| lustgoddess.xyz/c4thl3k.php?campid=6656002&catid=110&cost=0.0002476898&country=FRA&format=&key=402ghajs6x5ta6c9g41i&siteid=952888&source=hentai.scantrad-vf.cc&tag=opc7gmbqa6aap7XTSyzy22Szulc6aaV1Nrp3WUOldK6V1FVc1NVNrqJZp7bKXT3W21S2OldM6V0rpXTOmdK6V0zq665dqbrc6uN7Z46q67pa6bqZ5apbKrKKHS08b3V1UaUS51W2UbU055058W2ab72TWOld1uA2fcZdcwGJntEjiPXV1006pqK7XOldK6V0rpXSuldK6V01k1lc9E89TnOldK6V0rpXSuldK6V0rtrp59Zq9NrNad7tpZqJrLp7as5pddK9K3B9gA--&varid=100208702&zoneid=4644528 | 94.130.72.48 | 302 Found | 0 B |
URL User Request GET HTTP/1.1lustgoddess.xyz/c4thl3k.php?campid=6656002&catid=110&cost=0.0002476898&country=FRA&format=&key=402ghajs6x5ta6c9g41i&siteid=952888&source=hentai.scantrad-vf.cc&tag=opc7gmbqa6aap7XTSyzy22Szulc6aaV1Nrp3WUOldK6V1FVc1NVNrqJZp7bKXT3W21S2OldM6V0rpXTOmdK6V0zq665dqbrc6uN7Z46q67pa6bqZ5apbKrKKHS08b3V1UaUS51W2UbU055058W2ab72TWOld1uA2fcZdcwGJntEjiPXV1006pqK7XOldK6V0rpXSuldK6V01k1lc9E89TnOldK6V0rpXSuldK6V0rtrp59Zq9NrNad7tpZqJrLp7as5pddK9K3B9gA--&varid=100208702&zoneid=4644528 IP 94.130.72.48:443
ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectlustgoddess.xyz FingerprintCA:AB:AC:F6:B9:D6:DE:97:99:55:22:57:0A:13:D9:2F:E9:D4:37:92 ValidityFri, 17 May 2024 14:15:06 GMT - Thu, 15 Aug 2024 14:15:05 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c4thl3k.php?campid=6656002&catid=110&cost=0.0002476898&country=FRA&format=&key=402ghajs6x5ta6c9g41i&siteid=952888&source=hentai.scantrad-vf.cc&tag=opc7gmbqa6aap7XTSyzy22Szulc6aaV1Nrp3WUOldK6V1FVc1NVNrqJZp7bKXT3W21S2OldM6V0rpXTOmdK6V0zq665dqbrc6uN7Z46q67pa6bqZ5apbKrKKHS08b3V1UaUS51W2UbU055058W2ab72TWOld1uA2fcZdcwGJntEjiPXV1006pqK7XOldK6V0rpXSuldK6V01k1lc9E89TnOldK6V0rpXSuldK6V0rtrp59Zq9NrNad7tpZqJrLp7as5pddK9K3B9gA--&varid=100208702&zoneid=4644528 HTTP/1.1
Host: lustgoddess.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Thu, 06 Jun 2024 11:13:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=ira48pgm; expires=Fri, 07-Jun-2024 11:13:32 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1; expires=Fri, 07-Jun-2024 11:13:32 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://bestofferz.xyz/LG/4girls/index.html?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1
Strict-Transport-Security: max-age=31536000
|
|
| bestofferz.xyz/lg/4girls/images/button.png | 104.21.29.239 | 200 OK | 3.7 kB |
URL GET HTTP/3bestofferz.xyz/lg/4girls/images/button.png IP 104.21.29.239:443
Requested byhttps://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 CertificateIssuerGoogle Trust Services Subjectbestofferz.xyz Fingerprint2C:62:E9:0F:BE:99:B1:52:00:F8:29:B2:45:C4:7F:40:D6:24:F8:0C ValidityThu, 06 Jun 2024 07:59:46 GMT - Wed, 04 Sep 2024 07:59:45 GMT
File typePNG image data, 315 x 88, 8-bit/color RGBA, non-interlaced Hash6642fd93ef8a7961ba0dd956b443bac3 b7819f1138d183439d8318d4e474481f0d0f009f f783c9ea576432b935a5fb7ff4ab13b136dfe7998c01b142cb5c6b47ba95f59c
GET /lg/4girls/images/button.png HTTP/1.1
Host: bestofferz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 06 Jun 2024 11:13:33 GMT
content-type: image/png
content-length: 3733
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "d97de7b958074aa9acca3a6d91ebe29b-ssl"
x-nf-request-id: 01HZPM22DMK962WT0JAMJG3HXG
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N3IpGMpPIzsa2D%2BdZhnlHuA5EPV%2FevdEYwkgJ5L0CElOl8lSzJrbnkhTnMhHIlcnOPo%2BduwfwdMhuOj%2F0QVn2zA%2F0ohsvbbYJJv%2Bg6l9wylxThLvpWqmlIxwSIu5ZMcUqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88f7f948de25569b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| bestofferz.xyz/lg/4girls/images/4.jpg | 104.21.29.239 | 200 OK | 113 kB |
URL GET HTTP/3bestofferz.xyz/lg/4girls/images/4.jpg IP 104.21.29.239:443
Requested byhttps://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 CertificateIssuerGoogle Trust Services Subjectbestofferz.xyz Fingerprint2C:62:E9:0F:BE:99:B1:52:00:F8:29:B2:45:C4:7F:40:D6:24:F8:0C ValidityThu, 06 Jun 2024 07:59:46 GMT - Wed, 04 Sep 2024 07:59:45 GMT
File typeJPEG image data, baseline, precision 8, 280x449, components 3 Size113 kB (112586 bytes) Hash77f2b61942f92d1c1e251b58cfc16678 7405a16b99718689017435a55a11f31bc8466ca4 92968176e1ce641729bb99e05c2f581c0e7d41009624298758e893bcd274c6f5
GET /lg/4girls/images/4.jpg HTTP/1.1
Host: bestofferz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 06 Jun 2024 11:13:33 GMT
content-type: image/jpeg
content-length: 112586
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "f0d3b5fbd02083dec3355244bf2ebf35-ssl"
x-nf-request-id: 01HZPM22DJ5GECJ5TVCEKANEBG
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7QsX6Vo%2Fs7OvugWnVuMkXEiSOzqBC8Hhu0fmCHxyTsdC0J0h0SevI5fZwMEddga8h5ds%2FFF6tg%2BzBVnLQI%2BX%2Bq6gViQ%2FuUO8qSIzJhrdktNda45QU%2BmXoI80QikeI7Qkag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88f7f948de20569b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| bestofferz.xyz/lg/4girls/images/2.jpg | 104.21.29.239 | 200 OK | 116 kB |
URL GET HTTP/3bestofferz.xyz/lg/4girls/images/2.jpg IP 104.21.29.239:443
Requested byhttps://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 CertificateIssuerGoogle Trust Services Subjectbestofferz.xyz Fingerprint2C:62:E9:0F:BE:99:B1:52:00:F8:29:B2:45:C4:7F:40:D6:24:F8:0C ValidityThu, 06 Jun 2024 07:59:46 GMT - Wed, 04 Sep 2024 07:59:45 GMT
File typeJPEG image data, baseline, precision 8, 280x449, components 3 Size116 kB (116147 bytes) Hash6bba02016dc4e9891ebec68e52cc98a8 0a683e61fd28fe72b383eda3004162df48357a79 73cfe9d9a6962c59a363b86cf7ef6bc9b6686407030c04433b62c6ea6ca0ced2
GET /lg/4girls/images/2.jpg HTTP/1.1
Host: bestofferz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 06 Jun 2024 11:13:33 GMT
content-type: image/jpeg
content-length: 116147
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "4d7f15786ac57a5da0c92a3bcf152219-ssl"
x-nf-request-id: 01HZPM22DH4SQFD3P1VXM67RHQ
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gvHuxm6yEPRghE2hgIWydkrGe71sMu8dX0l9T%2F7%2BceiEQ8g3gN6xoPoHsmQhnViJ8VJAWII%2F7XjHAm0JgT2nSwPobv%2BhRtYcrnMVuorlebFypZrJYYCHPR2t7UgT2jHBug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88f7f948de1a569b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| bestofferz.xyz/lg/4girls/images/notice.png | 104.21.29.239 | 200 OK | 4.0 kB |
URL GET HTTP/3bestofferz.xyz/lg/4girls/images/notice.png IP 104.21.29.239:443
Requested byhttps://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 CertificateIssuerGoogle Trust Services Subjectbestofferz.xyz Fingerprint2C:62:E9:0F:BE:99:B1:52:00:F8:29:B2:45:C4:7F:40:D6:24:F8:0C ValidityThu, 06 Jun 2024 07:59:46 GMT - Wed, 04 Sep 2024 07:59:45 GMT
File typePNG image data, 482 x 45, 8-bit/color RGBA, non-interlaced Hashe0e971b6969a5939530b9e3e735afc8b 73b405934f2bb9adc4e16b97e56e6192d402b873 6b4832fd467e872eb94ba1d9e7412bf510407ca2646e64b69317682d2d532407
GET /lg/4girls/images/notice.png HTTP/1.1
Host: bestofferz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 06 Jun 2024 11:13:33 GMT
content-type: image/png
content-length: 4047
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; fwd=miss
etag: "df0ea8ed5bb462d20faba3d89a382d1f-ssl"
x-nf-request-id: 01HZPM22DFMD5GA6MDPCJGM3ES
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GJmAIpKUTfsFzpYJ7O7lZlxWq7oEVgPf1gsLFHiByev8bienuPizDciqo63Iqkf0OxK3tsA5hTB1GwVJtg2cISkEnMYxu%2BYkWBXGoXnTCOSMj54qLbiF66XgpootMrNDuA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88f7f948de15569b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| bestofferz.xyz/lg/4girls/images/3.jpg | 104.21.29.239 | 200 OK | 98 kB |
URL GET HTTP/3bestofferz.xyz/lg/4girls/images/3.jpg IP 104.21.29.239:443
Requested byhttps://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 CertificateIssuerGoogle Trust Services Subjectbestofferz.xyz Fingerprint2C:62:E9:0F:BE:99:B1:52:00:F8:29:B2:45:C4:7F:40:D6:24:F8:0C ValidityThu, 06 Jun 2024 07:59:46 GMT - Wed, 04 Sep 2024 07:59:45 GMT
File typeJPEG image data, baseline, precision 8, 280x449, components 3 Hash43547b7d30757e3fa8649a979392578e 4c9942aed9d53547a8d758a734333523dfcb54a3 62b80966d375660e6084a3d15aa97630e78659b4751ec036d8d926fc21c25266
GET /lg/4girls/images/3.jpg HTTP/1.1
Host: bestofferz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 06 Jun 2024 11:13:33 GMT
content-type: image/jpeg
content-length: 98214
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; fwd=miss
etag: "46a4bd308ea9842f384dde147c1ee890-ssl"
x-nf-request-id: 01HZPM22DMCAMQA2ANM3TGNAT7
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EOsanDNWeV1ScJNwySGJ72OzHv3aJXGHo8%2By3K9qIzpPRwVGs04AgcvnSweA2IXApnmf7lcvEOcEhdqBHhsb25LLTfgt1AawRkDqXcFUuJiTnDOGtHaheY9T7fBsE4eDYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88f7f948de1d569b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| bestofferz.xyz/lg/4girls/images/1.jpg | 104.21.29.239 | 200 OK | 107 kB |
URL GET HTTP/3bestofferz.xyz/lg/4girls/images/1.jpg IP 104.21.29.239:443
Requested byhttps://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 CertificateIssuerGoogle Trust Services Subjectbestofferz.xyz Fingerprint2C:62:E9:0F:BE:99:B1:52:00:F8:29:B2:45:C4:7F:40:D6:24:F8:0C ValidityThu, 06 Jun 2024 07:59:46 GMT - Wed, 04 Sep 2024 07:59:45 GMT
File typeJPEG image data, baseline, precision 8, 280x449, components 3 Size107 kB (106632 bytes) Hash3e522fb14449eb689d1921758a4a4b39 7c15dc49e373e81a899f57d851c30d18627ce98a 2cc1937058fc1f91b4dd4173e2f8d94254a9df041499c18e5a488d72b92c9bc1
GET /lg/4girls/images/1.jpg HTTP/1.1
Host: bestofferz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 06 Jun 2024 11:13:33 GMT
content-type: image/jpeg
content-length: 106632
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; fwd=miss
etag: "76b9929d77465150551d723a07361a26-ssl"
x-nf-request-id: 01HZPM22DH2RJW68BENX093179
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FpkyE98bd3csWWmd9%2FRyDkULi%2BSLZgui4MXhBvbGYqIcdbdC7OQrChasN9vAB5CWTCQoN8ETZcA7OTPKd9kEshe33g3714%2B2mnsZeR0ZqPnqEw8Ioo5jzRxU8hj7skLaRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88f7f948de18569b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| bestofferz.xyz/lg/4girls/js/main.js | 104.21.29.239 | 200 OK | 9.2 kB |
URL GET HTTP/3bestofferz.xyz/lg/4girls/js/main.js IP 104.21.29.239:443
Requested byhttps://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 CertificateIssuerGoogle Trust Services Subjectbestofferz.xyz Fingerprint2C:62:E9:0F:BE:99:B1:52:00:F8:29:B2:45:C4:7F:40:D6:24:F8:0C ValidityThu, 06 Jun 2024 07:59:46 GMT - Wed, 04 Sep 2024 07:59:45 GMT
File typeJavaScript source, ASCII text, with no line terminators Hash7d34f846662d075cf9776018c9168a7e f3f5f181061268bb7e4bc326dbaec7f2c84d7857 adab57bc821cebfedc845c7b18ca9f55287eff4ef3a11f7f9dd5eda572418628
GET /lg/4girls/js/main.js HTTP/1.1
Host: bestofferz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 06 Jun 2024 11:13:33 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; fwd=miss
etag: W/"7b8872013294e2a6ac52ee327cf43fc9-ssl"
x-nf-request-id: 01HZPM22DPPRZJBMAWBZP5Z9B9
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sZYlfFg1U09T84%2F2kRwI5Iad6vQ6E48GG49yI8uO60s%2BLY1bOxglhjPYmv5XlRGuOIM%2BH8nc8IzwBEHZnzMqex6WA2y2xG4HfzpohKFtrC8WHlwCs%2F7eFqPznsVNh53Uyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88f7f948ee2f569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| bestofferz.xyz/lg/4girls/images/fav.png | 104.21.29.239 | 200 OK | 1.4 kB |
URL GET HTTP/3bestofferz.xyz/lg/4girls/images/fav.png IP 104.21.29.239:443
Requested byhttps://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 CertificateIssuerGoogle Trust Services Subjectbestofferz.xyz Fingerprint2C:62:E9:0F:BE:99:B1:52:00:F8:29:B2:45:C4:7F:40:D6:24:F8:0C ValidityThu, 06 Jun 2024 07:59:46 GMT - Wed, 04 Sep 2024 07:59:45 GMT
File typePNG image data, 32 x 32, 8-bit colormap, non-interlaced Hash10c5dd857fd3653492ef5eeaa86cd48b 193484a907a40d7b145af2136ef83bef593d2f21 a689201508b9dc7b2cc3049c7d89947f96a19790411506ecd6eb1875374fe329
GET /lg/4girls/images/fav.png HTTP/1.1
Host: bestofferz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1
Cookie: PHPREFS=full
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 06 Jun 2024 11:13:34 GMT
content-type: image/png
content-length: 1425
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; fwd=stale
etag: "b4fef199e566e87cdcbbbfeb90b9f59a-ssl"
x-nf-request-id: 01HZPM22RFK83KS38E8CT0B1KS
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x9iKMMPhvCLlZtv59ccuh2g4ZapiHd2bwbLxp7HEbaZUsrZI5ht1E0xuRwVRYKUstDW6AKLFZLiXD66fq%2BjwemQ7urF4l7FIvuT7eGmhfppfqbJrESHhAfVj5sZ4VW5VsQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88f7f94b08cf569b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| bestofferz.xyz/lg/4girls/js/awpx_click.js | 104.21.29.239 | 404 Not Found | 114 kB |
URL GET HTTP/3bestofferz.xyz/lg/4girls/js/awpx_click.js IP 104.21.29.239:443
Requested byhttps://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 CertificateIssuerGoogle Trust Services Subjectbestofferz.xyz Fingerprint2C:62:E9:0F:BE:99:B1:52:00:F8:29:B2:45:C4:7F:40:D6:24:F8:0C ValidityThu, 06 Jun 2024 07:59:46 GMT - Wed, 04 Sep 2024 07:59:45 GMT
File typeHTML document, ASCII text, with very long lines (321) Size114 kB (114163 bytes) Hashb88565f4efb3678f8e313db8e0d70bc0 cce951b02a49da7ae53451dc2080b4d8f1dc7f0c 776e7455e3b0cbb09fdbb5bf269a6b3e0404430f882e215985ecaaca7b805221
GET /lg/4girls/js/awpx_click.js HTTP/1.1
Host: bestofferz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1
Cookie: PHPREFS=full
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Thu, 06 Jun 2024 11:13:33 GMT
content-type: text/html; charset=utf-8
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
vary: Accept-Encoding
x-nf-request-id: 01HZPM22J40S8V2AQ9YSNSKG0W
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cq%2BD4HiB%2FmKMmchhc1XEWY3u4BJ7SuFzDBh4ZbCKB3zbqOwRAzaVF8QjQctKF3ecpAcMkjOKUYONqmwAuFZTExud9FjHG%2Bcl%2FrTQQEGEgO7LRpI1hqZaqAEU1P4p4CD13A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88f7f949ef8f569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wetrackit.club/click.php?event7=1&uclick=ira48pgm | 94.130.72.48 | 200 OK | 20 B |
URL GET HTTP/1.1wetrackit.club/click.php?event7=1&uclick=ira48pgm IP 94.130.72.48:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 CertificateIssuerLet's Encrypt Subjectwetrackit.club Fingerprint83:F5:4C:42:EE:CF:C7:D2:B6:E6:16:A4:1A:3B:CC:C7:68:2C:E9:FE ValidityMon, 06 May 2024 01:27:17 GMT - Sun, 04 Aug 2024 01:27:16 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /click.php?event7=1&uclick=ira48pgm HTTP/1.1
Host: wetrackit.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestofferz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 06 Jun 2024 11:13:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
|
|
| wetrackit.club/click.php?event8=1&uclick=ira48pgm | 94.130.72.48 | 200 OK | 20 B |
URL GET HTTP/1.1wetrackit.club/click.php?event8=1&uclick=ira48pgm IP 94.130.72.48:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 CertificateIssuerLet's Encrypt Subjectwetrackit.club Fingerprint83:F5:4C:42:EE:CF:C7:D2:B6:E6:16:A4:1A:3B:CC:C7:68:2C:E9:FE ValidityMon, 06 May 2024 01:27:17 GMT - Sun, 04 Aug 2024 01:27:16 GMT
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /click.php?event8=1&uclick=ira48pgm HTTP/1.1
Host: wetrackit.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestofferz.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 06 Jun 2024 11:13:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
|
|
| bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 | 104.21.29.239 | 200 OK | 5.6 kB |
URL User Request GET HTTP/2bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 IP 104.21.29.239:443
CertificateIssuerGoogle Trust Services Subjectbestofferz.xyz Fingerprint2C:62:E9:0F:BE:99:B1:52:00:F8:29:B2:45:C4:7F:40:D6:24:F8:0C ValidityThu, 06 Jun 2024 07:59:46 GMT - Wed, 04 Sep 2024 07:59:45 GMT
File typeHTML document, ASCII text, with very long lines (5873), with no line terminators Hashed73dc5844cc9b098d05cac3b78e0a0e afab67b5c6fe0cc5f022aa1a7d37fb6cedadfb04 3e33493b1e7ab5df4f59f88ff3f13020ed93cf45d6505ef1c3c5ac01c86f2ed6
GET /lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 HTTP/1.1
Host: bestofferz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 06 Jun 2024 11:13:33 GMT
content-type: text/html; charset=UTF-8
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
vary: Accept-Encoding
x-nf-request-id: 01HZPM21ZP04PEWW5T32PEECS4
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nw9W5PvvwO7bNvH%2BSUyb4%2BLumMZw7OjIYyT4sbmdjyQlWTPGyx2uwrLrzkikaYtGdZkWJI75XlXqyZNPmDGmV8x6GQ4LkXZNlaXruLc%2FrxRcm191HRYXsrafZuh1boiKEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88f7f9464cf156c9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| userstat.net/get/script.js?referrer=https://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 | 172.67.186.222 | 200 OK | 129 B |
URL GET HTTP/2userstat.net/get/script.js?referrer=https://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 IP 172.67.186.222:443
Requested byhttps://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 CertificateIssuerGoogle Trust Services LLC Subjectuserstat.net FingerprintEC:BF:E8:77:ED:2F:79:E8:9B:BD:1D:7F:87:66:A2:E4:95:D3:48:E7 ValiditySun, 19 May 2024 07:43:09 GMT - Sat, 17 Aug 2024 07:43:08 GMT
File typeASCII text, with no line terminators Hash6251458b0b4b8d762a83f13af71400a9 570f7f06b29e536df064ca74c081af2de3ea7b43 430a1f62fc7c0326e808a47dca2158ff187dd3bb6200122e47e9096246222e51
GET /get/script.js?referrer=https://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 HTTP/1.1
Host: userstat.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestofferz.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 06 Jun 2024 11:13:34 GMT
content-type: text/javascript; charset=utf-8
x-powered-by: PHP/8.2.1
access-control-allow-origin: https://bestofferz.xyz
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rpnWblLSXD5CknU3ttau9hxa15S0%2FHye%2BV6zPaQxCZJFkkanhbWIIGjdb3F6RRbId5hf9eCg3IIqerX%2B4z6haGYD3Zw8PBoDAnk96jVzM1J2tmGDtUrQMNdv8wdBtWo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88f7f94fec2856b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bestofferz.xyz/lg/4girls/js/px1.js | 104.21.29.239 | 404 Not Found | 2.9 kB |
URL GET HTTP/3bestofferz.xyz/lg/4girls/js/px1.js IP 104.21.29.239:443
Requested byhttps://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 CertificateIssuerGoogle Trust Services Subjectbestofferz.xyz Fingerprint2C:62:E9:0F:BE:99:B1:52:00:F8:29:B2:45:C4:7F:40:D6:24:F8:0C ValidityThu, 06 Jun 2024 07:59:46 GMT - Wed, 04 Sep 2024 07:59:45 GMT
File typeHTML document, ASCII text, with very long lines (3012), with no line terminators Hash3bfd6116f2e78fc971f033ff7869efe1 2d3cd714c577803cee6d4fe67e750c8d5e1c5637 ca6f1a53770eab12684e7c81c3b15517ec2a605efaa5357641fa7ad1d613d2ba
GET /lg/4girls/js/px1.js HTTP/1.1
Host: bestofferz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 06 Jun 2024 11:13:33 GMT
content-type: text/html; charset=utf-8
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; fwd=miss
vary: Accept-Encoding
x-nf-request-id: 01HZPM22D926CNG2X2M7B6VCHE
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GsC3cI%2Fx7QkMuZRrQ0%2FGPx1f7o9YJ3%2BGieAJk9a%2BPQB4yRB7nGOqOTmNogVKVx%2Fq%2FWAmm%2FO5fpv4mFM0ZvT9MO8yZ%2BYZO1RNjyQFODQP04VhLLI4Z59CV5EFBo50awr9jA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88f7f948de11569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| bestofferz.xyz/lg/4girls/js/jquery.min.js | 104.21.29.239 | 200 OK | 87 kB |
URL GET HTTP/3bestofferz.xyz/lg/4girls/js/jquery.min.js IP 104.21.29.239:443
Requested byhttps://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 CertificateIssuerGoogle Trust Services Subjectbestofferz.xyz Fingerprint2C:62:E9:0F:BE:99:B1:52:00:F8:29:B2:45:C4:7F:40:D6:24:F8:0C ValidityThu, 06 Jun 2024 07:59:46 GMT - Wed, 04 Sep 2024 07:59:45 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hash4520cf2ab63ab51811ce0b0d28cdd3cf 397539f372e9a270dacc8136dba7b2bc64cdefbd e7a250931ca999ba40a2b17700558581f3a3afa61dd5e64bb378e30695ef250f
GET /lg/4girls/js/jquery.min.js HTTP/1.1
Host: bestofferz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 06 Jun 2024 11:13:33 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: W/"07abaaa7ad902315639360bfdfc031d6-ssl-df"
vary: Accept-Encoding
x-nf-request-id: 01HZPM22D81NEWMDY67YK4TW9E
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=88fCAq0ZnAvK%2FQMDfPaAoDtbtgcNn0nn7aQBKxwCQnb4SZBnAYXXs5iM7VKiBGVSla3oZuYgW%2BJC1pzBi1fOBNy4G52544EMpcM3Ac8HZNz%2BYMhrzJb01WiC18wjOEunqw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88f7f948ce0a569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| bestofferz.xyz/lg/4girls/css/main.css | 104.21.29.239 | 200 OK | 2.1 kB |
URL GET HTTP/3bestofferz.xyz/lg/4girls/css/main.css IP 104.21.29.239:443
Requested byhttps://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 CertificateIssuerGoogle Trust Services Subjectbestofferz.xyz Fingerprint2C:62:E9:0F:BE:99:B1:52:00:F8:29:B2:45:C4:7F:40:D6:24:F8:0C ValidityThu, 06 Jun 2024 07:59:46 GMT - Wed, 04 Sep 2024 07:59:45 GMT
File typeASCII text, with very long lines (2095), with no line terminators Hasha180379dbb389afb675a4b44eefbb15d 2eba708e8fa4b1caa12e888706f919cc15bd5a77 9e580698f1ca553acb1314d6e1860ccf64c2c34bd962fe041fc728dbedf8106c
GET /lg/4girls/css/main.css HTTP/1.1
Host: bestofferz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 06 Jun 2024 11:13:33 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: W/"777657fa0af10dc7123f46180509430b-ssl-df"
vary: Accept-Encoding
x-nf-request-id: 01HZPM22D0GSA83TA5CNSMYVRY
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CFQQLUnwnre%2BOPdSc%2Fc5x3pYp3NkjxHflCP2it7SIH%2Bft7HZZejkBClMTNAiuHAQIwTh4AabSFYzffjlRPvQFFPHqf5X5%2FR4xqDQ2znVZ8ihQXzbb3W4qxdtETmZ5OMBHA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88f7f948ce09569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| bestofferz.xyz/lg/4girls/images/bg1.jpg | 104.21.29.239 | 200 OK | 113 kB |
URL GET HTTP/3bestofferz.xyz/lg/4girls/images/bg1.jpg IP 104.21.29.239:443
Requested byhttps://bestofferz.xyz/lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 CertificateIssuerGoogle Trust Services Subjectbestofferz.xyz Fingerprint2C:62:E9:0F:BE:99:B1:52:00:F8:29:B2:45:C4:7F:40:D6:24:F8:0C ValidityThu, 06 Jun 2024 07:59:46 GMT - Wed, 04 Sep 2024 07:59:45 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3 Size113 kB (112855 bytes) Hash944baef65b2ddce34b729ff6ee40989d c0c89c08d95e9f6a5e86a3e69766ff2e01cb9917 a7bcd7b9a5c2388fce5c5b20d7ac27429e4f5c1920d2e3bc5de63f2291f64f9c
GET /lg/4girls/images/bg1.jpg HTTP/1.1
Host: bestofferz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestofferz.xyz/lg/4girls/css/main.css
Cookie: PHPREFS=full
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 06 Jun 2024 11:13:34 GMT
content-type: image/jpeg
content-length: 112855
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "69b3bf5554211e983ba334249c24ceee-ssl"
x-nf-request-id: 01HZPM22N5V0NJ8WRM7KF50NFS
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fjn40ddwanLvGk1PQuk2XbLU7TBVM9LIysm1AwtWKnDxVHexDhkRvVDFKS48o%2FKlSc7RylpUseAr9A83u2HlhuvU2knwJ1%2FV0%2Bqh056ukwq7odL1CGuSME8Mfi3PgqV9nQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88f7f94a681a569b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| bestofferz.xyz/LG/4girls/index.html?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 | 104.21.29.239 | 301 Moved Permanently | 5.6 kB |
URL User Request GET HTTP/2bestofferz.xyz/LG/4girls/index.html?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 IP 104.21.29.239:443
CertificateIssuerGoogle Trust Services Subjectbestofferz.xyz Fingerprint2C:62:E9:0F:BE:99:B1:52:00:F8:29:B2:45:C4:7F:40:D6:24:F8:0C ValidityThu, 06 Jun 2024 07:59:46 GMT - Wed, 04 Sep 2024 07:59:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /LG/4girls/index.html?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1 HTTP/1.1
Host: bestofferz.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Thu, 06 Jun 2024 11:13:33 GMT
content-type: text/html; charset=UTF-8
accept-ranges: bytes
age: 0
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; fwd=miss
location: /lg/4girls/?clickid=f7635ira48pgm650&t1_md5=17bb0d4522b0e5f08ac8b93192dbd5dd&t2_md5=364e2596eef2cbe90a9c80c3409e7c99&t3_md5=78015c49a01ec28bdbe0c2312719e0be&campaign=1092&uclick=ira48pgm&uclickhash=ira48pgm-ira48pgm-2t15-0-8ry9-g63v-g637-1e98e1
x-nf-request-id: 01HZPM21TW37858RBX1K8VEXW0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6OICuJWS92zrMlL8yJVh2WXJyGRYDE7%2FIZZfCsuVFESNoQJ%2BXs1PzsVPXACIUuIn3P7iOlcT5Fubr5H6KGI9M6V95yhzuOvPSxpOS4TYE6Bi1R%2FyA4y0c7B%2FfcJgMcnfVw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88f7f9452b6656c9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|