GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 05 Dec 2023 01:45:52 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 769940
expires: Sun, 24 Nov 2024 01:45:52 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tNjRamEWse4oLoWcMdTTV6UnQk%2FDw8E9fA0NfIM6X%2FqanR5a08j8Mwi5h0YzuGn22jjfZ5LAT0XQkAoAK1fRdWBGUF0psnTaek%2BNyBBtI6hYROu%2FC7QxqUsvLbjZKrsd9nWrb26e"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 83089cb3fa1556b7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31100
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 19:52:50 GMT
expires: Thu, 28 Nov 2024 19:52:50 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Thu, 08 Sep 2022 18:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 453182
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /c2zHvw9.js HTTP/1.1
Host: 5f25d.dappaa.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 01:45:52 GMT
content-type: application/javascript
content-length: 75986
last-modified: Thu, 30 Nov 2023 11:46:10 GMT
vary: Accept-Encoding
etag: "65687602-128d2"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 59
cf-ray: 82e2de9effc04e1c-HEL
x-frame-options: DENY
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2

GET /Qwx3iw5.js HTTP/1.1
Host: 5f25d.dappaa.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 01:45:52 GMT
content-type: application/javascript
content-length: 75986
last-modified: Thu, 30 Nov 2023 11:46:10 GMT
vary: Accept-Encoding
etag: "65687602-128d2"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 59
cf-ray: 82e2de9effc04e1c-HEL
x-frame-options: DENY
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2

GET /jXswbg5.js HTTP/1.1
Host: 5f25d.dappaa.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 01:45:52 GMT
content-type: application/javascript
content-length: 75986
last-modified: Thu, 30 Nov 2023 11:46:10 GMT
vary: Accept-Encoding
etag: "65687602-128d2"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 59
cf-ray: 82e2de9effc04e1c-HEL
x-frame-options: DENY
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2

GET /sdk/v1/interstitial.ts.css HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 05 Dec 2023 01:45:52 GMT
content-type: text/css
content-length: 8914
server: nginx
last-modified: Mon, 16 Oct 2023 07:52:02 GMT
etag: "652ceba2-22d2"
x-robots-tag: noindex, nofollow
age: 4297624
accept-ranges: bytes
X-Firefox-Spdy: h2

GET /sdk/v1/interstitial.ts.js HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 05 Dec 2023 01:45:52 GMT
content-type: application/javascript
content-length: 6412
server: nginx
last-modified: Mon, 16 Oct 2023 07:52:02 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"652ceba2-3cb2"
content-encoding: gzip
age: 4297624
accept-ranges: bytes
X-Firefox-Spdy: h2

GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 05 Dec 2023 01:45:52 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js

GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 05 Dec 2023 01:45:52 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js

GET /api/settings/406710 HTTP/1.1
Host: 5f25d.dappaa.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javgg.net/
Origin: https://javgg.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 01:45:52 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2

GET /adgpt.js HTTP/1.1
Host: cdn.tapioni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 05 Dec 2023 01:45:52 GMT
content-type: application/javascript
content-length: 818
last-modified: Thu, 30 Nov 2023 11:46:10 GMT
vary: Accept-Encoding
etag: "65687602-332"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 395832
accept-ranges: bytes
server: cloudflare
cf-ray: 83089cb7cf2f5f09-ARN
X-Firefox-Spdy: h2

GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 05 Dec 2023 01:45:52 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js

GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 05 Dec 2023 01:45:52 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js

GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javgg.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 01:45:52 GMT
Content-Type: application/x-javascript
Last-Modified: Wed, 20 Sep 2023 21:26:09 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"650b6371-eae"
Content-Encoding: gzip

GET /do2/8a7beb149723440aa81c2cd9412ec1a1/interstitial?w=1280&h=1024&domain=javgg.net&rnd=0.4080379128889765&keywords=Download%20Page%20-%20Javgg.net%2CNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg&tz=0 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javgg.net
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 01:45:52 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://javgg.net
access-control-allow-methods: POST, GET, HEAD
access-control-allow-headers: Accept, X-Requested-With, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy
access-control-allow-credentials: true
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
x-request-id: 5b3084b75ed85fe9
set-cookie: ts_uid=f2e25971-6bf4-4f58-bc59-30a0006926cf; expires=Wed, 05 Jun 2024 01:45:52 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2

GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javgg.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 01:45:53 GMT
Content-Type: application/x-javascript
Last-Modified: Wed, 20 Sep 2023 21:26:09 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"650b6371-eae"
Content-Encoding: gzip

GET /cdn-cgi/zaraz/s.js?z=JTdCJTIyZXhlY3V0ZWQlMjIlM0ElNUIlNUQlMkMlMjJ0JTIyJTNBJTIyRG93bmxvYWQlMjBQYWdlJTIwLSUyMEphdmdnLm5ldCUyMiUyQyUyMnglMjIlM0EwLjgzNDg5NjgzNDM2NjM2NDIlMkMlMjJ3JTIyJTNBMTI4MCUyQyUyMmglMjIlM0ExMDI0JTJDJTIyaiUyMiUzQTEwMjQlMkMlMjJlJTIyJTNBMTI4MCUyQyUyMmwlMjIlM0ElMjJodHRwcyUzQSUyRiUyRmphdmdnLm5ldCUyRmRvd25sb2FkJTJGTkcxcmRuVnhXV3BwVkZnelZYVm9PV3N2YzFZeVptY3lZblowUmtaaGREQm9Obk5GYzAwelFVaE5kMlpSVTIxVk4zQlZhbk5DYVVwMVpuVkZSRzVyVmclM0QlM0QlMjIlMkMlMjJyJTIyJTNBJTIyJTIyJTJDJTIyayUyMiUzQTI0JTJDJTIybiUyMiUzQSUyMlVURi04JTIyJTJDJTIybyUyMiUzQTAlMkMlMjJxJTIyJTNBJTVCJTVEJTdE HTTP/1.1
Host: javgg.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javgg.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 05 Dec 2023 01:45:52 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: https://javgg.net
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Set-Cookie, Cache-Control
access-control-allow-methods: GET, HEAD, POST, OPTIONS
access-control-max-age: 600
set-cookie: google-analytics_v4_ef3e__engagementStart=1701740752599; Domain=javgg.net; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_ef3e__counter=1; Domain=javgg.net; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_ef3e__ga4sid=1929733268; Domain=javgg.net; Path=/; Max-Age=1800; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_ef3e__session_counter=1; Domain=javgg.net; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_ef3e__ga4=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6; Domain=javgg.net; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_ef3e___z_ga_audiences=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6; Domain=javgg.net; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_ef3e__let=1701740752599; Domain=javgg.net; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3w%2BQBYD9mPg6WVg3ZjlF%2F4i7Tno7jmL3u8fbxiqHno%2BM%2BU4ZHVRgUw8ausLy4wlaz6a2p8lWjAlbuDDf2Bx2kfzsTMyB9wRpFRkMv%2BXjJm3VwuWUaF%2FZrSnqaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83089cb7b9adb50b-OSL
content-encoding: br
X-Firefox-Spdy: h2

GET /adshow.php?adzone=1029724 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 01:45:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=d36a1246e74bc8365e7a3aecb3abbea0; expires=Wed, 04-Dec-2024 01:45:53 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps32597=1; expires=Wed, 06-Dec-2023 01:45:53 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjc2Njk0NTtpOjE3MDE5OTk5NTM7fQ%3D%3D; expires=Fri, 08-Dec-2023 01:45:53 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Fri, 08-Dec-2023 01:45:53 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip

GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javgg.net/
DNT: 1
Connection: keep-alive
Cookie: surferid=d36a1246e74bc8365e7a3aecb3abbea0; imps12957=1; juicy_data_1=YToxOntpOjc4MzgxNTtpOjE3MDE5OTk5NTM7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 01:45:53 GMT
Content-Type: application/x-javascript
Last-Modified: Wed, 20 Sep 2023 21:26:09 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"650b6371-eae"
Content-Encoding: gzip

GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javgg.net/
DNT: 1
Connection: keep-alive
Cookie: surferid=d36a1246e74bc8365e7a3aecb3abbea0; imps12957=1; juicy_data_1=YToxOntpOjc4MzgxNTtpOjE3MDE5OTk5NTM7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 01:45:53 GMT
Content-Type: application/x-javascript
Last-Modified: Wed, 20 Sep 2023 21:26:09 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"650b6371-eae"
Content-Encoding: gzip

GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: javgg.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
date: Tue, 05 Dec 2023 01:45:52 GMT
vary: accept-encoding
access-control-allow-origin: *
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js
cache-control: max-age=300, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3DM4tsyt3Gh9VT%2F2oml4rS347%2FRWMiK71jxWvL%2BqnJVLbbZh8VB8hgeOoncZlAGDY%2BlgLWRJ%2BWctKzRaIKlLeZcKVoEvTh3iTxcRT6xbgQIHvcYOiZit53ea%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83089cb7a9aab50b-OSL
X-Firefox-Spdy: h2

GET /adshow.php?adzone=1029723 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 01:45:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=d36a1246e74bc8365e7a3aecb3abbea0; expires=Wed, 04-Dec-2024 01:45:53 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YTowOnt9; expires=Fri, 08-Dec-2023 01:45:53 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Fri, 08-Dec-2023 01:45:53 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip

GET /advertising.js HTTP/1.1
Host: js.capndr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 05 Dec 2023 01:45:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 14 Jul 2023 08:23:25 GMT
etag: "64b105fd-0"
expires: Tue, 05 Dec 2023 01:50:53 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

POST /cdn-cgi/challenge-platform/h/b/jsd/r/83089cb06f79b50b HTTP/1.1
Host: javgg.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12340
Origin: https://javgg.net
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==
Cookie: google-analytics_v4_ef3e__engagementStart=1701740752599; google-analytics_v4_ef3e__counter=1; google-analytics_v4_ef3e__ga4sid=1929733268; google-analytics_v4_ef3e__session_counter=1; google-analytics_v4_ef3e__ga4=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6; google-analytics_v4_ef3e___z_ga_audiences=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6; google-analytics_v4_ef3e__let=1701740752599
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 05 Dec 2023 01:45:53 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=MEi4OcUWcnFpxImdcoRlV3LE5C_fYuEyDUMT8rPx81E-1701740753-0-1-730ca2d2.57dbd4fb.240dfd32-0.2.1701740753; path=/; expires=Wed, 04-Dec-24 01:45:53 GMT; domain=.javgg.net; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VK5GHsULHU4iJ6IQF1d159zRapfJlz6BnW%2Bt%2BtZTh73I8jUFzxHHtvBkZdR8Y5YO0mQ%2BasUO5C0YdlkocWiuHW%2FtRTEr4LSNzmyqyoQArz4EetTaPHsAayQwtg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83089cbafabcb50b-OSL
content-encoding: br
X-Firefox-Spdy: h2

GET /network/user47819/12957-1563401670-0779180001563401670.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=d36a1246e74bc8365e7a3aecb3abbea0; imps12957=1; juicy_data_1=YToxOntpOjc2Njk0NTtpOjE3MDE5OTk5NTM7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 01:45:53 GMT
Connection: Keep-Alive
ETag: "1563401670"
Cache-Control: max-age=4930621
Content-Length: 396357
Content-Type: image/gif
Last-Modified: Wed, 17 Jul 2019 22:14:30 GMT
Accept-Ranges: bytes
X-HW: 1701740753.dop208.sk1.t,1701740753.cds224.sk1.shn,1701740753.cds224.sk1.c

GET /1x1.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=d36a1246e74bc8365e7a3aecb3abbea0; imps12957=1; juicy_data_1=YTowOnt9; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 01:45:53 GMT
Connection: Keep-Alive
ETag: "1478208967"
Cache-Control: max-age=18536943
Content-Length: 27460
Content-Type: image/jpeg
Last-Modified: Thu, 03 Nov 2016 21:36:07 GMT
Accept-Ranges: bytes
X-HW: 1701740753.dop216.sk1.t,1701740753.cds253.sk1.shn,1701740753.dop216.sk1.t,1701740753.cds215.sk1.c

GET /ads/user186477/ad1988299-1699943636.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=d36a1246e74bc8365e7a3aecb3abbea0; imps12957=1; juicy_data_1=YTowOnt9; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 01:45:53 GMT
Connection: Keep-Alive
ETag: "1699943636"
Cache-Control: max-age=29739018
Content-Length: 17931
Content-Type: image/gif
Last-Modified: Tue, 14 Nov 2023 06:33:56 GMT
Accept-Ranges: bytes
X-HW: 1701740753.dop208.sk1.t,1701740753.cds224.sk1.shn,1701740753.dop208.sk1.t,1701740753.cds260.sk1.c

GET /wp-content/uploads/2020/07/140_Gg_logo_logos-512.png HTTP/1.1
Host: javgg.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==
Cookie: google-analytics_v4_ef3e__engagementStart=1701740752599; google-analytics_v4_ef3e__counter=1; google-analytics_v4_ef3e__ga4sid=1929733268; google-analytics_v4_ef3e__session_counter=1; google-analytics_v4_ef3e__ga4=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6; google-analytics_v4_ef3e___z_ga_audiences=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6; google-analytics_v4_ef3e__let=1701740752599; cf_clearance=MEi4OcUWcnFpxImdcoRlV3LE5C_fYuEyDUMT8rPx81E-1701740753-0-1-730ca2d2.57dbd4fb.240dfd32-0.2.1701740753
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 05 Dec 2023 01:45:53 GMT
content-type: image/webp
content-length: 1338
cache-control: max-age=2678400
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=2026
content-disposition: inline; filename="140_Gg_logo_logos-512.webp"
vary: Accept
etag: "61f924d6-7ea"
expires: Wed, 03 Jan 2024 06:12:52 GMT
last-modified: Tue, 01 Feb 2022 12:17:26 GMT
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 69995
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J7eWFmk7b6IXycyZuicgQWpzV2b5cwtd9GBhn%2Bun5108qTvB7r9Db6YKqeHAXF9lsIhhzoelfmkLIKZUvZaK2rW6oF3PABEgbImEcKuhTeFCxWa32KDObsGcyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83089cbcbb4fb50b-OSL
X-Firefox-Spdy: h2

GET /network/user500/32597-1558023042-0056384001558023042.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=d36a1246e74bc8365e7a3aecb3abbea0; imps12957=1; juicy_data_1=YTowOnt9; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 01:45:53 GMT
Connection: Keep-Alive
ETag: "1558023042"
Cache-Control: max-age=15377410
Content-Length: 514676
Content-Type: image/gif
Last-Modified: Thu, 16 May 2019 16:10:42 GMT
Accept-Ranges: bytes
X-HW: 1701740753.dop224.sk1.t,1701740753.cds223.sk1.shn,1701740753.dop224.sk1.t,1701740753.cds256.sk1.c

GET /adshow.php?adzone=1029725 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 01:45:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=232037a74d6774a4891dd6a242e396b3; expires=Wed, 04-Dec-2024 01:45:52 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps30553=1; expires=Wed, 06-Dec-2023 01:45:53 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjcxMzIyNjtpOjE3MDE5OTk5NTI7fQ%3D%3D; expires=Fri, 08-Dec-2023 01:45:52 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Fri, 08-Dec-2023 01:45:52 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip

GET /ads/ga-audiences?t=sr&aip=1&_r=4&v=1&_v=j86&tid=G-JC97W0KNHW&cid=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6&_u=KGDAAEADQAAAAC%7E&z=1393040572&slf_rd=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://javgg.net/
Origin: https://javgg.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 05 Dec 2023 01:45:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
access-control-allow-origin: https://javgg.net
access-control-allow-credentials: true
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /network/user22416/30553-1544525869-0417811001544525869.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=232037a74d6774a4891dd6a242e396b3; imps12957=1; juicy_data_1=YToxOntpOjcxMzIyNjtpOjE3MDE5OTk5NTI7fQ%3D%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps32597=1; imps30553=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 01:45:53 GMT
Connection: Keep-Alive
ETag: "1544525869"
Cache-Control: max-age=15622459
Content-Length: 426439
Content-Type: image/gif
Last-Modified: Tue, 11 Dec 2018 10:57:49 GMT
Accept-Ranges: bytes
X-HW: 1701740753.dop224.sk1.t,1701740753.cds223.sk1.shn,1701740753.dop224.sk1.t,1701740753.cds209.sk1.c

POST /cdn-cgi/rum? HTTP/1.1
Host: javgg.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 8623
Origin: https://javgg.net
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/download/NG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg==
Cookie: google-analytics_v4_ef3e__engagementStart=1701740752599; google-analytics_v4_ef3e__counter=1; google-analytics_v4_ef3e__ga4sid=1929733268; google-analytics_v4_ef3e__session_counter=1; google-analytics_v4_ef3e__ga4=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6; google-analytics_v4_ef3e___z_ga_audiences=0ba8f8a7-067c-4cf6-9b92-ab50453a76b6; google-analytics_v4_ef3e__let=1701740752599; cf_clearance=MEi4OcUWcnFpxImdcoRlV3LE5C_fYuEyDUMT8rPx81E-1701740753-0-1-730ca2d2.57dbd4fb.240dfd32-0.2.1701740753
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 204 No Content
date: Tue, 05 Dec 2023 01:45:53 GMT
access-control-allow-origin: https://javgg.net
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 83089cbdebccb50b-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

GET /smartpop/ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&sourceId=308287&p1=4184345&memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi HTTP/1.1
Host: go.hpyjmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Tue, 05 Dec 2023 01:45:53 GMT
content-length: 0
location: https://creative.mnaspm.com/LPOmega?action=sbSignupWithModel&campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d&campaignType=smartpop&creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69&iterationId=764445&masterSmartpopId=1738&memberId=J0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi&p1=4184345&quality=240p&ruleId=12&smartpopId=1589&sourceId=308287&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=32240
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: _var=810710.32240_NGNmOGEwYjY=; Path=/; Expires=Thu, 04 Jan 2024 01:45:53 GMT; HttpOnly; SameSite=Strict
__cflb=0H28upDCGznfDm9XVE9Kb8v5TrfcnGC15xFdYuejETn; SameSite=None; Secure; path=/; expires=Wed, 06-Dec-23 01:45:53 GMT; HttpOnly
server: cloudflare
cf-ray: 83089cbe5be5b50b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /api/users/310148?host=javgg.net&ev=211&wh=1024&ww=1280&uuid=&url=https%3A%2F%2Fjavgg.net%2Fdownload%2FNG1rdnVxWWppVFgzVXVoOWsvc1YyZmcyYnZ0RkZhdDBoNnNFc00zQUhNd2ZRU21VN3BVanNCaUp1ZnVFRG5rVg%3D%3D&i=1&s1=%25IntertitialDesktop%25 HTTP/1.1
Host: 5f25d.dappaa.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Cookie: nauid=7T4fPrRoxf8vQaKMxO7T
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 01:45:53 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2

GET /tags?tag_id=9321&timezone_olson=UTC&version_name=c HTTP/1.1
Host: notification.tubecup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javgg.net
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.20.2
date: Tue, 05 Dec 2023 01:45:53 GMT
content-type: application/json
content-length: 1020
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: br
X-Firefox-Spdy: h2

GET /adsbygoogle.js HTTP/1.1
Host: video.ktkjmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 05 Dec 2023 01:45:54 GMT
content-type: application/javascript
content-length: 16
x-amz-id-2: eOt3YX0Nm2YrsRFghHjY+ldPpZhMsRS8Tg9HXo+sQY2MfQ8piotah5MMqRgsIwcNTLmVbQ2iqoU=
x-amz-request-id: Y49M74J1R1NSP1TJ
last-modified: Thu, 10 Mar 2022 13:52:07 GMT
etag: "3d7f7a60216d40dea48e495fef6903c9"
x-amz-meta-s3cmd-attrs: atime:1646920284/ctime:1646920283/gid:20/gname:staff/md5:3d7f7a60216d40dea48e495fef6903c9/mode:33188/mtime:1646920283/uid:501/uname:mikhailchubar
x-amz-version-id: eIgLIBoMMcsEXtxOH6UDjWyfAquRpkIG
access-control-allow-origin: https://creative.mnaspm.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: HIT
age: 5786
expires: Tue, 05 Dec 2023 05:45:54 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 83089cc0ea77b4f3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

OPTIONS /fp?tag_id=9321 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://javgg.net/
Origin: https://javgg.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Tue, 05 Dec 2023 01:45:54 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://javgg.net
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers

GET /c1c4fab3e4d825cf95ab773a3377267d.js HTTP/1.1
Host: 6a1d032c40.b65415fde6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javgg.net
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 05 Dec 2023 01:45:52 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Mon, 04 Dec 2023 11:23:10 GMT
etag: W/"656db69e-287fd"
content-encoding: gzip
expires: Tue, 05 Dec 2023 01:50:52 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2

GET /config?url=https%3A%2F%2Fcreative.mnaspm.com%2FLPOmega%3Faction%3DsbSignupWithModel%26campaignId%3Debdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d%26campaignType%3Dsmartpop%26creativeId%3D47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69%26iterationId%3D764445%26masterSmartpopId%3D1738%26memberId%3DJ0ioPFNw5MMfB9B_uJktUnV5acA28eWZXtQhsiXQmRoyUEzeHvFgMadZBUjnaqagkrgPvglNVs8lrI2FbIB9ykECAud_hDDlxaCxTSE_Dc4Ago-I_gUIDRUi%26p1%3D4184345%26quality%3D240p%26ruleId%3D12%26smartpopId%3D1589%26sourceId%3D308287%26usePreroll%3D0%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D32240 HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 05 Dec 2023 01:45:54 GMT
content-type: application/json
access-control-allow-origin: https://creative.mnaspm.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Tue, 05 Dec 2023 01:45:54 GMT
cf-cache-status: MISS
set-cookie: __cflb=02DiuDFRFiBZBvMSLtr4BTSnpWHamtv7KsVb1QrnEpRtG; SameSite=None; Secure; path=/; expires=Wed, 06-Dec-23 01:45:54 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 83089cc0ca2c56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

POST /fp?tag_id=9321 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 23165
Origin: https://javgg.net
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 05 Dec 2023 01:45:54 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 58
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://javgg.net
Set-Cookie: id=8064251664979457414; Expires=Wed, 04 Dec 2024 01:45:54 GMT; Secure; SameSite=None
Vary: Origin

GET /abc.gif?action=sbSignupWithModel&campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d&campaignType=smartpop&creativeId=47df8ac6172a002efc9148d4edcb886af0647b890930dd6c15d0a48205704c69&iterationId=764445&masterSmartpopId=1738&p1=4184345&quality=240p&ruleId=12&smartpopId=1589&sourceId=308287&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=32240&modelsLimit=1&thumbFit=cover&language=en&stripcashR=0&thumbType=default&messagesLimit=30&theme=dark&agev=0&ageVerificationTheme=dark&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=1&segment=hls-newAPI&landing=LPOmega&referrer=https%3A%2F%2Fjavgg.net%2F&i=0&ib=0&filtersMatch=0&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A418%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A274%2C%22duration%22%3A16%2C%22transferSize%22%3A13508%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A275%2C%22duration%22%3A26%2C%22transferSize%22%3A98131%7D%5D&mh=841340463 HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 05 Dec 2023 01:45:54 GMT
content-type: image/gif
content-length: 103
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtrsnD7QZBLqqpmg3jrGNvvUmAJpt; SameSite=None; Secure; path=/; expires=Wed, 06-Dec-23 01:45:54 GMT; HttpOnly
server: cloudflare
cf-ray: 83089cc31db2b500-OSL
alt-svc: h3=":443"; ma=86400

GET /banner-admanager/build.m.js HTTP/1.1
Host: js.cabnnr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 05 Dec 2023 01:45:54 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Fri, 24 Nov 2023 09:13:53 GMT
etag: W/"65606951-d3d5"
content-encoding: gzip
expires: Tue, 05 Dec 2023 01:50:54 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2

GET /app/domain-checker/get-check HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 05 Dec 2023 01:45:54 GMT
content-type: application/json
access-control-allow-origin: https://creative.mnaspm.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28upDCGznfDm9XVDQgYY38nUsBbmdTmUvQ9kvydLx; SameSite=None; Secure; path=/; expires=Wed, 06-Dec-23 01:45:54 GMT; HttpOnly
server: cloudflare
cf-ray: 83089cc2dda5b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /in/dip?site=native-push&wl=1&event_id=def249f1-9fdd-489a-9b67-3c1e40ef60f2&subid=1824673469&sid=2297567554&spot_id=8005&created_at=2023-12-05&timezone=0&ver=8.121.0&is_native=1 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://javgg.net
DNT: 1
Connection: keep-alive
Referer: https://javgg.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.20.1
date: Tue, 05 Dec 2023 01:45:54 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2

GET /LPOmega/images/grinning.png HTTP/1.1
Host: creative.mnaspm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/LPOmega/main.d5bb40f50c46b20ec9c1.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 05 Dec 2023 01:45:54 GMT
content-type: image/png
content-length: 5479
last-modified: Thu, 30 Nov 2023 11:55:19 GMT
etag: "65687827-1567"
expires: Tue, 05 Dec 2023 01:45:57 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
accept-ranges: bytes
set-cookie: __cflb=0H28upDCGznfDm9XVDEEFVkNrzLraWxchuLTBhv2qnU; SameSite=None; Secure; path=/; expires=Wed, 06-Dec-23 01:45:54 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 83089cc4be3cb500-OSL
alt-svc: h3=":443"; ma=86400

POST /app/domain-checker/check-result HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 174
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
date: Tue, 05 Dec 2023 01:45:54 GMT
access-control-allow-origin: https://creative.mnaspm.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtrsn3TfoaR3cJpttPHJPdtydfe4t; SameSite=None; Secure; path=/; expires=Wed, 06-Dec-23 01:45:54 GMT; HttpOnly
server: cloudflare
cf-ray: 83089cc4be3eb500-OSL
alt-svc: h3=":443"; ma=86400

GET /LPOmega/images/ok.png HTTP/1.1
Host: creative.mnaspm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/LPOmega/main.d5bb40f50c46b20ec9c1.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 05 Dec 2023 01:45:54 GMT
content-type: image/png
content-length: 7526
last-modified: Thu, 30 Nov 2023 11:55:19 GMT
etag: "65687827-1d66"
expires: Tue, 05 Dec 2023 01:45:57 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
accept-ranges: bytes
set-cookie: __cflb=02DiuDFRFiBZBvMSLtsgHAphT8dt9Y3eZwY2NQWQ73gyA; SameSite=None; Secure; path=/; expires=Wed, 06-Dec-23 01:45:54 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 83089cc4be3db500-OSL
alt-svc: h3=":443"; ma=86400

GET /api/models?quality=240p&forceClient=1&stripcashR=0&limit=1&usePreroll=0&webp=1 HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 05 Dec 2023 01:45:54 GMT
content-type: application/json
access-control-allow-origin: https://creative.mnaspm.com
access-control-allow-credentials: true
vary: Origin, Accept-Encoding
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Tue, 05 Dec 2023 01:45:33 GMT
cf-cache-status: HIT
age: 10
server: cloudflare
cf-ray: 83089cc28d8db500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:ztGBb4PV8FXYGfWEi-P63nX1ngqd7w:zSe6SSXiiaD8GY0V; Expires=Thu, 04-Dec-2025 01:45:54 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 05 Dec 2023 01:45:54 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp1yDXu1g_0rp1ZOl205-eBHwsQsPK6ORQYfodtcULgpoUAa27xs3NaV7w1o1cHI6VOowv-twQ
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: unsafe-none
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-A8TThzq8rY6v4I0Fsly5ig' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp1yDXu1g_0rp1ZOl205-eBHwsQsPK6ORQYfodtcULgpoUAa27xs3NaV7w1o1cHI6VOowv-twQ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:Q3rj98f7Ama7YgFP2jmMAA84QjMP1g:aCMvkmB7LSfxzHVn;Path=/;Expires=Thu, 04-Dec-2025 01:45:54 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 05 Dec 2023 01:45:54 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp1NQT9M0P7OJadXSKObrUegzHh9q9IaIVaQ5ZOIAyRSLUDLd9BTQ6a-c6yFRhU_pDNUShsSIA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S704852539%3A1701740754952026&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: script-src 'nonce-6ZiuOC4qAikOQz3-WbGiXw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 405
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /hls/84739822/84739822_240p_init_4s1wx4cCF8qG5j0h.mp4 HTTP/1.1
Host: b-hls-20.doppiocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 05 Dec 2023 01:45:54 GMT
content-type: video/mp4
content-length: 1217
last-modified: Tue, 05 Dec 2023 01:43:49 GMT
etag: "656e8055-4c1"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 38
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 83089cc69a5bb509-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /hls/84739822/84739822_240p_58_jSPPWILsmxKSS89U_1701740745.mp4 HTTP/1.1
Host: b-hls-20.doppiocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 05 Dec 2023 01:45:55 GMT
content-type: video/mp4
content-length: 166922
last-modified: Tue, 05 Dec 2023 01:45:47 GMT
etag: "656e80cb-28c0a"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 5
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 83089cc6ea77b509-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2