTEWRXKn-ekAOzqhsHBh8oD3WFxkZWnylPO2snqpWdUj9q08bbAhVrdveSRgKE_zAKyYFrQ_gUIDRUi&p1=3841229&ruleId=3&smartpopId=1547&sourceId=226439&tag=-girls%2Findian&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=29750
IP
GET /widgets/v4/Universal?campaignId=c3fa347280578e90a9e8ab1e6280c0e361524d151dcbfe6bb5b723fee947ce88&campaignType=smartpop&creativeId=1390687f9dbb037f152ef0b7b5cb740bd85b1b21c87ca9ad9ed9fb9e87960e09&iterationId=280514&masterSmartpopId=1605&memberId=-q8S0pE-WgOLr6_MLnbn6KObIW7To8QGPTEWRXKn-ekAOzqhsHBh8oD3WFxkZWnylPO2snqpWdUj9q08bbAhVrdveSRgKE_zAKyYFrQ_gUIDRUi&p1=3841229&ruleId=3&smartpopId=1547&sourceId=226439&tag=-girls%2Findian&userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e&variationId=29750 HTTP/1.1
Host: creative.xxxvjmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://tsyndicate.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 02:41:42 GMT
content-type: text/html
last-modified: Wed, 16 Nov 2022 07:56:27 GMT
expires: Sun, 27 Nov 2022 02:41:39 GMT
cache-control: max-age=10
strict-transport-security: max-age=15768000
pragma: public
report-to: { "endpoints":[{ "url": "https://go.stripchat.com/report" }], "group": "default", "max_age": 1048576 }
cf-cache-status: HIT
age: 10
vary: Accept-Encoding
server: cloudflare
cf-ray: 770781a20f45b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.sizokiwhe.pro/ddd053/896c4467b56b.js
200 OK 0 B URL HTTP/2 www.sizokiwhe.pro/ddd053/896c4467b56b.js
IP
ASN #61107 Toonbox Studio Ltd
GET /ddd053/896c4467b56b.js HTTP/1.1
Host: www.sizokiwhe.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ucdn/1.22.1
date: Sun, 27 Nov 2022 02:41:42 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315357498, public
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsr3uaLidETSLqKazNe79F20wMSOOHFcT6gp5oCgf4zgLSW9G0bgBQkxYucKEX6fKtb93GfiwdDVJfpgFbaGtVoq
x-served-from: l1
x-vhostid: 6537, 25058
content-encoding: br
X-Firefox-Spdy: h2
freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b100c1109064914504a1c0c07000a4a070b094b054b111203361e3d510d49163d083c301e500611290714254b5454544b5052564b5d5d554b5c56503b555454544a0e1403
200 0 B URL HTTP/1.1 freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b100c1109064914504a1c0c07000a4a070b094b054b111203361e3d510d49163d083c301e500611290714254b5454544b5052564b5d5d554b5c56503b555454544a0e1403
IP
GET /viewImage3?data=0c101014175e4b4b100c1109064914504a1c0c07000a4a070b094b054b111203361e3d510d49163d083c301e500611290714254b5454544b5052564b5d5d554b5c56503b555454544a0e1403 HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200
Server: nginx
Date: Sun, 27 Nov 2022 02:41:43 GMT
Content-Length: 87451
Connection: keep-alive
Cache-Control: max-age=31418383
X-CORE: core4
X-LB: core4
biptolyla.com/aHW-ZJyKP.3LBM1_cO2PhQaRb-2T5UlVSWW_QY9ZNaDbE-4dMejfkg0_NiCj0k0lM-TngoypOqT_Qs1tJunvp-vxbymzVAJ_ZCDD0E0FM-THgIyJOKT_QM0NLOTPQ-xROSDTIU5_NWDXUY?iframeId=sfbbzd
200 OK 0 B URL HTTP/2 biptolyla.com/aHW-ZJyKP.3LBM1_cO2PhQaRb-2T5UlVSWW_QY9ZNaDbE-4dMejfkg0_NiCj0k0lM-TngoypOqT_Qs1tJunvp-vxbymzVAJ_ZCDD0E0FM-THgIyJOKT_QM0NLOTPQ-xROSDTIU5_NWDXUY?iframeId=sfbbzd
IP
GET /aHW-ZJyKP.3LBM1_cO2PhQaRb-2T5UlVSWW_QY9ZNaDbE-4dMejfkg0_NiCj0k0lM-TngoypOqT_Qs1tJunvp-vxbymzVAJ_ZCDD0E0FM-THgIyJOKT_QM0NLOTPQ-xROSDTIU5_NWDXUY?iframeId=sfbbzd HTTP/1.1
Host: biptolyla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:41:43 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Sun, 27 Nov 2022 02:41:43 GMT
p3p: CP="CUR ADM OUR NOR STA NID"
set-cookie: kadCCap=220790:1:1668460505;212269:1:1667199062;218693:1:1669515516;219652:1:1669330335;79610:1:1669272875;220335:1:1669231427;194136:1:1669413157;219047:1:1667194435;221398:1:1669325799;219484:1:1667715065;199455:1:1668245056; max-age=1701052903; path=/
kadACap=419295:1:1669362714;419321:1:1669463839;190964:1:1669272875;419299:1:1669432259;445735:1:1669286676;419297:1:1669465197;410252:1:1669443062;451139:1:1669432649;449523:1:1669417312;446013:1:1668228435;424441:1:1669449948;419293:1:1669439385;451724:1:1669474978;407100:1:1668246232;442019:1:1669447425;445506:1:1669286676;401659:1:1669300061;453831:1:1669298989;383700:1:1669473413;419301:1:1669283271;346327:1:1669504325;446531:1:1669270846;419323:1:1669432178;419291:1:1669443279;419303:1:1669446827; max-age=1701052903; path=/
kadCSCap=218693:1:1669515516; path=/
kadASCap=442019:1:1669447425;419293:1:1669439385;419291:1:1669443279;346327:1:1669504325;419303:1:1669446827;424441:1:1669449948;451139:1:1669432649;419297:1:1669465197;419299:1:1669432259;410252:1:1669443062;383700:1:1669473413;419323:1:1669432178;451724:1:1669474978;419321:1:1669463839; path=/
kadRPixJ=bnVsbA==; max-age=1701052903; path=/
kadUnP3=CAQQxJ+KnAYaDQjrxaQBEAEY/JGLnAYaDQioiJcCEAIYhcmInAYaDQi+8JcCEAEYxJ+KnAYaDQicnpQCEAEYz92GnAYaDQjMyZcCEAEYya2KnAYaDQjQ6pcCEAEYq/mGnAYaDQj66pcCEAEYgf6GnAYaDQjE7JcCEAEY+YWInAYaDQjzwZkBEAEYxbqKnAYaDQjgoogCEAEY7YiInAYaDQiEyJMCEAEY9tuGnAYiCggDEAQYxJ+KnAYqDAiEpyUQARj224acBioMCIyVJhABGO2IiJwGKgwI9PQnEAEYxJ+KnAYqDAj19CcQARir+YacBioMCKSTKBACGIXJiJwGKgwIjL0SEAEYxbqKnAYqDAix/xMQARj8kYucBioMCMKuJRABGM/dhpwGKgwIkpwoEAEYya2KnAYqDAjfoCgQARiB/oacBioMCPmgKBABGPmFiJwG; max-age=1701052903; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
rtbbnr.com/get/?go=1&data=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&back_url=https%3A%2F%2Fadultgalls.com%2F
200 OK 0 B URL HTTP/2 rtbbnr.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MCwiZXh0Ijp7InNwb3QiOjU0MjIsImlkIjoxMDEwLCJsYWJlbHMiOiIiLCJzaXRlX2lkIjo1NDIyLCJ0eXBlIjoiYmFubmVyIiwic3BhY2VpZCI6MTAxMCwic3BvdF9pZCI6MCwiaWR6b25lIjozOTAyNjUwLCJ6b25lIjoidGNfcGFiXzE2MHg2MDAiLCJhZF90YWdzIjoiIiwidGl0bGUiOiIiLCJzdWJpZCI6IjExMzQxNTM3ODciLCJ1dG0xIjoidGNiYW5fcyIsInV0bTIiOiI1NDIyIiwidXRtMyI6IjE3Nzk0IiwidXRtNCI6IiJ9LCJiYW5uZXIiOnsidyI6MTYwLCJoIjo2MDB9fV0sInNpdGUiOnsiaWQiOiI1NDIyIiwicGFnZSI6Imh0dHA6Ly9mcmVlcG9ybml0YWx5LmdpZ2l4by5jb20vIn0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6IjYwZDA5NmQxYTk2ODA2ZGQ2MzkyMTYxZWNjYjUwMzcxIn0sImV4dCI6eyJkdCI6MTY2OTUxNjkwMjMxMn19&back_url=https%3A%2F%2Fadultgalls.com%2F
IP
ASN #24940 Hetzner Online GmbH
GET /get/?go=1&data=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&back_url=https%3A%2F%2Fadultgalls.com%2F HTTP/1.1
Host: rtbbnr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.16.0
date: Sun, 27 Nov 2022 02:41:42 GMT
content-type: text/html
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
mybettermb.com/adServe/banners?tid=395024_794246_2
403 Forbidden 0 B URL HTTP/2 mybettermb.com/adServe/banners?tid=395024_794246_2
IP
GET /adServe/banners?tid=395024_794246_2 HTTP/1.1
Host: mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://freepornitaly.gigixo.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
server: nginx
date: Sun, 27 Nov 2022 02:41:42 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
cache-control: no-cache
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-language: en
content-encoding: gzip
X-Firefox-Spdy: h2
freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b514b5654574b525c52555d505d524b525c52555d505d523b5454553b565c57074a0e1403
200 0 B URL HTTP/1.1 freepornitaly.gigixo.com/viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b514b5654574b525c52555d505d524b525c52555d505d523b5454553b565c57074a0e1403
IP
GET /viewImage3?data=0c101014175e4b4b07000a0d4a140b160a140d07174a070b094b55565c544b514b5654574b525c52555d505d524b525c52555d505d523b5454553b565c57074a0e1403 HTTP/1.1
Host: freepornitaly.gigixo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://freepornitaly.gigixo.com/
HTTP/1.1 200
Server: nginx
Date: Sun, 27 Nov 2022 02:41:43 GMT
Content-Length: 245117
Connection: keep-alive
Cache-Control: max-age=31418383
biptolyla.com/auW.ZNyzQu2r9FkyZnT/9U6gbE2C5mlFS/WvQT9RNPDlE/4OMrjrk/0HN/Cc0N0/MLT/g/yNOkTTQK1ZJPnEB-1KcV2-hiaRbO2/5/lGS/WeQs9iNIDeEZ4rMtjTkS0/NVCI0R0UMWT/gwy/OlTQQ/1R
200 OK 0 B URL HTTP/2 biptolyla.com/auW.ZNyzQu2r9FkyZnT/9U6gbE2C5mlFS/WvQT9RNPDlE/4OMrjrk/0HN/Cc0N0/MLT/g/yNOkTTQK1ZJPnEB-1KcV2-hiaRbO2/5/lGS/WeQs9iNIDeEZ4rMtjTkS0/NVCI0R0UMWT/gwy/OlTQQ/1R
IP
GET /auW.ZNyzQu2r9FkyZnT/9U6gbE2C5mlFS/WvQT9RNPDlE/4OMrjrk/0HN/Cc0N0/MLT/g/yNOkTTQK1ZJPnEB-1KcV2-hiaRbO2/5/lGS/WeQs9iNIDeEZ4rMtjTkS0/NVCI0R0UMWT/gwy/OlTQQ/1R HTTP/1.1
Host: biptolyla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://freepornitaly.gigixo.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 02:41:43 GMT
content-type: application/javascript
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
51.79.221.186
93.184.220.29
185.94.236.253
8.247.218.249
162.55.139.130
104.18.59.150
167.114.98.107
185.18.187.89
23.36.76.226