| ocsp.r2m03.amazontrust.com/ |  143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hashea79965c29102389b7379932a68cced7 1d5fb47120502a4f0f23c6c0208b1f4612eda69b 77c91fe57cbff3ce5df72fa0b8433b05726fb9310e9b6a5e30f179965c7fbbae
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 08 May 2024 19:21:54 GMT
Last-Modified: Wed, 08 May 2024 18:38:04 GMT
Server: ECAcc (amb/6B35)
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: shrSOw5rxLJowk8W96tKdl_4DsfO0V2qp7VPpKBJ1FCzyYNR5MFdSA==
Age: 2630
|
|
| track.cam4tracking.com/7d2d6bd6-e3b3-4194-a540-cc2205f599bf?campaignid=102485608&zoneid=7054340&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_campaign=acquisition_mar-20-2023&utm_source=341&var8=200850&var9=850_it_pop_st_mwf_323&utm_medium=popunder&cost=0.010000&SUBID=812150769762439168 | 143.204.55.29 | 302 Found | 0 B |
URL User Request GET HTTP/2track.cam4tracking.com/7d2d6bd6-e3b3-4194-a540-cc2205f599bf?campaignid=102485608&zoneid=7054340&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_campaign=acquisition_mar-20-2023&utm_source=341&var8=200850&var9=850_it_pop_st_mwf_323&utm_medium=popunder&cost=0.010000&SUBID=812150769762439168 IP143.204.55.29:443
CertificateIssuerAmazon Subjecttrack.cam4tracking.com Fingerprint79:21:B5:A7:05:67:E5:20:C4:A0:9B:99:BA:02:37:26:51:74:87:62 ValidityTue, 23 Apr 2024 00:00:00 GMT - Thu, 22 May 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /7d2d6bd6-e3b3-4194-a540-cc2205f599bf?campaignid=102485608&zoneid=7054340&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_campaign=acquisition_mar-20-2023&utm_source=341&var8=200850&var9=850_it_pop_st_mwf_323&utm_medium=popunder&cost=0.010000&SUBID=812150769762439168 HTTP/1.1
Host: track.cam4tracking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-length: 0
location: https://pt.cam4.com/female/brazil?showSignupPopup&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup
date: Wed, 08 May 2024 19:21:54 GMT
cache-control: no-store, no-cache, pre-check=0, post-check=0
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: 7d2d6bd6-e3b3-4194-a540-cc2205f599bf-v4=NtNx_DoVIL4ZZbClj-_BlzMv2VZiYPyUYEuJUQTdbEE; Max-Age=86400; Expires=Thu, 09-May-2024 19:21:54 GMT; Domain=track.cam4tracking.com; Path=/; Secure; HttpOnly;SameSite=None
voluum-cid-v4=%7B%22cid%22%3A%22wlk2icg993s0ab513bdit74k%22%2C%22caid%22%3A%227d2d6bd6-e3b3-4194-a540-cc2205f599bf%22%7D; Max-Age=31536000; Expires=Thu, 08-May-2025 19:21:54 GMT; Domain=track.cam4tracking.com; Path=/; Secure; HttpOnly;SameSite=None
server: nginx
x-cache: Miss from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: W6MBbX8PAPaPiCOKg6fZdqlsRgdib-Xx5TGgq6URf0fOIegX3nnz1Q==
X-Firefox-Spdy: h2
|
|
| pt.cam4.com/female/brazil?showSignupPopup&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup |  185.94.239.81 | 302 Found | 0 B |
URL User Request GET HTTP/1.1pt.cam4.com/female/brazil?showSignupPopup&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup IP185.94.239.81:443
CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /female/brazil?showSignupPopup&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup HTTP/1.1
Host: pt.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 19:21:54 GMT
Content-Length: 0
Connection: keep-alive
Location: https://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup
|
|
| www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup | 185.94.239.81 | 200 OK | 31 kB |
URL User Request GET HTTP/1.1www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup IP185.94.239.81:443
CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
File typeHTML document, ASCII text, with very long lines (37306) Hash8db096d6edf4c779ade9df794fc12c9d 1492d520f6c99757cc1ee24ef408d4868f193c41 9e0293851e2aa3339dd0b9a68175b6e796e57afb778157252daf19e2e8d6be09
GET /female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup HTTP/1.1
Host: www.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 May 2024 19:21:54 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: INGRESSCOOKIE=a7dd83e84d8e1969b1a72f378c8853e6|d6a68dccd9919960ff135dee3820d14b; Path=/; HttpOnly
JSESSIONID=B51F4121D2A257FC60710A4F3AF381EB; Path=/; Secure; HttpOnly
cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; Max-Age=2592000; Expires=Fri, 07 Jun 2024 19:21:54 GMT; Domain=cam4.com; Path=/
cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup; Max-Age=2592000; Expires=Fri, 07 Jun 2024 19:21:54 GMT; Domain=cam4.com; Path=/
cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup; Max-Age=2592000; Expires=Fri, 07 Jun 2024 19:21:54 GMT; Domain=cam4.com; Path=/
cam4_user_language=en; Domain=.cam4.com
Content-Encoding: gzip
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/tiktok.dda43677.svg | 64.210.135.118 | 200 OK | 1.9 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/tiktok.dda43677.svg IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeSVG Scalable Vector Graphics image Hash73ff817bbf9cfe92eaacdbf6c6d40c79 527341301ec6dce08bd79c3b631ba4b43f6a19a8 97d242902920fca2ac577a09f629926173fdc86927155beaed210ed074d9e283
GET /web/v2/app/phoenix/assets/static/media/tiktok.dda43677.svg HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:55 GMT
content-type: image/svg+xml
content-length: 1927
last-modified: Mon, 01 Apr 2024 15:16:40 GMT
etag: "21790fc75-787-6150a79f1a600"
expires: Sat, 03 Aug 2024 18:31:49 GMT
cache-control: max-age=10722040
access-control-allow-origin: *
vary: Origin
access-control-allow-methods: GET,HEAD,OPTIONS
accept-ranges: bytes
x-cdn-diag: ams5-7619-3-20856-h-0-0---;6139-30-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| images.dmca.com/Badges/_dmca_premi_badge_4.png?ID=466fa1aa-ce2e-4b71-b329-6cd08d681302 |  194.242.11.186 | 200 OK | 4.5 kB |
URL GET HTTP/2images.dmca.com/Badges/_dmca_premi_badge_4.png?ID=466fa1aa-ce2e-4b71-b329-6cd08d681302 IP194.242.11.186:443 ASN#34989 ServeTheWorld AS
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerLet's Encrypt Subjectimages.dmca.com Fingerprint1B:0D:EB:BB:64:38:A8:0F:2A:D5:27:4C:BE:4D:68:E9:E3:CB:58:4D ValiditySat, 20 Apr 2024 01:13:42 GMT - Fri, 19 Jul 2024 01:13:41 GMT
File typePNG image data, 135 x 28, 8-bit/color RGBA, non-interlaced Hashb0e239fa4ddfbcdf08cbcb34a13b2a0f 957fdb58c09d85e41cc6a6ea134a9365adee4ec9 0186abebc0f1ba6689a8f534f796843fb1f96c07402cebeb9f171a1eaba89994
GET /Badges/_dmca_premi_badge_4.png?ID=466fa1aa-ce2e-4b71-b329-6cd08d681302 HTTP/1.1
Host: images.dmca.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:56 GMT
content-type: image/png
content-length: 4535
server: BunnyCDN-NO1-830
cdn-pullzone: 1574055
cdn-uid: c136c664-112d-4533-8247-f90f6849ab39
cdn-requestcountrycode: NO
cache-control: public, max-age=31536000
etag: "0abbdbd420cc1:0"
last-modified: Thu, 02 Jun 2011 03:26:26 GMT
x-powered-by: ASP.NET
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 03/24/2024 18:47:49
cdn-edgestorageid: 830
link: <https://dmca-images.azurewebsites.net/Badges/_dmca_premi_badge_4.png?ID=9753a5d8-c1fa-42e2-876e-3a12383d7ae0>; rel="canonical"
cdn-status: 200
cdn-requestid: 8abab7ffd2ff41ddbf993aa29abb73e2
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/twitter.55386d34.svg | 64.210.135.118 | 200 OK | 530 B |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/twitter.55386d34.svg IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeSVG Scalable Vector Graphics image Hashe8fb8a121defa7c3c025b298b5d854b2 eee87de751c8d62306f98091a4f4d5a5ffedb172 7a466db1946136b50d4a91aef8ebdf69574cc2b5dc3fd7bf1852053faa03aa06
GET /web/v2/app/phoenix/assets/static/media/twitter.55386d34.svg HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:55 GMT
content-type: image/svg+xml
content-length: 530
last-modified: Thu, 25 Apr 2024 12:32:47 GMT
etag: "21a539734-212-616eafc0af9c0"
expires: Fri, 23 Aug 2024 23:24:11 GMT
cache-control: max-age=10399078
access-control-allow-origin: *
vary: Origin
access-control-allow-methods: GET,HEAD,OPTIONS
accept-ranges: bytes
x-cdn-diag: ams5-6141-3-39632-h-0-0---;6139-30-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/youtube.a2a0718b.svg | 64.210.135.118 | 200 OK | 1.0 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/youtube.a2a0718b.svg IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeSVG Scalable Vector Graphics image Hash539785946a7a15a7255435034198cafb 39c561a72045f4afc66dc92b309334cd042f65e3 8872a6b6ec4ee984a6dff496ddea78572ba064fb9f5aebfd7fc43367561bc7aa
GET /web/v2/app/phoenix/assets/static/media/youtube.a2a0718b.svg HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:55 GMT
content-type: image/svg+xml
content-length: 1015
last-modified: Mon, 01 Apr 2024 15:16:40 GMT
etag: "217853e0b-3f7-6150a79f1a600"
expires: Sat, 03 Aug 2024 18:31:49 GMT
cache-control: max-age=10722040
access-control-allow-origin: *
vary: Origin
access-control-allow-methods: GET,HEAD,OPTIONS
accept-ranges: bytes
x-cdn-diag: ams5-6249-3-19463-h-0-0---;6139-30-19201----0-1-2
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/snapchat.31e44696.svg | 64.210.135.118 | 200 OK | 3.8 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/snapchat.31e44696.svg IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeSVG Scalable Vector Graphics image Hashb8df0d2e6b68a8bf50560db4c5d7950d 77b7b9b58a612e860e3c7e72f69a3b37ee841699 941e39769999ec847ee635d3693538516a259fcb11a4ce705f44a3fbe0c05fdd
GET /web/v2/app/phoenix/assets/static/media/snapchat.31e44696.svg HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:55 GMT
content-type: image/svg+xml
content-length: 3750
last-modified: Mon, 01 Apr 2024 15:16:40 GMT
etag: "2184907c0-ea6-6150a79f1a600"
expires: Sat, 03 Aug 2024 18:31:49 GMT
cache-control: max-age=10722040
access-control-allow-origin: *
vary: Origin
access-control-allow-methods: GET,HEAD,OPTIONS
accept-ranges: bytes
x-cdn-diag: ams5-6140-3-23527-h-0-0---;6139-30-19201----0-0-2
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/icra.0c29c6be.png | 64.210.135.118 | 200 OK | 1.6 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/icra.0c29c6be.png IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typePNG image data, 80 x 30, 8-bit colormap, non-interlaced Hasha8106aad7df9bb34f3afda74cbfc09f7 19f7514396f13db8018c4894670523a7cef28998 8a7256f6b53a380bee135a23dcb30dd0aa048c20c8e94ca3f6c86b106be7d816
GET /web/v2/app/phoenix/assets/static/media/icra.0c29c6be.png HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:55 GMT
content-type: image/png
content-length: 1576
last-modified: Thu, 11 Jan 2024 17:00:09 GMT
etag: "20a20d500-628-60eae7ae21840"
expires: Tue, 14 May 2024 20:44:45 GMT
cache-control: max-age=10663962
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
vary: Origin
accept-ranges: bytes
x-cdn-diag: ams5-6140-1-23371-h-0-0---;6139-30-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/rta_b.150c3f6e.png | 64.210.135.118 | 200 OK | 2.3 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/rta_b.150c3f6e.png IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typePNG image data, 88 x 31, 8-bit colormap, non-interlaced Hash9647b2dc70ac76336fabc141f5a0c5c0 f21726063fadbcc9b1240f46e54e436b4ddf197a fb9edc442aa5152643c98147d7d7afcfd42f2a12ea402078e6af8bd43dafaa50
GET /web/v2/app/phoenix/assets/static/media/rta_b.150c3f6e.png HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:55 GMT
content-type: image/png
content-length: 2258
last-modified: Thu, 22 Feb 2024 09:26:30 GMT
etag: "2118e7f0d-8d2-611f509d6dd80"
expires: Sun, 23 Jun 2024 23:31:33 GMT
cache-control: max-age=10587496
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
vary: Origin
accept-ranges: bytes
x-cdn-diag: ams5-6140-1-23371-h-0-0---;6139-30-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/labeled.f0e3bde9.gif | 64.210.135.118 | 200 OK | 1.1 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/labeled.f0e3bde9.gif IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeGIF image data, version 89a, 87 x 31 Hashf0839e3bd6e7591aed3ee07768aff83b f971c27fd5ca415b9c841603454a966de9e74d8b 8b5e87da27508fb982cb6dec82da7e664ad18614262ff32e2b7603a7cbc11a75
GET /web/v2/app/phoenix/assets/static/media/labeled.f0e3bde9.gif HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:55 GMT
content-type: image/gif
content-length: 1124
last-modified: Thu, 22 Feb 2024 09:26:30 GMT
etag: "212213b43-464-611f509d6dd80"
expires: Sun, 23 Jun 2024 23:31:33 GMT
cache-control: max-age=10587496
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
vary: Origin
accept-ranges: bytes
x-cdn-diag: ams5-7846-3-10973-h-0-0---;6139-30-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Noto+Sans|Noto+Sans+Mono&display=swap | 142.250.74.106 | 200 OK | 1.3 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Noto+Sans|Noto+Sans+Mono&display=swap IP142.250.74.106:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hash0b680605b338993f76fe51d839506010 0fb13196290812d9d6c07c122aa13cb576f29b08 8fa990f80c8c2ddb5fb4c4be7572cab70fa0322563ac9fd68e47f36b0c746675
GET /css?family=Noto+Sans|Noto+Sans+Mono&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cam4-static-test.xcdnpro.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 19:21:56 GMT
date: Wed, 08 May 2024 19:21:56 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/js/runtime-47024c41ebc455f323ab.js | 64.210.135.118 | 200 OK | 13 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/js/runtime-47024c41ebc455f323ab.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typegzip compressed data, max speed, from Unix Hashc2f63cb60982a47788c5d0a2bb099d17 2823ce9efac4e260a8951e0fd9c011d1eaabd83f 307774f471f3d0524d235fb3bcba862caa02bc1a5950d8e53a3203b52746c5de
GET /web/v2/app/js/runtime-47024c41ebc455f323ab.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:55 GMT
content-type: application/javascript
vary: Origin
last-modified: Wed, 08 May 2024 09:39:03 GMT
etag: W/"21a4ef37a-54e8-617ee12a93bc0"
expires: Mon, 09 Sep 2024 18:59:08 GMT
cache-control: max-age=10746747
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6139-2-18549-h-0-0---;6139-21-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/js/pages-genderPreference.41663657.chunk.js | 64.210.135.118 | 200 OK | 38 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/js/pages-genderPreference.41663657.chunk.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typegzip compressed data, max speed, from Unix Hashb8aded377c50f718437097f13f73a440 d2f6f5c1bda55f636fee30dcb89a616bd254ccde f9e3a42d39ac7025e0f5533db33f288c134ce3e11a163afd860b9cf536c3bc45
GET /web/v2/app/phoenix/assets/static/js/pages-genderPreference.41663657.chunk.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:56 GMT
content-type: application/javascript
vary: Origin
last-modified: Thu, 04 Apr 2024 07:40:49 GMT
etag: W/"2171385e0-36e0-615407538a240"
expires: Tue, 06 Aug 2024 08:35:05 GMT
cache-control: max-age=10710319
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6141-3-39634-h-0-0---;6139-19-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/no.b9cc4fcd.svg | 64.210.135.118 | 200 OK | 318 B |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/no.b9cc4fcd.svg IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeSVG Scalable Vector Graphics image Hash859a13561a1b24bfa65fb1a03835da49 c2ab5ac79474bf31976cef328f5880ab07d0654f ceea17af051dceefd5759a824213eb40ac8a8095aa88a6874a7bbc8de637357a
GET /web/v2/app/phoenix/assets/static/media/no.b9cc4fcd.svg HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:56 GMT
content-type: image/svg+xml
content-length: 318
last-modified: Thu, 25 Apr 2024 12:32:47 GMT
etag: "21a98c554-13e-616eafc0af9c0"
expires: Sun, 25 Aug 2024 20:03:15 GMT
cache-control: max-age=10557185
access-control-allow-origin: *
vary: Origin
access-control-allow-methods: GET,HEAD,OPTIONS
accept-ranges: bytes
x-cdn-diag: ams5-6141-2-39530-h-0-0---;6139-18-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| dumpster.cam4.com/v2/directory.js | 185.94.239.83 | 200 OK | 16 kB |
URL GET HTTP/1.1dumpster.cam4.com/v2/directory.js IP185.94.239.83:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
File typeJavaScript source, ASCII text, with very long lines (53875), with no line terminators Hash905f6f2a8057ad97624ff53b1267d9c3 365fc6b46fc1682019c98525110d69c898438042 813a5b2d128aad2342a85d4cc37627879c51f64313de82d1ca6390bd319dacb9
GET /v2/directory.js HTTP/1.1
Host: dumpster.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Cookie: cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 May 2024 19:21:56 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
set-cookie: smart-agents-ws-cookie=1715196116.635.12786.222588; Expires=Fri, 10-May-24 19:21:56 GMT; Max-Age=172800; Path=/; HttpOnly
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
nel: {"max_age":0}
cache-control: public, max-age=60
etag: W/"d273-Nl/GtG/BaCAZyYUlEQ1pyJhDgEI"
content-encoding: gzip
|
|
| www.googletagmanager.com/gtm.js?id=GTM-P5TFR9Z | 142.250.74.168 | 200 OK | 88 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-P5TFR9Z IP142.250.74.168:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (56043) Hash1ea1991addd0e386dbe11887180b1457 d2cac82134aa2191fe9a945128f9d12cd17d98c6 cefbcb67fb52ae1939820e296151244d37853b0f86d2b80a8096b43fcb8b8ff9
GET /gtm.js?id=GTM-P5TFR9Z HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 May 2024 19:21:56 GMT
expires: Wed, 08 May 2024 19:21:56 GMT
cache-control: private, max-age=900
last-modified: Wed, 08 May 2024 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 88310
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/notosans/v36/o-0mIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjcz6L1SoM-jCpoiyD9A-9a6VI.woff2 | 142.250.74.67 | 200 OK | 13 kB |
URL GET HTTP/2fonts.gstatic.com/s/notosans/v36/o-0mIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjcz6L1SoM-jCpoiyD9A-9a6VI.woff2 IP142.250.74.67:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 13336, version 1.0 Hashb07180cf0f81951de10205e371bb7994 6e73dee82a9e2a3a50ecd76f44e0df99ace1871d 4c0aea6139bcfbb5d8295db45717b7dab4b1ea854564068c5cac0c2cefc679fd
GET /s/notosans/v36/o-0mIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjcz6L1SoM-jCpoiyD9A-9a6VI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.cam4.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13336
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:54:48 GMT
expires: Fri, 02 May 2025 02:54:48 GMT
cache-control: public, max-age=31536000
age: 577628
last-modified: Wed, 14 Feb 2024 22:28:26 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/js/runtime.a8dc67e2.js | 64.210.135.118 | 200 OK | 2.4 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/js/runtime.a8dc67e2.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typegzip compressed data, max speed, from Unix Hashb1f7abb140abd7b1d6a9b84a1301c642 b81810a0db0ac3b08061ea61ceb8237081588275 3f8903d2dbdbb9a16fe2fd2aeaa1c68179f6ed2670520968c090d9ec0bf34e4f
GET /web/v2/app/phoenix/assets/static/js/runtime.a8dc67e2.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:55 GMT
content-type: application/javascript
vary: Origin
last-modified: Thu, 04 Apr 2024 07:40:49 GMT
etag: W/"2180e648b-dbb-615407538a240"
expires: Tue, 06 Aug 2024 08:35:05 GMT
cache-control: max-age=10710319
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-7846-1-10846-h-0-0---;6139-21-19201----0-0-2
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/favicon-192.b77c6d8b.png | 64.210.135.118 | 200 OK | 8.0 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/favicon-192.b77c6d8b.png IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash5bae50159117d9b136d1f5fa5fe6535e 361978b9edf4e9eaada77fc2618767ef0fefe2c0 04f23efc7857dbb7cf6d3dedffa83890888f3176bd3bd1093412b864f193bf74
GET /web/v2/app/phoenix/assets/static/media/favicon-192.b77c6d8b.png HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:57 GMT
content-type: image/png
content-length: 8029
last-modified: Thu, 22 Feb 2024 11:56:44 GMT
etag: "210c8dd5e-1f5d-611f7231d9700"
expires: Sat, 22 Jun 2024 08:02:03 GMT
cache-control: max-age=10429886
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
vary: Origin
accept-ranges: bytes
x-cdn-diag: ams5-7619-3-20854-h-0-0---;6139-23-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/favicon.4b69a998.png | 64.210.135.118 | 200 OK | 2.6 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/favicon.4b69a998.png IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hash735f225bd9c640221609aad2f5dffaed 8eb8042cfe99060bd8c9b6cec6d427d24019ed64 d8a5cda1543985b9810f2d417201e3eb367f867f3522c7dbb64bced763260bfd
GET /web/v2/app/phoenix/assets/static/media/favicon.4b69a998.png HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:57 GMT
content-type: image/png
content-length: 2589
last-modified: Thu, 04 Apr 2024 13:21:28 GMT
etag: "216a89480-a1d-61545377b0600"
expires: Sun, 04 Aug 2024 13:13:42 GMT
cache-control: max-age=10518765
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
vary: Origin
accept-ranges: bytes
x-cdn-diag: ams5-6249-1-19355-h-0-0---;6139-23-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| dumpster.cam4.com/v2/snpl_v2.js | 185.94.239.83 | 200 OK | 27 kB |
URL GET HTTP/1.1dumpster.cam4.com/v2/snpl_v2.js IP185.94.239.83:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
File typeJavaScript source, ASCII text, with very long lines (65378) Hash0d34caadb7711e9c0e69ae2c64ffc4d7 75d6164796d256d364ff222839a4d5e75c3191b3 f027b512cb6cd71f46b35e6b7e08e2e07bb1ef3d3921e948b7c9161bbb5bcc97
GET /v2/snpl_v2.js HTTP/1.1
Host: dumpster.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Cookie: cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup; smart-agents-ws-cookie=1715196116.635.12786.222588
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 May 2024 19:21:57 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
cache-control: public, max-age=864000
etag: W/"15132-ddYWR5bSVtNk/yIoOaTV51wxkbM"
content-encoding: gzip
|
|
| dumpster.cam4.com/v2/chat/config.json | 185.94.239.83 | 200 OK | 96 B |
URL GET HTTP/1.1dumpster.cam4.com/v2/chat/config.json IP185.94.239.83:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hashf880f4b2c5db062eda95bf308932d121 615841bf67bb2d9690a1efb3051fbf78a55ab7f7 57f8b9891a622f92b0eccc979c4bda741ea1c442feb893b7d2f729c16dc58630
GET /v2/chat/config.json HTTP/1.1
Host: dumpster.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.cam4.com/
Origin: https://www.cam4.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 May 2024 19:21:57 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 96
Connection: keep-alive
set-cookie: smart-agents-ws-cookie=1715196117.143.12790.971322; Expires=Fri, 10-May-24 19:21:57 GMT; Max-Age=172800; Path=/; HttpOnly
access-control-allow-origin: https://www.cam4.com
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
cache-control: public, max-age=60
etag: W/"60-YVhBv2e7LZaQoe+zBR+/eKVat/c"
|
|
| dumpster.cam4.com/me | 185.94.239.83 | 200 OK | 150 B |
IP185.94.239.83:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hash939fe5924e865a672f4c6dd2c5db2b87 b1137d1b59feed7962b4bda5f7fb7580ae1cf545 9389aa343989bf8fa405b5df348d8e0ea89048831f2abd61a02b7ba71db94974
GET /me HTTP/1.1
Host: dumpster.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.cam4.com/
Origin: https://www.cam4.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 May 2024 19:21:57 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 150
Connection: keep-alive
set-cookie: smart-agents-ws-cookie=1715196117.144.3110.901680; Expires=Fri, 10-May-24 19:21:57 GMT; Max-Age=172800; Path=/; HttpOnly
access-control-allow-origin: https://www.cam4.com
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
etag: W/"96-sRN9G1n+7XlitL2l9/t1gK4c9UU"
|
|
| welcome.cam4.com/graph/? | 185.94.239.81 | 200 OK | 0 B |
IP185.94.239.81:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /graph/? HTTP/1.1
Host: welcome.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.cam4.com/
Origin: https://www.cam4.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx
Date: Wed, 08 May 2024 19:21:57 GMT
Content-Length: 0
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://www.cam4.com
Vary: Origin, Access-Control-Request-Headers
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Headers: content-type
|
|
| welcome.cam4.com/graph/? | 185.94.239.81 | 200 OK | 649 B |
IP185.94.239.81:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hash16c836e06d9f9755b054af65c6fc861b 43cd7322a734620056b19a14c77f2b3f8c888437 8ded45dcf9cef3300f74cfb03919cfec6d77e942bf0da1ee937db0c8a2c6f72b
POST /graph/? HTTP/1.1
Host: welcome.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.cam4.com/
content-type: application/json
Content-Length: 136
Origin: https://www.cam4.com
DNT: 1
Connection: keep-alive
Cookie: cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 May 2024 19:21:57 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: https://www.cam4.com
Vary: Origin
Access-Control-Allow-Credentials: true
NEL: {"report_to":"default","max_age":31536000,"include_subdomains":true,"failure_fraction":0.5,"success_fraction":0.001}
Report-To: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://collector.net-logger.com/report"}]}
ETag: W/"9ac-Q81zIqc0YgBWsZoUx38rP4yIhDc"
Content-Encoding: gzip
|
|
| dumpster.cam4.com/v2/snpl-web-vitals.js | 185.94.239.83 | 200 OK | 2.0 kB |
URL GET HTTP/1.1dumpster.cam4.com/v2/snpl-web-vitals.js IP185.94.239.83:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
File typeJavaScript source, ASCII text, with very long lines (4457) Hash896fe5a1a506ef3c5ab75c0ff8df40b4 37f66f4dd3afc021df5c1032ed6dbc53a9df6f1e ab059235d2556a3dee0d594a37effb842ee02ab4fcce3925f596e7eccc188e6b
GET /v2/snpl-web-vitals.js HTTP/1.1
Host: dumpster.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Cookie: cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup; smart-agents-ws-cookie=1715196116.635.12786.222588; _sp_ses.dd07=*; _sp_id.dd07=3667845d-f4d1-4fbd-9e67-a08324a8805f.1715196117.1.1715196117..b7f63cfd-adbe-4aa6-b187-25702d497ba1....0; cam4rt8=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 May 2024 19:21:57 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
cache-control: public, max-age=86400
etag: W/"128c-N/ZvTdOvwCHfXBAy7W28U6nfbx4"
content-encoding: gzip
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/js/pages-oldUI.05164491.chunk.js | 64.210.135.118 | 200 OK | 468 B |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/js/pages-oldUI.05164491.chunk.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJavaScript source, ASCII text, with very long lines (468), with no line terminators Hash07895d9ce834742ad0e5c064c7baf4b0 1287ecb7ee0b049c1013137c36c0a58bad776e74 89d6b162748ec486cefb4e905bd3e615a81763c5d8ba19890bf202ec94682e24
GET /web/v2/app/phoenix/assets/static/js/pages-oldUI.05164491.chunk.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:57 GMT
content-type: application/javascript
content-length: 468
last-modified: Mon, 01 Apr 2024 15:16:40 GMT
etag: "217853dcd-1d4-6150a79f1a600"
expires: Sat, 03 Aug 2024 18:31:49 GMT
cache-control: max-age=10722040
access-control-allow-origin: *
vary: Origin
access-control-allow-methods: GET,HEAD,OPTIONS
accept-ranges: bytes
x-cdn-diag: ams5-7846-2-10929-h-0-0---;6139-19-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| dumpster.cam4.com/v2/cwv-v2.js | 185.94.239.83 | 200 OK | 3.5 kB |
URL GET HTTP/1.1dumpster.cam4.com/v2/cwv-v2.js IP185.94.239.83:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
File typeJavaScript source, ASCII text, with very long lines (10237) Hash7a599eb0cbe0a5eb22e4dff068246296 4a5b25532c570491bc4b6ba4f4d96a74fc312662 af74e4ba83376de49141e38d18b4d223e2d1295dcdfff2ddccd3609161a54fa3
GET /v2/cwv-v2.js HTTP/1.1
Host: dumpster.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Cookie: cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup; smart-agents-ws-cookie=1715196116.635.12786.222588; _sp_ses.dd07=*; _sp_id.dd07=3667845d-f4d1-4fbd-9e67-a08324a8805f.1715196117.1.1715196117..b7f63cfd-adbe-4aa6-b187-25702d497ba1....0; cam4rt8=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 May 2024 19:21:57 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
cache-control: public, max-age=864000
etag: W/"27ff-SlslUyxXBJG8S2uk9NlqdPwxJmI"
content-encoding: gzip
|
|
| www.cam4.com/rest/v1.0/ui-variables | 185.94.239.81 | 200 | 6.2 kB |
URL GET HTTP/1.1www.cam4.com/rest/v1.0/ui-variables IP185.94.239.81:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hash511ddee0a4f48cb32c1826e482e3c62e bd8d66c31df2cbe14ef774cd777eaae650c487dc 7774fab6659bd69c0b24143ade4bd206d76f9fec682b8248fb6cc000401a215f
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Internal Revenue Service |
GET /rest/v1.0/ui-variables HTTP/1.1
Host: www.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup
Cookie: INGRESSCOOKIE=a7dd83e84d8e1969b1a72f378c8853e6|d6a68dccd9919960ff135dee3820d14b; JSESSIONID=B51F4121D2A257FC60710A4F3AF381EB; cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup; _sp_ses.dd07=*; _sp_id.dd07=3667845d-f4d1-4fbd-9e67-a08324a8805f.1715196117.1.1715196117..b7f63cfd-adbe-4aa6-b187-25702d497ba1....0; cam4rt8=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Wed, 08 May 2024 19:21:57 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
content-security-policy: frame-ancestors 'self' ;
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: origin, content-type, accept, authorization, x-b3-traceid, x-b3-spanid, x-b3-parentspanid, x-b3-sampled, x-b3-flags, x-zipkin-extension, x-process-id, x-span-name, x-span-export, Content-Disposition, Access-Hash, Username, Last-Cash-Out-Authorization, X-Redirect-To
access-control-allow-methods: GET, POST, PATCH , DELETE, PUT, OPTIONS, HEAD
access-control-expose-headers: totalCount
Content-Encoding: gzip
|
|
| www.cam4.com/rest/v1.0/giphy/banned-item | 185.94.239.81 | 200 | 53 B |
URL GET HTTP/1.1www.cam4.com/rest/v1.0/giphy/banned-item IP185.94.239.81:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hashf7d3d9e024bbb5ca943747edaab91b49 87fb3ebdf8c0072702080e6b5be2c775667197e9 5ccc7b8f081c88172f933f0304f81ba08e85fa4164c024bb8c7aed8a14943e27
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Internal Revenue Service |
GET /rest/v1.0/giphy/banned-item HTTP/1.1
Host: www.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup
Cookie: INGRESSCOOKIE=a7dd83e84d8e1969b1a72f378c8853e6|d6a68dccd9919960ff135dee3820d14b; JSESSIONID=B51F4121D2A257FC60710A4F3AF381EB; cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup; _sp_ses.dd07=*; _sp_id.dd07=3667845d-f4d1-4fbd-9e67-a08324a8805f.1715196117.1.1715196117..b7f63cfd-adbe-4aa6-b187-25702d497ba1....0; cam4rt8=true; cam4-HideAds=true; cam4-UTM-campaigns=%7B%22utmMedium%22%3A%22popunder%22%2C%22utmSource%22%3A%22341%22%2C%22utmCampaign%22%3A%22acquisition_mar-20-2023%22%2C%22utmContent%22%3A%22viewer_it_frites_female_straight_leads_wifi_mobile_italian%22%2C%22utmTerm%22%3A%22index-female_nsfw_signup%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Wed, 08 May 2024 19:21:58 GMT
Content-Type: application/json
Content-Length: 53
Connection: keep-alive
content-security-policy: frame-ancestors 'self' ;
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: origin, content-type, accept, authorization, x-b3-traceid, x-b3-spanid, x-b3-parentspanid, x-b3-sampled, x-b3-flags, x-zipkin-extension, x-process-id, x-span-name, x-span-export, Content-Disposition, Access-Hash, Username, Last-Cash-Out-Authorization, X-Redirect-To
access-control-allow-methods: GET, POST, PATCH , DELETE, PUT, OPTIONS, HEAD
access-control-expose-headers: totalCount
|
|
| www.cam4.com/rest/v2.0/login/user | 185.94.239.81 | 200 | 3.1 kB |
URL GET HTTP/1.1www.cam4.com/rest/v2.0/login/user IP185.94.239.81:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hashb96a281cf3014dd7af753f342a295c9e 380eef98a79eb0bf7d9277a2c90a762d6f0e08b6 a56a9949101c52eacbe50abf8c78a93fb68964d9b1fef100e6a232b15643219c
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Internal Revenue Service |
GET /rest/v2.0/login/user HTTP/1.1
Host: www.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup
Cookie: INGRESSCOOKIE=a7dd83e84d8e1969b1a72f378c8853e6|d6a68dccd9919960ff135dee3820d14b; JSESSIONID=B51F4121D2A257FC60710A4F3AF381EB; cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup; _sp_ses.dd07=*; _sp_id.dd07=3667845d-f4d1-4fbd-9e67-a08324a8805f.1715196117.1.1715196117..b7f63cfd-adbe-4aa6-b187-25702d497ba1....0; cam4rt8=true; cam4-HideAds=true; cam4-UTM-campaigns=%7B%22utmMedium%22%3A%22popunder%22%2C%22utmSource%22%3A%22341%22%2C%22utmCampaign%22%3A%22acquisition_mar-20-2023%22%2C%22utmContent%22%3A%22viewer_it_frites_female_straight_leads_wifi_mobile_italian%22%2C%22utmTerm%22%3A%22index-female_nsfw_signup%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Wed, 08 May 2024 19:21:58 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
content-security-policy: frame-ancestors 'self' ;
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: origin, content-type, accept, authorization, x-b3-traceid, x-b3-spanid, x-b3-parentspanid, x-b3-sampled, x-b3-flags, x-zipkin-extension, x-process-id, x-span-name, x-span-export, Content-Disposition, Access-Hash, Username, Last-Cash-Out-Authorization, X-Redirect-To
access-control-allow-methods: GET, POST, PATCH , DELETE, PUT, OPTIONS, HEAD
access-control-expose-headers: totalCount
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
Content-Encoding: gzip
|
|
| dumpster.cam4.com/v2/chat/config.json | 185.94.239.83 | 200 OK | 96 B |
URL GET HTTP/1.1dumpster.cam4.com/v2/chat/config.json IP185.94.239.83:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hashf880f4b2c5db062eda95bf308932d121 615841bf67bb2d9690a1efb3051fbf78a55ab7f7 57f8b9891a622f92b0eccc979c4bda741ea1c442feb893b7d2f729c16dc58630
GET /v2/chat/config.json HTTP/1.1
Host: dumpster.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.cam4.com/
Origin: https://www.cam4.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 May 2024 19:21:58 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 96
Connection: keep-alive
set-cookie: smart-agents-ws-cookie=1715196118.259.28574.966575; Expires=Fri, 10-May-24 19:21:58 GMT; Max-Age=172800; Path=/; HttpOnly
access-control-allow-origin: https://www.cam4.com
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
cache-control: public, max-age=60
etag: W/"60-YVhBv2e7LZaQoe+zBR+/eKVat/c"
|
|
| www.cam4.com/rest/v2.0/login/user | 185.94.239.81 | 200 | 3.1 kB |
URL GET HTTP/1.1www.cam4.com/rest/v2.0/login/user IP185.94.239.81:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hash1967b6dcd9cf1a87ddcf9d2095a3466d b12a283d310831f925546b1c13ce5503f5dddf4c 66e3dea97390b864c43961f72101f95fd10321b9103aca70df8c2355811fb93d
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Internal Revenue Service |
GET /rest/v2.0/login/user HTTP/1.1
Host: www.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup
Cookie: INGRESSCOOKIE=a7dd83e84d8e1969b1a72f378c8853e6|d6a68dccd9919960ff135dee3820d14b; JSESSIONID=B51F4121D2A257FC60710A4F3AF381EB; cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup; _sp_ses.dd07=*; _sp_id.dd07=3667845d-f4d1-4fbd-9e67-a08324a8805f.1715196117.1.1715196117..b7f63cfd-adbe-4aa6-b187-25702d497ba1....0; cam4rt8=true; cam4-HideAds=true; cam4-UTM-campaigns=%7B%22utmMedium%22%3A%22popunder%22%2C%22utmSource%22%3A%22341%22%2C%22utmCampaign%22%3A%22acquisition_mar-20-2023%22%2C%22utmContent%22%3A%22viewer_it_frites_female_straight_leads_wifi_mobile_italian%22%2C%22utmTerm%22%3A%22index-female_nsfw_signup%22%7D; ds_recsys_alloc_DS0002b=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Wed, 08 May 2024 19:21:58 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
content-security-policy: frame-ancestors 'self' ;
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: origin, content-type, accept, authorization, x-b3-traceid, x-b3-spanid, x-b3-parentspanid, x-b3-sampled, x-b3-flags, x-zipkin-extension, x-process-id, x-span-name, x-span-export, Content-Disposition, Access-Hash, Username, Last-Cash-Out-Authorization, X-Redirect-To
access-control-allow-methods: GET, POST, PATCH , DELETE, PUT, OPTIONS, HEAD
access-control-expose-headers: totalCount
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
Content-Encoding: gzip
|
|
| nats.stackvaults.com/ | 217.22.24.2 | | 0 B |
IP217.22.24.2:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: nats.stackvaults.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.cam4.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: f9Ib9ivUIufYEJvsXtAudg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Wed, 08 May 2024 19:21:58 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: qcjB8jAX5NkmuthdoiTumkguPkE=
Strict-Transport-Security: max-age=31536000; includeSubDomains
|
|
| dumpster.cam4.com/ws/ | 185.94.239.83 | | 0 B |
IP185.94.239.83:0
CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ws/ HTTP/1.1
Host: dumpster.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.cam4.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: h0ygN5+T1MwkZvicRSrg8w==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup; smart-agents-ws-cookie=1715196116.635.12786.222588; _sp_ses.dd07=*; _sp_id.dd07=3667845d-f4d1-4fbd-9e67-a08324a8805f.1715196117.1.1715196117..b7f63cfd-adbe-4aa6-b187-25702d497ba1....0; cam4rt8=true; ds_recsys_alloc_DS0002b=true; disclaimer18=Accepted
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Wed, 08 May 2024 19:21:58 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: M6ZLVdaCyv9f6hf+g+OqTbOMXCM=
set-cookie: SESSIONIDv2=c5d21dbae92cc4f2f4eb082ac26506ba5077e40b; Domain=.cam4.com; Path=/; SameSite=Lax; Secure; HttpOnly
|
|
| ocsp.r2m03.amazontrust.com/ | 143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hash30805292f550cef26946fc8bf7af8915 c3ec879b84ae7f1ed86c70f58918ec3240b7567b 2d18dbc57f8c2eb47cada626ea575642585d5d8c00c1ca5c0d16eddff4a9af9c
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 08 May 2024 19:21:58 GMT
Last-Modified: Wed, 08 May 2024 18:51:24 GMT
Server: ECAcc (ska/F749)
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: mdoiW6jN-aPJsvOD954tzGMff8sWVb11IatQF_ufGO6MXTMUVhTCJQ==
Age: 1834
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/js/48-4aeea77b4139c9dd20d6.js | 64.210.135.118 | 200 OK | 35 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/js/48-4aeea77b4139c9dd20d6.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typegzip compressed data, max speed, from Unix Hash67aa06004ace84f63b174a5c952961c6 adf81948ea183b3146b9a61c65290d2ba62bb81b 48cdc5bc43fbec495e25e76d401d9f3915041fdddbbe3fb2f4e57c920efa77a8
GET /web/v2/app/js/48-4aeea77b4139c9dd20d6.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: application/javascript
vary: Origin
last-modified: Tue, 07 May 2024 14:20:11 GMT
etag: W/"21a4eeb79-186ac-617dde23b1cc0"
expires: Sat, 07 Sep 2024 04:09:50 GMT
cache-control: max-age=10590210
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6140-3-23528-h-0-0---;6139-17-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/js/26-5effbd76841663085cbe.js | 64.210.135.118 | 200 OK | 21 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/js/26-5effbd76841663085cbe.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (61615), with no line terminators Hashd378b67067162feefed224304db899b2 4ede015c95ebca3111806fdee78ec3dee56aee47 d430ee1e87f2d920ce4fe99d888335ea2661925f2c59d3c3fa38a2f970a1d5ad
GET /web/v2/app/js/26-5effbd76841663085cbe.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: application/javascript
vary: Origin
last-modified: Mon, 01 Apr 2024 15:23:45 GMT
etag: W/"217f25a21-4856-6150a9346a240"
expires: Sun, 04 Aug 2024 06:36:24 GMT
cache-control: max-age=10768150
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6140-3-23528-h-0-0---;6139-17-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/css/14.app-dbf272a48ab185a95722.css | 64.210.135.118 | 200 OK | 16 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/css/14.app-dbf272a48ab185a95722.css IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typegzip compressed data, max speed, from Unix Hashaf388419b340c2c6b94df70685f91a21 d6658a9a1a14a784641acd08c1104cec11450653 32521b12b28a1c916beffade90841ac4472e8d5d101ceafcdcfe12cf810a3ee2
GET /web/v2/app/css/14.app-dbf272a48ab185a95722.css HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: text/css
vary: Origin
last-modified: Thu, 25 Apr 2024 12:41:38 GMT
etag: W/"21a013986-b166-616eb1bb16480"
expires: Wed, 28 Aug 2024 07:14:53 GMT
cache-control: max-age=10774325
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-7619-1-20695-h-0-0---;6139-23-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/css/50.app-ae3be85b31bcff8a7ccc.css | 64.210.135.118 | 200 OK | 19 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/css/50.app-ae3be85b31bcff8a7ccc.css IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeASCII text, with very long lines (57642), with no line terminators Hashfc3a0cd4726a3873b2d6ea476df3c295 457c3ab3227e5dec2c80e38c4c794834efeaa8da 3e0834c253d9dcc656b12e55efc8af4984fe9acc2ebd5d2cf72c25a772888c51
GET /web/v2/app/css/50.app-ae3be85b31bcff8a7ccc.css HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: text/css
vary: Origin
last-modified: Fri, 23 Feb 2024 17:31:25 GMT
etag: W/"2118e9462-e12a-6120fede0b540"
expires: Wed, 26 Jun 2024 12:10:58 GMT
cache-control: max-age=10558725
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6139-1-18412-h-0-0---;6139-23-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/css/40.app-8906e38aed914dd70130.css | 64.210.135.118 | 200 OK | 1.6 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/css/40.app-8906e38aed914dd70130.css IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typegzip compressed data, max speed, from Unix Hashe950575a217cf1ba7336a32ae0087d9c 1f62195a088b8108ea29bdd835bed9e0ef439b0c edde207f564a677570791355ea32bbf9e46a331271344dc12e16cccc833baa3f
GET /web/v2/app/css/40.app-8906e38aed914dd70130.css HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: text/css
vary: Origin
last-modified: Fri, 08 Mar 2024 15:07:45 GMT
etag: W/"212fbe53f-1274-613278ddd3240"
expires: Mon, 08 Jul 2024 22:24:49 GMT
cache-control: max-age=10382054
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6141-1-39470-h-0-0---;6139-18-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| collector.scarletwood.com/com.snowplowanalytics.snowplow/tp2 | 52.87.142.117 | 200 OK | 2 B |
URL OPTIONS HTTP/2collector.scarletwood.com/com.snowplowanalytics.snowplow/tp2 IP52.87.142.117:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerAmazon Subjectcollector.scarletwood.com Fingerprint91:D1:88:82:A6:F0:8E:05:1A:00:10:BE:2B:DD:16:D2:07:A3:22:67 ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: collector.scarletwood.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 3198
Origin: https://www.cam4.com
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:59 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
set-cookie: sp=1b03c2ee-6e96-4870-80f2-7be179eacfb8; Expires=Thu, 08 May 2025 19:21:59 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.cam4.com
access-control-allow-credentials: true
server: akka-http/10.2.7
X-Firefox-Spdy: h2
|
|
| www.cam4.com/api/directoryCounts?directoryJson=true&online=true&url=true&orderBy=VIDEO_QUALITY&gender=female&broadcastType=female_group&broadcastType=solo&broadcastType=male_female_group&page=1&resultsPerPage=60&country=br | 185.94.239.81 | 200 | 19 B |
URL GET HTTP/1.1www.cam4.com/api/directoryCounts?directoryJson=true&online=true&url=true&orderBy=VIDEO_QUALITY&gender=female&broadcastType=female_group&broadcastType=solo&broadcastType=male_female_group&page=1&resultsPerPage=60&country=br IP185.94.239.81:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hash53869293ceee1e2dc73dd7f13a761eb0 ac3220a9ec1280c28d44be80eb05f7e3db1e6228 9d30e4ea1d6ce232dadd2dfee99d85b652223be8bc1950df5ebcb78b5d2388a0
GET /api/directoryCounts?directoryJson=true&online=true&url=true&orderBy=VIDEO_QUALITY&gender=female&broadcastType=female_group&broadcastType=solo&broadcastType=male_female_group&page=1&resultsPerPage=60&country=br HTTP/1.1
Host: www.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup
Cookie: INGRESSCOOKIE=a7dd83e84d8e1969b1a72f378c8853e6|d6a68dccd9919960ff135dee3820d14b; JSESSIONID=B51F4121D2A257FC60710A4F3AF381EB; cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup; _sp_ses.dd07=*; _sp_id.dd07=3667845d-f4d1-4fbd-9e67-a08324a8805f.1715196117.1.1715196119..b7f63cfd-adbe-4aa6-b187-25702d497ba1..8df297de-f5cf-4c59-b13f-06e12975e757.1715196118661.1; cam4rt8=true; cam4-HideAds=true; cam4-UTM-campaigns=%7B%22utmMedium%22%3A%22popunder%22%2C%22utmSource%22%3A%22341%22%2C%22utmCampaign%22%3A%22acquisition_mar-20-2023%22%2C%22utmContent%22%3A%22viewer_it_frites_female_straight_leads_wifi_mobile_italian%22%2C%22utmTerm%22%3A%22index-female_nsfw_signup%22%7D; ds_recsys_alloc_DS0002b=true; disclaimer18=Accepted; SESSIONIDv2=c5d21dbae92cc4f2f4eb082ac26506ba5077e40b; cam4-CONTENT=uyvv9Z
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Wed, 08 May 2024 19:21:59 GMT
Content-Type: text/json;charset=utf-8
Content-Length: 19
Connection: keep-alive
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS, HEAD
access-control-allow-headers: Origin, Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Username, Access-Hash
content-security-policy: frame-ancestors 'self' ;
|
|
| www.cam4.com/api/directoryCams?directoryJson=true&online=true&url=true&orderBy=VIDEO_QUALITY&gender=female&broadcastType=female_group&broadcastType=solo&broadcastType=male_female_group&page=1&resultsPerPage=60&country=br | 185.94.239.81 | 200 | 4.6 kB |
URL GET HTTP/1.1www.cam4.com/api/directoryCams?directoryJson=true&online=true&url=true&orderBy=VIDEO_QUALITY&gender=female&broadcastType=female_group&broadcastType=solo&broadcastType=male_female_group&page=1&resultsPerPage=60&country=br IP185.94.239.81:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hash77cdff4202418bccb9edf6ee2afd9f70 102e4e7d57223aa29a35cd121a8c83cd1828dc2d cc4c5dc973eb00a3e7c0e1148cbe955a0bfaa554c0a6cfddcdd4c86fe48a6b0f
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Internal Revenue Service |
GET /api/directoryCams?directoryJson=true&online=true&url=true&orderBy=VIDEO_QUALITY&gender=female&broadcastType=female_group&broadcastType=solo&broadcastType=male_female_group&page=1&resultsPerPage=60&country=br HTTP/1.1
Host: www.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup
Cookie: INGRESSCOOKIE=a7dd83e84d8e1969b1a72f378c8853e6|d6a68dccd9919960ff135dee3820d14b; JSESSIONID=B51F4121D2A257FC60710A4F3AF381EB; cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup; _sp_ses.dd07=*; _sp_id.dd07=3667845d-f4d1-4fbd-9e67-a08324a8805f.1715196117.1.1715196119..b7f63cfd-adbe-4aa6-b187-25702d497ba1..8df297de-f5cf-4c59-b13f-06e12975e757.1715196118661.1; cam4rt8=true; cam4-HideAds=true; cam4-UTM-campaigns=%7B%22utmMedium%22%3A%22popunder%22%2C%22utmSource%22%3A%22341%22%2C%22utmCampaign%22%3A%22acquisition_mar-20-2023%22%2C%22utmContent%22%3A%22viewer_it_frites_female_straight_leads_wifi_mobile_italian%22%2C%22utmTerm%22%3A%22index-female_nsfw_signup%22%7D; ds_recsys_alloc_DS0002b=true; disclaimer18=Accepted; SESSIONIDv2=c5d21dbae92cc4f2f4eb082ac26506ba5077e40b; cam4-CONTENT=uyvv9Z
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Wed, 08 May 2024 19:21:59 GMT
Content-Type: application/json;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS, HEAD
access-control-allow-headers: Origin, Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Username, Access-Hash
content-security-policy: frame-ancestors 'self' ;
Content-Encoding: gzip
|
|
| www.cam4.com/rest/v1.0/reality-shows/active | 185.94.239.81 | 200 | 458 B |
URL GET HTTP/1.1www.cam4.com/rest/v1.0/reality-shows/active IP185.94.239.81:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hash5fa6e9b0938805d41d96d2f63e6f9ca0 88fbfd69b387edef08135c83f4294c63268c1a98 893a6073b80147f15b2c8b00e638267b2ae36b91cddbbd1e5c3792881b5aeb2b
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Internal Revenue Service |
GET /rest/v1.0/reality-shows/active HTTP/1.1
Host: www.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup
Cookie: INGRESSCOOKIE=a7dd83e84d8e1969b1a72f378c8853e6|d6a68dccd9919960ff135dee3820d14b; JSESSIONID=B51F4121D2A257FC60710A4F3AF381EB; cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup; _sp_ses.dd07=*; _sp_id.dd07=3667845d-f4d1-4fbd-9e67-a08324a8805f.1715196117.1.1715196119..b7f63cfd-adbe-4aa6-b187-25702d497ba1..8df297de-f5cf-4c59-b13f-06e12975e757.1715196118661.1; cam4rt8=true; cam4-HideAds=true; cam4-UTM-campaigns=%7B%22utmMedium%22%3A%22popunder%22%2C%22utmSource%22%3A%22341%22%2C%22utmCampaign%22%3A%22acquisition_mar-20-2023%22%2C%22utmContent%22%3A%22viewer_it_frites_female_straight_leads_wifi_mobile_italian%22%2C%22utmTerm%22%3A%22index-female_nsfw_signup%22%7D; ds_recsys_alloc_DS0002b=true; disclaimer18=Accepted; SESSIONIDv2=c5d21dbae92cc4f2f4eb082ac26506ba5077e40b; cam4-CONTENT=uyvv9Z
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Wed, 08 May 2024 19:21:59 GMT
Content-Type: application/json
Content-Length: 458
Connection: keep-alive
content-security-policy: frame-ancestors 'self' ;
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: origin, content-type, accept, authorization, x-b3-traceid, x-b3-spanid, x-b3-parentspanid, x-b3-sampled, x-b3-flags, x-zipkin-extension, x-process-id, x-span-name, x-span-export, Content-Disposition, Access-Hash, Username, Last-Cash-Out-Authorization, X-Redirect-To
access-control-allow-methods: GET, POST, PATCH , DELETE, PUT, OPTIONS, HEAD
access-control-expose-headers: totalCount
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/js/50-e6a5d24069e30f6b0f44.js | 64.210.135.118 | 200 OK | 91 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/js/50-e6a5d24069e30f6b0f44.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash5c16bc7bf5167b4c5511493155bb0538 4098c2eb52c0e72ef512ddb1c1c71d68dcd9d340 8dc8d500fb8eba4ce7823483e681d3ad224edac294590d7224f9b5d22d2d8ae8
GET /web/v2/app/js/50-e6a5d24069e30f6b0f44.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: application/javascript
vary: Origin
last-modified: Tue, 07 May 2024 14:20:11 GMT
etag: W/"21b3b79f6-4475d-617dde23b1cc0"
expires: Sat, 07 Sep 2024 04:09:50 GMT
cache-control: max-age=10590210
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6139-1-18411-h-0-0---;6139-23-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/js/vendor-7063249fc026835731c3.js | 64.210.135.118 | 200 OK | 793 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/js/vendor-7063249fc026835731c3.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typegzip compressed data, max speed, from Unix Size793 kB (793279 bytes) Hash4f09bc101450bd9f20d000794e6990d3 8bd56afe0389d3bda749c15aa41c0a4b8cbc0ec3 ce70004641e149f62dcae850b186d6792e7036e4c773b919e1d896abb1e14a69
GET /web/v2/app/js/vendor-7063249fc026835731c3.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: application/javascript
vary: Origin
last-modified: Thu, 25 Apr 2024 12:41:39 GMT
etag: W/"21955d540-2e7cc2-616eb1bc0a6c0"
expires: Tue, 27 Aug 2024 09:03:18 GMT
cache-control: max-age=10700331
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-7846-3-10973-h-0-0---;6139-21-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Noto+Sans|Noto+Sans+Mono&display=swap | 142.250.74.106 | 200 OK | 106 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Noto+Sans|Noto+Sans+Mono&display=swap IP142.250.74.106:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Size106 kB (106320 bytes) Hash7f281be2d967c5fef01276d408340be3 831a7c63870e2ce755afaebad16eb23f1d11fb56 d3b9e7572a3762d0ab9ba7fcdbe144452c60fa2367f0fcd6c70dd64a780bcff5
GET /css?family=Noto+Sans|Noto+Sans+Mono&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 19:21:57 GMT
date: Wed, 08 May 2024 19:21:57 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| collector.scarletwood.com/com.snowplowanalytics.snowplow/tp2 | 52.87.142.117 | 200 OK | 0 B |
URL OPTIONS HTTP/2collector.scarletwood.com/com.snowplowanalytics.snowplow/tp2 IP52.87.142.117:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerAmazon Subjectcollector.scarletwood.com Fingerprint91:D1:88:82:A6:F0:8E:05:1A:00:10:BE:2B:DD:16:D2:07:A3:22:67 ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: collector.scarletwood.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.cam4.com/
Origin: https://www.cam4.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:59 GMT
content-length: 0
access-control-allow-origin: https://www.cam4.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 86400
server: akka-http/10.2.7
X-Firefox-Spdy: h2
|
|
| collector.scarletwood.com/com.snowplowanalytics.snowplow/tp2 | 52.87.142.117 | 200 OK | 2 B |
URL OPTIONS HTTP/2collector.scarletwood.com/com.snowplowanalytics.snowplow/tp2 IP52.87.142.117:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerAmazon Subjectcollector.scarletwood.com Fingerprint91:D1:88:82:A6:F0:8E:05:1A:00:10:BE:2B:DD:16:D2:07:A3:22:67 ValidityTue, 26 Sep 2023 00:00:00 GMT - Thu, 24 Oct 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: collector.scarletwood.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 2100
Origin: https://www.cam4.com
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Cookie: sp=1b03c2ee-6e96-4870-80f2-7be179eacfb8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:59 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
set-cookie: sp=1b03c2ee-6e96-4870-80f2-7be179eacfb8; Expires=Thu, 08 May 2025 19:21:59 GMT; Domain=; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.cam4.com
access-control-allow-credentials: true
server: akka-http/10.2.7
X-Firefox-Spdy: h2
|
|
| cam4-banners.xcdnpro.com/ec220c92-1f19-4116-9c03-f56972fb0733.jpg | 64.210.135.118 | 200 OK | 43 kB |
URL GET HTTP/2cam4-banners.xcdnpro.com/ec220c92-1f19-4116-9c03-f56972fb0733.jpg IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=164, yresolution=172, resolutionunit=2], baseline, precision 8, 1980x150, components 3 Hasha6f95b9ec3d79394deeaac88ec72d3a9 3e1fc2850feed96fafec0392a651ec43a06c8431 d1e0100db3307de64106d1fadcab5dc2733af11414b11ed120e7873dcfd21293
GET /ec220c92-1f19-4116-9c03-f56972fb0733.jpg HTTP/1.1
Host: cam4-banners.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:22:00 GMT
content-type: image/jpeg
content-length: 43170
last-modified: Wed, 01 May 2024 10:44:23 GMT
x-rgw-object-type: Normal
etag: "a6f95b9ec3d79394deeaac88ec72d3a9"
x-amz-request-id: tx00000f9713dc08d592d24-0066321d08-394a7d58-default
cache-control: max-age=86401
accept-ranges: bytes
x-cdn-diag: ams5-7846-1-10844-h-0-0---;6139-18-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| snapshots.xcdnpro.com/thumbnails/kyka2?s=2WUXvSul5cEQcjOqTxlHkm6tA+veV5/dEGW19YLOi/A= | 64.210.135.118 | 200 OK | 26 kB |
URL GET HTTP/2snapshots.xcdnpro.com/thumbnails/kyka2?s=2WUXvSul5cEQcjOqTxlHkm6tA+veV5/dEGW19YLOi/A= IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x711, components 3 Hash55932a7e1942ee90900c9d34b71ab852 750870d676c3f88c38d612035ece38bbf4d67bf9 4d01b568d50b42b09a81d7cd44550bb1cdb9039adfc964807a5f494dd1d14ba9
GET /thumbnails/kyka2?s=2WUXvSul5cEQcjOqTxlHkm6tA+veV5/dEGW19YLOi/A= HTTP/1.1
Host: snapshots.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:22:00 GMT
content-type: image/jpeg
content-length: 25846
x-application-context: oogler-live:8080
x-cff: 0.0
x-bff: 0.0
x-hf: 0
x-sf: 10
x-bf: 10
x-cv: 80
x-new-size: 400
x-resize-skipped: false
x-resize-fallback: false
x-engine-version: 1
x-face-area: 0.0
x-fdr: 1
x-fdm: 1
x-stream-name: kyka2-324-78042456-f60f-40fe-afb3-27b6cde7a943
x-username: kyka2
x-size: 400
x-broadcast-id: 466454009
x-creation-time: 1715196012034
x-creation-time-display: Wed May 08 19:20:12
x-source: origin
cache-control: max-age=60
x-robots-tag: noindex, nofollow
timing-allow-origin: *
x-cdn-diag: ams5-6141-2-39532-h-0-0---;6139-18-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| snapshots.xcdnpro.com/thumbnails/Vitoriaca?s=tUK5M84/jpazy52qA3H8iz4FuAEAdYnCpFOoZPW5zN0= | 64.210.135.118 | 200 OK | 15 kB |
URL GET HTTP/2snapshots.xcdnpro.com/thumbnails/Vitoriaca?s=tUK5M84/jpazy52qA3H8iz4FuAEAdYnCpFOoZPW5zN0= IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x711, components 3 Hash20709a8aae9400e5ca08fee989707263 d38380d80e68ffd651e72d8a6bc00d801a1e7d2e cebe8651b74c0ea0920541818bd08ea1261b464a4a58eaca5722da8a2935035e
GET /thumbnails/Vitoriaca?s=tUK5M84/jpazy52qA3H8iz4FuAEAdYnCpFOoZPW5zN0= HTTP/1.1
Host: snapshots.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:22:00 GMT
content-type: image/jpeg
content-length: 15379
x-application-context: oogler-live:8080
x-cff: 0.0
x-bff: 0.0
x-hf: 0
x-sf: 10
x-bf: 10
x-cv: 80
x-new-size: 400
x-resize-skipped: false
x-resize-fallback: false
x-engine-version: 1
x-face-area: 0.0
x-fdr: 1
x-fdm: 1
x-stream-name: Vitoriaca-322-17a16b7f-be49-4e9f-9545-f97aa8b0fa4e
x-username: vitoriaca
x-size: 400
x-broadcast-id: 466455719
x-creation-time: 1715196056648
x-creation-time-display: Wed May 08 19:20:56
x-source: origin
cache-control: max-age=60
x-robots-tag: noindex, nofollow
timing-allow-origin: *
x-cdn-diag: ams5-6139-2-18551-h-0-0---;6139-18-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| snapshots.xcdnpro.com/thumbnails/leticiaquer?s=9wiAoOMSzI/6JzIUBmKI3unkygKfKWeVJtuuMfRApfw= | 64.210.135.118 | 200 OK | 9.8 kB |
URL GET HTTP/2snapshots.xcdnpro.com/thumbnails/leticiaquer?s=9wiAoOMSzI/6JzIUBmKI3unkygKfKWeVJtuuMfRApfw= IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x225, components 3 Hashf0e52e474eafe341c4b0613c942cf6eb c3be5061e977747716c899369dec6f9c27b3e4d2 bab01b9d975b28c75ada31ba879a6e11b0b257332a6c36b02a824b4955fbbbe1
GET /thumbnails/leticiaquer?s=9wiAoOMSzI/6JzIUBmKI3unkygKfKWeVJtuuMfRApfw= HTTP/1.1
Host: snapshots.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:22:00 GMT
content-type: image/jpeg
content-length: 9750
x-application-context: oogler-live:8080
x-cff: 0.0
x-bff: 0.0
x-hf: 0
x-sf: 10
x-bf: 10
x-cv: 80
x-new-size: 400
x-resize-skipped: false
x-resize-fallback: false
x-engine-version: 1
x-face-area: 0.0
x-fdr: 1
x-fdm: 1
x-stream-name: f89b426d-8a36-4353-847c-7819fc806cd9
x-username: leticiaquer
x-size: 400
x-broadcast-id: 466445035
x-creation-time: 1715196015046
x-creation-time-display: Wed May 08 19:20:15
x-source: origin
cache-control: max-age=60
x-robots-tag: noindex, nofollow
timing-allow-origin: *
x-cdn-diag: ams5-6249-1-19364-h-0-0---;6139-18-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| snapshots.xcdnpro.com/thumbnails/LindaGoddess?s=g/ANpQfFohInL4xFQNZdWI1BAXlpht3bxhxPNHZ56Bs= | 64.210.135.118 | 200 OK | 12 kB |
URL GET HTTP/2snapshots.xcdnpro.com/thumbnails/LindaGoddess?s=g/ANpQfFohInL4xFQNZdWI1BAXlpht3bxhxPNHZ56Bs= IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x225, components 3 Hash3a4cb9b6e8f17b291ae18eeab3b2b864 43224888f387d4dcfcb1c6c8044f79eb4178e6f3 fdf67b2d1f0a480c45a8379ce613b6676b4427829a30b2b18c91aa5290ce8ad3
GET /thumbnails/LindaGoddess?s=g/ANpQfFohInL4xFQNZdWI1BAXlpht3bxhxPNHZ56Bs= HTTP/1.1
Host: snapshots.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:22:00 GMT
content-type: image/jpeg
content-length: 12502
x-application-context: oogler-live:8080
x-cff: 0.0
x-bff: 0.0
x-hf: 0
x-sf: 10
x-bf: 10
x-cv: 80
x-new-size: 400
x-resize-skipped: false
x-resize-fallback: false
x-engine-version: 1
x-face-area: 0.0
x-fdr: 1
x-fdm: 1
x-stream-name: 54735f55-20e8-4f9c-b861-136238a9ee8e
x-username: lindagoddess
x-size: 400
x-broadcast-id: 466454852
x-creation-time: 1715196015918
x-creation-time-display: Wed May 08 19:20:15
x-source: origin
cache-control: max-age=60
x-robots-tag: noindex, nofollow
timing-allow-origin: *
x-cdn-diag: ams5-6249-1-19345-h-0-0---;6139-18-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| snapshots.xcdnpro.com/thumbnails/Casalbrazil?s=MRDL+GUs+Nu5+UUIFK4BoOnkygKfKWeVJtuuMfRApfw= | 64.210.135.118 | 200 OK | 26 kB |
URL GET HTTP/2snapshots.xcdnpro.com/thumbnails/Casalbrazil?s=MRDL+GUs+Nu5+UUIFK4BoOnkygKfKWeVJtuuMfRApfw= IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x711, components 3 Hashb772a2dbcab032db866b3aa0e71ead72 3db624beea67b25d6fabb79463d366bfbaff786b e6ecb1ae62ebd9a4078bb57a122c6a9e3980aa865a4a8d143d24507baa93682d
GET /thumbnails/Casalbrazil?s=MRDL+GUs+Nu5+UUIFK4BoOnkygKfKWeVJtuuMfRApfw= HTTP/1.1
Host: snapshots.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:22:00 GMT
content-type: image/jpeg
content-length: 25677
x-application-context: oogler-live:8080
x-cff: 0.0
x-bff: 0.0
x-hf: 0
x-sf: 10
x-bf: 10
x-cv: 80
x-new-size: 400
x-resize-skipped: false
x-resize-fallback: false
x-engine-version: 1
x-face-area: 0.0
x-fdr: 1
x-fdm: 1
x-stream-name: Casalbrazil-318-cc5c87e0-4909-4823-b49f-0da997fc113a
x-username: casalbrazil
x-size: 400
x-broadcast-id: 466454069
x-creation-time: 1715196010761
x-creation-time-display: Wed May 08 19:20:10
x-source: origin
cache-control: max-age=60
x-robots-tag: noindex, nofollow
timing-allow-origin: *
x-cdn-diag: ams5-6141-2-39532-h-0-0---;6139-18-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| snapshots.xcdnpro.com/thumbnails/Sarah_Desire?s=ZT1ZOvOG0FCR9XC0Wq3ZMI1BAXlpht3bxhxPNHZ56Bs= | 64.210.135.118 | 200 OK | 43 kB |
URL GET HTTP/2snapshots.xcdnpro.com/thumbnails/Sarah_Desire?s=ZT1ZOvOG0FCR9XC0Wq3ZMI1BAXlpht3bxhxPNHZ56Bs= IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x711, components 3 Hashe356d5152497921975d9f5b81bffe2ba 9449e464e7fbc8b6e803ebd97c6803526a0597ce 0ad9c79ac52bc983b00f06a8b94632f3e80ec056806583b57c51afb138608645
GET /thumbnails/Sarah_Desire?s=ZT1ZOvOG0FCR9XC0Wq3ZMI1BAXlpht3bxhxPNHZ56Bs= HTTP/1.1
Host: snapshots.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:22:00 GMT
content-type: image/jpeg
content-length: 42761
x-application-context: oogler-live:8080
x-cff: 0.0
x-bff: 0.0
x-hf: 0
x-sf: 10
x-bf: 10
x-cv: 80
x-new-size: 400
x-resize-skipped: false
x-resize-fallback: false
x-engine-version: 1
x-face-area: 0.0
x-fdr: 1
x-fdm: 1
x-stream-name: Sarah_Desire-317-13cf7387-0b72-44d6-839b-9264c8bc81fa
x-username: sarah_desire
x-size: 400
x-broadcast-id: 466455077
x-creation-time: 1715196093284
x-creation-time-display: Wed May 08 19:21:33
x-source: origin
cache-control: max-age=60
x-robots-tag: noindex, nofollow
timing-allow-origin: *
x-cdn-diag: ams5-7846-3-10974-h-0-0---;6139-18-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/js/6-5a4b7e5699d1fa809808.js | 64.210.135.118 | 200 OK | 25 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/js/6-5a4b7e5699d1fa809808.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typegzip compressed data, max speed, from Unix Hash06f23bdca1c4694afd47ceebe5beac63 9654f4a66cc33053b7c4821246627eef978e3f7f b3918cfe7ab5f1334ccaf347e928359301e7c32555fa8f4d092f15d9618d6966
GET /web/v2/app/js/6-5a4b7e5699d1fa809808.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: application/javascript
vary: Origin
last-modified: Tue, 07 May 2024 14:20:11 GMT
etag: W/"21b3b79f9-88c7-617dde23b1cc0"
expires: Sat, 07 Sep 2024 04:09:50 GMT
cache-control: max-age=10590210
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-7846-3-10974-h-0-0---;6139-17-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| snapshots.xcdnpro.com/thumbnails/rayddones667?s=rSHITVNnYvgf3jfdO+9Lq41BAXlpht3bxhxPNHZ56Bs= | 64.210.135.118 | 200 OK | 16 kB |
URL GET HTTP/2snapshots.xcdnpro.com/thumbnails/rayddones667?s=rSHITVNnYvgf3jfdO+9Lq41BAXlpht3bxhxPNHZ56Bs= IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x225, components 3 Hash4ec00e5484070b748927ac878ced4a0e 6b1290f026c408114d7cf16e55f4b8b5b14e3c49 b9a264bdaab4e47a2f610099a77a63a241822826646bdd68fdcf7a658a483b0d
GET /thumbnails/rayddones667?s=rSHITVNnYvgf3jfdO+9Lq41BAXlpht3bxhxPNHZ56Bs= HTTP/1.1
Host: snapshots.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:22:00 GMT
content-type: image/jpeg
content-length: 15884
x-application-context: oogler-live:8080
x-cff: 0.0
x-bff: 0.0
x-hf: 0
x-sf: 10
x-bf: 10
x-cv: 80
x-new-size: 400
x-resize-skipped: false
x-resize-fallback: false
x-engine-version: 1
x-face-area: 0.0
x-fdr: 1
x-fdm: 1
x-stream-name: 7f5ba61b-947f-44fc-b6d7-5e6ccfb10369
x-username: rayddones667
x-size: 400
x-broadcast-id: 466452037
x-creation-time: 1715196073200
x-creation-time-display: Wed May 08 19:21:13
x-source: origin
cache-control: max-age=60
x-robots-tag: noindex, nofollow
timing-allow-origin: *
x-cdn-diag: ams5-6141-1-39469-h-0-0---;6139-18-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/js/client.26fd44a1.js | 64.210.135.118 | 200 OK | 257 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/js/client.26fd44a1.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typegzip compressed data, max speed, from Unix Size257 kB (257099 bytes) Hasha25d0e26745a01764cacbea8a636ad3e 7796ce191f924331fd6bf10f230f32b904a6b2b2 d08235ea498069c95efc1a5e57125eb86b6449e91f6f4d9ccc4567b8716d371d
GET /web/v2/app/phoenix/assets/static/js/client.26fd44a1.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:55 GMT
content-type: application/javascript
vary: Origin
last-modified: Wed, 08 May 2024 09:31:34 GMT
etag: W/"21b3b8247-b2367-617edf7e60980"
expires: Mon, 09 Sep 2024 18:59:08 GMT
cache-control: max-age=10746747
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6249-3-19463-h-0-0---;6139-21-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| snapshots.xcdnpro.com/thumbnails/AyshaYara?s=aLodXolcMzm4ZuFU/dgygD4FuAEAdYnCpFOoZPW5zN0= | 64.210.135.118 | 200 OK | 30 kB |
URL GET HTTP/2snapshots.xcdnpro.com/thumbnails/AyshaYara?s=aLodXolcMzm4ZuFU/dgygD4FuAEAdYnCpFOoZPW5zN0= IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x711, components 3 Hash785876c91ab185f6099443fbded06391 fc87a263dad80b0a099401ddf28cc5308a2b2e37 99d8310018818fe4edeb8fcdd8cfeae8883e7b090c77588cfcef28319ab38216
GET /thumbnails/AyshaYara?s=aLodXolcMzm4ZuFU/dgygD4FuAEAdYnCpFOoZPW5zN0= HTTP/1.1
Host: snapshots.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:22:00 GMT
content-type: image/jpeg
content-length: 29990
x-application-context: oogler-live:8080
x-cff: 0.0
x-bff: 0.0
x-hf: 0
x-sf: 10
x-bf: 10
x-cv: 80
x-new-size: 400
x-resize-skipped: false
x-resize-fallback: false
x-engine-version: 1
x-face-area: 0.0
x-fdr: 1
x-fdm: 1
x-stream-name: AyshaYara-320-99af9f8e-ef83-4a6e-b631-c17342c2d498
x-username: ayshayara
x-size: 400
x-broadcast-id: 466454911
x-creation-time: 1715196071430
x-creation-time-display: Wed May 08 19:21:11
x-source: origin
cache-control: max-age=60
x-robots-tag: noindex, nofollow
timing-allow-origin: *
x-cdn-diag: ams5-7619-2-20752-h-0-0---;6139-18-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| snapshots.xcdnpro.com/thumbnails/lala392?s=L2/dsDRbz4S4+QnYVYXNfYdni5f0dAVbMSjJA0MTtmg= | 64.210.135.118 | 200 OK | 28 kB |
URL GET HTTP/2snapshots.xcdnpro.com/thumbnails/lala392?s=L2/dsDRbz4S4+QnYVYXNfYdni5f0dAVbMSjJA0MTtmg= IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x711, components 3 Hash7fcf09dfbf85a49e16dc22db28f797f7 35895800882689cbba5d450759f68c64b727c20f 14b89e41f54c2a179f363fb247baa35a3ef3997959bded79f3810dbd47e6c528
GET /thumbnails/lala392?s=L2/dsDRbz4S4+QnYVYXNfYdni5f0dAVbMSjJA0MTtmg= HTTP/1.1
Host: snapshots.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:22:00 GMT
content-type: image/jpeg
content-length: 27683
x-application-context: oogler-live:8080
x-cff: 0.0
x-bff: 0.0
x-hf: 0
x-sf: 10
x-bf: 10
x-cv: 80
x-new-size: 400
x-resize-skipped: false
x-resize-fallback: false
x-engine-version: 1
x-face-area: 0.0
x-fdr: 1
x-fdm: 1
x-stream-name: lala392-322-8e1a8a5c-d814-4d05-bb72-d5f4d153ba52
x-username: lala392
x-size: 400
x-broadcast-id: 466454741
x-creation-time: 1715196014792
x-creation-time-display: Wed May 08 19:20:14
x-source: origin
cache-control: max-age=60
x-robots-tag: noindex, nofollow
timing-allow-origin: *
x-cdn-diag: ams5-7619-1-20694-h-0-0---;6139-18-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| snapshots.xcdnpro.com/thumbnails/rafaela69fun?s=Dtapy7lW5MVo4xFWkRyTuI1BAXlpht3bxhxPNHZ56Bs= | 64.210.135.118 | 200 OK | 11 kB |
URL GET HTTP/2snapshots.xcdnpro.com/thumbnails/rafaela69fun?s=Dtapy7lW5MVo4xFWkRyTuI1BAXlpht3bxhxPNHZ56Bs= IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x225, components 3 Hashadb0cda589f946a391ae7cfd13931e27 5074d372778ad6c4420d0b321d592a3a4c48fed7 5f3610d1930fb82a752ab6226a7b3a465ef3756b9d34e4cfee1145a9363e0e24
GET /thumbnails/rafaela69fun?s=Dtapy7lW5MVo4xFWkRyTuI1BAXlpht3bxhxPNHZ56Bs= HTTP/1.1
Host: snapshots.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:22:00 GMT
content-type: image/jpeg
content-length: 11054
x-application-context: oogler-live:8080
x-cff: 0.0
x-bff: 0.0
x-hf: 0
x-sf: 10
x-bf: 10
x-cv: 80
x-new-size: 400
x-resize-skipped: false
x-resize-fallback: false
x-engine-version: 1
x-face-area: 0.0
x-fdr: 1
x-fdm: 1
x-stream-name: fa259038-3a38-4107-bb32-79432fcca571
x-username: rafaela69fun
x-size: 400
x-broadcast-id: 466451457
x-creation-time: 1715196071591
x-creation-time-display: Wed May 08 19:21:11
x-source: origin
cache-control: max-age=60
x-robots-tag: noindex, nofollow
timing-allow-origin: *
x-cdn-diag: ams5-7846-1-10847-h-0-0---;6139-18-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashf276d15245c6ec1add5b5814bb8444eb 975c127eec9cc6514f4092ed034df575bcdeacd7 a77526d25e2226cff93318a2e87ab8d03eac1796e44fd997c5428693ddb61bd0
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 May 2024 19:22:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.gstatic.com/recaptcha/releases/vjbW55W42X033PfTdVf6Ft4q/recaptcha__en.js | 142.250.74.35 | 200 OK | 204 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/vjbW55W42X033PfTdVf6Ft4q/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdLSMcZAAAAAJ-aW0oRyvgewY_dd74CXsYMcil7&co=aHR0cHM6Ly93d3cuY2FtNC5jb206NDQz&hl=en&v=vjbW55W42X033PfTdVf6Ft4q&size=invisible&cb=dscvf3n4hiu9 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeJavaScript source, ASCII text, with very long lines (632) Size204 kB (204445 bytes) Hashadd520996e437bff5d081315da187fbf 2e489fe16f3712bf36df00b03a8a5af8fa8d4b42 922b951591d52d44aa7015ebc95cab08192aa435b64f9016673ac5da1124a8b4
GET /recaptcha/releases/vjbW55W42X033PfTdVf6Ft4q/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.cam4.com
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 204445
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 May 2024 16:12:34 GMT
expires: Tue, 06 May 2025 16:12:34 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 05 May 2024 20:00:16 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 184166
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash295c1ab534489dc31c4940823ae306a6 f64846d666665600e9b3191323707b0312ea2103 f71d58c2003e0da135fb8f57ef576b17eebe7916ced184c7bf99f603049eaddb
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 May 2024 19:22:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/googlesans/v58/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrw2IJllpyw.ttf | 142.250.74.67 | 200 OK | 29 kB |
URL GET HTTP/2fonts.gstatic.com/s/googlesans/v58/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrw2IJllpyw.ttf IP142.250.74.67:443
Requested byhttps://accounts.google.com/gsi/button?type=standard&theme=outline&size=large&text=continue_with&shape=undefined&logo_alignment=undefined&width=230&locale=undefined&click_listener=undefined&client_id=681041159599-alpsln61oav0e2v359o58dd48etajt86.apps.googleusercontent.com&iframe_id=gsi_120654_58363&as=edR8I5vM9hGWvll%2BU9UfhA CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeTrueType Font data, 16 tables, 1st "GDEF", 19 names, Microsoft, language 0x409 Hashf9abed3d3d7e0b5a0a5a303b113c53f4 8dea33d500e929b878ced36c5980745c0bf13db9 2bb6585b06b56d32aa48ac85f698aea00a96b5e32b944c9fba5022cd90f97dcf
GET /s/googlesans/v58/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrw2IJllpyw.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 29438
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 May 2024 15:37:51 GMT
expires: Tue, 06 May 2025 15:37:51 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 May 2023 16:35:39 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 186249
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/gsi/style | 74.125.131.84 | 200 OK | 57 kB |
URL GET HTTP/2accounts.google.com/gsi/style IP74.125.131.84:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint75:65:5E:EB:A9:59:16:DF:32:A3:39:DC:8A:A2:FD:28:92:33:6B:0D ValidityTue, 16 Apr 2024 04:20:43 GMT - Tue, 09 Jul 2024 04:20:42 GMT
Hash3462961c25a240421ae307df571a0e93 f8bdd0bd8096363c1604cc1a713892698ef7e359 c0fc0c9bc01382b1cfe3050940ecd9aae2391c7fba80b5befa1f11a7dab06f61
GET /gsi/style HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
expires: Wed, 08 May 2024 19:22:00 GMT
date: Wed, 08 May 2024 19:22:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-kMgVasxrohuEpe7dfvjjBQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/vjbW55W42X033PfTdVf6Ft4q/styles__ltr.css | 142.250.74.35 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/vjbW55W42X033PfTdVf6Ft4q/styles__ltr.css IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdLSMcZAAAAAJ-aW0oRyvgewY_dd74CXsYMcil7&co=aHR0cHM6Ly93d3cuY2FtNC5jb206NDQz&hl=en&v=vjbW55W42X033PfTdVf6Ft4q&size=invisible&cb=dscvf3n4hiu9 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeASCII text, with very long lines (56412), with no line terminators Hash2c00b9f417b688224937053cd0c284a5 17b4c18ebc129055dd25f214c3f11e03e9df2d82 1e754b107428162c65a26d399b66db3daaea09616bf8620d9de4bc689ce48eed
GET /recaptcha/releases/vjbW55W42X033PfTdVf6Ft4q/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24617
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 May 2024 19:34:32 GMT
expires: Tue, 06 May 2025 19:34:32 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 05 May 2024 20:00:16 GMT
content-type: text/css
vary: Accept-Encoding
age: 172049
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/css/32.app-2204b7427d3ebb7af3c2.css | 64.210.135.118 | 200 OK | 216 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/css/32.app-2204b7427d3ebb7af3c2.css IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeASCII text, with very long lines (17671) Size216 kB (216106 bytes) Hashe7ed5ff01c57cc9a523d712737b5b725 2426f6e7e9e011128d97af0c11ef5c0ac7554653 6e5882b77e690c9eb886aa818661ae734af7d78d8b82f032e6e706aa4c66238b
GET /web/v2/app/css/32.app-2204b7427d3ebb7af3c2.css HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: text/css
vary: Origin
last-modified: Fri, 08 Mar 2024 15:07:45 GMT
etag: W/"21481068f-44f9-613278ddd3240"
expires: Thu, 11 Jul 2024 09:05:40 GMT
cache-control: max-age=10593279
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6141-2-39530-h-0-0---;6139-17-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.67 | 200 OK | 15 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.67:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdLSMcZAAAAAJ-aW0oRyvgewY_dd74CXsYMcil7&co=aHR0cHM6Ly93d3cuY2FtNC5jb206NDQz&hl=en&v=vjbW55W42X033PfTdVf6Ft4q&size=invisible&cb=dscvf3n4hiu9 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 16:31:04 GMT
expires: Sat, 03 May 2025 16:31:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 442257
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 142.250.74.67 | 200 OK | 16 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP142.250.74.67:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdLSMcZAAAAAJ-aW0oRyvgewY_dd74CXsYMcil7&co=aHR0cHM6Ly93d3cuY2FtNC5jb206NDQz&hl=en&v=vjbW55W42X033PfTdVf6Ft4q&size=invisible&cb=dscvf3n4hiu9 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:50:52 GMT
expires: Fri, 02 May 2025 01:50:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 581469
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.35 | 200 OK | 2.2 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdLSMcZAAAAAJ-aW0oRyvgewY_dd74CXsYMcil7&co=aHR0cHM6Ly93d3cuY2FtNC5jb206NDQz&hl=en&v=vjbW55W42X033PfTdVf6Ft4q&size=invisible&cb=dscvf3n4hiu9 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/vjbW55W42X033PfTdVf6Ft4q/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:54:07 GMT
expires: Thu, 09 May 2024 02:54:07 GMT
cache-control: public, max-age=604800
age: 577674
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=vjbW55W42X033PfTdVf6Ft4q | 142.250.74.132 | 200 OK | 7.6 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/webworker.js?hl=en&v=vjbW55W42X033PfTdVf6Ft4q IP142.250.74.132:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdLSMcZAAAAAJ-aW0oRyvgewY_dd74CXsYMcil7&co=aHR0cHM6Ly93d3cuY2FtNC5jb206NDQz&hl=en&v=vjbW55W42X033PfTdVf6Ft4q&size=invisible&cb=dscvf3n4hiu9 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hash5d1d094a4baaa7ac056691ac41a1faa8 a1d9b6f5e423fd38b224e344c78c2dbc9de2f406 3a6ce790b6cb4651aa9ec029475e6b5d448a40f7304d4ed591429a95e10b096a
GET /recaptcha/api2/webworker.js?hl=en&v=vjbW55W42X033PfTdVf6Ft4q HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdLSMcZAAAAAJ-aW0oRyvgewY_dd74CXsYMcil7&co=aHR0cHM6Ly93d3cuY2FtNC5jb206NDQz&hl=en&v=vjbW55W42X033PfTdVf6Ft4q&size=invisible&cb=dscvf3n4hiu9
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Wed, 08 May 2024 19:22:01 GMT
date: Wed, 08 May 2024 19:22:01 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/vjbW55W42X033PfTdVf6Ft4q/recaptcha__en.js | 142.250.74.35 | 200 OK | 204 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/vjbW55W42X033PfTdVf6Ft4q/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdLSMcZAAAAAJ-aW0oRyvgewY_dd74CXsYMcil7&co=aHR0cHM6Ly93d3cuY2FtNC5jb206NDQz&hl=en&v=vjbW55W42X033PfTdVf6Ft4q&size=invisible&cb=dscvf3n4hiu9 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeJavaScript source, ASCII text, with very long lines (632) Size204 kB (204445 bytes) Hashadd520996e437bff5d081315da187fbf 2e489fe16f3712bf36df00b03a8a5af8fa8d4b42 922b951591d52d44aa7015ebc95cab08192aa435b64f9016673ac5da1124a8b4
GET /recaptcha/releases/vjbW55W42X033PfTdVf6Ft4q/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 204445
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 May 2024 16:12:34 GMT
expires: Tue, 06 May 2025 16:12:34 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 05 May 2024 20:00:16 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 184167
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| dumpster.cam4.com/v2/fp1.js | 185.94.239.83 | 200 OK | 14 kB |
URL GET HTTP/1.1dumpster.cam4.com/v2/fp1.js IP185.94.239.83:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (33906) Hash6c8689234a1c0bbbd2711ba685157ecd a71b00334f871425ba408adc5bee9f859aa0329c 5a4ce9720e3a1bceae6e699ccba89f9f002ece6b563758092d144cdf4d0928f4
GET /v2/fp1.js HTTP/1.1
Host: dumpster.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Cookie: cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; smart-agents-ws-cookie=1715196116.635.12786.222588; _sp_ses.dd07=*; _sp_id.dd07=3667845d-f4d1-4fbd-9e67-a08324a8805f.1715196117.1.1715196120..b7f63cfd-adbe-4aa6-b187-25702d497ba1..8df297de-f5cf-4c59-b13f-06e12975e757.1715196118661.2; cam4rt8=true; ds_recsys_alloc_DS0002b=true; disclaimer18=Accepted; SESSIONIDv2=c5d21dbae92cc4f2f4eb082ac26506ba5077e40b; cam4-CONTENT=uyvv9Z
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 May 2024 19:22:07 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
cache-control: public, max-age=864000
etag: W/"85bf-pxsAM0+HFCW6QIrcW+6fhZqgMpw"
content-encoding: gzip
|
|
| play.google.com/log?format=json&hasfast=true&authuser=0 | 142.250.74.78 | 200 OK | 0 B |
URL OPTIONS HTTP/2play.google.com/log?format=json&hasfast=true&authuser=0 IP142.250.74.78:443
Requested byhttps://accounts.google.com/gsi/button?type=standard&theme=outline&size=large&text=continue_with&shape=undefined&logo_alignment=undefined&width=230&locale=undefined&click_listener=undefined&client_id=681041159599-alpsln61oav0e2v359o58dd48etajt86.apps.googleusercontent.com&iframe_id=gsi_120654_58363&as=edR8I5vM9hGWvll%2BU9UfhA CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://accounts.google.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 08 May 2024 19:22:10 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| play.google.com/log?format=json&hasfast=true&authuser=0 | 142.250.74.78 | 200 OK | 131 B |
URL OPTIONS HTTP/2play.google.com/log?format=json&hasfast=true&authuser=0 IP142.250.74.78:443
Requested byhttps://accounts.google.com/gsi/button?type=standard&theme=outline&size=large&text=continue_with&shape=undefined&logo_alignment=undefined&width=230&locale=undefined&click_listener=undefined&client_id=681041159599-alpsln61oav0e2v359o58dd48etajt86.apps.googleusercontent.com&iframe_id=gsi_120654_58363&as=edR8I5vM9hGWvll%2BU9UfhA CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
Hashca0b7e866005f6774d284b9f438ebfd2 53644f5ee3640189bdb223473ba6a2d46606c556 502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 449
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://accounts.google.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 08 May 2024 19:22:10 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/js/258-e49a479c9b03710e97bd.js | 64.210.135.118 | 200 OK | 8.9 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/js/258-e49a479c9b03710e97bd.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJavaScript source, ASCII text, with very long lines (9173), with no line terminators Hasha091f6e7c781cf072be521667ea431a4 35ba24d37f2122cddccde13bfb257df9a85adf3d f84ea4929da2393797f05675b76240a234d6db21d6a070fba8c3a4ca1a663f8c
GET /web/v2/app/js/258-e49a479c9b03710e97bd.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: application/javascript
vary: Origin
last-modified: Tue, 07 May 2024 14:20:11 GMT
etag: W/"21aecc2aa-22b3-617dde23b1cc0"
expires: Sat, 07 Sep 2024 04:09:50 GMT
cache-control: max-age=10590210
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6140-2-23426-h-0-0---;6139-17-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/css/48.app-cd4dc6fd428311135a46.css | 64.210.135.118 | 200 OK | 18 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/css/48.app-cd4dc6fd428311135a46.css IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeASCII text, with very long lines (17705), with no line terminators Hash5d2f37283dc6a65bbc54e11e52dde432 76814ccb26876bb413adb874e67af8a6d0991689 af0c28f52348ba6f170d1a13341a330127f526e94c9623682ea71532adb939a5
GET /web/v2/app/css/48.app-cd4dc6fd428311135a46.css HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: text/css
vary: Origin
last-modified: Thu, 11 Apr 2024 10:01:21 GMT
etag: W/"219272d64-4529-615cf3cb25e40"
expires: Fri, 09 Aug 2024 12:28:20 GMT
cache-control: max-age=10376597
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6139-3-18649-h-0-0---;6139-17-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/js/14-2fa92ccac578264d4f25.js | 64.210.135.118 | 200 OK | 44 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/js/14-2fa92ccac578264d4f25.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJavaScript source, ASCII text, with very long lines (44364), with no line terminators Hash2b83e3cd026158390781beabc485f713 e9d15fbc7bd0354e980863cbdc3873f76b88c67b f5adffc6b461f753e98f2aeb533f0f3256025e86223e5b1ea67bc4a0fcf71bdc
GET /web/v2/app/js/14-2fa92ccac578264d4f25.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: application/javascript
vary: Origin
last-modified: Tue, 07 May 2024 14:20:11 GMT
etag: W/"21aecc29b-ad4c-617dde23b1cc0"
expires: Sat, 07 Sep 2024 04:09:50 GMT
cache-control: max-age=10590210
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6139-1-18412-h-0-0---;6139-23-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| www.cam4.com/rest/v2.0/directory-banner?sexPreference=FEMALES | 185.94.239.81 | 200 | 305 B |
URL GET HTTP/1.1www.cam4.com/rest/v2.0/directory-banner?sexPreference=FEMALES IP185.94.239.81:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (341), with no line terminators Hasha8c35564492d22c3762246ee41ce072f f99563e59bc64c119360de329ff0f38ce85cb7d9 9c68ca52e74afe9a60cf3745af752ad7da0fb461eb0e4d789e14d70acc629584
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Internal Revenue Service |
GET /rest/v2.0/directory-banner?sexPreference=FEMALES HTTP/1.1
Host: www.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup
Cookie: INGRESSCOOKIE=a7dd83e84d8e1969b1a72f378c8853e6|d6a68dccd9919960ff135dee3820d14b; JSESSIONID=B51F4121D2A257FC60710A4F3AF381EB; cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup; _sp_ses.dd07=*; _sp_id.dd07=3667845d-f4d1-4fbd-9e67-a08324a8805f.1715196117.1.1715196119..b7f63cfd-adbe-4aa6-b187-25702d497ba1..8df297de-f5cf-4c59-b13f-06e12975e757.1715196118661.1; cam4rt8=true; cam4-HideAds=true; cam4-UTM-campaigns=%7B%22utmMedium%22%3A%22popunder%22%2C%22utmSource%22%3A%22341%22%2C%22utmCampaign%22%3A%22acquisition_mar-20-2023%22%2C%22utmContent%22%3A%22viewer_it_frites_female_straight_leads_wifi_mobile_italian%22%2C%22utmTerm%22%3A%22index-female_nsfw_signup%22%7D; ds_recsys_alloc_DS0002b=true; disclaimer18=Accepted; SESSIONIDv2=c5d21dbae92cc4f2f4eb082ac26506ba5077e40b; cam4-CONTENT=uyvv9Z
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Wed, 08 May 2024 19:21:59 GMT
Content-Type: application/json
Content-Length: 305
Connection: keep-alive
content-security-policy: frame-ancestors 'self' ;
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: origin, content-type, accept, authorization, x-b3-traceid, x-b3-spanid, x-b3-parentspanid, x-b3-sampled, x-b3-flags, x-zipkin-extension, x-process-id, x-span-name, x-span-export, Content-Disposition, Access-Hash, Username, Last-Cash-Out-Authorization, X-Redirect-To
access-control-allow-methods: GET, POST, PATCH , DELETE, PUT, OPTIONS, HEAD
access-control-expose-headers: totalCount
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/css/34.app-ebcedb47d12ce263781d.css | 64.210.135.118 | 200 OK | 19 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/css/34.app-ebcedb47d12ce263781d.css IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeASCII text, with very long lines (18928), with no line terminators Hashd608dfb1291015741c3f1e31987e915f 3ddf046581cda16307a6115264da45ec3549034e c62f8a69db7e035a2bd514c904ac93356fb8bacef5d22e34d248b855659bc5c6
GET /web/v2/app/css/34.app-ebcedb47d12ce263781d.css HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: text/css
vary: Origin
last-modified: Tue, 19 Mar 2024 10:46:06 GMT
etag: W/"215f126c9-49f0-614012e629780"
expires: Sat, 20 Jul 2024 09:00:18 GMT
cache-control: max-age=10620654
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6139-3-18650-h-0-0---;6139-21-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| accounts.google.com/gsi/client | 74.125.131.84 | 200 OK | 221 kB |
URL GET HTTP/2accounts.google.com/gsi/client IP74.125.131.84:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint75:65:5E:EB:A9:59:16:DF:32:A3:39:DC:8A:A2:FD:28:92:33:6B:0D ValidityTue, 16 Apr 2024 04:20:43 GMT - Tue, 09 Jul 2024 04:20:42 GMT
File typeJavaScript source, ASCII text, with very long lines (3111) Size221 kB (220993 bytes) Hasha01af97d306ed2c9cc1106c69254c0f8 116fc6ed14b0b1809f66d2228ae2755c6e0051b4 4589c0fa80b39bee0849ad4e6df1b44d8d04158442848d536ef1aac6ffdceeb8
GET /gsi/client HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
expires: Wed, 08 May 2024 19:22:00 GMT
date: Wed, 08 May 2024 19:22:00 GMT
cache-control: private, max-age=1800
cross-origin-resource-policy: cross-origin
content-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-7fFz3m5c3QNOLgz80SEn_A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js?render=6LdLSMcZAAAAAJ-aW0oRyvgewY_dd74CXsYMcil7 | 142.250.74.132 | 200 OK | 884 B |
URL GET HTTP/2www.google.com/recaptcha/api.js?render=6LdLSMcZAAAAAJ-aW0oRyvgewY_dd74CXsYMcil7 IP142.250.74.132:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
File typeJavaScript source, ASCII text, with very long lines (884), with no line terminators Hashe9ff9b16320c36a5fd2e41a110707688 d1f781350a18fdae52412c3260233947ce53131f 435a8a50988105aec2cdd9f30860a8a83b2e362d9a732c45856a927bd8a84bee
GET /recaptcha/api.js?render=6LdLSMcZAAAAAJ-aW0oRyvgewY_dd74CXsYMcil7 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Wed, 08 May 2024 19:22:00 GMT
date: Wed, 08 May 2024 19:22:00 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/googlesans/v58/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrwEIJllpyw.ttf | 142.250.74.67 | 200 OK | 58 kB |
URL GET HTTP/2fonts.gstatic.com/s/googlesans/v58/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrwEIJllpyw.ttf IP142.250.74.67:443
Requested byhttps://accounts.google.com/gsi/button?type=standard&theme=outline&size=large&text=continue_with&shape=undefined&logo_alignment=undefined&width=230&locale=undefined&click_listener=undefined&client_id=681041159599-alpsln61oav0e2v359o58dd48etajt86.apps.googleusercontent.com&iframe_id=gsi_120654_58363&as=edR8I5vM9hGWvll%2BU9UfhA CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeTrueType Font data, 16 tables, 1st "GDEF", 18 names, Microsoft, language 0x409 Hash862b817e56e996cf40c25f2875123a16 2f25e55d267170f55715f7255572c3cc2a5dd967 924a754711d11983614f08302d9733ddb0756a0561e90ad0e9b7cecfe489c4fb
GET /s/googlesans/v58/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrwEIJllpyw.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28161
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 03:25:26 GMT
expires: Wed, 07 May 2025 03:25:26 GMT
cache-control: public, max-age=31536000
age: 143794
last-modified: Tue, 23 May 2023 16:35:56 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/gsi/button?type=standard&theme=outline&size=large&text=continue_with&shape=undefined&logo_alignment=undefined&width=230&locale=undefined&click_listener=undefined&client_id=681041159599-alpsln61oav0e2v359o58dd48etajt86.apps.googleusercontent.com&iframe_id=gsi_120654_58363&as=edR8I5vM9hGWvll%2BU9UfhA | 74.125.131.84 | 200 OK | 120 kB |
URL GET HTTP/2accounts.google.com/gsi/button?type=standard&theme=outline&size=large&text=continue_with&shape=undefined&logo_alignment=undefined&width=230&locale=undefined&click_listener=undefined&client_id=681041159599-alpsln61oav0e2v359o58dd48etajt86.apps.googleusercontent.com&iframe_id=gsi_120654_58363&as=edR8I5vM9hGWvll%2BU9UfhA IP74.125.131.84:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint75:65:5E:EB:A9:59:16:DF:32:A3:39:DC:8A:A2:FD:28:92:33:6B:0D ValidityTue, 16 Apr 2024 04:20:43 GMT - Tue, 09 Jul 2024 04:20:42 GMT
File typeHTML document, ASCII text, with very long lines (7854) Size120 kB (119970 bytes) Hashca951681a88c12e0103f18d7af1db53a c30c561a32bbdb7b91b5845bd84159ced58fa88d 8b3047426c59e909640065930c29d69fe9576b8c5b4fcd19468067cf9cb4a2c2
GET /gsi/button?type=standard&theme=outline&size=large&text=continue_with&shape=undefined&logo_alignment=undefined&width=230&locale=undefined&click_listener=undefined&client_id=681041159599-alpsln61oav0e2v359o58dd48etajt86.apps.googleusercontent.com&iframe_id=gsi_120654_58363&as=edR8I5vM9hGWvll%2BU9UfhA HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 08 May 2024 19:22:00 GMT
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: same-site
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
content-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-Mgrsb0F56IzP0bAn3RDE1A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/js/92-779b7441ae77576f5c1a.js | 64.210.135.118 | 200 OK | 54 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/js/92-779b7441ae77576f5c1a.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJavaScript source, ASCII text, with very long lines (53877), with no line terminators Hashb63296efbaa41982217bf8a50bdf33b9 dc9ec7106a117197dc988faa0df576121cb53d46 fd5691074917becc8af2f19fca362010c489ac086f2f9789c218e0fdfd24bc99
GET /web/v2/app/js/92-779b7441ae77576f5c1a.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: application/javascript
vary: Origin
last-modified: Tue, 07 May 2024 14:20:11 GMT
etag: W/"21ba79ab7-d275-617dde23b1cc0"
expires: Sat, 07 Sep 2024 04:09:50 GMT
cache-control: max-age=10590210
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-7846-3-10974-h-0-0---;6139-17-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/images/gold-image-d33ef77462b0eec2c092871dc8dba20f.jpg | 64.210.135.118 | 200 OK | 106 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/images/gold-image-d33ef77462b0eec2c092871dc8dba20f.jpg IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 457x610, components 3 Size106 kB (105474 bytes) Hashd33ef77462b0eec2c092871dc8dba20f 8d55dccfbdb5564bf11da3e676ba7fd9e90e0971 ab47530fb6f8dfc34e1ef766c891582f6f04ad5d7ac772b96e1b3059518cd94c
GET /web/v2/app/images/gold-image-d33ef77462b0eec2c092871dc8dba20f.jpg HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cam4-static-test.xcdnpro.com/web/v2/app/css/113.app-34b71ba708fc19b03f0b.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:59 GMT
content-type: image/jpeg
content-length: 105474
last-modified: Thu, 25 Jan 2024 14:18:37 GMT
etag: "20d53f6b7-19c02-60fc5daf92940"
expires: Wed, 29 May 2024 20:11:34 GMT
cache-control: max-age=10605177
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
vary: Origin
accept-ranges: bytes
x-cdn-diag: ams5-7846-2-10929-h-0-0---;6139-18-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| www.google.com/js/bg/R158mP-HER8cF-2W1d4Zs3A-8309t2iBf9rXxsmuGOY.js | 142.250.74.132 | 200 OK | 18 kB |
URL GET HTTP/3www.google.com/js/bg/R158mP-HER8cF-2W1d4Zs3A-8309t2iBf9rXxsmuGOY.js IP142.250.74.132:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdLSMcZAAAAAJ-aW0oRyvgewY_dd74CXsYMcil7&co=aHR0cHM6Ly93d3cuY2FtNC5jb206NDQz&hl=en&v=vjbW55W42X033PfTdVf6Ft4q&size=invisible&cb=dscvf3n4hiu9 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeJavaScript source, ASCII text, with very long lines (17624) Hash1b84878b10f495c0906cf29733630286 f0253a2a4155c4b073f72bb19d81f6a065b3671a 475e7c98ff87111f1c17ed96d5de19b3703ef37d3db768817fdad7c6c9ae18e6
GET /js/bg/R158mP-HER8cF-2W1d4Zs3A-8309t2iBf9rXxsmuGOY.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdLSMcZAAAAAJ-aW0oRyvgewY_dd74CXsYMcil7&co=aHR0cHM6Ly93d3cuY2FtNC5jb206NDQz&hl=en&v=vjbW55W42X033PfTdVf6Ft4q&size=invisible&cb=dscvf3n4hiu9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7467
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 03:22:25 GMT
expires: Sat, 03 May 2025 03:22:25 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 29 Apr 2024 11:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 489576
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| api.lovense.com/api/cam/tipper/v2/tipper.js |  104.19.135.76 | 200 OK | 391 kB |
URL GET HTTP/2api.lovense.com/api/cam/tipper/v2/tipper.js IP104.19.135.76:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerLet's Encrypt Subjectlovense.com FingerprintCB:61:1E:D4:CD:21:6D:0B:80:C7:12:F8:A4:90:96:0D:5F:3F:64:32 ValidityFri, 15 Mar 2024 00:28:18 GMT - Thu, 13 Jun 2024 00:28:17 GMT
Size391 kB (391103 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/cam/tipper/v2/tipper.js HTTP/1.1
Host: api.lovense.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:55 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 03 Apr 2024 02:19:30 GMT
etag: W/"660cbcb2-5f7bf"
cache-control: public, max-age=300
cf-cache-status: HIT
age: 93
expires: Wed, 08 May 2024 19:26:55 GMT
vary: Accept-Encoding
set-cookie: __cfruid=5e2ffb9c09e1a3f23ae64c13dc2f6b74b7ea16da-1715196115; path=/; domain=.lovense.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 880bd0c8fdb4712a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/css/92.app-eff735b2ec69cf91e6cc.css | 64.210.135.118 | 200 OK | 4.9 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/css/92.app-eff735b2ec69cf91e6cc.css IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeASCII text, with very long lines (4889), with no line terminators Hash134ed7a0e793d7d94b7d698639ceb32f 001e19d641e63256af66e85be7a9f7877442c2ce 8e62c0279dd83213b64867d1297788de4f4af45fe370438170b6d48854a8e3c0
GET /web/v2/app/css/92.app-eff735b2ec69cf91e6cc.css HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: text/css
vary: Origin
last-modified: Wed, 13 Mar 2024 12:37:22 GMT
etag: W/"213e4ef59-1319-6138a09420480"
expires: Mon, 15 Jul 2024 16:59:56 GMT
cache-control: max-age=10729027
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-7846-2-10927-h-0-0---;6139-17-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/images/flags_new-f8fe45069044c46d57a6772a1e86bda9.png | 64.210.135.118 | 200 OK | 23 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/images/flags_new-f8fe45069044c46d57a6772a1e86bda9.png IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typePNG image data, 256 x 176, 8-bit colormap, non-interlaced Hashf8fe45069044c46d57a6772a1e86bda9 802f5c5909e265c4e56ec5cfca36a4b1253ab194 ac7cb0c1cb0a45a1e4baf9ce36cdf69d11c61cfc29c118425912534444d26078
GET /web/v2/app/images/flags_new-f8fe45069044c46d57a6772a1e86bda9.png HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cam4-static-test.xcdnpro.com/web/v2/app/css/14.app-dbf272a48ab185a95722.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:59 GMT
content-type: image/png
content-length: 23240
last-modified: Thu, 25 Apr 2024 12:41:38 GMT
etag: "21a98c4f8-5ac8-616eb1bb16480"
expires: Mon, 26 Aug 2024 10:24:20 GMT
cache-control: max-age=10611576
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
vary: Origin
accept-ranges: bytes
x-cdn-diag: ams5-6249-2-19422-h-0-0---;6139-17-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/css/258.app-12d3ce639b99f79a09ba.css | 64.210.135.118 | 200 OK | 6.8 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/css/258.app-12d3ce639b99f79a09ba.css IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeASCII text, with very long lines (6810), with no line terminators Hashe1f3a46e1f0df6da52fbe8c05b13eb9c 0762293681ce2a53cf6cc7db6daa9878bf7696db 0a8dd366826c2f2f8621061379cae62e47ead9067366470f2651088856738b99
GET /web/v2/app/css/258.app-12d3ce639b99f79a09ba.css HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: text/css
vary: Origin
last-modified: Tue, 19 Mar 2024 07:11:29 GMT
etag: W/"215a73d72-1a96-613fe2edb2a40"
expires: Fri, 09 Aug 2024 21:00:30 GMT
cache-control: max-age=10578612
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6249-1-19355-h-0-0---;6139-21-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/js/32-19453c6935d397b37fe2.js | 64.210.135.118 | 200 OK | 11 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/js/32-19453c6935d397b37fe2.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJavaScript source, ASCII text, with very long lines (11123), with no line terminators Hashb9ab715a3ca8d46429ab4dd8ca18f7ef 93ec387312ba7bc72e12d5e9dcda533c2b15226f 72ed05f4fcd8f735d45f5ef6e03445eea27dfb8b36947f78cd15b18c8a14a150
GET /web/v2/app/js/32-19453c6935d397b37fe2.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: application/javascript
vary: Origin
last-modified: Mon, 01 Apr 2024 15:23:45 GMT
etag: W/"217e36c61-2b73-6150a9346a240"
expires: Sun, 04 Aug 2024 06:36:24 GMT
cache-control: max-age=10768150
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-7846-3-10971-h-0-0---;6139-17-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/js/12-17dd8de6b62467701e2a.js | 64.210.135.118 | 200 OK | 223 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/js/12-17dd8de6b62467701e2a.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size223 kB (223229 bytes) Hash00327b94c8719b93bd308d338eee9707 31ededdd9b62e73143688e01a9ab857b039b05d3 a860c34a6748e42960ddd26f7ef171e84efde85bcd0fcb2656cc2934d332043a
GET /web/v2/app/js/12-17dd8de6b62467701e2a.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: application/javascript
vary: Origin
last-modified: Wed, 20 Mar 2024 11:51:11 GMT
etag: W/"215bb6ecc-367fd-6141634fb89c0"
expires: Fri, 19 Jul 2024 06:18:27 GMT
cache-control: max-age=10434224
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6249-1-19355-h-0-0---;6139-17-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/css/26.app-c444a0b18c5b89c904ab.css | 64.210.135.118 | 200 OK | 4.1 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/css/26.app-c444a0b18c5b89c904ab.css IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeASCII text, with very long lines (4081), with no line terminators Hash21a378ad010704ced4f25dbf8826a9c5 da04b10dc92051d4db597b8ff3a0741fa65082ab dca97e9ba7eb969144bf119c0e8d7a4bc06cda44f80764bf9cd026c79288a933
GET /web/v2/app/css/26.app-c444a0b18c5b89c904ab.css HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: text/css
vary: Origin
last-modified: Wed, 21 Feb 2024 13:42:32 GMT
etag: W/"212580001-ff1-611e47fa50200"
expires: Mon, 24 Jun 2024 16:45:43 GMT
cache-control: max-age=10724447
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6140-3-23528-h-0-0---;6139-17-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/js/8-e71859d1944c91f36913.js | 64.210.135.118 | 200 OK | 9.6 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/js/8-e71859d1944c91f36913.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeASCII text, with very long lines (10673), with no line terminators Hash921d2104e5c4b06c3a41638893e0c1e5 e1a5d688366ad07c0ad2c9d7025b3217033fdb73 e1809d864fe3f4be14b61a629457f8dcb07cab0bb08c9a4a95519250f15313be
GET /web/v2/app/js/8-e71859d1944c91f36913.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: application/javascript
vary: Origin
last-modified: Wed, 20 Mar 2024 11:51:11 GMT
etag: W/"215a8a9bf-25b1-6141634fb89c0"
expires: Sun, 21 Jul 2024 18:36:13 GMT
cache-control: max-age=10651289
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-7846-1-10844-h-0-0---;6139-23-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| www.cam4.com/rest/v2.0/directory/filters | 185.94.239.81 | 200 | 18 kB |
URL GET HTTP/1.1www.cam4.com/rest/v2.0/directory/filters IP185.94.239.81:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Internal Revenue Service |
GET /rest/v2.0/directory/filters HTTP/1.1
Host: www.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup
Cookie: INGRESSCOOKIE=a7dd83e84d8e1969b1a72f378c8853e6|d6a68dccd9919960ff135dee3820d14b; JSESSIONID=B51F4121D2A257FC60710A4F3AF381EB; cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup; _sp_ses.dd07=*; _sp_id.dd07=3667845d-f4d1-4fbd-9e67-a08324a8805f.1715196117.1.1715196119..b7f63cfd-adbe-4aa6-b187-25702d497ba1..8df297de-f5cf-4c59-b13f-06e12975e757.1715196118661.1; cam4rt8=true; cam4-HideAds=true; cam4-UTM-campaigns=%7B%22utmMedium%22%3A%22popunder%22%2C%22utmSource%22%3A%22341%22%2C%22utmCampaign%22%3A%22acquisition_mar-20-2023%22%2C%22utmContent%22%3A%22viewer_it_frites_female_straight_leads_wifi_mobile_italian%22%2C%22utmTerm%22%3A%22index-female_nsfw_signup%22%7D; ds_recsys_alloc_DS0002b=true; disclaimer18=Accepted; SESSIONIDv2=c5d21dbae92cc4f2f4eb082ac26506ba5077e40b; cam4-CONTENT=uyvv9Z
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Wed, 08 May 2024 19:21:59 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
content-security-policy: frame-ancestors 'self' ;
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: origin, content-type, accept, authorization, x-b3-traceid, x-b3-spanid, x-b3-parentspanid, x-b3-sampled, x-b3-flags, x-zipkin-extension, x-process-id, x-span-name, x-span-export, Content-Disposition, Access-Hash, Username, Last-Cash-Out-Authorization, X-Redirect-To
access-control-allow-methods: GET, POST, PATCH , DELETE, PUT, OPTIONS, HEAD
access-control-expose-headers: totalCount
Content-Encoding: gzip
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/css/8.app-52cfd15a50d97c968185.css | 64.210.135.118 | 200 OK | 28 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/css/8.app-52cfd15a50d97c968185.css IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeASCII text, with very long lines (27835), with no line terminators Hash94368a5c4b47a2d0f7c7e5adb2b1ab00 b8dc407536e6c7108b0bd7aad8982f5226a52f49 695a3bc6e9afb414a30bb10aea3e89028d6f7a5bb571e3ffcb7843117b62433e
GET /web/v2/app/css/8.app-52cfd15a50d97c968185.css HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: text/css
vary: Origin
last-modified: Wed, 20 Mar 2024 11:51:11 GMT
etag: W/"21467fcb9-6cbb-6141634fb89c0"
expires: Sun, 21 Jul 2024 18:36:13 GMT
cache-control: max-age=10651289
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-7619-2-20750-h-0-0---;6139-23-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/js/40-3ea5518631b81d5d3908.js | 64.210.135.118 | 200 OK | 16 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/js/40-3ea5518631b81d5d3908.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJavaScript source, ASCII text, with very long lines (16046), with no line terminators Hash0b8f6ee641a536e9a29eb916a30555e1 225f4b95db30b87d9036af8e1a7868128f5e0875 2b68f4152227db9b3ab89895079727d5bc3c6d314643d87fb41a23d6caa729bc
GET /web/v2/app/js/40-3ea5518631b81d5d3908.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:59 GMT
content-type: application/javascript
vary: Origin
last-modified: Tue, 07 May 2024 14:20:11 GMT
etag: W/"21b774e2b-3eae-617dde23b1cc0"
expires: Fri, 06 Sep 2024 23:44:52 GMT
cache-control: max-age=10574311
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6140-3-23526-h-0-0---;6139-18-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| www.cam4.com/rest/v2.0/directory/tags?usersPerTag=0&gender=female&broadcastType=female_group&broadcastType=solo&broadcastType=male_female_group&page=1&resultsPerPage=30&country=br | 185.94.239.81 | 200 | 1.3 kB |
URL GET HTTP/1.1www.cam4.com/rest/v2.0/directory/tags?usersPerTag=0&gender=female&broadcastType=female_group&broadcastType=solo&broadcastType=male_female_group&page=1&resultsPerPage=30&country=br IP185.94.239.81:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (1538), with no line terminators Hash4e0d47d0de4deba8d67666fa34154173 5857b1ec1e34a7cc65343169077e43dea296cb61 4017713ac171f57f08125c546b5e3fd576f651275d872eaffddbd435863b50d5
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Internal Revenue Service |
GET /rest/v2.0/directory/tags?usersPerTag=0&gender=female&broadcastType=female_group&broadcastType=solo&broadcastType=male_female_group&page=1&resultsPerPage=30&country=br HTTP/1.1
Host: www.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup
Cookie: INGRESSCOOKIE=a7dd83e84d8e1969b1a72f378c8853e6|d6a68dccd9919960ff135dee3820d14b; JSESSIONID=B51F4121D2A257FC60710A4F3AF381EB; cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup; _sp_ses.dd07=*; _sp_id.dd07=3667845d-f4d1-4fbd-9e67-a08324a8805f.1715196117.1.1715196119..b7f63cfd-adbe-4aa6-b187-25702d497ba1..8df297de-f5cf-4c59-b13f-06e12975e757.1715196118661.1; cam4rt8=true; cam4-HideAds=true; cam4-UTM-campaigns=%7B%22utmMedium%22%3A%22popunder%22%2C%22utmSource%22%3A%22341%22%2C%22utmCampaign%22%3A%22acquisition_mar-20-2023%22%2C%22utmContent%22%3A%22viewer_it_frites_female_straight_leads_wifi_mobile_italian%22%2C%22utmTerm%22%3A%22index-female_nsfw_signup%22%7D; ds_recsys_alloc_DS0002b=true; disclaimer18=Accepted; SESSIONIDv2=c5d21dbae92cc4f2f4eb082ac26506ba5077e40b; cam4-CONTENT=uyvv9Z
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Wed, 08 May 2024 19:21:59 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
content-security-policy: frame-ancestors 'self' ;
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: origin, content-type, accept, authorization, x-b3-traceid, x-b3-spanid, x-b3-parentspanid, x-b3-sampled, x-b3-flags, x-zipkin-extension, x-process-id, x-span-name, x-span-export, Content-Disposition, Access-Hash, Username, Last-Cash-Out-Authorization, X-Redirect-To
access-control-allow-methods: GET, POST, PATCH , DELETE, PUT, OPTIONS, HEAD
access-control-expose-headers: totalCount
Content-Encoding: gzip
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LdLSMcZAAAAAJ-aW0oRyvgewY_dd74CXsYMcil7&co=aHR0cHM6Ly93d3cuY2FtNC5jb206NDQz&hl=en&v=vjbW55W42X033PfTdVf6Ft4q&size=invisible&cb=dscvf3n4hiu9 | 142.250.74.132 | 200 OK | 46 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/anchor?ar=1&k=6LdLSMcZAAAAAJ-aW0oRyvgewY_dd74CXsYMcil7&co=aHR0cHM6Ly93d3cuY2FtNC5jb206NDQz&hl=en&v=vjbW55W42X033PfTdVf6Ft4q&size=invisible&cb=dscvf3n4hiu9 IP142.250.74.132:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint7C:B7:E1:97:03:6E:82:B6:52:F8:EC:C6:C6:50:D9:DD:80:47:E6:A0 ValidityTue, 16 Apr 2024 03:18:53 GMT - Tue, 09 Jul 2024 03:18:52 GMT
File typeHTML document, ASCII text, with very long lines (37770) Hash95a2b2398ec9fc91cf85c5175184cc15 5ca101b8b7ffb26c2c076056a3725154e76f0704 8ea465f64c51972179ff3b40e0ee528a7dcf4983752dbcab267bbba9eedf3bb1
GET /recaptcha/api2/anchor?ar=1&k=6LdLSMcZAAAAAJ-aW0oRyvgewY_dd74CXsYMcil7&co=aHR0cHM6Ly93d3cuY2FtNC5jb206NDQz&hl=en&v=vjbW55W42X033PfTdVf6Ft4q&size=invisible&cb=dscvf3n4hiu9 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 08 May 2024 19:22:00 GMT
content-security-policy: script-src 'nonce-iUittsxhog9tPOxQoo9Syg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/js/application-e1219c797e6c61306e55.js | 64.210.135.118 | 200 OK | 5.2 MB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/js/application-e1219c797e6c61306e55.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
Size5.2 MB (5201750 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/v2/app/js/application-e1219c797e6c61306e55.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:55 GMT
content-type: application/javascript
vary: Origin
last-modified: Tue, 07 May 2024 14:20:11 GMT
etag: W/"21c270805-4f5f56-617dde23b1cc0"
expires: Wed, 04 Sep 2024 23:03:25 GMT
cache-control: max-age=10399026
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-7846-3-10971-h-0-0---;6139-30-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/CAM4.2dc7a5e5.svg | 64.210.135.118 | 200 OK | 1.0 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/CAM4.2dc7a5e5.svg IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeSVG Scalable Vector Graphics image Hash5b5b933b6a994c318659a27ce35b4959 097faf74fb3adcf0f5a2bd64506f252175c78209 3bb2b0b531195c5be3fc4fda313f1c5e0a1464a22f0296f0fab4c81e9ba868dc
GET /web/v2/app/phoenix/assets/static/media/CAM4.2dc7a5e5.svg HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:56 GMT
content-type: image/svg+xml
content-length: 1048
last-modified: Thu, 11 Jan 2024 17:00:09 GMT
etag: "20cfd3970-418-60eae7ae21840"
expires: Tue, 14 May 2024 20:44:45 GMT
cache-control: max-age=10663962
access-control-allow-origin: *
vary: Origin
access-control-allow-methods: GET,HEAD,OPTIONS
accept-ranges: bytes
x-cdn-diag: ams5-7619-3-20856-h-0-0---;6139-20-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/css/2.app-73c9d281be7ee3879bea.css | 64.210.135.118 | 200 OK | 7.7 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/css/2.app-73c9d281be7ee3879bea.css IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeASCII text, with very long lines (7661), with no line terminators Hash18d226663403946c8371d02fe952634a 0ecea92a93a7c969cbd155e559885274a863589c d78de00c9c0a704c002e7ab6705b06d2ba483fc8bcda8864602981d25c2cd98c
GET /web/v2/app/css/2.app-73c9d281be7ee3879bea.css HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: text/css
vary: Origin
last-modified: Thu, 25 Apr 2024 12:41:38 GMT
etag: W/"21a5396a4-1deb-616eb1bb16480"
expires: Fri, 23 Aug 2024 15:39:21 GMT
cache-control: max-age=10378399
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-7619-2-20751-h-0-0---;6139-17-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/js/113-b0d874abc97dd6095ce5.js | 64.210.135.118 | 200 OK | 13 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/js/113-b0d874abc97dd6095ce5.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJavaScript source, ASCII text, with very long lines (13007), with no line terminators Hash2265e7076b9f4b0573697f859f74b74c f8cf9ac3936ba313b8b6f9dd080ee83a867e74eb eada989dfc0b8987474b0e8945c4f20598848d0ccdb64dd4e4bfa13a1ec78bb2
GET /web/v2/app/js/113-b0d874abc97dd6095ce5.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: application/javascript
vary: Origin
last-modified: Tue, 07 May 2024 14:20:11 GMT
etag: W/"21bd85b55-32cf-617dde23b1cc0"
expires: Sat, 07 Sep 2024 04:09:50 GMT
cache-control: max-age=10590210
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-7846-3-10973-h-0-0---;6139-17-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cdn.izooto.com/scripts/sdk/izooto.js | 104.16.255.64 | 200 OK | 342 kB |
URL GET HTTP/2cdn.izooto.com/scripts/sdk/izooto.js IP104.16.255.64:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerLet's Encrypt Subjectizooto.com Fingerprint7D:38:B1:A5:0F:91:BB:17:3C:A1:13:73:22:6D:58:09:97:CF:8F:E2 ValiditySat, 13 Apr 2024 01:31:14 GMT - Fri, 12 Jul 2024 01:31:13 GMT
Size342 kB (342016 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /scripts/sdk/izooto.js HTTP/1.1
Host: cdn.izooto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:56 GMT
content-type: application/javascript
access-control-allow-origin: *
cf-bgj: minify
etag: W/"663b6e38-53800"
last-modified: Wed, 08 May 2024 12:21:12 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 25206
expires: Fri, 24 May 2024 19:21:56 GMT
cache-control: public, max-age=1382400
server: cloudflare
cf-ray: 880bd0cfe960b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.izooto.com/scripts/1b78eb6fb4fe480b0cce146b801305c840594d07.js | 104.16.255.64 | 200 OK | 2.6 kB |
URL GET HTTP/2cdn.izooto.com/scripts/1b78eb6fb4fe480b0cce146b801305c840594d07.js IP104.16.255.64:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerLet's Encrypt Subjectizooto.com Fingerprint7D:38:B1:A5:0F:91:BB:17:3C:A1:13:73:22:6D:58:09:97:CF:8F:E2 ValiditySat, 13 Apr 2024 01:31:14 GMT - Fri, 12 Jul 2024 01:31:13 GMT
File typeUnicode text, UTF-8 text, with very long lines (2855), with no line terminators Hasheb32fbefc7c932d7477e6f56809101cc eb77836fd8229ec30c38eb0e30a926d2b3e126c7 720b19ad80fae427cfc1977a828ad775e118d9fe06ed5088eddc54bbc6f6850d
GET /scripts/1b78eb6fb4fe480b0cce146b801305c840594d07.js HTTP/1.1
Host: cdn.izooto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:55 GMT
content-type: application/javascript
access-control-allow-origin: *
cf-bgj: minify
etag: W/"64ec3d95-a1a"
last-modified: Mon, 28 Aug 2023 06:24:21 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 693816
expires: Thu, 09 May 2024 19:21:55 GMT
cache-control: public, max-age=86400
server: cloudflare
cf-ray: 880bd0c8fe5bb505-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/spring.4bc51a37.svg | 64.210.135.118 | 200 OK | 34 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/phoenix/assets/static/media/spring.4bc51a37.svg IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeSVG Scalable Vector Graphics image Hashbde55bc5c00f8912356838a36ce10282 86eae4f0bec5dbc41f263baa357d3d249c1388a9 3ff530f5beff6a86a02bdcc08e1464710e10a8d12eb05281530e684e9ff47863
GET /web/v2/app/phoenix/assets/static/media/spring.4bc51a37.svg HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:56 GMT
content-type: image/svg+xml
content-length: 34129
last-modified: Mon, 01 Apr 2024 15:16:39 GMT
etag: "217853e03-8551-6150a79e263c0"
expires: Sat, 03 Aug 2024 18:31:49 GMT
cache-control: max-age=10722040
access-control-allow-origin: *
vary: Origin
access-control-allow-methods: GET,HEAD,OPTIONS
accept-ranges: bytes
x-cdn-diag: ams5-7619-3-20856-h-0-0---;6139-20-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/js/3-3633675edcd6ea0558ad.js | 64.210.135.118 | 200 OK | 128 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/js/3-3633675edcd6ea0558ad.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size128 kB (127877 bytes) Hash171ab2a350de120782e559d54b66a57f b9372a9d082b440fa38f56a5413564aaf90fa2db fc183ed02d2b317c206e26748139d6e910b39ce9a3276bbaa9db63fd4fc82226
GET /web/v2/app/js/3-3633675edcd6ea0558ad.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: application/javascript
vary: Origin
last-modified: Tue, 12 Mar 2024 15:41:48 GMT
etag: W/"214675dd1-1f385-613787f006700"
expires: Fri, 12 Jul 2024 13:25:39 GMT
cache-control: max-age=10507094
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6141-3-39643-h-0-0---;6139-17-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| snapshots.xcdnpro.com/thumbnails/Causofi_?s=cIzwOj0jy+GF8jbOgW1u5DmhIUrcF2p0DIKtNIMg/K8= | 64.210.135.118 | 200 OK | 18 kB |
URL GET HTTP/2snapshots.xcdnpro.com/thumbnails/Causofi_?s=cIzwOj0jy+GF8jbOgW1u5DmhIUrcF2p0DIKtNIMg/K8= IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x711, components 3 Hash385bcb0ea0293a5a9ccbf5a36f0b2ce9 074552ef1c2eff3d73e4a5ed82abf34ac81fbb0d 09166a8eef14e366fd144db78ca4f5891a5296ea012fca4a8669a0243d8b2b0d
GET /thumbnails/Causofi_?s=cIzwOj0jy+GF8jbOgW1u5DmhIUrcF2p0DIKtNIMg/K8= HTTP/1.1
Host: snapshots.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:22:00 GMT
content-type: image/jpeg
content-length: 18110
x-application-context: oogler-live:8080
x-cff: 0.0
x-bff: 0.0
x-hf: 0
x-sf: 10
x-bf: 10
x-cv: 80
x-new-size: 400
x-resize-skipped: false
x-resize-fallback: false
x-engine-version: 1
x-face-area: 0.0
x-fdr: 1
x-fdm: 1
x-stream-name: 2ca0be29-48d3-456f-adad-cd8abd988fec
x-username: causofi_
x-size: 400
x-broadcast-id: 466455622
x-creation-time: 1715196071472
x-creation-time-display: Wed May 08 19:21:11
x-source: origin
cache-control: max-age=60
x-robots-tag: noindex, nofollow
timing-allow-origin: *
x-cdn-diag: ams5-7846-2-10929-h-0-0---;6139-18-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/css/113.app-34b71ba708fc19b03f0b.css | 64.210.135.118 | 200 OK | 3.3 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/css/113.app-34b71ba708fc19b03f0b.css IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeASCII text, with very long lines (3303), with no line terminators Hash955aef807a98b39e7a6912a7e1ce7f45 e3f2c06f9703b52fb5c1afcec9dd1577a69550c7 0a7f84681bf620b301bb00234757bccef25407bb1b141483c1a11dd3df5c2862
GET /web/v2/app/css/113.app-34b71ba708fc19b03f0b.css HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: text/css
vary: Origin
last-modified: Mon, 08 Apr 2024 07:31:47 GMT
etag: W/"2187473a5-ce3-61590cc47dec0"
expires: Tue, 06 Aug 2024 19:39:07 GMT
cache-control: max-age=10411392
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6249-2-19422-h-0-0---;6139-17-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/js/34-949728dadad627769c8b.js | 64.210.135.118 | 200 OK | 11 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/js/34-949728dadad627769c8b.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJavaScript source, ASCII text, with very long lines (10919), with no line terminators Hashe1bb86d55cb563c0a87035a30dc34641 7c467ed2c7c210fb04f55d66788154ea39048339 89d4deb4b8269aa0d71cb7d6aaece2667eebd929ce27a8cee0982abe781b1d4b
GET /web/v2/app/js/34-949728dadad627769c8b.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: application/javascript
vary: Origin
last-modified: Mon, 01 Apr 2024 15:23:45 GMT
etag: W/"216aa9381-2aa7-6150a9346a240"
expires: Sun, 04 Aug 2024 06:36:24 GMT
cache-control: max-age=10768150
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6139-2-18550-h-0-0---;6139-21-19201----0-0-1
X-Firefox-Spdy: h2
|
|
| cdn.izooto.com/scripts/sak/iz_setcid.html?v=1 | 104.16.255.64 | 200 OK | 3.7 kB |
URL GET HTTP/2cdn.izooto.com/scripts/sak/iz_setcid.html?v=1 IP104.16.255.64:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerLet's Encrypt Subjectizooto.com Fingerprint7D:38:B1:A5:0F:91:BB:17:3C:A1:13:73:22:6D:58:09:97:CF:8F:E2 ValiditySat, 13 Apr 2024 01:31:14 GMT - Fri, 12 Jul 2024 01:31:13 GMT
File typeHTML document, ASCII text, with very long lines (3865), with no line terminators Hash861e9ad283ac9e3c4bd94762fd4ad74c 71dfd9a1b4afe7e35d898898e8889c0958ed719b 1e24af6a15f6997bfc2d88ba4dba67b5314c7d9b8bdd02690fa65fa19532cfca
GET /scripts/sak/iz_setcid.html?v=1 HTTP/1.1
Host: cdn.izooto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:57 GMT
content-type: text/html
last-modified: Tue, 07 Feb 2023 10:27:13 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
access-control-allow-origin: *
cf-cache-status: HIT
age: 702248
expires: Sat, 08 Jun 2024 19:21:57 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 880bd0d3df55b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/i18n/com.cam4/v2_i18n-f2141817d7d0a2dda2608347a49e1297fef87b9ade20002df874bd348c700aa8.json | 64.210.135.118 | 200 OK | 3.3 MB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/i18n/com.cam4/v2_i18n-f2141817d7d0a2dda2608347a49e1297fef87b9ade20002df874bd348c700aa8.json IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
Size3.3 MB (3267891 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/v2/app/i18n/com.cam4/v2_i18n-f2141817d7d0a2dda2608347a49e1297fef87b9ade20002df874bd348c700aa8.json HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.cam4.com
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: application/json
vary: Origin
last-modified: Wed, 08 May 2024 13:51:25 GMT
etag: W/"21a4ef584-31dd33-617f19938bb09"
expires: Fri, 06 Sep 2024 06:42:04 GMT
cache-control: max-age=10428525
access-control-allow-origin: https://www.cam4.com
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-7846-2-10927-h-0-0---;6139-19-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| nats.stackvaults.com/ | 217.22.24.2 | 101 Switching Protocols | 0 B |
IP217.22.24.2:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.stackvaults.com Fingerprint49:C1:C7:B9:C3:04:9E:EB:37:91:61:DA:DE:35:65:A6:09:7D:B3:6C ValidityMon, 18 Sep 2023 18:41:06 GMT - Sat, 19 Oct 2024 18:41:05 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: nats.stackvaults.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.cam4.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: f9Ib9ivUIufYEJvsXtAudg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Wed, 08 May 2024 19:21:58 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: qcjB8jAX5NkmuthdoiTumkguPkE=
Strict-Transport-Security: max-age=31536000; includeSubDomains
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/js/2-580a19034ee0d45deaf4.js | 64.210.135.118 | 200 OK | 68 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/js/2-580a19034ee0d45deaf4.js IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashc18976ffe6be7ba46a48032cd01d91f5 b069f02a0d1e99a000d6d601d812307f9ebbd58e 9cb06d8c38baaef9939adfd75b2c48e4e402bf2568f52b211dbe86d49b175e7f
GET /web/v2/app/js/2-580a19034ee0d45deaf4.js HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:58 GMT
content-type: application/javascript
vary: Origin
last-modified: Tue, 07 May 2024 14:20:11 GMT
etag: W/"21b3b79e5-10b61-617dde23b1cc0"
expires: Sat, 07 Sep 2024 04:09:50 GMT
cache-control: max-age=10590210
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-6139-2-18548-h-0-0---;6139-17-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| www.cam4.com/api/directoryCounts?directoryJson=true&online=true&url=true&orderBy=VIDEO_QUALITY&page=1&resultsPerPage=60 | 185.94.239.81 | 200 | 21 B |
URL GET HTTP/1.1www.cam4.com/api/directoryCounts?directoryJson=true&online=true&url=true&orderBy=VIDEO_QUALITY&page=1&resultsPerPage=60 IP185.94.239.81:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash26473fcddd0a51dae2ac56082a46df75 a8be1d67237b6879c131faee551a1988093fa001 c4bb6f4184bf4be70eda036d928e5060275e0aefb3b44ca5f5a4b67e7a52e5b6
GET /api/directoryCounts?directoryJson=true&online=true&url=true&orderBy=VIDEO_QUALITY&page=1&resultsPerPage=60 HTTP/1.1
Host: www.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup
Cookie: INGRESSCOOKIE=a7dd83e84d8e1969b1a72f378c8853e6|d6a68dccd9919960ff135dee3820d14b; JSESSIONID=B51F4121D2A257FC60710A4F3AF381EB; cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup; _sp_ses.dd07=*; _sp_id.dd07=3667845d-f4d1-4fbd-9e67-a08324a8805f.1715196117.1.1715196119..b7f63cfd-adbe-4aa6-b187-25702d497ba1..8df297de-f5cf-4c59-b13f-06e12975e757.1715196118661.1; cam4rt8=true; cam4-HideAds=true; cam4-UTM-campaigns=%7B%22utmMedium%22%3A%22popunder%22%2C%22utmSource%22%3A%22341%22%2C%22utmCampaign%22%3A%22acquisition_mar-20-2023%22%2C%22utmContent%22%3A%22viewer_it_frites_female_straight_leads_wifi_mobile_italian%22%2C%22utmTerm%22%3A%22index-female_nsfw_signup%22%7D; ds_recsys_alloc_DS0002b=true; disclaimer18=Accepted; SESSIONIDv2=c5d21dbae92cc4f2f4eb082ac26506ba5077e40b; cam4-CONTENT=uyvv9Z
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx
Date: Wed, 08 May 2024 19:21:59 GMT
Content-Type: text/json;charset=utf-8
Content-Length: 21
Connection: keep-alive
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS, HEAD
access-control-allow-headers: Origin, Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Username, Access-Hash
content-security-policy: frame-ancestors 'self' ;
|
|
| snapshots.xcdnpro.com/thumbnails/Casadinha001?s=HFSmp3WauXVEpKadKqkP041BAXlpht3bxhxPNHZ56Bs= | 64.210.135.118 | 200 OK | 17 kB |
URL GET HTTP/2snapshots.xcdnpro.com/thumbnails/Casadinha001?s=HFSmp3WauXVEpKadKqkP041BAXlpht3bxhxPNHZ56Bs= IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x711, components 3 Hash3393a49dc0053cdb44b1cbeb4cab0b39 f544fe09b5f2123b57e479a40b88716147fe78d6 465e00d98f69be3723764f305feee2ef2ac0cb23b8ca924ef581255d407f8a9e
GET /thumbnails/Casadinha001?s=HFSmp3WauXVEpKadKqkP041BAXlpht3bxhxPNHZ56Bs= HTTP/1.1
Host: snapshots.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:22:00 GMT
content-type: image/jpeg
content-length: 16964
x-application-context: oogler-live:8080
x-cff: 0.0
x-bff: 0.0
x-hf: 0
x-sf: 10
x-bf: 10
x-cv: 80
x-new-size: 400
x-resize-skipped: false
x-resize-fallback: false
x-engine-version: 1
x-face-area: 0.0
x-fdr: 1
x-fdm: 1
x-stream-name: Casadinha001-316-9e9d299c-99fd-44ea-b66a-4500abb52aab
x-username: casadinha001
x-size: 400
x-broadcast-id: 466455700
x-creation-time: 1715196038901
x-creation-time-display: Wed May 08 19:20:38
x-source: origin
cache-control: max-age=60
x-robots-tag: noindex, nofollow
timing-allow-origin: *
x-cdn-diag: ams5-6139-3-18649-h-0-0---;6139-18-19201----0-0-0
X-Firefox-Spdy: h2
|
|
| dumpster.cam4.com/ws/ | 185.94.239.83 | 101 Switching Protocols | 0 B |
IP185.94.239.83:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.cam4.com Fingerprint4C:3A:CD:1A:77:09:B4:EB:3F:81:63:A4:A8:FA:F3:84:6C:BA:1C:84 ValidityWed, 30 Aug 2023 14:36:02 GMT - Mon, 30 Sep 2024 14:36:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ws/ HTTP/1.1
Host: dumpster.cam4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.cam4.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: h0ygN5+T1MwkZvicRSrg8w==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: cam4-AF=voluum_wlk2icg993s0ab513bdit74k_200850:850_it_pop_st_mwf_323; cam4-AF-params=showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup; smart-agents-ws-cookie=1715196116.635.12786.222588; _sp_ses.dd07=*; _sp_id.dd07=3667845d-f4d1-4fbd-9e67-a08324a8805f.1715196117.1.1715196117..b7f63cfd-adbe-4aa6-b187-25702d497ba1....0; cam4rt8=true; ds_recsys_alloc_DS0002b=true; disclaimer18=Accepted
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Wed, 08 May 2024 19:21:58 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: M6ZLVdaCyv9f6hf+g+OqTbOMXCM=
set-cookie: SESSIONIDv2=c5d21dbae92cc4f2f4eb082ac26506ba5077e40b; Domain=.cam4.com; Path=/; SameSite=Lax; Secure; HttpOnly
|
|
| cam4-static-test.xcdnpro.com/web/v2/app/css/application.app-0fae7b7a00bee76dd075.css | 64.210.135.118 | 200 OK | 276 kB |
URL GET HTTP/2cam4-static-test.xcdnpro.com/web/v2/app/css/application.app-0fae7b7a00bee76dd075.css IP64.210.135.118:443
Requested byhttps://www.cam4.com/female/brazil?showSignupPopup=&noAds=true&showDisclaimerOverlay=false&act=voluum_wlk2icg993s0ab513bdit74k_200850%3A850_it_pop_st_mwf_323&suid=wlk2icg993s0ab513bdit74k&utm_keyword=102485608&utm_medium=popunder&utm_source=341&utm_campaign=acquisition_mar-20-2023&utm_content=viewer_it_frites_female_straight_leads_wifi_mobile_italian&utm_term=index-female_nsfw_signup CertificateIssuerGlobalSign nv-sa Subject*.xcdnpro.com Fingerprint3F:70:98:C7:0B:AC:3D:4B:5A:67:77:FC:17:B6:8C:E9:07:02:B9:B7 ValidityThu, 28 Mar 2024 12:31:02 GMT - Tue, 29 Apr 2025 12:31:01 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size276 kB (275724 bytes) Hash63f0e34fe296070988df5f0bc478e37c 24e468f8856bf5c9f0fd0ba1df8e95e9088ca077 630a688e576b26347f1b6fb667950f6cdb31f125cea9794ecc29559096df9ca6
GET /web/v2/app/css/application.app-0fae7b7a00bee76dd075.css HTTP/1.1
Host: cam4-static-test.xcdnpro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cam4.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 19:21:55 GMT
content-type: text/css
vary: Origin
last-modified: Fri, 29 Mar 2024 08:58:15 GMT
etag: W/"21790628a-4350c-614c8d718b7c0"
expires: Sat, 27 Jul 2024 22:01:32 GMT
cache-control: max-age=10414608
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-methods: GET,HEAD,OPTIONS
x-cdn-diag: ams5-7846-1-10847-h-0-0---;6139-20-19201----0-0-0
X-Firefox-Spdy: h2
|
|
0.0.0.0