| memeksiana.vip/ | 172.67.153.47 | | 167 B |
IP172.67.153.47:0
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET / HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 07 May 2024 17:48:43 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 07 May 2024 18:48:43 GMT
Location: https://memeksiana.vip/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XOgZHzci7Z982hfzJA%2F%2BtCyKPZZohxq6RZJWPXMxI7B4jpVmzfJeLRUFYmo2byGimqIsK1Q5UhRlwR0hmB6o5%2FAkwCkCs549MVOtaX11azMpoKw6yYxaDoW5xzZULUwNSg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 88030ae24f170afe-OSL
alt-svc: h2=":443"; ma=60
|
|
| memeksiana.vip/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 | 104.21.32.176 | | 32 kB |
URL memeksiana.vip/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 IP104.21.32.176:0
File typeASCII text, with very long lines (59701) Hash51a8390b47aa0582cf2d9c96c5addee2 b16a640874025d085c38119a1a02a3460f83f2de 98cecf88a23542fa047ce46eedb650b5c5128761ed4386c0977b847094ddfa20
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:49 GMT
content-type: text/css
vary: X-Forwarded-Proto,Accept-Encoding,User-Agent
last-modified: Wed, 03 Apr 2024 05:16:43 GMT
etag: W/"1bae5-6152a5409f76b"
cache-control: public, max-age=31536000
expires: Wed, 30 Apr 2025 21:13:55 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.1
cf-cache-status: HIT
age: 592494
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e5AKYKQVueJFg%2F7oL6G6ztdTMVCkvO9UhWidDOgqTN9uSL5eb1yaN%2BnAzoYoSGw9OJzGm%2BFKddZgZ9K5xLkdQFuUhdwEO5CL8Mvu7PdVeJ9J7xdsptDu68plz81GddoRqA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b096b145697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vjs.zencdn.net/7.8.4/video-js.css?ver=7.8.4 | 151.101.66.217 | | 11 kB |
URL vjs.zencdn.net/7.8.4/video-js.css?ver=7.8.4 IP151.101.66.217:0
File typeUnicode text, UTF-8 text, with very long lines (5844) Hash397a94bb87dfd0a64ba4d3d502912e4a c43be470c7ff54d4bf6d4f5256502d68fc2221bc 5ead814b213a977667a2d801ed60313d28ad913178384faf945b4b9859a6cccc
GET /7.8.4/video-js.css?ver=7.8.4 HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://memeksiana.vip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Wed, 08 Jul 2020 20:29:36 GMT
etag: "397a94bb87dfd0a64ba4d3d502912e4a"
cache-control: public, max-age=31536000
content-type: text/css; charset=utf-8
content-encoding: gzip
date: Tue, 07 May 2024 17:48:49 GMT
x-served-by: cache-hel1410031-HEL
x-cache: HIT
x-cache-hits: 107748
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 10738
X-Firefox-Spdy: h2
|
|
| memeksiana.vip/wp-content/themes/retrotube/style.css?ver=1.7.3.1714908572 | 104.21.32.176 | | 15 kB |
URL memeksiana.vip/wp-content/themes/retrotube/style.css?ver=1.7.3.1714908572 IP104.21.32.176:0
File typeassembler source, ASCII text Hash2e390297248ca289270555cdaba36211 f7f14483330b0358cdc9fef694ab4bb533ea86d2 36af8841b4fc779b588fd6cd042ea05e2d30d398f8e7de2fb800b6028d463677
GET /wp-content/themes/retrotube/style.css?ver=1.7.3.1714908572 HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:49 GMT
content-type: text/css
vary: X-Forwarded-Proto,Accept-Encoding,User-Agent
last-modified: Sun, 05 May 2024 11:29:32 GMT
etag: W/"125f5-617b34444c178"
cache-control: public, max-age=31536000
expires: Mon, 05 May 2025 19:08:54 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.2
cf-cache-status: HIT
age: 167994
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qklBKD9Bi8P8BOVZcSSZzWD7b8AGsNHFxiJadyUtH3JIVp%2FSe5%2BSkOAlOs0YuDy1z98iroU5sfvQbYsLHkmoo7XkCL%2Fw%2F5w7Ex0gyD6YDtsdD34qY2rRCUP0goWEKPZpAw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b097b1f5697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| memeksiana.vip/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 104.21.32.176 | | 6.7 kB |
URL memeksiana.vip/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP104.21.32.176:0
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:49 GMT
content-type: application/x-javascript
vary: X-Forwarded-Proto,Accept-Encoding,User-Agent
last-modified: Fri, 09 Jun 2023 05:49:24 GMT
etag: W/"3509-5fdabee5f2100"
cache-control: public, max-age=31536000
expires: Fri, 02 May 2025 15:10:32 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.1
cf-cache-status: HIT
age: 441497
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lfhl1vYmTvDceEVs90EUZi5oskqOzzK%2BzhG%2BaGRs0PGgmQGWgZIFcejjvwS4Nulwkzr2UaFHnq%2B48t2cnTcCJgi6571zDx%2FSquFFOkd04nSgziwQ2i%2BDsPlK%2Fvl7G9B5kQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b097b255697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| memeksiana.vip/wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 | 104.21.32.176 | 200 OK | 77 kB |
URL GET HTTP/3memeksiana.vip/wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 IP104.21.32.176:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerGoogle Trust Services LLC Subjectmemeksiana.vip FingerprintA1:4B:70:27:B8:00:01:28:2C:FC:2D:F4:C3:8D:99:60:A1:56:5A:B7 ValiditySun, 14 Apr 2024 06:51:40 GMT - Sat, 13 Jul 2024 06:51:39 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://memeksiana.vip/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:49 GMT
content-type: application/font-woff2
content-length: 77160
vary: X-Forwarded-Proto,Accept-Encoding,User-Agent
last-modified: Wed, 26 Jul 2023 13:35:19 GMT
etag: "12d68-60163eb2933c0"
cache-control: public, max-age=31536000
expires: Thu, 01 May 2025 09:58:15 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.1
cf-cache-status: HIT
age: 546634
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4BHvgXh2FlhzGXPRNr24En1xqcOP%2BvBr1dI7LGSeUwrROMVw5dQqgcEgnf7PUZX1OqrmupTTYSjbU3gX8fZEnKfaV9WJ7qRZ4tNkANgzSoX8FfTJ3iwyUXdArdj2SFqNAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b0b0dd55697-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dood.yt/e/pna44yw4diwt | 188.114.97.1 | | 143 B |
IP188.114.97.1:0
File typeHTML document, ASCII text, with CRLF line terminators Hashcb7b8f439b04c00f4a2d78160ddfee8d 9aa44b5d68f6359f10de0dcd24ea3e12548d9bd4 12755429beb15d5eb57eafa45b8dba326343dd099bf0552038694c3856e8860e
GET /e/pna44yw4diwt HTTP/1.1
Host: dood.yt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://memeksiana.vip/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 07 May 2024 17:48:49 GMT
content-type: text/html
content-length: 143
location: https://d0000d.com/e/pna44yw4diwt
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cf4ox6jNEB%2BwnV9gbAue8UHptH7pyin7qt5kaExs8wZTPkj4Rwm1HN2CP3uhZsgfj2u4I1XN%2BnHX0O3M7PEWTwx14YtEHM7c2WdccAiytmQv7thtS10QkYRN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88030b0b2a21b527-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| poweredby.jads.co/js/jads.js | 185.94.236.247 | | 178 B |
URL poweredby.jads.co/js/jads.js IP185.94.236.247:0
File typeHTML document, ASCII text, with CRLF line terminators Hashcd2e0e43980a00fb6a2742d3afd803b8 81ffbd1712afe8cdf138b570c0fc9934742c33c1 bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://memeksiana.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 07 May 2024 17:48:49 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
|
|
| poweredby.jads.co/js/jads.js | 185.94.236.247 | | 178 B |
URL poweredby.jads.co/js/jads.js IP185.94.236.247:0
File typeHTML document, ASCII text, with CRLF line terminators Hashcd2e0e43980a00fb6a2742d3afd803b8 81ffbd1712afe8cdf138b570c0fc9934742c33c1 bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://memeksiana.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 07 May 2024 17:48:49 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
|
|
| poweredby.jads.co/js/jads2.js | 185.94.236.247 | 200 OK | 1.7 kB |
URL GET HTTP/1.1poweredby.jads.co/js/jads2.js IP185.94.236.247:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerSectigo Limited Subject*.jads.co Fingerprint6C:79:49:F2:EA:3B:68:61:E1:57:17:4B:BA:C8:E9:7C:91:0C:AB:38 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sun, 23 Feb 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3758), with no line terminators Hashbc8141c4650030c41f6a98026b12ce80 af5618f7e467a207d4c64627be580283ab5640cd 5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://memeksiana.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 17:48:49 GMT
Content-Type: application/x-javascript
Last-Modified: Fri, 22 Mar 2024 21:09:33 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"65fdf38d-eae"
Content-Encoding: gzip
|
|
| poweredby.jads.co/js/jads2.js | 185.94.236.247 | 200 OK | 1.7 kB |
URL GET HTTP/1.1poweredby.jads.co/js/jads2.js IP185.94.236.247:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerSectigo Limited Subject*.jads.co Fingerprint6C:79:49:F2:EA:3B:68:61:E1:57:17:4B:BA:C8:E9:7C:91:0C:AB:38 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sun, 23 Feb 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3758), with no line terminators Hashbc8141c4650030c41f6a98026b12ce80 af5618f7e467a207d4c64627be580283ab5640cd 5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://memeksiana.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 17:48:50 GMT
Content-Type: application/x-javascript
Last-Modified: Fri, 22 Mar 2024 21:09:33 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"65fdf38d-eae"
Content-Encoding: gzip
|
|
| poweredby.jads.co/js/jads2.js | 185.94.236.247 | 200 OK | 1.7 kB |
URL GET HTTP/1.1poweredby.jads.co/js/jads2.js IP185.94.236.247:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerSectigo Limited Subject*.jads.co Fingerprint6C:79:49:F2:EA:3B:68:61:E1:57:17:4B:BA:C8:E9:7C:91:0C:AB:38 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sun, 23 Feb 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3758), with no line terminators Hashbc8141c4650030c41f6a98026b12ce80 af5618f7e467a207d4c64627be580283ab5640cd 5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://memeksiana.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 17:48:50 GMT
Content-Type: application/x-javascript
Last-Modified: Fri, 22 Mar 2024 21:09:33 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"65fdf38d-eae"
Content-Encoding: gzip
|
|
| vjs.zencdn.net/7.8.4/video.min.js?ver=7.8.4 | 151.101.66.217 | | 139 kB |
URL vjs.zencdn.net/7.8.4/video.min.js?ver=7.8.4 IP151.101.66.217:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (45362) Size139 kB (139307 bytes) Hash102cc1896541330762962b95fcb31f95 58af851e231b29a31690a7b74ebfa89a62977a0d be788c49f862ad8e0f7947411cb71db6aac0046b3cee79c3144179a57baf07bb
GET /7.8.4/video.min.js?ver=7.8.4 HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://memeksiana.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 08 Jul 2020 20:29:39 GMT
etag: "102cc1896541330762962b95fcb31f95"
cache-control: public, max-age=31536000
content-type: application/javascript; charset=utf-8
content-encoding: gzip
date: Tue, 07 May 2024 17:48:50 GMT
x-served-by: cache-hel1410031-HEL
x-cache: HIT
x-cache-hits: 108730
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 139307
X-Firefox-Spdy: h2
|
|
| t7cp4fldl.com/get/1988383?zoneid=1988383&jp=_clufwlgcbeiz9ohkhhowyz&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2082725901270016&eclog=0&im=1&freq=0&uf=0 | 212.117.190.201 | | 1.5 kB |
URL t7cp4fldl.com/get/1988383?zoneid=1988383&jp=_clufwlgcbeiz9ohkhhowyz&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2082725901270016&eclog=0&im=1&freq=0&uf=0 IP212.117.190.201:0
File typegzip compressed data, from Unix Hash758579e39ed2adb2627373a610ddc679 bda7bf5c87500b35ec81acca14a3e7a355168f05 c35620d5e08550075b77440080cd85c6fec21959a588d5829f0b60b798179337
GET /get/1988383?zoneid=1988383&jp=_clufwlgcbeiz9ohkhhowyz&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2082725901270016&eclog=0&im=1&freq=0&uf=0 HTTP/1.1
Host: t7cp4fldl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://memeksiana.vip/
Cookie: CHCK=1; UID=2405071248507b4271a2224ac1a48985b7df
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 17:48:50 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Tue, 10 Jun 2025 17:48:50 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| poweredby.jads.co/js/jads.js | 185.94.236.247 | | 178 B |
URL poweredby.jads.co/js/jads.js IP185.94.236.247:0
File typeHTML document, ASCII text, with CRLF line terminators Hashcd2e0e43980a00fb6a2742d3afd803b8 81ffbd1712afe8cdf138b570c0fc9934742c33c1 bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://memeksiana.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 07 May 2024 17:48:50 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js | 104.17.24.14 | | 28 kB |
URL cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js IP104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d0000d.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 507328
expires: Sun, 27 Apr 2025 17:48:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OM5yOgGuFGaIndh%2F2EwaWr%2FKqwXKthzdD2NVtRrmW5Yazqn8uLDqB5EuQjyQipQCB%2FvOuqSeQ2g1xO2jnSmRYO2nXlDKTgLDyJZfuLQDleHhRQjonbxI8PRmNDo44aqlYQ%2BrpaDS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 88030b0f4a6cb4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js | 104.17.24.14 | | 137 kB |
URL cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js IP104.17.24.14:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (48459) Size137 kB (137405 bytes) Hashd7fdaaab43bc993b85290c713fd2d289 46bf3d27b2cf38b0e999d3b0a7613011181c87f9 c9535ea3a4e0af22e960ac1e32d363a71029f31aa96b29fc894e111fee49329e
GET /ajax/libs/video.js/7.21.5/video.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d0000d.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: application/javascript; charset=utf-8
content-length: 137405
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64bb5c88-218bd"
last-modified: Sat, 22 Jul 2023 04:35:20 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 501657
expires: Sun, 27 Apr 2025 17:48:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3dBBvNM33V6YbYwEk9smGOW%2Fb6IwDSSPFPWCXrRNGSFG3oCrt6akMRbjSt5y%2BJ7gNDebIFHxs3KjfGCOhsWkcdO4Cub2jLiWqzxoeb6AjDIl6zh3LJ6vlwE%2B%2BhKtyU4MSXJZucrn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 88030b0f5a93b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js | 104.17.24.14 | 200 OK | 591 B |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js IP104.17.24.14:443
Requested byhttps://d0000d.com/e/pna44yw4diwt CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1266) Hash4412bf8023109ee9eb1f1f226d391329 c273960aa874a87dd022b5e597887142f1b8e34f d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6
GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d0000d.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: application/javascript; charset=utf-8
content-length: 591
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-514"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 508707
expires: Sun, 27 Apr 2025 17:48:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dtycfJPpnAlu4ph9Svm4TWfvftjSzTEufnK2%2BxXlU2UHd9lVdbnyc8PeKkhc%2FhnD5g1folUZZ1%2BjuYl7t0V91%2FvUwXMe27RwJQRan3GTdWse19GNI%2B2PmxwQEVwB8qgZf4fvrHXR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 88030b0f6ab8b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| memeksiana.vip/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15 | 104.21.32.176 | | 8.1 kB |
URL memeksiana.vip/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15 IP104.21.32.176:0
File typeJavaScript source, ASCII text, with very long lines (24063) Hashc675495748ef0df6858b93dd9e623c46 e1be723e4e25d37282821c50b7e12796d3df5f8d 9a32744fa4707d6ea1ad2b696c644c4f45d327509989b4625b8a980e4a45e271
GET /wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15 HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: application/x-javascript
vary: X-Forwarded-Proto,Accept-Encoding,User-Agent
last-modified: Wed, 26 Jul 2023 13:35:19 GMT
etag: W/"5ebc-60163eb2933c0"
cache-control: public, max-age=31536000
expires: Wed, 30 Apr 2025 23:47:47 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.1
cf-cache-status: HIT
age: 583263
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ro95y4101Gtmg7fygyQAr1iXDtQiPHuM4IgWtcMVAGFI80w8w%2FameWgmhqL7D2KH%2FHGcmK09ZJNj6jrQUwkMyD2BiFcjMUGdBZPZBY6cB6zk3ArZuKYL4ddyv6K6qydZZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b0ddc105697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| i.doodcdn.co/img/no_video_3.svg | 104.26.6.74 | 200 OK | 2.8 kB |
URL GET HTTP/2i.doodcdn.co/img/no_video_3.svg IP104.26.6.74:443
Requested byhttps://d0000d.com/e/pna44yw4diwt CertificateIssuerCloudflare, Inc. Subjectdoodcdn.co Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3 ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash077bfdaa49ae4877a42611b739ec4752 a2f9e1222b7af9abc05122411ab8902efcc08ead 70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c
GET /img/no_video_3.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d0000d.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: image/svg+xml
content-length: 2812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
etag: "61d3187c-afc"
expires: Wed, 05 Jun 2024 18:35:55 GMT
cache-control: public, max-age=2592000, no-transform
access-control-allow-origin: *
cf-cache-status: HIT
age: 83424
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V8OhMfpX4RUGOnoz9HZ5p9bxWa20Kn7MN9KVDBWqXMaleGzy2q3AEnb5K%2B%2FgcG006oGVar%2BtyH7S1Lz9w%2BKZZFaHoBM3c8wadBZCrUtc1sfm0yEuyALmCiDy8IoBRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88030b0fef805691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| memeksiana.vip/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0 | 104.21.32.176 | | 114 kB |
URL memeksiana.vip/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0 IP104.21.32.176:0
File typeJavaScript source, ASCII text Size114 kB (114287 bytes) Hasheca10535dd65f4979e3b3ad3ec8e02c2 54c38c3bf24825e407741ef0e316f678a5b580db 802bc6725fd37d15aa9d599fa3f921fca0d4c585162c7b23da8ccd6f3ded751d
GET /wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0 HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: application/x-javascript
vary: X-Forwarded-Proto,Accept-Encoding,User-Agent
last-modified: Wed, 26 Jul 2023 13:35:19 GMT
etag: W/"1194-60163eb2933c0"
cache-control: public, max-age=31536000
expires: Wed, 30 Apr 2025 23:47:46 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.1
cf-cache-status: HIT
age: 583263
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TvCIKndzT1YYNeOh2t9MvuAPiDUBDGzM1M1TQfmn5IrmQ0nn6X29ny1ywycux4bZzGvTE6oWnpcBYpBcpmPSf42myXVSEIVy9nMh3wOU9D4TuR4DT2Ey%2BFEyjPf2AnA2Xg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b0ddc0b5697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| i.doodcdn.co/ads/ad.js | 104.26.6.74 | 200 OK | 18 B |
IP104.26.6.74:443
Requested byhttps://d0000d.com/e/pna44yw4diwt CertificateIssuerCloudflare, Inc. Subjectdoodcdn.co Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3 ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash071c641b229d2bfadd243b8fa2a9c88d 4048ed3ad506f9bb9052c23283912d0cfea8bcc6 3716878d3ceb2042b22c092b31c6f43cc862f8464e92ddde416a49624b32716e
GET /ads/ad.js HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d0000d.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: application/javascript
content-length: 18
access-control-allow-origin: *
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=20
expires: Tue, 06 May 2025 19:45:17 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: User-Agent,Accept-Encoding
cf-cache-status: HIT
age: 77798
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c6QwMtlapQ5YV6oj%2BfEAhvoiD%2FYtRU%2Fzzb%2BVAzOiKjNWL7vJFyxwdVnpZ7TdWocNF59cPIy4kIFWVyBN4BOL%2Brl86G44oc%2B6cBc6OVEzfog7F8UZptokUHKBh9RbtA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b0fff8d5691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.pncloudfl.com/pn/7c6/72b/6fc/7c672b6fcc054d6062e66b28a6626f6c20622351.webp | 104.22.58.221 | 200 OK | 23 kB |
URL GET HTTP/2cdn.pncloudfl.com/pn/7c6/72b/6fc/7c672b6fcc054d6062e66b28a6626f6c20622351.webp IP104.22.58.221:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerLet's Encrypt Subjectcdn.pncloudfl.com Fingerprint50:5F:A0:91:53:C9:C9:E3:5D:EA:53:42:E8:5B:81:FB:DE:7B:1E:2C ValiditySun, 28 Apr 2024 04:53:51 GMT - Sat, 27 Jul 2024 04:53:50 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp Hashe2384b7bee2b843c01684ef468fb965e 7c672b6fcc054d6062e66b28a6626f6c20622351 15c87af498c434dc8b8d4309bb19995672683c76c68732615c71d9ae974f2ed1
GET /pn/7c6/72b/6fc/7c672b6fcc054d6062e66b28a6626f6c20622351.webp HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: application/octet-stream
content-length: 22932
etag: e2384b7bee2b843c01684ef468fb965e
last-modified: Fri, 28 Apr 2023 13:32:55 GMT
x-timestamp: 1682688774.33743
x-trans-id: tx4e6a766e539d439aabab9-00645b64cc
x-openstack-request-id: tx4e6a766e539d439aabab9-00645b64cc
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=172800
expires: Wed, 08 May 2024 17:26:40 GMT
x-proxy-cache: HIT
cf-cache-status: HIT
age: 87730
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 88030b10d991569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| memeksiana.vip/wp-includes/js/comment-reply.min.js?ver=6.5.2 | 104.21.32.176 | 200 OK | 3.0 kB |
URL GET HTTP/3memeksiana.vip/wp-includes/js/comment-reply.min.js?ver=6.5.2 IP104.21.32.176:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerGoogle Trust Services LLC Subjectmemeksiana.vip FingerprintA1:4B:70:27:B8:00:01:28:2C:FC:2D:F4:C3:8D:99:60:A1:56:5A:B7 ValiditySun, 14 Apr 2024 06:51:40 GMT - Sat, 13 Jul 2024 06:51:39 GMT
File typeASCII text, with very long lines (2946) Hash492f2c1a7ea7eb83fe42e0ff7cb51aa2 db36a77f6aaa2063bfbec02c2c0e967438c5a245 e174a58a503ab84b3d1b9de12fd3895788204485170f1289e445f7b5b98ec789
GET /wp-includes/js/comment-reply.min.js?ver=6.5.2 HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: application/x-javascript
vary: X-Forwarded-Proto,Accept-Encoding,User-Agent
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
etag: W/"ba5-5dc2a2438e980"
cache-control: public, max-age=31536000
expires: Wed, 30 Apr 2025 23:47:47 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.1
cf-cache-status: HIT
age: 583263
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LGTIPN%2FQTLHLtPLfKVcHdDRqPFsyy%2Fy1nSGGdoS8y2KYkLFpCgq%2FkJm7%2F2R5Oa39SpDLNEYAxqQLo5kFxoom%2F8b6fDJ3cRT%2F8%2BoWmGNH%2BTrZlYFMtQUx2sNIU4DW1wPFSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b0dec2d5697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.pncloudfl.com/pn/0ca/09a/5e8/0ca09a5e8fbe308ab60b8c3ff61c7c09408ea179.png | 104.22.58.221 | 200 OK | 65 kB |
URL GET HTTP/2cdn.pncloudfl.com/pn/0ca/09a/5e8/0ca09a5e8fbe308ab60b8c3ff61c7c09408ea179.png IP104.22.58.221:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerLet's Encrypt Subjectcdn.pncloudfl.com Fingerprint50:5F:A0:91:53:C9:C9:E3:5D:EA:53:42:E8:5B:81:FB:DE:7B:1E:2C ValiditySun, 28 Apr 2024 04:53:51 GMT - Sat, 27 Jul 2024 04:53:50 GMT
File typeRIFF (little-endian) data, Web/P image Hash9d53b42b6600104c4ebb340896349d60 7314eb48d19e0de662ce30941ea7bec28b4e79e7 dc07e881ed986a3f8bc0429c0b5bdda8d3b5a62c39154b4a0151df422a93fcc2
GET /pn/0ca/09a/5e8/0ca09a5e8fbe308ab60b8c3ff61c7c09408ea179.png HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: image/webp
content-length: 65282
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=172800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=86666
content-disposition: inline; filename="0ca09a5e8fbe308ab60b8c3ff61c7c09408ea179.webp"
etag: c6d34e6ea8b56be59ee2b602a20cc86d
expires: Tue, 07 May 2024 20:21:45 GMT
last-modified: Wed, 27 Dec 2023 09:23:15 GMT
vary: Accept
x-openstack-request-id: tx4b9d41b47f1f495a87e12-00658bed09
x-proxy-cache: HIT
x-timestamp: 1703668994.62208
x-trans-id: tx4b9d41b47f1f495a87e12-00658bed09
cf-cache-status: HIT
age: 163625
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 88030b10f9cc569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| memeksiana.vip/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18 | 104.21.32.176 | 200 OK | 75 kB |
URL GET HTTP/3memeksiana.vip/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18 IP104.21.32.176:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerGoogle Trust Services LLC Subjectmemeksiana.vip FingerprintA1:4B:70:27:B8:00:01:28:2C:FC:2D:F4:C3:8D:99:60:A1:56:5A:B7 ValiditySun, 14 Apr 2024 06:51:40 GMT - Sat, 13 Jul 2024 06:51:39 GMT
File typeJavaScript source, ASCII text, with very long lines (20018) Hash4cd5ea35543390c5fc4e9def651ab721 d360aa74dff157fcefda69336ecf420f04940f98 9167cb37ed21405ef9556646b83789a2099c15398f5cea867470df1e81752e17
GET /wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18 HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: application/x-javascript
vary: X-Forwarded-Proto,Accept-Encoding,User-Agent
last-modified: Wed, 26 Jul 2023 13:35:19 GMT
etag: W/"4fce-60163eb2933c0"
cache-control: public, max-age=31536000
expires: Wed, 30 Apr 2025 23:47:47 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.1
cf-cache-status: HIT
age: 583263
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FXQSzXpEpUMfCBqzXeXTD%2BsvKocCt7LLeALxa8gGFNE%2FXftzd97ywtqzllMiHDbdH66Xz3ljRalI53FZMMFdz76cv74XB86sZFrE4NJlGuzC7ltViLqoYF0GgSwDYAbxHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b0dec1c5697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| memeksiana.vip/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 | 104.21.32.176 | 200 OK | 2.1 kB |
URL GET HTTP/3memeksiana.vip/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 IP104.21.32.176:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerGoogle Trust Services LLC Subjectmemeksiana.vip FingerprintA1:4B:70:27:B8:00:01:28:2C:FC:2D:F4:C3:8D:99:60:A1:56:5A:B7 ValiditySun, 14 Apr 2024 06:51:40 GMT - Sat, 13 Jul 2024 06:51:39 GMT
File typeJavaScript source, ASCII text Hash75abd4cd8807b312f9f7faeb77ee774b e7b7a7ed06d0123ab8667a1d1eeb23de9f2bece7 ca424c0181141900220a19f998ffa7660380bc99ab99557ad458a083251f7034
GET /wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: application/x-javascript
vary: X-Forwarded-Proto,Accept-Encoding,User-Agent
last-modified: Wed, 26 Jul 2023 13:35:19 GMT
etag: W/"2ab-60163eb2933c0"
cache-control: public, max-age=31536000
expires: Wed, 30 Apr 2025 23:47:47 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.1
cf-cache-status: HIT
age: 583263
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EGvpl9AuW5w2Cph4He2gHogZ1XnSFnKV4IIMqDKJ6dglJCF4VyorUoM%2FMVhwwJteBm%2BxbkuAJC1mTTEEq%2Fd3vxKybJKmmNlEIh%2FqeJ2SWn2uDx5Uv2%2Bi0K9Ns5qr%2FPrFnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b0dec275697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| img.doodcdn.co/splash/dng5a1l37o4ab0ea.jpg | 104.26.6.74 | 200 OK | 116 kB |
URL GET HTTP/2img.doodcdn.co/splash/dng5a1l37o4ab0ea.jpg IP104.26.6.74:443
Requested byhttps://d0000d.com/e/pna44yw4diwt CertificateIssuerCloudflare, Inc. Subjectdoodcdn.co Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3 ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1264x715, components 3 Size116 kB (115661 bytes) Hash22873618c6f0c15e990cb3c06b1fc9c2 91229331f42fb80801493986fcd77fa28bf014c2 6d3490def490f4235e70b1c8c8e6c5e9a791c01a705496ed85ac75bee679cf1b
GET /splash/dng5a1l37o4ab0ea.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d0000d.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: image/jpeg
content-length: 115661
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=117497
etag: "6572ee3a-1caf9"
expires: Mon, 20 May 2024 22:34:15 GMT
last-modified: Fri, 08 Dec 2023 10:21:46 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=elQLBW9lt62mEIA7DYE11zSJZMc%2Bv%2BYMuorOLu3gc3Cx1CTYmqwcaz8uVHY5qPpoqZr4tXUOAcK6oJVJI9fe365hCO23FHPYxqN%2BtTK3gXM8Y4mNKlNxIX3G7d4FK5ty"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88030b10e92e5691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.cloudfrale.com/bn/b7c/ab3/a54/b7cab3a5435f14781949ee4473960540e35690f6.mp4 | 45.133.44.20 | | 330 kB |
URL cdn.cloudfrale.com/bn/b7c/ab3/a54/b7cab3a5435f14781949ee4473960540e35690f6.mp4 IP45.133.44.20:0 ASN#39572 DataWeb Global Group B.V.
File typeISO Media, MP4 v2 [ISO 14496-14] Size330 kB (329525 bytes) Hash7e77144a14e32644ed5e15f0f9fb030f b7cab3a5435f14781949ee4473960540e35690f6 9915a8f845c921ea7c24aabcf3674f8aa0818a7800108cc1fa4d178f21a8bd5b
GET /bn/b7c/ab3/a54/b7cab3a5435f14781949ee4473960540e35690f6.mp4 HTTP/1.1
Host: cdn.cloudfrale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Tue, 07 May 2024 17:48:50 GMT
content-type: video/mp4
content-length: 329525
server: nginx/1.24.0
etag: 7e77144a14e32644ed5e15f0f9fb030f
last-modified: Sun, 05 Nov 2023 16:10:26 GMT
x-timestamp: 1699200625.34816
x-trans-id: tx789a914849f64c26ade59-0065ca5f72
x-openstack-request-id: tx789a914849f64c26ade59-0065ca5f72
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Thu, 09 May 2024 17:48:50 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
access-control-allow-origin: *
content-range: bytes 0-329524/329525
X-Firefox-Spdy: h2
|
|
| memeksiana.vip/wp-content/uploads/2022/01/Bokep-Guru-MEGURI-Di-Perkosa-Murid-FULL.jpg | 104.21.32.176 | 200 OK | 33 kB |
URL GET HTTP/3memeksiana.vip/wp-content/uploads/2022/01/Bokep-Guru-MEGURI-Di-Perkosa-Murid-FULL.jpg IP104.21.32.176:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerGoogle Trust Services LLC Subjectmemeksiana.vip FingerprintA1:4B:70:27:B8:00:01:28:2C:FC:2D:F4:C3:8D:99:60:A1:56:5A:B7 ValiditySun, 14 Apr 2024 06:51:40 GMT - Sat, 13 Jul 2024 06:51:39 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 694x370, components 3 Hash3b2acabbaf2ca6de3acb214bbd95c6d3 292e6ae813b94df0869cc538427cf9c38eec3f93 de89e22efd6d68574eae596f239635347bda63fc9827334c65d255101d6f3848
GET /wp-content/uploads/2022/01/Bokep-Guru-MEGURI-Di-Perkosa-Murid-FULL.jpg HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Cookie: bnState_1988384={"impressions":1,"delayStarted":0}; bnState_1988383={"impressions":2,"delayStarted":0}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: image/jpeg
content-length: 33273
vary: X-Forwarded-Proto, Accept-Encoding
last-modified: Sat, 15 Jan 2022 11:58:33 GMT
etag: "81f9-5d59da37ccc40"
cache-control: public, max-age=31536000
expires: Wed, 07 May 2025 10:17:01 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.2
cf-cache-status: HIT
age: 27109
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RhGuSt7LJS%2BHOaxoQ%2BS%2Byz1SFusjENDyN%2B6KaXOFOcC%2BegdGeyxRhRQM3ukqoZPDoFfIvP422GhRPPCDmFzfCNQW6MRE9ys4XHSEl2tSlN%2B0eeLOXJQPXgfDliEqwP34fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b124ad95697-OSL
alt-svc: h3=":443"; ma=86400
|
|
| memeksiana.vip/wp-content/uploads/2022/01/Abg-Binal-Pegang-Kontol-Om-Langsung-Sange.jpg | 104.21.32.176 | | 48 kB |
URL memeksiana.vip/wp-content/uploads/2022/01/Abg-Binal-Pegang-Kontol-Om-Langsung-Sange.jpg IP104.21.32.176:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 511x379, components 3 Hasha58d3b37120ac0bed72e10b5498bcd05 cf10f42ff9ad7ed5418af9bce0449f320fd3373e 1b7c3ba5cd542bed70ad3792a2bc2d8f919553f378778bf4b423d9fc19962df3
GET /wp-content/uploads/2022/01/Abg-Binal-Pegang-Kontol-Om-Langsung-Sange.jpg HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Cookie: bnState_1988384={"impressions":1,"delayStarted":0}; bnState_1988383={"impressions":2,"delayStarted":0}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: image/jpeg
content-length: 48428
vary: X-Forwarded-Proto, Accept-Encoding
last-modified: Tue, 18 Jan 2022 06:50:27 GMT
etag: "bd2c-5d5d5af28f2c0"
cache-control: public, max-age=31536000
expires: Sun, 04 May 2025 20:13:25 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.1
cf-cache-status: HIT
age: 250525
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mKRDtzLWR%2BNMVOmq4YkiJp42vk7E6HeY%2BwW6l5m0yX2XU282QCz296njIBLuff%2B9VYkVKp1sws7ndazIbWtZKe%2B7pTf%2BUXZFJ9XAEjffmMnxp6URaA5p0vogCV6cJMvoZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b124ad65697-OSL
alt-svc: h3=":443"; ma=86400
|
|
| memeksiana.vip/wp-content/uploads/2022/01/memek-perawan-asli-01.jpg | 104.21.32.176 | 200 OK | 32 kB |
URL GET HTTP/3memeksiana.vip/wp-content/uploads/2022/01/memek-perawan-asli-01.jpg IP104.21.32.176:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerGoogle Trust Services LLC Subjectmemeksiana.vip FingerprintA1:4B:70:27:B8:00:01:28:2C:FC:2D:F4:C3:8D:99:60:A1:56:5A:B7 ValiditySun, 14 Apr 2024 06:51:40 GMT - Sat, 13 Jul 2024 06:51:39 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 400x300, components 3 Hashd83a8e38a4fafc2b596f78700c96d7f0 48f4ad59304f9d5be4716cc8e985481c9958ed7d 4562bfe53106d112593ffcba9ded9dab860c516595ca30e532dcc1eaf09616c4
GET /wp-content/uploads/2022/01/memek-perawan-asli-01.jpg HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Cookie: bnState_1988384={"impressions":1,"delayStarted":0}; bnState_1988383={"impressions":2,"delayStarted":0}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: image/jpeg
content-length: 32369
vary: X-Forwarded-Proto, Accept-Encoding
last-modified: Sat, 08 Jan 2022 05:31:11 GMT
etag: "7e71-5d50b694465c0"
cache-control: public, max-age=31536000
expires: Sun, 04 May 2025 14:55:04 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.1
cf-cache-status: HIT
age: 269626
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QtckbjFOiZPuG46GwmVzgoJ7dVSAOjtCp%2FrTk5NghFwPb0KOO5ALxDW%2B1I05d5Yyznlz8K4S%2BO0DrvyLeZz0nGJz8yxlhbwCWf%2FeslcgWDln4Hjkj2XGN%2FQheBgjRdLkXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b124aeb5697-OSL
alt-svc: h3=":443"; ma=86400
|
|
| poweredby.jads.co/adshow.php?adzone=1032265 | 185.94.236.247 | 200 OK | 1.7 kB |
URL GET HTTP/1.1poweredby.jads.co/adshow.php?adzone=1032265 IP185.94.236.247:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerSectigo Limited Subject*.jads.co Fingerprint6C:79:49:F2:EA:3B:68:61:E1:57:17:4B:BA:C8:E9:7C:91:0C:AB:38 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sun, 23 Feb 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (405), with CRLF, LF line terminators Hash956b7dd9873e15fe21a7062c6b5dd9a6 e6bbb04b277ceecdc34c4ed3824e4bb610ec43b5 f16b28aafbb3b39a470730bb98c7390f6fd6157c32baa3a51bfedc16395350fe
GET /adshow.php?adzone=1032265 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://memeksiana.vip/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 17:48:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=68858ff3e241077a9486b01bbae1366a; expires=Wed, 07-May-2025 17:48:50 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps155=1; expires=Wed, 08-May-2024 17:48:50 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjE3MTEzMzM7aToxNzE1MzYzMzMwO30%3D; expires=Fri, 10-May-2024 17:48:50 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Fri, 10-May-2024 17:48:50 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
|
|
| memeksiana.vip/wp-content/uploads/2022/09/Abg-Yang-Suka-Isap-Penis-Loyo-sampai-Tegang.png | 104.21.32.176 | | 357 kB |
URL memeksiana.vip/wp-content/uploads/2022/09/Abg-Yang-Suka-Isap-Penis-Loyo-sampai-Tegang.png IP104.21.32.176:0
File typePNG image data, 440 x 376, 8-bit/color RGBA, non-interlaced Size357 kB (357164 bytes) Hashf3aff32b1ae8f640be974f524ff9f73e 0cd9c6f71467c9895781157d49c4c059d058f94d ca3a702ad4c2db4588da4bf68ebe9ca0b88def20a00bc12d6608efbd5b9c858c
GET /wp-content/uploads/2022/09/Abg-Yang-Suka-Isap-Penis-Loyo-sampai-Tegang.png HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Cookie: bnState_1988384={"impressions":1,"delayStarted":0}; bnState_1988383={"impressions":2,"delayStarted":0}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: image/png
content-length: 357164
vary: X-Forwarded-Proto, Accept-Encoding
last-modified: Mon, 05 Sep 2022 03:47:43 GMT
etag: "5732c-5e7e5f127d5c0"
cache-control: public, max-age=31536000
expires: Wed, 07 May 2025 12:38:14 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.2
cf-cache-status: HIT
age: 18636
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mryfLCm7c2b8tNj3uXpmR1%2BJd4IQsQmo2YfJU00InhCcGHiX7o0nCfys02BuKWrdyPXEh2vbjSVDTWD3VOUCrxJh2qDAGkTXYudGBl%2FWZ11vLuKbuNRf4FX9YnIfXC4rgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b124adc5697-OSL
alt-svc: h3=":443"; ma=86400
|
|
| memeksiana.vip/wp-content/uploads/2022/01/Refreshing-Dengan-Kakak-Cantik.jpg | 104.21.32.176 | 200 OK | 34 kB |
URL GET HTTP/3memeksiana.vip/wp-content/uploads/2022/01/Refreshing-Dengan-Kakak-Cantik.jpg IP104.21.32.176:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerGoogle Trust Services LLC Subjectmemeksiana.vip FingerprintA1:4B:70:27:B8:00:01:28:2C:FC:2D:F4:C3:8D:99:60:A1:56:5A:B7 ValiditySun, 14 Apr 2024 06:51:40 GMT - Sat, 13 Jul 2024 06:51:39 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 589x516, components 3 Hash40803d849f9d31cb6fa7addf1c3839c9 21e6332cef7a955ade27c9af654aa5e90a3da592 97b1f6cc4f3ca40db4773140eb186d210afbfc3f97f0838a2e41cc655cc77b46
GET /wp-content/uploads/2022/01/Refreshing-Dengan-Kakak-Cantik.jpg HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Cookie: bnState_1988384={"impressions":1,"delayStarted":0}; bnState_1988383={"impressions":2,"delayStarted":0}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: image/jpeg
content-length: 33948
vary: X-Forwarded-Proto, Accept-Encoding
last-modified: Wed, 12 Jan 2022 07:01:28 GMT
etag: "849c-5d55d2382c200"
cache-control: public, max-age=31536000
expires: Wed, 07 May 2025 17:14:34 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.2
cf-cache-status: HIT
age: 2055
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LLz%2FxC2Lsw0TyBrBqeX5cX2A0GBRRfggA%2BYqvgKAdsJR6bG9QzkBq7KNMRCXB9tDmxkE8hFts2pdQ3ZLvMxZfXtDS%2BddSVRWbBn7MjBY5ExlHpDZb4E4yeHwN8GRjCiDHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b124ae65697-OSL
alt-svc: h3=":443"; ma=86400
|
|
| memeksiana.vip/wp-content/uploads/2022/03/Bokep-Siswi-Ngentot-Di-Gubuk-Penuh-Sensasi.png | 104.21.32.176 | | 426 kB |
URL memeksiana.vip/wp-content/uploads/2022/03/Bokep-Siswi-Ngentot-Di-Gubuk-Penuh-Sensasi.png IP104.21.32.176:0
File typePNG image data, 505 x 415, 8-bit/color RGBA, non-interlaced Size426 kB (426104 bytes) Hashc52ebd634d0f2436453b066a6f12e91a f9b02559d541e5f4ccbb5888c367ad90068b06fc 5cd195d2a0a91a5d6f1228d7135d298196095e40c2f8837db6ad4c658104e992
GET /wp-content/uploads/2022/03/Bokep-Siswi-Ngentot-Di-Gubuk-Penuh-Sensasi.png HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Cookie: bnState_1988384={"impressions":1,"delayStarted":0}; bnState_1988383={"impressions":2,"delayStarted":0}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: image/png
content-length: 426104
vary: X-Forwarded-Proto, Accept-Encoding
last-modified: Mon, 07 Mar 2022 13:48:46 GMT
etag: "68078-5d9a11f8f4b80"
cache-control: public, max-age=31536000
expires: Sun, 04 May 2025 15:44:15 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.1
cf-cache-status: HIT
age: 266675
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8niKO1nSTBtEtbqE%2FIvA6cvmtd%2FmNQVhdklMVFlfD09K0NybHurW9ZFDSfNooBhTWsrwdpmHvsyx3iWmWsGE3qVzXIS00U%2BwWgl%2BCMVIcdqM5CakdG02Ic0ijR5pE6v8%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b124aed5697-OSL
alt-svc: h3=":443"; ma=86400
|
|
| memeksiana.vip/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 104.21.32.176 | | 76 kB |
URL memeksiana.vip/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP104.21.32.176:0
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:49 GMT
content-type: application/x-javascript
vary: X-Forwarded-Proto,Accept-Encoding,User-Agent
last-modified: Mon, 28 Aug 2023 17:14:23 GMT
etag: W/"15601-603fed35e19c0"
cache-control: public, max-age=31536000
expires: Wed, 30 Apr 2025 23:47:46 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.1
cf-cache-status: HIT
age: 583263
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=68wHl8Fypwn8UgtB6LomP9%2FzpFQvqhffgjJUh0dUhxjeP0GdH7bcdegpwnEpByBwXzxhaMfSpmnRQCZc0v4I40SGIUiCRqvN4npHyzYFyC6L2ufs2H11eNzkzeFtknc6RA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b097b215697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| t7cp4fldl.com/whob.gif?z=1988383&pb=402d57b9912ef13fe7169f866d3574b01715111330&psp=oRVuKdGjoOeES2ThtowQMGsem0IjcV88QT6xcSKp2krpxuhJfDQCRuJ-vu70cIhEFRkqXypOwWR-_BVg1x96wp8bsHBmZ27tDN7W_GPajk0T2i5o5OBADYjhldk_8LzUSimnGnCCuCtzSE7jibQJ0026NqSLnSdPSlIfZove0LhzgDnB4ecyUMg0GoBYv6l1b86zOua1buW2-sT6BfcX3Df_N_qMB5DuQQSMDHSYxDxw4wmv3wUhH39VX4A_rwiI5yVg5eH4QwydTZiNXLpsAEK_1pm8fzlvCS-PUyNV19NoqmSJ-RwE46V9Ii8DlPU__9yiCPO7mY4pWdq6Ve8HRMrE7jSmjkMhN1ZksWpzMHj8HsebpR9bFW3usfYEFULPhx9P3T9Lt5IjNrU2elSLaQfzanuOAsPyfJeWYIOdawopmBTeR1vMjzT69rJayKEFKES_vNgM8v0GPzN7GE5Pa8hG-btHdCsrZg4VyNjMtgCA9RtwwxmYQHnxdIF4XYsMzUpvG2CkmvDoTeYfDWzWUbltJ80SrNyeUrqrQ8q-U4NSq9wGm1ukc4Zyv4i5MAvt0N5Z0khTry3zlArO6oXAzmmVa-y4nzblC31KnbCYDN7KYfoBu3V-wcUk-MKIbKrgE3z1eBQnjcM7TxSZhtQp-MSucmC2_mOXeyFbbTCQs--UjhjKO63smOrBUbx7ATH-wdbKUgrSZlkjIFPpGPS_BrDtyrtYQNjbdfYCIlNTn6FGuHMR7vEVYgO4_BZTG2YFcAW1XheAYEgFNGcwFPIvcuntc-8Mfifth1nWVVs=&freq=0&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=6867800505272320&eclog=0&im=1&pload=636 | 212.117.190.201 | | 43 B |
URL t7cp4fldl.com/whob.gif?z=1988383&pb=402d57b9912ef13fe7169f866d3574b01715111330&psp=oRVuKdGjoOeES2ThtowQMGsem0IjcV88QT6xcSKp2krpxuhJfDQCRuJ-vu70cIhEFRkqXypOwWR-_BVg1x96wp8bsHBmZ27tDN7W_GPajk0T2i5o5OBADYjhldk_8LzUSimnGnCCuCtzSE7jibQJ0026NqSLnSdPSlIfZove0LhzgDnB4ecyUMg0GoBYv6l1b86zOua1buW2-sT6BfcX3Df_N_qMB5DuQQSMDHSYxDxw4wmv3wUhH39VX4A_rwiI5yVg5eH4QwydTZiNXLpsAEK_1pm8fzlvCS-PUyNV19NoqmSJ-RwE46V9Ii8DlPU__9yiCPO7mY4pWdq6Ve8HRMrE7jSmjkMhN1ZksWpzMHj8HsebpR9bFW3usfYEFULPhx9P3T9Lt5IjNrU2elSLaQfzanuOAsPyfJeWYIOdawopmBTeR1vMjzT69rJayKEFKES_vNgM8v0GPzN7GE5Pa8hG-btHdCsrZg4VyNjMtgCA9RtwwxmYQHnxdIF4XYsMzUpvG2CkmvDoTeYfDWzWUbltJ80SrNyeUrqrQ8q-U4NSq9wGm1ukc4Zyv4i5MAvt0N5Z0khTry3zlArO6oXAzmmVa-y4nzblC31KnbCYDN7KYfoBu3V-wcUk-MKIbKrgE3z1eBQnjcM7TxSZhtQp-MSucmC2_mOXeyFbbTCQs--UjhjKO63smOrBUbx7ATH-wdbKUgrSZlkjIFPpGPS_BrDtyrtYQNjbdfYCIlNTn6FGuHMR7vEVYgO4_BZTG2YFcAW1XheAYEgFNGcwFPIvcuntc-8Mfifth1nWVVs=&freq=0&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=6867800505272320&eclog=0&im=1&pload=636 IP212.117.190.201:0
File typeGIF image data, version 89a, 1 x 1 Hash28e463819a210071de3b45ebe7633613 6dccd571828ec0912629119cf7eabfea9f33ddbc 44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /whob.gif?z=1988383&pb=402d57b9912ef13fe7169f866d3574b01715111330&psp=oRVuKdGjoOeES2ThtowQMGsem0IjcV88QT6xcSKp2krpxuhJfDQCRuJ-vu70cIhEFRkqXypOwWR-_BVg1x96wp8bsHBmZ27tDN7W_GPajk0T2i5o5OBADYjhldk_8LzUSimnGnCCuCtzSE7jibQJ0026NqSLnSdPSlIfZove0LhzgDnB4ecyUMg0GoBYv6l1b86zOua1buW2-sT6BfcX3Df_N_qMB5DuQQSMDHSYxDxw4wmv3wUhH39VX4A_rwiI5yVg5eH4QwydTZiNXLpsAEK_1pm8fzlvCS-PUyNV19NoqmSJ-RwE46V9Ii8DlPU__9yiCPO7mY4pWdq6Ve8HRMrE7jSmjkMhN1ZksWpzMHj8HsebpR9bFW3usfYEFULPhx9P3T9Lt5IjNrU2elSLaQfzanuOAsPyfJeWYIOdawopmBTeR1vMjzT69rJayKEFKES_vNgM8v0GPzN7GE5Pa8hG-btHdCsrZg4VyNjMtgCA9RtwwxmYQHnxdIF4XYsMzUpvG2CkmvDoTeYfDWzWUbltJ80SrNyeUrqrQ8q-U4NSq9wGm1ukc4Zyv4i5MAvt0N5Z0khTry3zlArO6oXAzmmVa-y4nzblC31KnbCYDN7KYfoBu3V-wcUk-MKIbKrgE3z1eBQnjcM7TxSZhtQp-MSucmC2_mOXeyFbbTCQs--UjhjKO63smOrBUbx7ATH-wdbKUgrSZlkjIFPpGPS_BrDtyrtYQNjbdfYCIlNTn6FGuHMR7vEVYgO4_BZTG2YFcAW1XheAYEgFNGcwFPIvcuntc-8Mfifth1nWVVs=&freq=0&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=6867800505272320&eclog=0&im=1&pload=636 HTTP/1.1
Host: t7cp4fldl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2405071248507b4271a2224ac1a48985b7df
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 17:48:51 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.banner.view
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| t7cp4fldl.com/chicken.gif?z=1988383&pb=402d57b9912ef13fe7169f866d3574b01715111330&psp=oRVuKdGjoOeES2ThtowQMGsem0IjcV88QT6xcSKp2krpxuhJfDQCRuJ-vu70cIhEFRkqXypOwWR-_BVg1x96wp8bsHBmZ27tDN7W_GPajk0T2i5o5OBADYjhldk_8LzUSimnGnCCuCtzSE7jibQJ0026NqSLnSdPSlIfZove0LhzgDnB4ecyUMg0GoBYv6l1b86zOua1buW2-sT6BfcX3Df_N_qMB5DuQQSMDHSYxDxw4wmv3wUhH39VX4A_rwiI5yVg5eH4QwydTZiNXLpsAEK_1pm8fzlvCS-PUyNV19NoqmSJ-RwE46V9Ii8DlPU__9yiCPO7mY4pWdq6Ve8HRMrE7jSmjkMhN1ZksWpzMHj8HsebpR9bFW3usfYEFULPhx9P3T9Lt5IjNrU2elSLaQfzanuOAsPyfJeWYIOdawopmBTeR1vMjzT69rJayKEFKES_vNgM8v0GPzN7GE5Pa8hG-btHdCsrZg4VyNjMtgCA9RtwwxmYQHnxdIF4XYsMzUpvG2CkmvDoTeYfDWzWUbltJ80SrNyeUrqrQ8q-U4NSq9wGm1ukc4Zyv4i5MAvt0N5Z0khTry3zlArO6oXAzmmVa-y4nzblC31KnbCYDN7KYfoBu3V-wcUk-MKIbKrgE3z1eBQnjcM7TxSZhtQp-MSucmC2_mOXeyFbbTCQs--UjhjKO63smOrBUbx7ATH-wdbKUgrSZlkjIFPpGPS_BrDtyrtYQNjbdfYCIlNTn6FGuHMR7vEVYgO4_BZTG2YFcAW1XheAYEgFNGcwFPIvcuntc-8Mfifth1nWVVs=&freq=0&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=6867800505272320&eclog=0&im=1&pload=636 | 212.117.190.201 | | 43 B |
URL t7cp4fldl.com/chicken.gif?z=1988383&pb=402d57b9912ef13fe7169f866d3574b01715111330&psp=oRVuKdGjoOeES2ThtowQMGsem0IjcV88QT6xcSKp2krpxuhJfDQCRuJ-vu70cIhEFRkqXypOwWR-_BVg1x96wp8bsHBmZ27tDN7W_GPajk0T2i5o5OBADYjhldk_8LzUSimnGnCCuCtzSE7jibQJ0026NqSLnSdPSlIfZove0LhzgDnB4ecyUMg0GoBYv6l1b86zOua1buW2-sT6BfcX3Df_N_qMB5DuQQSMDHSYxDxw4wmv3wUhH39VX4A_rwiI5yVg5eH4QwydTZiNXLpsAEK_1pm8fzlvCS-PUyNV19NoqmSJ-RwE46V9Ii8DlPU__9yiCPO7mY4pWdq6Ve8HRMrE7jSmjkMhN1ZksWpzMHj8HsebpR9bFW3usfYEFULPhx9P3T9Lt5IjNrU2elSLaQfzanuOAsPyfJeWYIOdawopmBTeR1vMjzT69rJayKEFKES_vNgM8v0GPzN7GE5Pa8hG-btHdCsrZg4VyNjMtgCA9RtwwxmYQHnxdIF4XYsMzUpvG2CkmvDoTeYfDWzWUbltJ80SrNyeUrqrQ8q-U4NSq9wGm1ukc4Zyv4i5MAvt0N5Z0khTry3zlArO6oXAzmmVa-y4nzblC31KnbCYDN7KYfoBu3V-wcUk-MKIbKrgE3z1eBQnjcM7TxSZhtQp-MSucmC2_mOXeyFbbTCQs--UjhjKO63smOrBUbx7ATH-wdbKUgrSZlkjIFPpGPS_BrDtyrtYQNjbdfYCIlNTn6FGuHMR7vEVYgO4_BZTG2YFcAW1XheAYEgFNGcwFPIvcuntc-8Mfifth1nWVVs=&freq=0&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=6867800505272320&eclog=0&im=1&pload=636 IP212.117.190.201:0
File typeGIF image data, version 89a, 1 x 1 Hash28e463819a210071de3b45ebe7633613 6dccd571828ec0912629119cf7eabfea9f33ddbc 44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1988383&pb=402d57b9912ef13fe7169f866d3574b01715111330&psp=oRVuKdGjoOeES2ThtowQMGsem0IjcV88QT6xcSKp2krpxuhJfDQCRuJ-vu70cIhEFRkqXypOwWR-_BVg1x96wp8bsHBmZ27tDN7W_GPajk0T2i5o5OBADYjhldk_8LzUSimnGnCCuCtzSE7jibQJ0026NqSLnSdPSlIfZove0LhzgDnB4ecyUMg0GoBYv6l1b86zOua1buW2-sT6BfcX3Df_N_qMB5DuQQSMDHSYxDxw4wmv3wUhH39VX4A_rwiI5yVg5eH4QwydTZiNXLpsAEK_1pm8fzlvCS-PUyNV19NoqmSJ-RwE46V9Ii8DlPU__9yiCPO7mY4pWdq6Ve8HRMrE7jSmjkMhN1ZksWpzMHj8HsebpR9bFW3usfYEFULPhx9P3T9Lt5IjNrU2elSLaQfzanuOAsPyfJeWYIOdawopmBTeR1vMjzT69rJayKEFKES_vNgM8v0GPzN7GE5Pa8hG-btHdCsrZg4VyNjMtgCA9RtwwxmYQHnxdIF4XYsMzUpvG2CkmvDoTeYfDWzWUbltJ80SrNyeUrqrQ8q-U4NSq9wGm1ukc4Zyv4i5MAvt0N5Z0khTry3zlArO6oXAzmmVa-y4nzblC31KnbCYDN7KYfoBu3V-wcUk-MKIbKrgE3z1eBQnjcM7TxSZhtQp-MSucmC2_mOXeyFbbTCQs--UjhjKO63smOrBUbx7ATH-wdbKUgrSZlkjIFPpGPS_BrDtyrtYQNjbdfYCIlNTn6FGuHMR7vEVYgO4_BZTG2YFcAW1XheAYEgFNGcwFPIvcuntc-8Mfifth1nWVVs=&freq=0&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=6867800505272320&eclog=0&im=1&pload=636 HTTP/1.1
Host: t7cp4fldl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2405071248507b4271a2224ac1a48985b7df
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 17:48:51 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| t7cp4fldl.com/get/1988384?zoneid=1988384&jp=_clss4uqjju84je2y6ejy4t&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=6586325528564224&eclog=0&im=1&freq=0&uf=0 | 212.117.190.201 | | 2.9 kB |
URL t7cp4fldl.com/get/1988384?zoneid=1988384&jp=_clss4uqjju84je2y6ejy4t&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=6586325528564224&eclog=0&im=1&freq=0&uf=0 IP212.117.190.201:0
File typeASCII text, with very long lines (4347), with CRLF, LF line terminators Hash96c4b82b6f321a7dd7d04dc80b6e79f1 4339d78c2b3cd270dd6d35dcca2e95522e20b0a0 34a94d908f420c5a6fbd2153c7c361bc73f4e596cf2d4c60e74e35d13fd62430
GET /get/1988384?zoneid=1988384&jp=_clss4uqjju84je2y6ejy4t&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=6586325528564224&eclog=0&im=1&freq=0&uf=0 HTTP/1.1
Host: t7cp4fldl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://memeksiana.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 17:48:49 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Tue, 10 Jun 2025 17:48:49 GMT; Secure; SameSite=None
UID=2405071248507b4271a2224ac1a48985b7df; Path=/; Expires=Tue, 10 Jun 2025 17:48:49 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| poweredby.jads.co/adshow.php?adzone=788999 | 185.94.236.247 | | 1.9 kB |
URL poweredby.jads.co/adshow.php?adzone=788999 IP185.94.236.247:0
File typeHTML document, ASCII text, with very long lines (1626), with CRLF, LF line terminators Hash68a7567af321ce40a3dfc0ae2bdf0be4 b36f1f2535772029c2c873d7a7dd2775b1f50af8 df1d0cc029b77ebe79e9f1a829fe13e49231a70a8dc18f651c74dd86156875a0
GET /adshow.php?adzone=788999 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://memeksiana.vip/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 17:48:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=68858ff3e241077a9486b01bbae1366a; expires=Wed, 07-May-2025 17:48:50 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YTowOnt9; expires=Fri, 10-May-2024 17:48:50 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Fri, 10-May-2024 17:48:50 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
|
|
| t7cp4fldl.com/chicken.gif?z=1988383&pb=402d57b9912ef13fe7169f866d3574b01715111330&psp=Aud_VEm4ekUVCma8XbhS3geycrxdCw4FpvoaLsFtiF4HMfiFkNeETIuPQ55X5c6oJzvcfBonB1qQMOMXXuXGxYySPKuqmW5JRv-CN_T86qag3SkFSAQMHoYWtfpNxeBuAx8ktyqkL8cdVZPZJRyPVO-2DNOSguyz4m9qbyUtn6elG0uDg9zpp4Lu9eaqg4jnYuIqKnqQxmy49cqLTKP15lFA4YA8AC-jbZ91kOznn_EEaFwJUyVgMtA0jgkTcLP2T-xhl3mH38-R5SVVnwm9qPnbYytH-UONFZpfWIwfPbLl82JQM2Ow5HJTfV4YBAu8wEWP_5FZGiXjB_96ABUeoZD7g9dfmbhHFBulsBzg4RVnibFr6yJySVeDHKvliPIJEAcDQM1xLmPD5uX-V9T7-2NIdEmNInAyPShOvJ13v2HOeO8dRWDNChZEeJ5nRh2TS0PRZibb9wTSBUOqlKTp0SOcJbRyX9dWae-WEwhgsbUZ4YgLOAiwg6YEzkbVdZGo3I5X_-xV4aovBrBZIZQf9tcjRjeFj5AmCrYQXRQJNrz_SdnNtMa_5he98UfOopxKAnKoI1EXjkeiTEBqmLA4fF_rdnyk9YwUfYjtlAq6PFnZ7Z6Hw1X1aLfvc7kqOYeidZE7bcIlfdDSTnUpcdTRBTMR5p_o4kaaebEUrUZhHlRiDkNhXvxa7BDBAM7ZDgJh5lC6g8B593eHo3VxaJy5vDEdkCKElwEWd38wF1HNSgkeuCq6bNPZwtL4ufRRlKjbkxMTCt3gruLQoCG_obEB8cAwDlE0b56c-OCkoY9_jxFP7OqZbujNLgjjBQe1sDc-DqHq0pkw5nCjdho9SaURqMTwa20lSDAqZ4oYKtaKW0uDjwypDgME7xb1I2ec8-lXtH5f-GbffhzFKqgtfKmXv1CcGlsC-Sjzrf93gtA-_NQYapLlc_6juvJ-vVbOfP2M&freq=0&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2082725901270016&eclog=0&im=1&pload=674 | 212.117.190.201 | 200 OK | 43 B |
URL GET HTTP/2t7cp4fldl.com/chicken.gif?z=1988383&pb=402d57b9912ef13fe7169f866d3574b01715111330&psp=Aud_VEm4ekUVCma8XbhS3geycrxdCw4FpvoaLsFtiF4HMfiFkNeETIuPQ55X5c6oJzvcfBonB1qQMOMXXuXGxYySPKuqmW5JRv-CN_T86qag3SkFSAQMHoYWtfpNxeBuAx8ktyqkL8cdVZPZJRyPVO-2DNOSguyz4m9qbyUtn6elG0uDg9zpp4Lu9eaqg4jnYuIqKnqQxmy49cqLTKP15lFA4YA8AC-jbZ91kOznn_EEaFwJUyVgMtA0jgkTcLP2T-xhl3mH38-R5SVVnwm9qPnbYytH-UONFZpfWIwfPbLl82JQM2Ow5HJTfV4YBAu8wEWP_5FZGiXjB_96ABUeoZD7g9dfmbhHFBulsBzg4RVnibFr6yJySVeDHKvliPIJEAcDQM1xLmPD5uX-V9T7-2NIdEmNInAyPShOvJ13v2HOeO8dRWDNChZEeJ5nRh2TS0PRZibb9wTSBUOqlKTp0SOcJbRyX9dWae-WEwhgsbUZ4YgLOAiwg6YEzkbVdZGo3I5X_-xV4aovBrBZIZQf9tcjRjeFj5AmCrYQXRQJNrz_SdnNtMa_5he98UfOopxKAnKoI1EXjkeiTEBqmLA4fF_rdnyk9YwUfYjtlAq6PFnZ7Z6Hw1X1aLfvc7kqOYeidZE7bcIlfdDSTnUpcdTRBTMR5p_o4kaaebEUrUZhHlRiDkNhXvxa7BDBAM7ZDgJh5lC6g8B593eHo3VxaJy5vDEdkCKElwEWd38wF1HNSgkeuCq6bNPZwtL4ufRRlKjbkxMTCt3gruLQoCG_obEB8cAwDlE0b56c-OCkoY9_jxFP7OqZbujNLgjjBQe1sDc-DqHq0pkw5nCjdho9SaURqMTwa20lSDAqZ4oYKtaKW0uDjwypDgME7xb1I2ec8-lXtH5f-GbffhzFKqgtfKmXv1CcGlsC-Sjzrf93gtA-_NQYapLlc_6juvJ-vVbOfP2M&freq=0&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2082725901270016&eclog=0&im=1&pload=674 IP212.117.190.201:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerBuypass AS-983163327 Subject Fingerprint1E:73:92:9F:14:DF:47:2D:DB:3D:0B:6D:38:9F:71:8C:33:6D:14:F2 ValidityTue, 09 Jan 2024 13:35:36 GMT - Sat, 06 Jul 2024 21:59:00 GMT
File typeGIF image data, version 89a, 1 x 1 Hash28e463819a210071de3b45ebe7633613 6dccd571828ec0912629119cf7eabfea9f33ddbc 44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1988383&pb=402d57b9912ef13fe7169f866d3574b01715111330&psp=Aud_VEm4ekUVCma8XbhS3geycrxdCw4FpvoaLsFtiF4HMfiFkNeETIuPQ55X5c6oJzvcfBonB1qQMOMXXuXGxYySPKuqmW5JRv-CN_T86qag3SkFSAQMHoYWtfpNxeBuAx8ktyqkL8cdVZPZJRyPVO-2DNOSguyz4m9qbyUtn6elG0uDg9zpp4Lu9eaqg4jnYuIqKnqQxmy49cqLTKP15lFA4YA8AC-jbZ91kOznn_EEaFwJUyVgMtA0jgkTcLP2T-xhl3mH38-R5SVVnwm9qPnbYytH-UONFZpfWIwfPbLl82JQM2Ow5HJTfV4YBAu8wEWP_5FZGiXjB_96ABUeoZD7g9dfmbhHFBulsBzg4RVnibFr6yJySVeDHKvliPIJEAcDQM1xLmPD5uX-V9T7-2NIdEmNInAyPShOvJ13v2HOeO8dRWDNChZEeJ5nRh2TS0PRZibb9wTSBUOqlKTp0SOcJbRyX9dWae-WEwhgsbUZ4YgLOAiwg6YEzkbVdZGo3I5X_-xV4aovBrBZIZQf9tcjRjeFj5AmCrYQXRQJNrz_SdnNtMa_5he98UfOopxKAnKoI1EXjkeiTEBqmLA4fF_rdnyk9YwUfYjtlAq6PFnZ7Z6Hw1X1aLfvc7kqOYeidZE7bcIlfdDSTnUpcdTRBTMR5p_o4kaaebEUrUZhHlRiDkNhXvxa7BDBAM7ZDgJh5lC6g8B593eHo3VxaJy5vDEdkCKElwEWd38wF1HNSgkeuCq6bNPZwtL4ufRRlKjbkxMTCt3gruLQoCG_obEB8cAwDlE0b56c-OCkoY9_jxFP7OqZbujNLgjjBQe1sDc-DqHq0pkw5nCjdho9SaURqMTwa20lSDAqZ4oYKtaKW0uDjwypDgME7xb1I2ec8-lXtH5f-GbffhzFKqgtfKmXv1CcGlsC-Sjzrf93gtA-_NQYapLlc_6juvJ-vVbOfP2M&freq=0&nojs=0&abvar=0&febuild=1.0.233&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=2082725901270016&eclog=0&im=1&pload=674 HTTP/1.1
Host: t7cp4fldl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2405071248507b4271a2224ac1a48985b7df
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 17:48:51 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACpmJAAAAAAAAAAB; Path=/; Expires=Thu, 06 Jun 2024 17:48:51 GMT; Secure; SameSite=None
OACIBLOCK=ACpmJAAAAABmObVQ; Path=/; Expires=Thu, 06 Jun 2024 17:48:51 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| poweredby.jads.co/adshow.php?adzone=890541 | 185.94.236.247 | | 1.7 kB |
URL poweredby.jads.co/adshow.php?adzone=890541 IP185.94.236.247:0
File typeHTML document, ASCII text, with very long lines (402), with CRLF, LF line terminators Hashc5631a1fb1cd20441d755aa4bf86370a 6b5e2cce09ed348199514ee0993819cd7956755e a624517551353784e2a542120480150a0231219d0e945b91d971e7a6de204ebc
GET /adshow.php?adzone=890541 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://memeksiana.vip/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 17:48:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=68858ff3e241077a9486b01bbae1366a; expires=Wed, 07-May-2025 17:48:50 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps54=1; expires=Wed, 08-May-2024 17:48:51 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjE3MDYyOTE7aToxNzE1MzYzMzMwO30%3D; expires=Fri, 10-May-2024 17:48:50 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Fri, 10-May-2024 17:48:50 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
|
|
| memeksiana.vip/wp-content/uploads/2022/01/favicon.png | 104.21.32.176 | 200 OK | 3.8 kB |
URL GET HTTP/3memeksiana.vip/wp-content/uploads/2022/01/favicon.png IP104.21.32.176:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerGoogle Trust Services LLC Subjectmemeksiana.vip FingerprintA1:4B:70:27:B8:00:01:28:2C:FC:2D:F4:C3:8D:99:60:A1:56:5A:B7 ValiditySun, 14 Apr 2024 06:51:40 GMT - Sat, 13 Jul 2024 06:51:39 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hash0aee61cdcfc507f6dfcbb454aaefadb3 9069aca3bcfde596ed5350978c67aad92314b432 232b02a08fbc0d0efbb3c05494dc3790637c6ed07912e9f25d52e4a0eace1a50
GET /wp-content/uploads/2022/01/favicon.png HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Cookie: bnState_1988384={"impressions":1,"delayStarted":0}; bnState_1988383={"impressions":2,"delayStarted":0}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:51 GMT
content-type: image/png
content-length: 3779
vary: X-Forwarded-Proto, Accept-Encoding
last-modified: Tue, 18 Jan 2022 11:35:56 GMT
etag: "ec3-5d5d9ac20bf00"
cache-control: public, max-age=31536000
expires: Wed, 30 Apr 2025 23:47:49 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.1
cf-cache-status: HIT
age: 583262
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ncmOkasjW5q9n%2F4i4EZ%2B82eLejIVTYBzxxEIlvrJMW2RdE%2FB6WIcCe4gWCzXFazK6HJkyy7CV3xR0o55laS42lvzwMGkG6Ufr6G2mlsqS71DKJm49LUxvukC4ANeAQ%2BcMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b144e105697-OSL
alt-svc: h3=":443"; ma=86400
|
|
| memeksiana.vip/wp-content/uploads/2022/01/favicon.png | 104.21.32.176 | 200 OK | 3.8 kB |
URL GET HTTP/3memeksiana.vip/wp-content/uploads/2022/01/favicon.png IP104.21.32.176:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerGoogle Trust Services LLC Subjectmemeksiana.vip FingerprintA1:4B:70:27:B8:00:01:28:2C:FC:2D:F4:C3:8D:99:60:A1:56:5A:B7 ValiditySun, 14 Apr 2024 06:51:40 GMT - Sat, 13 Jul 2024 06:51:39 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hash0aee61cdcfc507f6dfcbb454aaefadb3 9069aca3bcfde596ed5350978c67aad92314b432 232b02a08fbc0d0efbb3c05494dc3790637c6ed07912e9f25d52e4a0eace1a50
GET /wp-content/uploads/2022/01/favicon.png HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Cookie: bnState_1988384={"impressions":1,"delayStarted":0}; bnState_1988383={"impressions":2,"delayStarted":0}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:51 GMT
content-type: image/png
content-length: 3779
vary: X-Forwarded-Proto, Accept-Encoding
last-modified: Tue, 18 Jan 2022 11:35:56 GMT
etag: "ec3-5d5d9ac20bf00"
cache-control: public, max-age=31536000
expires: Wed, 30 Apr 2025 23:47:49 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.1
cf-cache-status: HIT
age: 583262
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ouFrv1UzM110MtB41y9NXPiGhK5vMus4WxX3u2FKJs%2FhZTfQPwvGv97gV1R%2BGhop%2FEb9ZzVAeMVTN%2FOVoTuqP8LT1tI%2FTnGTkNbwR4LMJV4IL1gC23EhsH8BbrZNj5fNMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b144e165697-OSL
alt-svc: h3=":443"; ma=86400
|
|
| i.doodcdn.co/fonts/avertastd-regular-webfont.woff2 | 104.26.6.74 | | 24 kB |
URL i.doodcdn.co/fonts/avertastd-regular-webfont.woff2 IP104.26.6.74:0
CertificateIssuerCloudflare, Inc. Subjectdoodcdn.co Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3 ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 23812, version 1.524 Hasheb586e5a1b86dbf1c866e3ed80f9d18e 280ee78d19c017ab9335f769595e5157d3c4a343 714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf
GET /fonts/avertastd-regular-webfont.woff2 HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://d0000d.com
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:51 GMT
content-type: font/woff2
content-length: 23812
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
cache-control: max-age=2592000
expires: Wed, 05 Jun 2024 16:38:17 GMT
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 5337
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=021oxM%2BK5R9nNMuM0%2BdIAOxvP9eEGLRxZ9XC01oDkV3OQI%2Bn8OGb4GGHmdBb6cOJa7tzFVEgP76QtvfsOpCuwhs0tNeb9VBcJINFvzyxCuXkZ3gP8svj3SE33uGMbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b1528c1b500-OSL
alt-svc: h3=":443"; ma=86400
|
|
| i.doodcdn.co/img/logo-s.png | 104.26.6.74 | | 1.9 kB |
URL i.doodcdn.co/img/logo-s.png IP104.26.6.74:0
CertificateIssuerCloudflare, Inc. Subjectdoodcdn.co Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3 ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image Hash8211fb3cc137d3e1c1e399b86476f951 136d8ef228959aa0cee12e5ed463b6e6a4fcf720 2577866b9d26cd6a4be764910f0913ae5b737ed1d130d635048051ebe15ae680
GET /img/logo-s.png HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d0000d.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:51 GMT
content-type: image/webp
content-length: 1932
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6212
content-disposition: inline; filename="logo-s.webp"
etag: "61d3187c-1844"
expires: Tue, 04 Jun 2024 21:08:47 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: Accept
cf-cache-status: HIT
age: 83424
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fj9vWS0G1zRmabXGavnFE3abd%2FgiuK%2FRvExSMzykcB00vu3oYOiIhBUtx0D1N5Vj1s3oS%2BzQN6goe6PcdELZvDF9LgVjXkAy9AzsXLZ0Y4fDvwwNiLVAHyF5Y9%2FRgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b15ccc0b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| i.jads.co/network/user1037/155-1706124156-0282701001706124156.gif | 185.76.9.25 | | 227 kB |
URL i.jads.co/network/user1037/155-1706124156-0282701001706124156.gif IP185.76.9.25:0 ASN#60068 Datacamp Limited
File typeGIF image data, version 89a, 728 x 90 Size227 kB (226664 bytes) Hashbd54802d86f2fa2ea054a50a7672e1b7 92aed486702b7c130da896e68ffbe7ed97f2eee0 8e7d3261509fb8d048ea4f01351e5908a23ee7c094a33ef8fe468a794ccb7162
GET /network/user1037/155-1706124156-0282701001706124156.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=68858ff3e241077a9486b01bbae1366a; imps155=1; juicy_data_1=YToxOntpOjE3MDYyOTE7aToxNzE1MzYzMzMwO30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps54=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:51 GMT
content-type: image/gif
content-length: 226664
last-modified: Wed, 24 Jan 2024 19:22:36 GMT
etag: "65b1637c-37568"
x-77-nzt: EwwBuUwJFAH3w8sXAAwBuUwKEwH32gUAAAwBJRPCMQH3EgAAAA
x-77-nzt-ray: af5856301a13c1af83693a66c30cce18
x-accel-expires: @1716136449
x-accel-date: 1713544640
x-77-cache: HIT
x-77-age: 1559491
server: CDN77-Turbo
x-cache: HIT
x-age: 1559491
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i.jads.co/1x1.gif | 185.76.9.25 | | 28 kB |
IP185.76.9.25:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 250x250, components 3 Hash2acfb73fd2df022a7dad5595adef5bda 939b803ea641bd427b7599f92a816262e7a5bf48 3d4610a2ab69d08e54685d0d3cfcf03ec663bacff8cc89a1e0a2904a7769e641
GET /1x1.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=68858ff3e241077a9486b01bbae1366a; imps155=1; juicy_data_1=YToxOntpOjE3MDYyOTE7aToxNzE1MzYzMzMwO30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps54=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:51 GMT
content-type: image/jpeg
content-length: 27460
last-modified: Thu, 03 Nov 2016 21:36:07 GMT
etag: "581badc7-6b44"
x-77-nzt: EwwBuUwJFAH3njAhAAwBuUwKCQH3Ci4GAAwBisclwQHXNjYDAA
x-77-nzt-ray: af5856301a13c1af83693a6623d6ce19
x-accel-expires: @1715520995
x-accel-date: 1712928997
x-77-cache: HIT
x-77-age: 2175134
server: CDN77-Turbo
x-cache: HIT
x-age: 2175134
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i.jads.co/network/user1037/155-1706124157-0516537001706124157.gif | 185.76.9.25 | | 312 kB |
URL i.jads.co/network/user1037/155-1706124157-0516537001706124157.gif IP185.76.9.25:0 ASN#60068 Datacamp Limited
File typeGIF image data, version 89a, 900 x 250 Size312 kB (312068 bytes) Hash04e9e5f47d6872fd9fc6ae9a7d64c27c d06f05f771ab084307016df5966ed21082d8a1e7 614d2dad448e25800b50184811718cada7779b8c13de9aa5ec5064756388bffd
GET /network/user1037/155-1706124157-0516537001706124157.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=68858ff3e241077a9486b01bbae1366a; imps155=1; juicy_data_1=YTowOnt9; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:51 GMT
content-type: image/gif
content-length: 312068
last-modified: Wed, 24 Jan 2024 19:22:37 GMT
etag: "65b1637d-4c304"
x-77-nzt: EwwBuUwJFAH3TswXAAwBuUwKEwH3/gYAAAwBnJIhHwH3IQAAAA
x-77-nzt-ray: af5856301a13c1af83693a6635491619
x-accel-expires: @1716136462
x-accel-date: 1713544501
x-77-cache: HIT
x-77-age: 1559630
server: CDN77-Turbo
x-cache: HIT
x-age: 1559630
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i.jads.co/network/user1037/54-1702498964-0752111001702498964.gif | 185.76.9.25 | | 79 kB |
URL i.jads.co/network/user1037/54-1702498964-0752111001702498964.gif IP185.76.9.25:0 ASN#60068 Datacamp Limited
File typeGIF image data, version 89a, 300 x 100 Hashe1404c4f6d32c8db9dda0dc06bf67423 a1c9ac6e43e878e25d1b52569ede3db62c14ccb3 42dd42f89f09c71cdfe50eb3cdb15259b90372e0dee12133169587f923f6324d
GET /network/user1037/54-1702498964-0752111001702498964.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=68858ff3e241077a9486b01bbae1366a; imps155=1; juicy_data_1=YToxOntpOjE3MDYyOTE7aToxNzE1MzYzMzMwO30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps54=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:51 GMT
content-type: image/gif
content-length: 79341
last-modified: Wed, 13 Dec 2023 20:22:44 GMT
etag: "657a1294-135ed"
x-77-nzt: EwwBuUwJFAH3cswXAAwBuUwKCQH3xQEAAAgBJRPCLgGh
x-77-nzt-ray: af5856301a13c1af83693a660a4c4f18
x-accel-expires: @1716136444
x-77-cache: HIT
x-accel-date: 1713544465
x-77-age: 1559666
server: CDN77-Turbo
x-cache: HIT
x-age: 1559666
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| d0000d.com/pass_md5/6379559-91-90-1715104130-73c374a60926c1fef4939ae54e0e6d64/eyezgtga4bscp0wm3eeput4p | 172.67.68.158 | | 90 kB |
URL d0000d.com/pass_md5/6379559-91-90-1715104130-73c374a60926c1fef4939ae54e0e6d64/eyezgtga4bscp0wm3eeput4p IP172.67.68.158:0
File typeASCII text, with no line terminators Hash9fd62fefa1f84f81122542c899644d35 3f42829665183f51d1b1ec67cca8db34efabcc42 82c671ed8112264bfd1b679b1c45817609bf71f8fdb13aef9b7f234ec9696571
GET /pass_md5/6379559-91-90-1715104130-73c374a60926c1fef4939ae54e0e6d64/eyezgtga4bscp0wm3eeput4p HTTP/1.1
Host: d0000d.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://d0000d.com/e/pna44yw4diwt
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:51 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nG4UvxFU89gOTELApRVsbgCqAYOymrI6A7JtZOdhEfjl6%2BIrIrgr4S6GTQ6K2ywpbkBKETzX1UpFvwre3DcgTrmwbAfO9L4SPkH5kWK%2B5e4FBJyNlCr90J8Un%2Fo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b14dca2b50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| i.jads.co/network/user1037/155-1704929330-0870704001704929330.gif | 185.76.9.25 | 200 OK | 505 kB |
URL GET HTTP/2i.jads.co/network/user1037/155-1704929330-0870704001704929330.gif IP185.76.9.25:443 ASN#60068 Datacamp Limited
Requested byhttps://poweredby.jads.co/adshow.php?adzone=788997 CertificateIssuerSectigo Limited Subject*.jads.co Fingerprint6C:79:49:F2:EA:3B:68:61:E1:57:17:4B:BA:C8:E9:7C:91:0C:AB:38 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sun, 23 Feb 2025 23:59:59 GMT
File typeGIF image data, version 89a, 300 x 250 Size505 kB (504958 bytes) Hash3930a11563b38cb369d4705322e7181e 95bd97cc4402672f7e5d91a515e8db92e1686e08 9862595d80ef367a39ded540bfe7788d9ff643ec7956b4a6481c27124c3ef2cd
GET /network/user1037/155-1704929330-0870704001704929330.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=68858ff3e241077a9486b01bbae1366a; imps155=1; juicy_data_1=YToxOntpOjE3MDYyOTE7aToxNzE1MzYzMzMwO30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; imps54=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:51 GMT
content-type: image/gif
content-length: 504958
last-modified: Wed, 10 Jan 2024 23:28:50 GMT
etag: "659f2832-7b47e"
x-77-nzt: EwwBuUwJFAH3X8wXAAwBuUwKAQH3pQMAAAgBJRPCNAGB
x-77-nzt-ray: af5856301a13c1af83693a660acb4218
x-accel-expires: @1716136439
x-77-cache: HIT
x-accel-date: 1713544484
x-77-age: 1559647
server: CDN77-Turbo
x-cache: HIT
x-age: 1559647
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i.doodcdn.com/theme_2/img/loader.svg | 104.21.34.210 | | 167 B |
URL i.doodcdn.com/theme_2/img/loader.svg IP104.21.34.210:0
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /theme_2/img/loader.svg HTTP/1.1
Host: i.doodcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://i.doodcdn.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Tue, 07 May 2024 17:48:51 GMT
content-type: text/html
content-length: 167
location: https://i.doodcdn.co/theme_2/img/loader.svg
cache-control: max-age=3600
expires: Tue, 07 May 2024 18:48:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mMHAxFxUW%2FL%2Bjj%2FBNsbr90l%2FN9W3S9EZ9eFQ0coRv7AYQK6mXKuXQ0CTviegIUjya3YWt5vlECxYQCHtTIND%2F9y8L9wTu6GqILSqsxFrOO4tabmAbooTV2PDNOuPuBS%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88030b16cbc20b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img.doodcdn.co/splash/dng5a1l37o4ab0ea.jpg | 104.26.6.74 | 200 OK | 116 kB |
URL GET HTTP/2img.doodcdn.co/splash/dng5a1l37o4ab0ea.jpg IP104.26.6.74:443
Requested byhttps://d0000d.com/e/pna44yw4diwt CertificateIssuerCloudflare, Inc. Subjectdoodcdn.co Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3 ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1264x715, components 3 Size116 kB (115661 bytes) Hash22873618c6f0c15e990cb3c06b1fc9c2 91229331f42fb80801493986fcd77fa28bf014c2 6d3490def490f4235e70b1c8c8e6c5e9a791c01a705496ed85ac75bee679cf1b
GET /splash/dng5a1l37o4ab0ea.jpg HTTP/1.1
Host: img.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d0000d.com
DNT: 1
Connection: keep-alive
Referer: https://d0000d.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:51 GMT
content-type: image/jpeg
content-length: 115661
access-control-allow-origin: *
cache-control: max-age=1209600
cf-bgj: imgq:100,h2pri
cf-polished: origSize=117497
etag: "6572ee3a-1caf9"
expires: Tue, 21 May 2024 00:29:14 GMT
last-modified: Fri, 08 Dec 2023 10:21:46 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2%2BAnoR1LRM7Aez%2FoaXTYfq0d5ZcgxkVsGBVhVQsx%2Bn5YKJcHkbDZ%2FjC62V2nVzqdbr8iU3%2F0U1z65NkakjL4kaTsrTcRrlG%2F%2F9xQsvNoMXYQlX19i2R%2BX4F2BouBymH7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88030b1518a1b500-OSL
alt-svc: h3=":443"; ma=86400
|
|
| r.trackwilltrk.com/s1/13337860-c378-4763-940f-ee9469d3f57d?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=140705&cv4=240804&cv5=788999&cv6=61010 | 185.196.197.35 | | 1.2 kB |
URL r.trackwilltrk.com/s1/13337860-c378-4763-940f-ee9469d3f57d?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=140705&cv4=240804&cv5=788999&cv6=61010 IP185.196.197.35:0 ASN#39572 DataWeb Global Group B.V.
File typeHTML document, ASCII text, with very long lines (386) Hash4f0a94f3908600a22c8b931700d3b36b 8bd567b92b1b5291836f01a1cccbe60a867da8ae 074b5b6061302833ce3072a615e65fcc5503967c662592f252a54357d1b91d96
GET /s1/13337860-c378-4763-940f-ee9469d3f57d?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=140705&cv4=240804&cv5=788999&cv6=61010 HTTP/1.1
Host: r.trackwilltrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 07 May 2024 17:48:51 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: uid=wu7BwxX-Mp; Path=/; Domain=trackwilltrk.com; Expires=Wed, 08 May 2024 17:48:51 GMT; HttpOnly
X-Request-Id: 61a8f6a7-7f18-4171-9a6a-ffe86dfb40aa
Content-Encoding: gzip
|
|
| rswhowishedto.info/TzZsU0RgCQ8geRVaHB0XG2A4MSp2QS4FAiVTAjgHFwQEYiIOd0onLSsLXWN0ewZbZ2I/XwhudXcQHyclO0MfbnVpXwI1K3IQGm51YQZCYWp6EBludWlCHDIjcgdKIzA7WlFic34DXWNwfgVdYHZ7 | 104.21.63.117 | 204 No Content | 0 B |
URL GET HTTP/2rswhowishedto.info/TzZsU0RgCQ8geRVaHB0XG2A4MSp2QS4FAiVTAjgHFwQEYiIOd0onLSsLXWN0ewZbZ2I/XwhudXcQHyclO0MfbnVpXwI1K3IQGm51YQZCYWp6EBludWlCHDIjcgdKIzA7WlFic34DXWNwfgVdYHZ7 IP104.21.63.117:443
Requested byhttps://d0000d.com/e/pna44yw4diwt CertificateIssuerLet's Encrypt Subjectrswhowishedto.info Fingerprint4E:37:EC:9E:24:62:7C:24:1C:D4:51:00:35:42:0A:CF:FC:62:C6:D7 ValidityMon, 01 Apr 2024 06:59:08 GMT - Sun, 30 Jun 2024 06:59:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /TzZsU0RgCQ8geRVaHB0XG2A4MSp2QS4FAiVTAjgHFwQEYiIOd0onLSsLXWN0ewZbZ2I/XwhudXcQHyclO0MfbnVpXwI1K3IQGm51YQZCYWp6EBludWlCHDIjcgdKIzA7WlFic34DXWNwfgVdYHZ7 HTTP/1.1
Host: rswhowishedto.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d0000d.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Tue, 07 May 2024 17:48:51 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EgHWDh9EB3f9oH2z%2FAHQve%2BlkdveZ5VZHDYjRS5qw4PcBlyBoBntXRBM6kXkzJQ8%2BQ5UJ1mR6bZPNyhM1dp2jRJBw1emK4%2BuXfA7HNYtvg%2F413%2F3Ibz%2FG7XOGpwb93uuxtj93os%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b16cf4456bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| rswhowishedto.info/dVRFR2RaayY0WSMSADAwIBItHjUdZCEqIhkVditXLwMQAwFGN2MzDRFpdHdUQWRydEIFPSF6VVMnMSYQACd4dkIcOiMoWVMieHZKRmBrdFJbYGMyWURyMTcFEml0YRQBICl6VUJlcHZUQWV2dldFYg | 104.21.63.117 | 204 No Content | 0 B |
URL GET HTTP/2rswhowishedto.info/dVRFR2RaayY0WSMSADAwIBItHjUdZCEqIhkVditXLwMQAwFGN2MzDRFpdHdUQWRydEIFPSF6VVMnMSYQACd4dkIcOiMoWVMieHZKRmBrdFJbYGMyWURyMTcFEml0YRQBICl6VUJlcHZUQWV2dldFYg IP104.21.63.117:443
Requested byhttps://d0000d.com/e/pna44yw4diwt CertificateIssuerLet's Encrypt Subjectrswhowishedto.info Fingerprint4E:37:EC:9E:24:62:7C:24:1C:D4:51:00:35:42:0A:CF:FC:62:C6:D7 ValidityMon, 01 Apr 2024 06:59:08 GMT - Sun, 30 Jun 2024 06:59:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dVRFR2RaayY0WSMSADAwIBItHjUdZCEqIhkVditXLwMQAwFGN2MzDRFpdHdUQWRydEIFPSF6VVMnMSYQACd4dkIcOiMoWVMieHZKRmBrdFJbYGMyWURyMTcFEml0YRQBICl6VUJlcHZUQWV2dldFYg HTTP/1.1
Host: rswhowishedto.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d0000d.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Tue, 07 May 2024 17:48:51 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ne8ju354fYSvSAaDA%2FJ9aoMS6TvCPmAAkpMFYkghEXfP%2FWyt7oUfB2zUz4RRIW1n0ueCCdkb%2BGvyMNVZzyDUk44kMv8ZynClzYdvipthTJemHoMMBrZnywTL9%2B20zfR82VcM1%2Bs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b16df5556bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| getrunkhomuto.info/cTJFakIQUCYHfRAPJ0w3A154T3A3F3csJkJXMAhwFAB0DiFHWnVEIR1dMA4kA10rHmwfVzFPcDdxEy8mIGMQAXE6dnEEJhhzMCQKCQYfIiYaUR1fJShhBBAONXhzJAo3Bx8iIUFQPAV1OlwcGA0bQTUjCgZEBwN2InQHXgo8dQsEEiIGLwgaN0QKKRtUAAcgLCNLDAB2GFYCPCo8YRAYIyl8dyQBGUIOAHpGewENMDxlF10HH3hgWAASZT0HJkJVcA8FJ1scHQwCaCsJejpxJgISQmQ/DxEJF3csGBkHYFgEKHUPAANDSigOOzgBJy0hNlMdDiwrdXBbIUJZPyMoXH80ICw3AwMEDERoHQ4lEnopBhsceD0mOEEDCzkhHH4CICszAQcDIyZwKzoFHQBjADEeXDVXJCNbBz8VIkV2 | 52.85.243.65 | | 1.2 kB |
URL getrunkhomuto.info/cTJFakIQUCYHfRAPJ0w3A154T3A3F3csJkJXMAhwFAB0DiFHWnVEIR1dMA4kA10rHmwfVzFPcDdxEy8mIGMQAXE6dnEEJhhzMCQKCQYfIiYaUR1fJShhBBAONXhzJAo3Bx8iIUFQPAV1OlwcGA0bQTUjCgZEBwN2InQHXgo8dQsEEiIGLwgaN0QKKRtUAAcgLCNLDAB2GFYCPCo8YRAYIyl8dyQBGUIOAHpGewENMDxlF10HH3hgWAASZT0HJkJVcA8FJ1scHQwCaCsJejpxJgISQmQ/DxEJF3csGBkHYFgEKHUPAANDSigOOzgBJy0hNlMdDiwrdXBbIUJZPyMoXH80ICw3AwMEDERoHQ4lEnopBhsceD0mOEEDCzkhHH4CICszAQcDIyZwKzoFHQBjADEeXDVXJCNbBz8VIkV2 IP52.85.243.65:0
File typeHTML document, ASCII text, with very long lines (3012), with no line terminators Hash25876d0e7e0ab195bb4aa91c6bc34328 203f7e1d1a55d43c023ced59905c7ba9638bed69 9e3a2610355401f7274dc9f25f6740f1c78f418c878312bce1eeadfada97e022
GET /cTJFakIQUCYHfRAPJ0w3A154T3A3F3csJkJXMAhwFAB0DiFHWnVEIR1dMA4kA10rHmwfVzFPcDdxEy8mIGMQAXE6dnEEJhhzMCQKCQYfIiYaUR1fJShhBBAONXhzJAo3Bx8iIUFQPAV1OlwcGA0bQTUjCgZEBwN2InQHXgo8dQsEEiIGLwgaN0QKKRtUAAcgLCNLDAB2GFYCPCo8YRAYIyl8dyQBGUIOAHpGewENMDxlF10HH3hgWAASZT0HJkJVcA8FJ1scHQwCaCsJejpxJgISQmQ/DxEJF3csGBkHYFgEKHUPAANDSigOOzgBJy0hNlMdDiwrdXBbIUJZPyMoXH80ICw3AwMEDERoHQ4lEnopBhsceD0mOEEDCzkhHH4CICszAQcDIyZwKzoFHQBjADEeXDVXJCNbBz8VIkV2 HTTP/1.1
Host: getrunkhomuto.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d0000d.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1171
date: Tue, 07 May 2024 17:48:51 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 1cc4305a3ce000ca199328864ca1c98e.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: SaMeAuj0anS2Iun2QegyoCImJDVvFIMY11sEjW5MK4tXBLw3Ss-Fpg==
X-Firefox-Spdy: h2
|
|
| gdecording.info/MlNCOUZTMSFUeVNuIB8zQD9/HHR0dnB/IgE2N1t0V2FzXSUEO3IXJV48N10gQDwsTWhcNjYcdHQaIXEMAB5wUhJ6ASpvEFUCIHwhBwoTfAxxEnMMAmQSGHsCcAkSfCF8CRN8D2EbE1YgemIAYwFaayF7IQY3D2wPZAIBewJhNAxrC0g4NWsxfzcUXh9/BXNrB2QRMmoESjcSbABrGwcJf3oVE14TdxYxcRJFAgF+EFoGAWsHcAYAeA16AhBuAV4KCn8xBhYKTiFUCzVsFGRjEAgedGYBbDF0CRV4NnoSKUECfxUPexFgJCB+A2sBFGwEdQBzfwF+Bm94DmYWD04TRRUYeCFgBwN6LngBBF4CYxUUeBReAg98PlkJBFU1AAIHYAVlBgB9FFUZD2gtewIVUTVkFQBVCmYWCwkSRQUKaABjFwZVIRQ5MVYoQm42eHZRIAsKfkcxGHAEA2M2 | 3.164.240.29 | 200 OK | 1.2 kB |
URL GET HTTP/2gdecording.info/MlNCOUZTMSFUeVNuIB8zQD9/HHR0dnB/IgE2N1t0V2FzXSUEO3IXJV48N10gQDwsTWhcNjYcdHQaIXEMAB5wUhJ6ASpvEFUCIHwhBwoTfAxxEnMMAmQSGHsCcAkSfCF8CRN8D2EbE1YgemIAYwFaayF7IQY3D2wPZAIBewJhNAxrC0g4NWsxfzcUXh9/BXNrB2QRMmoESjcSbABrGwcJf3oVE14TdxYxcRJFAgF+EFoGAWsHcAYAeA16AhBuAV4KCn8xBhYKTiFUCzVsFGRjEAgedGYBbDF0CRV4NnoSKUECfxUPexFgJCB+A2sBFGwEdQBzfwF+Bm94DmYWD04TRRUYeCFgBwN6LngBBF4CYxUUeBReAg98PlkJBFU1AAIHYAVlBgB9FFUZD2gtewIVUTVkFQBVCmYWCwkSRQUKaABjFwZVIRQ5MVYoQm42eHZRIAsKfkcxGHAEA2M2 IP3.164.240.29:443
Requested byhttps://d0000d.com/e/pna44yw4diwt CertificateIssuerAmazon Subjectgdecording.info FingerprintE8:E5:B0:7B:03:CA:61:A8:E1:DE:26:D8:50:E1:18:3C:F7:70:D0:99 ValidityMon, 15 Apr 2024 00:00:00 GMT - Wed, 14 May 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3050), with no line terminators Hashc1420c46b86f6a841ec8daf55992d08a 20dbe119713c7be7c86e8d49514196bd38aaba4e ba2850a5adaea2b7598be6b2d4259ac9439d0d5ae719ec86e6779bfed3bc73d2
GET /MlNCOUZTMSFUeVNuIB8zQD9/HHR0dnB/IgE2N1t0V2FzXSUEO3IXJV48N10gQDwsTWhcNjYcdHQaIXEMAB5wUhJ6ASpvEFUCIHwhBwoTfAxxEnMMAmQSGHsCcAkSfCF8CRN8D2EbE1YgemIAYwFaayF7IQY3D2wPZAIBewJhNAxrC0g4NWsxfzcUXh9/BXNrB2QRMmoESjcSbABrGwcJf3oVE14TdxYxcRJFAgF+EFoGAWsHcAYAeA16AhBuAV4KCn8xBhYKTiFUCzVsFGRjEAgedGYBbDF0CRV4NnoSKUECfxUPexFgJCB+A2sBFGwEdQBzfwF+Bm94DmYWD04TRRUYeCFgBwN6LngBBF4CYxUUeBReAg98PlkJBFU1AAIHYAVlBgB9FFUZD2gtewIVUTVkFQBVCmYWCwkSRQUKaABjFwZVIRQ5MVYoQm42eHZRIAsKfkcxGHAEA2M2 HTTP/1.1
Host: gdecording.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d0000d.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1197
date: Tue, 07 May 2024 17:48:51 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 b78539d5f13f3162976a6abc8783d3de.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: ymATZMbaSYpr5EbcPk6CaUgvZKF5Yinmmw4SWhF8OeGYp-2xsuIgIA==
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash5991db4ffbfc4b57b0f99a35a0e6a3d0 1b74b56ddc178de4587ef8898436cff19cc2c66b 17904ae58c5cfd605b9b96ef28a59c0b158141c0d69922267a677ff041ca24d9
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 May 2024 17:48:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash5991db4ffbfc4b57b0f99a35a0e6a3d0 1b74b56ddc178de4587ef8898436cff19cc2c66b 17904ae58c5cfd605b9b96ef28a59c0b158141c0d69922267a677ff041ca24d9
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 May 2024 17:48:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 74.125.131.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP74.125.131.84:443
Requested byhttps://d0000d.com/e/pna44yw4diwt CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint75:65:5E:EB:A9:59:16:DF:32:A3:39:DC:8A:A2:FD:28:92:33:6B:0D ValidityTue, 16 Apr 2024 04:20:43 GMT - Tue, 09 Jul 2024 04:20:42 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d0000d.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:4K-OwtV-slke9ZSwm4-HlWoVOabRTA:ct3D8g4UTpLSUrjS; Expires=Thu, 07-May-2026 17:48:51 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 07 May 2024 17:48:51 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AaSxoQzwyadiO_cYSlrpNt6bAqQ2EGMYsIW2Yzxy-y0HYJ6MpwDxbEKE12GYeFjrt7kH9EoOchB3_w
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-cWG0njMgLDHdOjc0ZTdcbQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail | 74.125.131.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail IP74.125.131.84:443
Requested byhttps://d0000d.com/e/pna44yw4diwt CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint75:65:5E:EB:A9:59:16:DF:32:A3:39:DC:8A:A2:FD:28:92:33:6B:0D ValidityTue, 16 Apr 2024 04:20:43 GMT - Tue, 09 Jul 2024 04:20:42 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d0000d.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:2QTBrZ5FeSj9NyVgxvajWJ-Ik1NyZA:khrBOzhpLWIbeO_t; Expires=Thu, 07-May-2026 17:48:51 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 07 May 2024 17:48:51 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AaSxoQzgoiKvTBCTfnGCQsDbCPbPooAYboFbp4QkYpNeUGX7S5pnJQ_uGrY9CevsgOtzCQa-KYIVOg
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-PmhDTzTVyA7uMyil4xJL6A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AaSxoQzwyadiO_cYSlrpNt6bAqQ2EGMYsIW2Yzxy-y0HYJ6MpwDxbEKE12GYeFjrt7kH9EoOchB3_w | 74.125.131.84 | | 426 B |
URL accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AaSxoQzwyadiO_cYSlrpNt6bAqQ2EGMYsIW2Yzxy-y0HYJ6MpwDxbEKE12GYeFjrt7kH9EoOchB3_w IP74.125.131.84:0
CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint75:65:5E:EB:A9:59:16:DF:32:A3:39:DC:8A:A2:FD:28:92:33:6B:0D ValidityTue, 16 Apr 2024 04:20:43 GMT - Tue, 09 Jul 2024 04:20:42 GMT
File typeHTML document, ASCII text, with very long lines (405) Hash86499bff578a63e95fa6c31d34111f55 6a476207472f1960ef6d5798148c60a53e386c74 bf01f4bcded9beae7b00a8e10bfa05965d8e1ffd7240da0ee9d0f4b98e376600
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AaSxoQzwyadiO_cYSlrpNt6bAqQ2EGMYsIW2Yzxy-y0HYJ6MpwDxbEKE12GYeFjrt7kH9EoOchB3_w HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d0000d.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:36vGDFYUNZdpywjPCq2INNiEl3u-7g:IkF02HRLe1zQ6eOA;Path=/;Expires=Thu, 07-May-2026 17:48:51 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 07 May 2024 17:48:52 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQz3V9RIeAUqMqa0OoWqEffYCsYzvlEpO1M3eA2LLZao_6gYVEtTNRT4ioA_4zLYufGL3ZDo&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-502711286%3A1715104132005235&theme=mn&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-I-WQlfpHSThpoqaaK-N4JA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 426
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashd59e53e22f3681f080bc6a493b7508a1 50ec966f62f5efce0a5fbea8917c5c5b025eaccf cffc1da003262cd2907f76fb611cccac521441669302d10fae3aeb0c9a81c181
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 May 2024 17:48:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| pogothere.xyz/asd100.bin | 188.114.97.1 | | 103 kB |
IP188.114.97.1:0
Size103 kB (102823 bytes) Hash8db5dec28861517349418df61182cb95 a09b2c221cffe66a375cb711f29be4e89ca38f16 427c72da731385b606bfadff89a1ba324eb0c9de3cd596b8253f1cfda54efb2a
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d0000d.com/
Origin: https://d0000d.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:51 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://d0000d.com
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 3731
last-modified: Tue, 07 May 2024 16:46:40 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cW8Yf%2FKLGoEtQ7frYufTKzAHyq2iWaEHAUZybdmDMj8%2BqsSO%2BVEpygVStmxJTTq3u9rGaQhDa5L6UIiEZ0S5M0Bb0rM3M5S6kdD0e%2FHDlU2mS7zeM7c%2BMLc3q7x8SnSh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88030b187df37131-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| d3eub2e21dc6h0.cloudfront.net/CVEdQQUk3KD4ndiAuNHx4ZHdkcX5gYSAzLDJ6NHF5ZHc0byo7KnYrOjspIHwvBi4SFB4HMGNnPS4jbXFvOCY+JnRyIj4idGVhMSUraXN2NChpKj87IDgrMWR7EnJ+cWxmd3g5eGViYwNsZnc8KCchP3VzeSx/Zh5/YGJjA2xmdyI3bGcGaXdnZG51c3kzIj-MqJnF1FnN5ZXdgcHllYmJxLz01NScmLGJiB3BiaWBnPGl2 | 143.204.42.25 | 200 OK | 254 B |
URL GET HTTP/2d3eub2e21dc6h0.cloudfront.net/CVEdQQUk3KD4ndiAuNHx4ZHdkcX5gYSAzLDJ6NHF5ZHc0byo7KnYrOjspIHwvBi4SFB4HMGNnPS4jbXFvOCY+JnRyIj4idGVhMSUraXN2NChpKj87IDgrMWR7EnJ+cWxmd3g5eGViYwNsZnc8KCchP3VzeSx/Zh5/YGJjA2xmdyI3bGcGaXdnZG51c3kzIj-MqJnF1FnN5ZXdgcHllYmJxLz01NScmLGJiB3BiaWBnPGl2 IP143.204.42.25:443
Requested byhttps://getrunkhomuto.info/cTJFakIQUCYHfRAPJ0w3A154T3A3F3csJkJXMAhwFAB0DiFHWnVEIR1dMA4kA10rHmwfVzFPcDdxEy8mIGMQAXE6dnEEJhhzMCQKCQYfIiYaUR1fJShhBBAONXhzJAo3Bx8iIUFQPAV1OlwcGA0bQTUjCgZEBwN2InQHXgo8dQsEEiIGLwgaN0QKKRtUAAcgLCNLDAB2GFYCPCo8YRAYIyl8dyQBGUIOAHpGewENMDxlF10HH3hgWAASZT0HJkJVcA8FJ1scHQwCaCsJejpxJgISQmQ/DxEJF3csGBkHYFgEKHUPAANDSigOOzgBJy0hNlMdDiwrdXBbIUJZPyMoXH80ICw3AwMEDERoHQ4lEnopBhsceD0mOEEDCzkhHH4CICszAQcDIyZwKzoFHQBjADEeXDVXJCNbBz8VIkV2 CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash0da559a79f9e42a836575cc3ca39d9f7 ccb7dcc5ccf6a94ae4fbf47a1391c3ab202bcd08 d200b21ef9c2f273f81d3ecf6149b7206dd196400617211401304c5400691cd4
GET /CVEdQQUk3KD4ndiAuNHx4ZHdkcX5gYSAzLDJ6NHF5ZHc0byo7KnYrOjspIHwvBi4SFB4HMGNnPS4jbXFvOCY+JnRyIj4idGVhMSUraXN2NChpKj87IDgrMWR7EnJ+cWxmd3g5eGViYwNsZnc8KCchP3VzeSx/Zh5/YGJjA2xmdyI3bGcGaXdnZG51c3kzIj-MqJnF1FnN5ZXdgcHllYmJxLz01NScmLGJiB3BiaWBnPGl2 HTTP/1.1
Host: d3eub2e21dc6h0.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://getrunkhomuto.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 254
date: Tue, 07 May 2024 17:48:52 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Ek2H9gxQZncHZ5dmBG_q6F7I5bL7owlhpC6i9FtmvxzMSj8LIRKUgw==
X-Firefox-Spdy: h2
|
|
| d3eub2e21dc6h0.cloudfront.net/IcHJ2M2kTHRhVVgQbEg5YQEJCA15DVAZBDBZPEgNZQEISHQofH1BZGh8cBg4dMUIVQCBDSgNRMzkwRwMdVgYMV1RAVBpSBxdPUFYHE09HFQgUEEsHTwQCGVhUCRABUBAKHQRWGlYHFw4EHwgfXwURV0R1XF5CUwFZWApHAkxDMFMBWRwbGEYRVUBGS1FGLU-AHTEMwUwFZAgRTAChJRFgDQFVARlQMExkZFls2QEYCWUBDRgJMQkIQWhsVFBlLTEI0TwVHQFQDDlg | 143.204.42.25 | 200 OK | 603 B |
URL GET HTTP/2d3eub2e21dc6h0.cloudfront.net/IcHJ2M2kTHRhVVgQbEg5YQEJCA15DVAZBDBZPEgNZQEISHQofH1BZGh8cBg4dMUIVQCBDSgNRMzkwRwMdVgYMV1RAVBpSBxdPUFYHE09HFQgUEEsHTwQCGVhUCRABUBAKHQRWGlYHFw4EHwgfXwURV0R1XF5CUwFZWApHAkxDMFMBWRwbGEYRVUBGS1FGLU-AHTEMwUwFZAgRTAChJRFgDQFVARlQMExkZFls2QEYCWUBDRgJMQkIQWhsVFBlLTEI0TwVHQFQDDlg IP143.204.42.25:443
Requested byhttps://gdecording.info/MlNCOUZTMSFUeVNuIB8zQD9/HHR0dnB/IgE2N1t0V2FzXSUEO3IXJV48N10gQDwsTWhcNjYcdHQaIXEMAB5wUhJ6ASpvEFUCIHwhBwoTfAxxEnMMAmQSGHsCcAkSfCF8CRN8D2EbE1YgemIAYwFaayF7IQY3D2wPZAIBewJhNAxrC0g4NWsxfzcUXh9/BXNrB2QRMmoESjcSbABrGwcJf3oVE14TdxYxcRJFAgF+EFoGAWsHcAYAeA16AhBuAV4KCn8xBhYKTiFUCzVsFGRjEAgedGYBbDF0CRV4NnoSKUECfxUPexFgJCB+A2sBFGwEdQBzfwF+Bm94DmYWD04TRRUYeCFgBwN6LngBBF4CYxUUeBReAg98PlkJBFU1AAIHYAVlBgB9FFUZD2gtewIVUTVkFQBVCmYWCwkSRQUKaABjFwZVIRQ5MVYoQm42eHZRIAsKfkcxGHAEA2M2 CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typeASCII text, with very long lines (852), with no line terminators Hash184ba8b9abc4a9feaca39c28e49ce29c f72d79b6783bbb339c8dc9ca0abcd515375ad0c0 9abb1ee9d4904d6fab14620c711453a8335797debabfecf37d39e58ecda1641b
GET /IcHJ2M2kTHRhVVgQbEg5YQEJCA15DVAZBDBZPEgNZQEISHQofH1BZGh8cBg4dMUIVQCBDSgNRMzkwRwMdVgYMV1RAVBpSBxdPUFYHE09HFQgUEEsHTwQCGVhUCRABUBAKHQRWGlYHFw4EHwgfXwURV0R1XF5CUwFZWApHAkxDMFMBWRwbGEYRVUBGS1FGLU-AHTEMwUwFZAgRTAChJRFgDQFVARlQMExkZFls2QEYCWUBDRgJMQkIQWhsVFBlLTEI0TwVHQFQDDlg HTTP/1.1
Host: d3eub2e21dc6h0.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gdecording.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 603
date: Tue, 07 May 2024 17:48:52 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lUw0hhmB9oo23JITdb-twrHojsGAek6s5YBMWj-4MNeusOTDFxKN2g==
X-Firefox-Spdy: h2
|
|
| i.doodcdn.co/css/embed.css | 104.26.6.74 | | 95 kB |
URL i.doodcdn.co/css/embed.css IP104.26.6.74:0
CertificateIssuerCloudflare, Inc. Subjectdoodcdn.co Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3 ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (65532), with no line terminators Hashf0c6c21e02618b777dec3aa097f28905 49bdecd548523f46c5cf4a58431eb464abee6b08 3937c73cfed52b3a089f1f2195678adb4058327509a787c1c581c5301c5ffe36
GET /css/embed.css HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d0000d.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: minify
cf-polished: origSize=79890
etag: W/"61d3187c-13812"
expires: Wed, 05 Jun 2024 16:19:28 GMT
last-modified: Mon, 03 Jan 2022 15:38:36 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 5453
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Oe37HufzmvezJuUYGqrCVIfDghqrCqvxJZjldB%2B9ZHY0swkvwwh4McshTxGRLMDB1pA9UxFW%2FL5orqOZ5wvu2f6wh592DjjNTlnAc6LK9nT7JH1bnn6qL6ZVI3iO0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b0fef7b5691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQxTrLaIlbcVsuQaADyLVvh84Aq-zwMscYpS_GV6RiqIbV8z1s0sxcTbpTEKG8lBMScfgvoh&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1007620923%3A1715104132034710&theme=mn&ddm=0 | 74.125.131.84 | | 819 B |
URL accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQxTrLaIlbcVsuQaADyLVvh84Aq-zwMscYpS_GV6RiqIbV8z1s0sxcTbpTEKG8lBMScfgvoh&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1007620923%3A1715104132034710&theme=mn&ddm=0 IP74.125.131.84:0
CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint75:65:5E:EB:A9:59:16:DF:32:A3:39:DC:8A:A2:FD:28:92:33:6B:0D ValidityTue, 16 Apr 2024 04:20:43 GMT - Tue, 09 Jul 2024 04:20:42 GMT
File typegzip compressed data, max compression Hashd474f91d27f8b480fb77520306f93726 f5b226b50ae71a89387b0c74a4a80bda3c3e602d 9f4ffc4d5a0562a84a5cc48112ae630b1f2535fbaceb5540280686e560a3c643
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQxTrLaIlbcVsuQaADyLVvh84Aq-zwMscYpS_GV6RiqIbV8z1s0sxcTbpTEKG8lBMScfgvoh&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1007620923%3A1715104132034710&theme=mn&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d0000d.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 07 May 2024 17:48:52 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-nc78gMGoRz6MC15uww27NQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| img.strpst.com/thumbs/1715104020/71220142_webp | 104.17.11.106 | | 28 kB |
URL img.strpst.com/thumbs/1715104020/71220142_webp IP104.17.11.106:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp Hash759d629a87732a22bf0290c6e76fbd7f a20dd2e3b6e6c471e8bde5e2e08693b1e5d6673e d771a39c7a9c86fdf6bb56e990122a6226509bdf85a1374c2816668de21c1834
GET /thumbs/1715104020/71220142_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:52 GMT
content-type: image/webp
content-length: 27610
etag: "759d629a87732a22bf0290c6e76fbd7f"
last-modified: Tue, 07 May 2024 17:46:44 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 100
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 88030b1e0a2c56ab-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| go.bbrdbr.com/api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=1&usePreroll&webp=1&sortBy=mlRank | 104.18.40.50 | | 745 B |
URL go.bbrdbr.com/api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=1&usePreroll&webp=1&sortBy=mlRank IP104.18.40.50:0
Hash7e2306813f33d9fe7f615fddaa06cc06 44f0f09ac76df95f37758849a345d947ac4d54f8 a6499add0722783b24b926015b50d3702c6bd12b20d10d61d08d341ecbcee0aa
GET /api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=1&usePreroll&webp=1&sortBy=mlRank HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:52 GMT
content-type: application/json
access-control-allow-origin: https://creative.bbrdbr.com
access-control-allow-credentials: true
vary: Origin, Accept-Encoding
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Tue, 07 May 2024 17:48:38 GMT
cf-cache-status: HIT
age: 3
server: cloudflare
cf-ray: 88030b1dccb45687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| creative.bbrdbr.com/widgets/v4/Universal/lang/en.json | 104.18.40.50 | | 11 kB |
URL creative.bbrdbr.com/widgets/v4/Universal/lang/en.json IP104.18.40.50:0
Hash69a54638b649d7ce4748bd42c4b6dade a2dfe9f8791952fbc5cc44d4757b031a6cee1731 0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750
GET /widgets/v4/Universal/lang/en.json HTTP/1.1
Host: creative.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid}
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:52 GMT
content-type: application/json
last-modified: Mon, 29 Apr 2024 08:13:29 GMT
etag: W/"662f56a9-ac"
expires: Tue, 07 May 2024 17:48:52 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 3
vary: Accept-Encoding
server: cloudflare
cf-ray: 88030b1caacd5687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| i.doodcdn.co/get_slides/741/dng5a1l37o4ab0ea.jpg | 104.26.6.74 | | 3.2 kB |
URL i.doodcdn.co/get_slides/741/dng5a1l37o4ab0ea.jpg IP104.26.6.74:0
CertificateIssuerCloudflare, Inc. Subjectdoodcdn.co Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3 ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashe626195627ecd11b3c10a28f13af9a74 151e1599c437a3e10807fe8a16c8eba24dc05e03 c3942c36b51eef6649828fec8a6468049c7e29a98094b5acbd7fab9a82d5816c
GET /get_slides/741/dng5a1l37o4ab0ea.jpg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d0000d.com
DNT: 1
Connection: keep-alive
Referer: https://d0000d.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:51 GMT
content-type: text/vtt
access-control-allow-origin: *
last-modified: Tue, 07 May 2024 04:20:53 GMT
cache-control: max-age=86400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=igSwZJQc8sDt1%2BlYKShEq6gJ87ZlOXusdx7wIOyEmis1VoXuOYUmvL3HeEJ8fyNOzH6ZppNM27vcXoqIUzWJWRKGDm9X3HOg6q4%2BnQqOp8Ttei0cqc03FM57FlnPAw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88030b15c9a1b500-OSL
alt-svc: h3=":443"; ma=86400
|
|
| go.bbrdbr.com/app/domain-checker/check-result | 104.18.40.50 | 204 No Content | 0 B |
URL POST HTTP/3go.bbrdbr.com/app/domain-checker/check-result IP104.18.40.50:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerCloudflare, Inc. Subjectbbrdbr.com Fingerprint54:D2:62:A8:E8:91:19:F3:B4:1C:47:61:81:1B:D4:97:94:1B:26:9E ValidityFri, 26 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /app/domain-checker/check-result HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 237
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Tue, 07 May 2024 17:48:53 GMT
access-control-allow-origin: https://creative.bbrdbr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtqFVkgfjmU48Q4QE1YgEsMCfUyji; SameSite=None; Secure; path=/; expires=Wed, 08-May-24 17:48:53 GMT; HttpOnly
server: cloudflare
cf-ray: 88030b1fa81f5687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| edge-hls.doppiocdn.net/hls/71220142/master/71220142_480p.m3u8 | 143.204.55.122 | 200 OK | 488 B |
URL GET HTTP/2edge-hls.doppiocdn.net/hls/71220142/master/71220142_480p.m3u8 IP143.204.55.122:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash23561e490c7c1209b67add17273134f2 23aa57a1f4177c61255e5c32e4d15b3bef870bcd 7b97b5117202398c1d2556029ebbe5d70d9c168350acee74a0dba31563252b99
GET /hls/71220142/master/71220142_480p.m3u8 HTTP/1.1
Host: edge-hls.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
server: nginx
date: Tue, 07 May 2024 17:48:51 GMT
last-modified: Tue, 07 May 2024 17:48:44 GMT
access-control-allow-origin: *
cache-control: public, max-age=3, s-maxage=3, no-transform
timing-allow-origin: *
x-proxy-cache-orig: HIT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: iFPhsdrTiPahgcisHwOciKwgMNi2x_itzDd1-aHfTGqBi7UHs24BoA==
age: 2
X-Firefox-Spdy: h2
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_init_nDdgJW19UXGzEp63.mp4 | 143.204.55.115 | | 1.2 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_init_nDdgJW19UXGzEp63.mp4 IP143.204.55.115:0
File typeISO Media, MP4 Base Media v5 Hash250654525d8158092ddba214ccec9174 4d6fd3e17980ed9245c24d4b641b145645371d61 db5e3ce9885ee5fe2c06e59b4d1a1b5f9d6792ebd85e32df068472663649998a
GET /hls/71220142/71220142_480p_init_nDdgJW19UXGzEp63.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: video/mp4
content-length: 1238
server: nginx
last-modified: Tue, 07 May 2024 16:35:02 GMT
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Tue, 07 May 2024 17:48:47 GMT
cache-control: public, max-age=60, s-maxage=60, no-transform
etag: "663a5836-4d6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: YJA-dq9aOKjvq2i0KCUQvklQsrqsWuxASYbFHGSE-jrTcMzJQCnlZA==
age: 6
X-Firefox-Spdy: h2
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 320 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size320 kB (320406 bytes) Hashb614d25aa67a77a8f7c4c6ba5f5cd871 9b173f2eb7535b21a41d0f429abe438bc5d523a4 7f6765a0aefdfab874ae9fa55e1050b78c26ce18c8d373414de6d9826e3d429b
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
server: nginx
date: Tue, 07 May 2024 17:48:53 GMT
last-modified: Tue, 07 May 2024 17:48:51 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: HQ8jF9UxhX0hTzpOtjVfeXNGo7Zhqnz1BbE1XV6BjPF4Hsl1N4fW-A==
X-Firefox-Spdy: h2
|
|
| creative.bbrdbr.com/widgets/v4/Universal/vendors~hls.4e73797b4b4d83cd7f24.js | 104.18.40.50 | | 82 kB |
URL creative.bbrdbr.com/widgets/v4/Universal/vendors~hls.4e73797b4b4d83cd7f24.js IP104.18.40.50:0
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash3ea5a3687f28524f171b6ea56bf39169 baa00826de945dd0fbdaf3850661747bf2ea7681 d53162f15d2494c0c6692385f83704c54833543ce62fd02cab01dd37bea0be8a
GET /widgets/v4/Universal/vendors~hls.4e73797b4b4d83cd7f24.js HTTP/1.1
Host: creative.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid}
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:53 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 29 Apr 2024 08:14:47 GMT
etag: W/"662f56f7-411b5"
expires: Tue, 07 May 2024 17:48:59 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 2
vary: Accept-Encoding
server: cloudflare
cf-ray: 88030b1fc8725687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2211_4iHTou8BO3mXvBss_1715104125.mp4 | 143.204.55.115 | 200 OK | 320 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2211_4iHTou8BO3mXvBss_1715104125.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size320 kB (320085 bytes) Hash2ff4755bfa2b8dfa1f92f15552a48c95 acd9bad9e875880f67cd934943ca4241ed3e7e8b b0f79e6e0ceb2196d634319b649ea8bca257d2e65480a91ff89bda62bb450261
GET /hls/71220142/71220142_480p_2211_4iHTou8BO3mXvBss_1715104125.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 320085
age: 4
server: nginx
date: Tue, 07 May 2024 17:48:49 GMT
last-modified: Tue, 07 May 2024 17:48:47 GMT
etag: "663a697f-4e255"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: NPj5Szia3WWbawt4m6U0AuZzKXq5ORCo3rYak3uvStmZS84oeMUDqA==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2212_sG6DoW6Cza75vIC0_1715104127.mp4 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2212_sG6DoW6Cza75vIC0_1715104127.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (311848 bytes) Hash7d5843e91a1e684e83adc692156b8d2c ed033325b028312f8094afadf8b0c52aa64fc1f1 b5ed1bbe9c22b435b90c6eb9662ecac61299fb61418e14f865316e451e76a85d
GET /hls/71220142/71220142_480p_2212_sG6DoW6Cza75vIC0_1715104127.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 311848
age: 2
server: nginx
date: Tue, 07 May 2024 17:48:51 GMT
last-modified: Tue, 07 May 2024 17:48:49 GMT
etag: "663a6981-4c228"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: L4iU6FyOXpD16L5Sno9fgUE3K3qXY3x8VKsee65bAFx6ZJNp-9yE_A==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2211_4iHTou8BO3mXvBss_1715104125.mp4 | 143.204.55.115 | 200 OK | 320 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2211_4iHTou8BO3mXvBss_1715104125.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size320 kB (320085 bytes) Hash2ff4755bfa2b8dfa1f92f15552a48c95 acd9bad9e875880f67cd934943ca4241ed3e7e8b b0f79e6e0ceb2196d634319b649ea8bca257d2e65480a91ff89bda62bb450261
GET /hls/71220142/71220142_480p_2211_4iHTou8BO3mXvBss_1715104125.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 320085
age: 4
server: nginx
date: Tue, 07 May 2024 17:48:49 GMT
last-modified: Tue, 07 May 2024 17:48:47 GMT
etag: "663a697f-4e255"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: IjZSzlXFvzKTBTJdtZLwNd3TLxW3SFZ5OBMJDpuMYZhU03YHmf4onA==
|
|
| go.bbrdbr.com/api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll&webp=1&sortBy=mlRank | 104.18.40.50 | 200 OK | 313 kB |
URL GET HTTP/3go.bbrdbr.com/api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll&webp=1&sortBy=mlRank IP104.18.40.50:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerCloudflare, Inc. Subjectbbrdbr.com Fingerprint54:D2:62:A8:E8:91:19:F3:B4:1C:47:61:81:1B:D4:97:94:1B:26:9E ValidityFri, 26 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Size313 kB (312661 bytes) Hash120ef0e0befcf6e329a270999fa1bc0d dc86e23b954b3032e5f69c9bb9546d7a3efc8ee3 aefcf1ee6b412f36eafe12027389a79774c1dd52c9a7277f8feceb047a54ca00
GET /api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll&webp=1&sortBy=mlRank HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Cookie: __cflb=0H28upDCGznfDm9XVEL2Ezfg4QRCzShudZt3EUk1krG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:53 GMT
content-type: application/json
access-control-allow-origin: https://creative.bbrdbr.com
access-control-allow-credentials: true
vary: Origin, Accept-Encoding
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Tue, 07 May 2024 17:48:40 GMT
cf-cache-status: HIT
age: 2
server: cloudflare
cf-ray: 88030b219baa5687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| go.bbrdbr.com/metric/store/play | 104.18.40.50 | 204 No Content | 0 B |
URL POST HTTP/3go.bbrdbr.com/metric/store/play IP104.18.40.50:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerCloudflare, Inc. Subjectbbrdbr.com Fingerprint54:D2:62:A8:E8:91:19:F3:B4:1C:47:61:81:1B:D4:97:94:1B:26:9E ValidityFri, 26 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /metric/store/play HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 230
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Tue, 07 May 2024 17:48:53 GMT
access-control-allow-origin: https://creative.bbrdbr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28upDCGznfDm9XVDEEFVkNrzLraWwe6ZXcZ9VydNt; SameSite=None; Secure; path=/; expires=Wed, 08-May-24 17:48:53 GMT; HttpOnly
server: cloudflare
cf-ray: 88030b2498a65687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| go.bbrdbr.com/config?url=https%3A%2F%2Fcreative.bbrdbr.com%2Fwidgets%2Fv4%2FUniversal%3Ftag%3Dgirls%26thumbsMargin%3D0%26gridRows%3D1%26gridColumns%3D1%26sourceId%3D300cps2girlwl%26creativeId%3D300cps2girlwl%26responsive%3D0%26hideButton%3D1%26hideTitle%3D1%26userId%3Debe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75%26autoplay%3Dall%26autoplayForce%3D1%26action%3DsbSignupWithModel%26memberId%3D%7Bclickid%7D | 172.64.147.206 | | 7.7 kB |
URL go.bbrdbr.com/config?url=https%3A%2F%2Fcreative.bbrdbr.com%2Fwidgets%2Fv4%2FUniversal%3Ftag%3Dgirls%26thumbsMargin%3D0%26gridRows%3D1%26gridColumns%3D1%26sourceId%3D300cps2girlwl%26creativeId%3D300cps2girlwl%26responsive%3D0%26hideButton%3D1%26hideTitle%3D1%26userId%3Debe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75%26autoplay%3Dall%26autoplayForce%3D1%26action%3DsbSignupWithModel%26memberId%3D%7Bclickid%7D IP172.64.147.206:0
Hashc2dfbb820d307e0a5ad26d157ff577b2 4ac5658cc3715fddd3292b617226d847c1fb1e04 6b253595e447d2cc67cf7b91c63bc4ba585527a7a15dd678b9c6fbe5297df7ac
GET /config?url=https%3A%2F%2Fcreative.bbrdbr.com%2Fwidgets%2Fv4%2FUniversal%3Ftag%3Dgirls%26thumbsMargin%3D0%26gridRows%3D1%26gridColumns%3D1%26sourceId%3D300cps2girlwl%26creativeId%3D300cps2girlwl%26responsive%3D0%26hideButton%3D1%26hideTitle%3D1%26userId%3Debe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75%26autoplay%3Dall%26autoplayForce%3D1%26action%3DsbSignupWithModel%26memberId%3D%7Bclickid%7D HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:52 GMT
content-type: application/json
access-control-allow-origin: https://creative.bbrdbr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Tue, 07 May 2024 17:42:36 GMT
cf-cache-status: HIT
age: 75
vary: Accept-Encoding
server: cloudflare
cf-ray: 88030b1cef67b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2211_4iHTou8BO3mXvBss_1715104125.mp4 | 143.204.55.115 | 200 OK | 320 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2211_4iHTou8BO3mXvBss_1715104125.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size320 kB (320085 bytes) Hash2ff4755bfa2b8dfa1f92f15552a48c95 acd9bad9e875880f67cd934943ca4241ed3e7e8b b0f79e6e0ceb2196d634319b649ea8bca257d2e65480a91ff89bda62bb450261
GET /hls/71220142/71220142_480p_2211_4iHTou8BO3mXvBss_1715104125.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 320085
age: 4
server: nginx
date: Tue, 07 May 2024 17:48:49 GMT
last-modified: Tue, 07 May 2024 17:48:47 GMT
etag: "663a697f-4e255"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 3mrqS9BkdvhbqOOFWK52fBsSCQmHeI3PS1pksYk5hnsKQNKjMKTfFw==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2212_sG6DoW6Cza75vIC0_1715104127.mp4 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2212_sG6DoW6Cza75vIC0_1715104127.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (311848 bytes) Hash7d5843e91a1e684e83adc692156b8d2c ed033325b028312f8094afadf8b0c52aa64fc1f1 b5ed1bbe9c22b435b90c6eb9662ecac61299fb61418e14f865316e451e76a85d
GET /hls/71220142/71220142_480p_2212_sG6DoW6Cza75vIC0_1715104127.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 311848
age: 3
server: nginx
date: Tue, 07 May 2024 17:48:51 GMT
last-modified: Tue, 07 May 2024 17:48:49 GMT
etag: "663a6981-4c228"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: L2C4KiHNkkNJbWy0XsBvmsjd6Yl-8D3K6QFaIpzZDxd5hACY-l1J9w==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2211_4iHTou8BO3mXvBss_1715104125.mp4 | 143.204.55.115 | 200 OK | 320 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2211_4iHTou8BO3mXvBss_1715104125.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size320 kB (320085 bytes) Hash2ff4755bfa2b8dfa1f92f15552a48c95 acd9bad9e875880f67cd934943ca4241ed3e7e8b b0f79e6e0ceb2196d634319b649ea8bca257d2e65480a91ff89bda62bb450261
GET /hls/71220142/71220142_480p_2211_4iHTou8BO3mXvBss_1715104125.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 320085
age: 5
server: nginx
date: Tue, 07 May 2024 17:48:49 GMT
last-modified: Tue, 07 May 2024 17:48:47 GMT
etag: "663a697f-4e255"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: w2TnotDc9E7Id4f6XVUrZUTjTsf-UKp76y4YcIEa3P8-5yKtfwCcoQ==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size312 kB (312169 bytes) Hash3fda4ce2f9203e1a22f6487bba9567d9 dbdd929949ef2ee6b44e4b5546bb92df741416cb 1626b16ad8d1b2bf23fe51ff9c12f7b2ac504f16de44f175c9def8f2b8c81f89
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-C1
server: nginx
last-modified: Tue, 07 May 2024 17:48:51 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Tue, 07 May 2024 17:48:54 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-id: PpRjo7V7JUbz3evBFf6Q2FNE0WAsf7lYHdmA-5mnyIinPmRIxSSL_w==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2211_4iHTou8BO3mXvBss_1715104125.mp4 | 143.204.55.115 | 200 OK | 320 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2211_4iHTou8BO3mXvBss_1715104125.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size320 kB (320085 bytes) Hash2ff4755bfa2b8dfa1f92f15552a48c95 acd9bad9e875880f67cd934943ca4241ed3e7e8b b0f79e6e0ceb2196d634319b649ea8bca257d2e65480a91ff89bda62bb450261
GET /hls/71220142/71220142_480p_2211_4iHTou8BO3mXvBss_1715104125.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 320085
age: 5
server: nginx
date: Tue, 07 May 2024 17:48:49 GMT
last-modified: Tue, 07 May 2024 17:48:47 GMT
etag: "663a697f-4e255"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Vt7U1TMIU7uZhnbcGMSnUTVM8Hp4B6kfmy76zMustyvMEKuFlHz-EA==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size312 kB (312169 bytes) Hash3fda4ce2f9203e1a22f6487bba9567d9 dbdd929949ef2ee6b44e4b5546bb92df741416cb 1626b16ad8d1b2bf23fe51ff9c12f7b2ac504f16de44f175c9def8f2b8c81f89
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Tue, 07 May 2024 17:48:51 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Tue, 07 May 2024 17:48:54 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6qCEk7qE-9MmyV76ABSMhc8xMcrfIPXP9C4t2a1p_5G3iWqoY7Sxrw==
|
|
| unpkg.com/@silvermine/videojs-quality-selector@1.2.4/dist/js/silvermine-videojs-quality-selector.min.js?ver=1.2.4 | 104.17.245.203 | | 320 kB |
URL unpkg.com/@silvermine/videojs-quality-selector@1.2.4/dist/js/silvermine-videojs-quality-selector.min.js?ver=1.2.4 IP104.17.245.203:0
File typeASCII text, with no line terminators Size320 kB (320205 bytes) Hasha3e76fbecf35f0eaab82e1aa69d50316 88c472a442e7d97f7bd0bb6ecbe335f48bb90e46 0b0a9dedccddcc9297dd1a8afe58db1f787ceac8518f37dc21659bb1f468139b
GET /@silvermine/videojs-quality-selector@1.2.4/dist/js/silvermine-videojs-quality-selector.min.js?ver=1.2.4 HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://memeksiana.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 07 May 2024 17:48:50 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
location: /@silvermine/videojs-quality-selector@1.2.4/dist/js/silvermine-videojs-quality-selector.min.js
vary: Accept, Accept-Encoding
content-encoding: br
via: 1.1 fly.io
fly-request-id: 01HXA2AFFV4ABTZSABC15P34Z1-arn
cf-cache-status: HIT
age: 453
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 88030b0e0842b527-OSL
X-Firefox-Spdy: h2
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size312 kB (312169 bytes) Hash3fda4ce2f9203e1a22f6487bba9567d9 dbdd929949ef2ee6b44e4b5546bb92df741416cb 1626b16ad8d1b2bf23fe51ff9c12f7b2ac504f16de44f175c9def8f2b8c81f89
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Tue, 07 May 2024 17:48:51 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Tue, 07 May 2024 17:48:54 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6t63AeD3GMhUUjsV0OJ5qktOQqZBNvoMl6wRmG4zXBO7ik1UJc6L5Q==
|
|
| cdn.tsyndicate.com/sdk/v1/p.js | 45.133.44.71 | | 325 kB |
URL cdn.tsyndicate.com/sdk/v1/p.js IP45.133.44.71:0 ASN#39572 DataWeb Global Group B.V.
File typegzip compressed data, from Unix Size325 kB (324610 bytes) Hasha704fb577271d067829eaf603b345301 21021c19805e32f89780388a3f70079993ac31a5 905fda6bde3d1beec7e4fac16fe5b2bed3e3f80f1c7af984085c7eb9ab705fdc
GET /sdk/v1/p.js HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d0000d.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:51 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Fri, 15 Mar 2024 12:35:02 GMT
etag: W/"65f44076-256b"
x-robots-tag: noindex, nofollow
content-encoding: gzip
cache-control: max-age=172800
expires: Thu, 09 May 2024 17:48:51 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size312 kB (312170 bytes) Hash636c129b461d85cf4b279aad387d88ed ff3731e3ac0f1bb08be932159e23091fa695a760 616d9083451b710363766693cfab51b6d93d5a41498789f284fdd7c1195302a9
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-C1
server: nginx
date: Tue, 07 May 2024 17:48:55 GMT
last-modified: Tue, 07 May 2024 17:48:53 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: HIT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-id: JAoW0zIINEnx0EauAe57vVRpbY4brjqX3gySNskGHT6heCFKRcUMcw==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size312 kB (312170 bytes) Hash636c129b461d85cf4b279aad387d88ed ff3731e3ac0f1bb08be932159e23091fa695a760 616d9083451b710363766693cfab51b6d93d5a41498789f284fdd7c1195302a9
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Tue, 07 May 2024 17:48:55 GMT
last-modified: Tue, 07 May 2024 17:48:53 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: HIT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9QIoVMf1F0Ipw1qrzk_8HEnpsQF9hEx2nWpZv2MJy-lxUSn7NNamug==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size319 kB (318835 bytes) Hashb05da8a0d6eb3dcad486dd1fa02ac5ea f346cf8b7df8208b849d26ec53efd8b45330adac fffa40399ac60a7c9ade8f701769dbfba32c6816e1ceffa384e91fc36de333c4
GET /hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318835
age: 2
server: nginx
date: Tue, 07 May 2024 17:48:53 GMT
last-modified: Tue, 07 May 2024 17:48:51 GMT
etag: "663a6983-4dd73"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: TQaEBw0fJXjwyUOIT5KbdeUXnaztGNGxwfgWAQ1KUdh1W7JlLsb9Vw==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2212_sG6DoW6Cza75vIC0_1715104127.mp4 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2212_sG6DoW6Cza75vIC0_1715104127.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (311848 bytes) Hash7d5843e91a1e684e83adc692156b8d2c ed033325b028312f8094afadf8b0c52aa64fc1f1 b5ed1bbe9c22b435b90c6eb9662ecac61299fb61418e14f865316e451e76a85d
GET /hls/71220142/71220142_480p_2212_sG6DoW6Cza75vIC0_1715104127.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 311848
age: 4
server: nginx
date: Tue, 07 May 2024 17:48:51 GMT
last-modified: Tue, 07 May 2024 17:48:49 GMT
etag: "663a6981-4c228"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: bT5LKjASckv7c5dWdzL7GVAvEC2gn-9NJaRMLhlhnmWv82Z100PiTQ==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size319 kB (318835 bytes) Hashb05da8a0d6eb3dcad486dd1fa02ac5ea f346cf8b7df8208b849d26ec53efd8b45330adac fffa40399ac60a7c9ade8f701769dbfba32c6816e1ceffa384e91fc36de333c4
GET /hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318835
age: 2
server: nginx
date: Tue, 07 May 2024 17:48:53 GMT
last-modified: Tue, 07 May 2024 17:48:51 GMT
etag: "663a6983-4dd73"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 0K_9WIAWS09MsxBsSGSIETj4hM5JRJkW-kysPnLc7KOzLVuGqSOz_g==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2212_sG6DoW6Cza75vIC0_1715104127.mp4 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2212_sG6DoW6Cza75vIC0_1715104127.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (311848 bytes) Hash7d5843e91a1e684e83adc692156b8d2c ed033325b028312f8094afadf8b0c52aa64fc1f1 b5ed1bbe9c22b435b90c6eb9662ecac61299fb61418e14f865316e451e76a85d
GET /hls/71220142/71220142_480p_2212_sG6DoW6Cza75vIC0_1715104127.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 311848
age: 5
server: nginx
date: Tue, 07 May 2024 17:48:51 GMT
last-modified: Tue, 07 May 2024 17:48:49 GMT
etag: "663a6981-4c228"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 4WwleBgF75CV7h9ImCZL6aA34dJ0NMG_tiOFPdmg5kTxU3eb9Vv5DA==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size319 kB (318835 bytes) Hashb05da8a0d6eb3dcad486dd1fa02ac5ea f346cf8b7df8208b849d26ec53efd8b45330adac fffa40399ac60a7c9ade8f701769dbfba32c6816e1ceffa384e91fc36de333c4
GET /hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318835
age: 3
server: nginx
date: Tue, 07 May 2024 17:48:53 GMT
last-modified: Tue, 07 May 2024 17:48:51 GMT
etag: "663a6983-4dd73"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: kdchwpCFT1x_X4Ka0dSo5NGXhltUlaVhkGIigXYiyP2gEoAa1Q3UJw==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size312 kB (312170 bytes) Hash636c129b461d85cf4b279aad387d88ed ff3731e3ac0f1bb08be932159e23091fa695a760 616d9083451b710363766693cfab51b6d93d5a41498789f284fdd7c1195302a9
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-C1
server: nginx
last-modified: Tue, 07 May 2024 17:48:53 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: HIT
content-encoding: gzip
date: Tue, 07 May 2024 17:48:56 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-id: Krt2bf_mPn0tMFqvSGrIdr8fJy8Zqp5j_rursrDyKPf5qsWbyWk8iQ==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size319 kB (318835 bytes) Hashb05da8a0d6eb3dcad486dd1fa02ac5ea f346cf8b7df8208b849d26ec53efd8b45330adac fffa40399ac60a7c9ade8f701769dbfba32c6816e1ceffa384e91fc36de333c4
GET /hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318835
age: 3
server: nginx
date: Tue, 07 May 2024 17:48:53 GMT
last-modified: Tue, 07 May 2024 17:48:51 GMT
etag: "663a6983-4dd73"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: S_hX_srWHbx4lFfKd18PhkDzgsrq8gjjPObw3facc3LWHVMh69kC_w==
|
|
| go.bbrdbr.com/api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll&webp=1&sortBy=mlRank | 104.18.40.50 | 200 OK | 313 kB |
URL GET HTTP/3go.bbrdbr.com/api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll&webp=1&sortBy=mlRank IP104.18.40.50:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerCloudflare, Inc. Subjectbbrdbr.com Fingerprint54:D2:62:A8:E8:91:19:F3:B4:1C:47:61:81:1B:D4:97:94:1B:26:9E ValidityFri, 26 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Size313 kB (312661 bytes) Hash120ef0e0befcf6e329a270999fa1bc0d dc86e23b954b3032e5f69c9bb9546d7a3efc8ee3 aefcf1ee6b412f36eafe12027389a79774c1dd52c9a7277f8feceb047a54ca00
GET /api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll&webp=1&sortBy=mlRank HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Cookie: __cflb=0H28upDCGznfDm9XVEL2Ezfg4QRCzShudZt3EUk1krG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:56 GMT
content-type: application/json
access-control-allow-origin: https://creative.bbrdbr.com
access-control-allow-credentials: true
vary: Origin, Accept-Encoding
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Tue, 07 May 2024 17:48:40 GMT
cf-cache-status: HIT
age: 5
server: cloudflare
cf-ray: 88030b34eb425687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size319 kB (318835 bytes) Hashb05da8a0d6eb3dcad486dd1fa02ac5ea f346cf8b7df8208b849d26ec53efd8b45330adac fffa40399ac60a7c9ade8f701769dbfba32c6816e1ceffa384e91fc36de333c4
GET /hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318835
age: 3
server: nginx
date: Tue, 07 May 2024 17:48:53 GMT
last-modified: Tue, 07 May 2024 17:48:51 GMT
etag: "663a6983-4dd73"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: lztX0MXPQ0YqXkYOtE6GDcr3Lzqgvaz2DzS2j_ScfsJEaTUNSPxMpA==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2212_sG6DoW6Cza75vIC0_1715104127.mp4 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2212_sG6DoW6Cza75vIC0_1715104127.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (311848 bytes) Hash7d5843e91a1e684e83adc692156b8d2c ed033325b028312f8094afadf8b0c52aa64fc1f1 b5ed1bbe9c22b435b90c6eb9662ecac61299fb61418e14f865316e451e76a85d
GET /hls/71220142/71220142_480p_2212_sG6DoW6Cza75vIC0_1715104127.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 311848
age: 5
server: nginx
date: Tue, 07 May 2024 17:48:51 GMT
last-modified: Tue, 07 May 2024 17:48:49 GMT
etag: "663a6981-4c228"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: aLwMcVZdZEX6bhWyfpPzniq2XyfCzZeyn2WlFmoOzTWzf3F-J2X79Q==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size319 kB (318835 bytes) Hashb05da8a0d6eb3dcad486dd1fa02ac5ea f346cf8b7df8208b849d26ec53efd8b45330adac fffa40399ac60a7c9ade8f701769dbfba32c6816e1ceffa384e91fc36de333c4
GET /hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318835
age: 4
server: nginx
date: Tue, 07 May 2024 17:48:53 GMT
last-modified: Tue, 07 May 2024 17:48:51 GMT
etag: "663a6983-4dd73"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: nYf3MqlMz31Kfd-78J-sbVPBsPReviZWV26zuq2DMYTRZtQTMN7ttQ==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2212_sG6DoW6Cza75vIC0_1715104127.mp4 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2212_sG6DoW6Cza75vIC0_1715104127.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (311848 bytes) Hash7d5843e91a1e684e83adc692156b8d2c ed033325b028312f8094afadf8b0c52aa64fc1f1 b5ed1bbe9c22b435b90c6eb9662ecac61299fb61418e14f865316e451e76a85d
GET /hls/71220142/71220142_480p_2212_sG6DoW6Cza75vIC0_1715104127.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 311848
age: 6
server: nginx
date: Tue, 07 May 2024 17:48:51 GMT
last-modified: Tue, 07 May 2024 17:48:49 GMT
etag: "663a6981-4c228"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: EBfuxh39EoyKCNTAmqGJ0Vitb0ZQCeM3QSgQKALPP14DjwmWuxMIBQ==
|
|
| memeksiana.vip/wp-content/themes/retrotube/assets/js/main.js?ver=1.7.3.1714908572 | 104.21.32.176 | | 340 kB |
URL memeksiana.vip/wp-content/themes/retrotube/assets/js/main.js?ver=1.7.3.1714908572 IP104.21.32.176:0
File typeJavaScript source, ASCII text Size340 kB (339979 bytes) Hash783fecdc0e20f9cbdee6b57839de44e4 0d9062e511793c4ac674742de2de74dd13a85dc9 45c5b2ddd2dd6bae51444e5c06a67a069b87457c72e3876bbaefa17dbaf9315f
GET /wp-content/themes/retrotube/assets/js/main.js?ver=1.7.3.1714908572 HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: application/x-javascript
vary: X-Forwarded-Proto,Accept-Encoding,User-Agent
last-modified: Sun, 05 May 2024 11:29:32 GMT
etag: W/"996b-617b34444f440"
cache-control: public, max-age=31536000
expires: Mon, 05 May 2025 19:08:56 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.2
cf-cache-status: HIT
age: 167994
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zcOHbxujCLOp6X4fyrtmG7eT9ks%2B7wa75gF0KJbZ%2FU6BSme1gr8FkPhvLhKNyX8g6xq2amA7ZD4EPpub2aWrAoLputLUgGtr4oBzRCfIU%2FFlWufzBM848XhvRFxKUjIPYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b0dec225697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| go.bbrdbr.com/event/ml | 104.18.40.50 | | 319 kB |
IP104.18.40.50:0
Size319 kB (319210 bytes) Hash8e37ab193b4e060c9e3fe18e65b5a7da 8fc8cd510da3df3464df5633d0c51e11ac79e4a4 c59a8b5ccdefc274206c7a6f14fc44036e1a07c201123542129fa299bd8b2b63
POST /event/ml HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 172
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:53 GMT
content-type: application/json
access-control-allow-origin: https://creative.bbrdbr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtrsbPA44EurybeS8fNK9dVEf9zAx; SameSite=None; Secure; path=/; expires=Wed, 08-May-24 17:48:53 GMT; HttpOnly
server: cloudflare
cf-ray: 88030b1fa81a5687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (312547 bytes) Hashc5b2d318e2208a6a3b3a9519305e3fd6 d4044a48feb4c6d737908c2a4089f368607dd7e6 733892f971db66b47a1d7fcffa7d0c1f0f422d5bb7eb8b455ff7712a19280355
GET /hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312547
age: 2
server: nginx
date: Tue, 07 May 2024 17:48:55 GMT
last-modified: Tue, 07 May 2024 17:48:53 GMT
etag: "663a6985-4c4e3"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Y3IghC7GZdU8BEUggTWxJiTxUZm5lJ8q44XmxuLcUxbJWRoBI4scJw==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size319 kB (318835 bytes) Hashb05da8a0d6eb3dcad486dd1fa02ac5ea f346cf8b7df8208b849d26ec53efd8b45330adac fffa40399ac60a7c9ade8f701769dbfba32c6816e1ceffa384e91fc36de333c4
GET /hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318835
age: 4
server: nginx
date: Tue, 07 May 2024 17:48:53 GMT
last-modified: Tue, 07 May 2024 17:48:51 GMT
etag: "663a6983-4dd73"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: N_8tIAmnyGf0P1nbzjPdqlaEjAdJbXVK00sVXduz6lDwu19j20P7_Q==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 313 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size313 kB (312872 bytes) Hash6873b01c8504a6ddaaa0fcd1346cf112 7d00171b221a57061bfc4d8c8a28c1df56369aab 37c036701cb7680c1de33fb4f486e492ce88371fce7a3efef3d71577ed412005
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Tue, 07 May 2024 17:48:57 GMT
last-modified: Tue, 07 May 2024 17:48:55 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: n7u_3WR_Kje_08Ts-fVTAx8YL93mdGkFVaWkEdUlT12pf_iUvM-1Wg==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size319 kB (318835 bytes) Hashb05da8a0d6eb3dcad486dd1fa02ac5ea f346cf8b7df8208b849d26ec53efd8b45330adac fffa40399ac60a7c9ade8f701769dbfba32c6816e1ceffa384e91fc36de333c4
GET /hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318835
age: 5
server: nginx
date: Tue, 07 May 2024 17:48:53 GMT
last-modified: Tue, 07 May 2024 17:48:51 GMT
etag: "663a6983-4dd73"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: uLyDbsRckCyWHeHLkm6xRiCNOVFTxwMzWrQ2PKX8n_RQRIEejx_uuw==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (312547 bytes) Hashc5b2d318e2208a6a3b3a9519305e3fd6 d4044a48feb4c6d737908c2a4089f368607dd7e6 733892f971db66b47a1d7fcffa7d0c1f0f422d5bb7eb8b455ff7712a19280355
GET /hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312547
age: 3
server: nginx
date: Tue, 07 May 2024 17:48:55 GMT
last-modified: Tue, 07 May 2024 17:48:53 GMT
etag: "663a6985-4c4e3"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: c18sPJA8s0sMnerC81R7vLRrvrHFKKQJBV4jxJf9fARmaJbR7wwtIg==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size319 kB (318835 bytes) Hashb05da8a0d6eb3dcad486dd1fa02ac5ea f346cf8b7df8208b849d26ec53efd8b45330adac fffa40399ac60a7c9ade8f701769dbfba32c6816e1ceffa384e91fc36de333c4
GET /hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318835
age: 5
server: nginx
date: Tue, 07 May 2024 17:48:53 GMT
last-modified: Tue, 07 May 2024 17:48:51 GMT
etag: "663a6983-4dd73"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: uZhDKoXYJlcRbK0RA611AQcOOHTje5DEHQ0kYXBv5xw6IlRsuD68ng==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (312547 bytes) Hashc5b2d318e2208a6a3b3a9519305e3fd6 d4044a48feb4c6d737908c2a4089f368607dd7e6 733892f971db66b47a1d7fcffa7d0c1f0f422d5bb7eb8b455ff7712a19280355
GET /hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312547
age: 3
server: nginx
date: Tue, 07 May 2024 17:48:55 GMT
last-modified: Tue, 07 May 2024 17:48:53 GMT
etag: "663a6985-4c4e3"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 2zSlmmoeOntN3cfKgV2ozWlAMtVuhJO0dOkxjJUhF8wDKJDArfV6sw==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size319 kB (318835 bytes) Hashb05da8a0d6eb3dcad486dd1fa02ac5ea f346cf8b7df8208b849d26ec53efd8b45330adac fffa40399ac60a7c9ade8f701769dbfba32c6816e1ceffa384e91fc36de333c4
GET /hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318835
age: 5
server: nginx
date: Tue, 07 May 2024 17:48:53 GMT
last-modified: Tue, 07 May 2024 17:48:51 GMT
etag: "663a6983-4dd73"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 52azjVo-cnXuOQvpzotJ7n0v0s51rQ1aEKP1ooKDSnYFfnMvKuh-zg==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 313 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size313 kB (313197 bytes) Hash5acf85931df167f932a7bce4402db7fd 0cff43f3b1ab9cf227e53c12af8875058d7c8033 cb9de7d44be2914a449325a9e61de0f8f00352f77bdbe49bd22c2e93d9b2fdca
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Tue, 07 May 2024 17:48:55 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Tue, 07 May 2024 17:48:58 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6in-bP3mDb6hNIdKRW2m_BoGUy_IqFXCT8GRpPtVASmhwmYqTuk6dQ==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size319 kB (318835 bytes) Hashb05da8a0d6eb3dcad486dd1fa02ac5ea f346cf8b7df8208b849d26ec53efd8b45330adac fffa40399ac60a7c9ade8f701769dbfba32c6816e1ceffa384e91fc36de333c4
GET /hls/71220142/71220142_480p_2213_UG9zOdll6J5IrNMi_1715104129.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318835
age: 6
server: nginx
date: Tue, 07 May 2024 17:48:53 GMT
last-modified: Tue, 07 May 2024 17:48:51 GMT
etag: "663a6983-4dd73"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: HlvB47Yg4CFi1b46ilrSco-hMUGclaQ2N9U6cxVHJcs_XX7_VnZi5w==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (312547 bytes) Hashc5b2d318e2208a6a3b3a9519305e3fd6 d4044a48feb4c6d737908c2a4089f368607dd7e6 733892f971db66b47a1d7fcffa7d0c1f0f422d5bb7eb8b455ff7712a19280355
GET /hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312547
age: 4
server: nginx
date: Tue, 07 May 2024 17:48:55 GMT
last-modified: Tue, 07 May 2024 17:48:53 GMT
etag: "663a6985-4c4e3"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: dp80Ul4wpbNH0z7Q94XGy0UYadvB6GIzSyBzD3gjjJZASE8EB0U0wg==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (312547 bytes) Hashc5b2d318e2208a6a3b3a9519305e3fd6 d4044a48feb4c6d737908c2a4089f368607dd7e6 733892f971db66b47a1d7fcffa7d0c1f0f422d5bb7eb8b455ff7712a19280355
GET /hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312547
age: 4
server: nginx
date: Tue, 07 May 2024 17:48:55 GMT
last-modified: Tue, 07 May 2024 17:48:53 GMT
etag: "663a6985-4c4e3"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ycWYkbZdFMQov8rNEJdUkahK-etdbAkv4juj9Mh4mIA42_VNwWcaCg==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size319 kB (319068 bytes) Hasha7be882db1666e95de81c4a852a1ad11 62e3cdd4601196ad765d44e450ee7b23db81e5f1 64e29ed18984dfccb1a6556af88b7a61836d51f63d2b0cb59d2f280feb1195a8
GET /hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319068
age: 2
server: nginx
date: Tue, 07 May 2024 17:48:57 GMT
last-modified: Tue, 07 May 2024 17:48:55 GMT
etag: "663a6987-4de5c"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: yKxRKDve3F1lkpp-s-AF1ZiX4jQip_7Z6lYNEymbTATb_zplLUws5w==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 313 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size313 kB (312870 bytes) Hasha1fc3ab50bc50f103fc0772d0c612047 de1a69aad134494bf9e0f35493069ae8aaafe14a 085e1ed6b1ecf8d768ec3f2d4bdbe521eb5518b657a1d2a72a7f6f568646a75f
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Tue, 07 May 2024 17:48:59 GMT
last-modified: Tue, 07 May 2024 17:48:57 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: HIT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gdiZmve64k9u1ntq35s5l1kV37RnbvGU232nz5ZI9cAQcIl1PYxddQ==
|
|
| go.bbrdbr.com/api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll&webp=1&sortBy=mlRank | 104.18.40.50 | 200 OK | 320 kB |
URL GET HTTP/3go.bbrdbr.com/api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll&webp=1&sortBy=mlRank IP104.18.40.50:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerCloudflare, Inc. Subjectbbrdbr.com Fingerprint54:D2:62:A8:E8:91:19:F3:B4:1C:47:61:81:1B:D4:97:94:1B:26:9E ValidityFri, 26 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Size320 kB (319881 bytes) Hash120ef0e0befcf6e329a270999fa1bc0d dc86e23b954b3032e5f69c9bb9546d7a3efc8ee3 aefcf1ee6b412f36eafe12027389a79774c1dd52c9a7277f8feceb047a54ca00
GET /api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll&webp=1&sortBy=mlRank HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Cookie: __cflb=0H28upDCGznfDm9XVEL2Ezfg4QRCzShudZt3EUk1krG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:59 GMT
content-type: application/json
access-control-allow-origin: https://creative.bbrdbr.com
access-control-allow-credentials: true
vary: Origin, Accept-Encoding
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Tue, 07 May 2024 17:48:40 GMT
cf-cache-status: HIT
age: 8
server: cloudflare
cf-ray: 88030b482d245687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (312547 bytes) Hashc5b2d318e2208a6a3b3a9519305e3fd6 d4044a48feb4c6d737908c2a4089f368607dd7e6 733892f971db66b47a1d7fcffa7d0c1f0f422d5bb7eb8b455ff7712a19280355
GET /hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312547
age: 4
server: nginx
date: Tue, 07 May 2024 17:48:55 GMT
last-modified: Tue, 07 May 2024 17:48:53 GMT
etag: "663a6985-4c4e3"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: gaSb8lD5U4OQa2napQTetj0gUEhGN6L1YHiG-TwMmLS_eKbd_QCZug==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size319 kB (319391 bytes) Hash519141ad19f6799d9405282939f364a2 9b80f98d1d290488f0db8c8d0cf9e46837f0f629 d45f1581111a8252d09e5e6f00e5a8874a4f57666516162874e111b63ef22f88
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Tue, 07 May 2024 17:48:59 GMT
last-modified: Tue, 07 May 2024 17:48:57 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: HIT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dvfvB5eE6Mxql0Akd1iZtN8dXBFriMlRBAFku_gfkzY48m8fnNl0fg==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (312547 bytes) Hashc5b2d318e2208a6a3b3a9519305e3fd6 d4044a48feb4c6d737908c2a4089f368607dd7e6 733892f971db66b47a1d7fcffa7d0c1f0f422d5bb7eb8b455ff7712a19280355
GET /hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312547
age: 5
server: nginx
date: Tue, 07 May 2024 17:48:55 GMT
last-modified: Tue, 07 May 2024 17:48:53 GMT
etag: "663a6985-4c4e3"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: dJva4yZL3MWRELN8bV37h0NccAhBEy-nGUfg7Ln4cElN2Xry8cR4LQ==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size319 kB (319068 bytes) Hasha7be882db1666e95de81c4a852a1ad11 62e3cdd4601196ad765d44e450ee7b23db81e5f1 64e29ed18984dfccb1a6556af88b7a61836d51f63d2b0cb59d2f280feb1195a8
GET /hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319068
age: 3
server: nginx
date: Tue, 07 May 2024 17:48:57 GMT
last-modified: Tue, 07 May 2024 17:48:55 GMT
etag: "663a6987-4de5c"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: fsVmEB1D1BwqLYc6pNKhLDfPicNvyzx4qphAU7-tfP-10Wmc3-hQ5A==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 313 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size313 kB (312872 bytes) Hash6873b01c8504a6ddaaa0fcd1346cf112 7d00171b221a57061bfc4d8c8a28c1df56369aab 37c036701cb7680c1de33fb4f486e492ce88371fce7a3efef3d71577ed412005
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-C1
server: nginx
last-modified: Tue, 07 May 2024 17:48:55 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Tue, 07 May 2024 17:48:58 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-id: 770Dje2JivRk6NBBI6SGzeTAXowoFzsnUn0oI4K9QsPXzzUFPMAS8g==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 320 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size320 kB (319714 bytes) Hash7737eec085be12bebfb2158157b128ec 70bb55d3dba1996965ec751c68e2f0568c27a23d 007a947880769b94fd3e85c6122b875272fb683e92ff0dde7328ae8a425a4360
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-C1
server: nginx
last-modified: Tue, 07 May 2024 17:48:57 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: HIT
content-encoding: gzip
date: Tue, 07 May 2024 17:49:00 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-id: FTWXDxVrXuQ7u6mOyEF4VV8vDNJl65qErwRBA4qaLSLNs_E4H8N9VA==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (312547 bytes) Hashc5b2d318e2208a6a3b3a9519305e3fd6 d4044a48feb4c6d737908c2a4089f368607dd7e6 733892f971db66b47a1d7fcffa7d0c1f0f422d5bb7eb8b455ff7712a19280355
GET /hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312547
age: 5
server: nginx
date: Tue, 07 May 2024 17:48:55 GMT
last-modified: Tue, 07 May 2024 17:48:53 GMT
etag: "663a6985-4c4e3"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: auvCD3t6OdMqoqBRHfK2Eq8JJh1qnL4NNGYlj5lVRr9wheExa4_DRQ==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size319 kB (319391 bytes) Hash519141ad19f6799d9405282939f364a2 9b80f98d1d290488f0db8c8d0cf9e46837f0f629 d45f1581111a8252d09e5e6f00e5a8874a4f57666516162874e111b63ef22f88
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Tue, 07 May 2024 17:48:57 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: HIT
content-encoding: gzip
date: Tue, 07 May 2024 17:49:00 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: K_AzcMSZRoDPU-OIYuDztypm3rofj-MaR95cCpOofTmINpcr1DaERQ==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (312547 bytes) Hashc5b2d318e2208a6a3b3a9519305e3fd6 d4044a48feb4c6d737908c2a4089f368607dd7e6 733892f971db66b47a1d7fcffa7d0c1f0f422d5bb7eb8b455ff7712a19280355
GET /hls/71220142/71220142_480p_2214_t64fKMicHZ51YOpg_1715104131.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312547
age: 6
server: nginx
date: Tue, 07 May 2024 17:48:55 GMT
last-modified: Tue, 07 May 2024 17:48:53 GMT
etag: "663a6985-4c4e3"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 9lIxVWOTLxjLilYveByBGvamWzg4Kr84-STbF4ZSqUgtR8B7gTgHYA==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size319 kB (319068 bytes) Hasha7be882db1666e95de81c4a852a1ad11 62e3cdd4601196ad765d44e450ee7b23db81e5f1 64e29ed18984dfccb1a6556af88b7a61836d51f63d2b0cb59d2f280feb1195a8
GET /hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319068
age: 4
server: nginx
date: Tue, 07 May 2024 17:48:57 GMT
last-modified: Tue, 07 May 2024 17:48:55 GMT
etag: "663a6987-4de5c"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: KQ-HXu9QoptZkNfJKJRXBbvQblwD3dx_OTrfQJrED6r8IvRuAPqQQA==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size319 kB (319390 bytes) Hash61a35e494bcc714a603d9cd929f84f57 5dcbdca587a5db3c2fe862af3f8cc0de16d63bde 615ed897f409b28d4df00143fbd25cda5d3802cf6b81f610750042d1350beafc
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-C1
server: nginx
date: Tue, 07 May 2024 17:49:01 GMT
last-modified: Tue, 07 May 2024 17:48:59 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-id: kgEs2xNabXz_uXF3xn2-TTddj-CrYBSX1rCzswFKwf3tl5akqbCD0A==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 | 143.204.55.115 | | 323 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size323 kB (322552 bytes) Hash36dec36e838b829a8cb03517bdc2d573 e0ae31b62a5b07000aa65d8148453ea738374add 03df95c46f974236c65b4c57c3ce3987308b8a88c132246fac74fb94f06efb5f
GET /hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 322552
age: 2
server: nginx
date: Tue, 07 May 2024 17:48:59 GMT
last-modified: Tue, 07 May 2024 17:48:57 GMT
etag: "663a6989-4ebf8"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: KCbPKzr41x7BWJsA_5oomsL3bSdIzwXJH3bmnUwDlT1EVLphBPfvJw==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size319 kB (319068 bytes) Hasha7be882db1666e95de81c4a852a1ad11 62e3cdd4601196ad765d44e450ee7b23db81e5f1 64e29ed18984dfccb1a6556af88b7a61836d51f63d2b0cb59d2f280feb1195a8
GET /hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319068
age: 4
server: nginx
date: Tue, 07 May 2024 17:48:57 GMT
last-modified: Tue, 07 May 2024 17:48:55 GMT
etag: "663a6987-4de5c"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: FfIv7kqsPuQJG0Wusk2E_WowNp5-un5BgGalto-Ia5XqPJYaXrNq0A==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 | 143.204.55.115 | | 323 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size323 kB (322552 bytes) Hash36dec36e838b829a8cb03517bdc2d573 e0ae31b62a5b07000aa65d8148453ea738374add 03df95c46f974236c65b4c57c3ce3987308b8a88c132246fac74fb94f06efb5f
GET /hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 322552
age: 2
server: nginx
date: Tue, 07 May 2024 17:48:59 GMT
last-modified: Tue, 07 May 2024 17:48:57 GMT
etag: "663a6989-4ebf8"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 3KUxvOaLlEud_0Wb62DhSIsluHqWjQK7UqGDNc_1GPK8BbyqWNTnGg==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size319 kB (319068 bytes) Hasha7be882db1666e95de81c4a852a1ad11 62e3cdd4601196ad765d44e450ee7b23db81e5f1 64e29ed18984dfccb1a6556af88b7a61836d51f63d2b0cb59d2f280feb1195a8
GET /hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319068
age: 5
server: nginx
date: Tue, 07 May 2024 17:48:57 GMT
last-modified: Tue, 07 May 2024 17:48:55 GMT
etag: "663a6987-4de5c"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: wq2iXSLvjxH60UHzVN3cLpzqGmNyvCmoylmG8YnSCycPpzBHjrvRHg==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 | 143.204.55.115 | | 323 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size323 kB (322552 bytes) Hash36dec36e838b829a8cb03517bdc2d573 e0ae31b62a5b07000aa65d8148453ea738374add 03df95c46f974236c65b4c57c3ce3987308b8a88c132246fac74fb94f06efb5f
GET /hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 322552
age: 3
server: nginx
date: Tue, 07 May 2024 17:48:59 GMT
last-modified: Tue, 07 May 2024 17:48:57 GMT
etag: "663a6989-4ebf8"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 595CZMhUlN49ZPy-xKiksMYsqGUwfYSO5ptn96VWvJ-PKcFwik7QEw==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size319 kB (319068 bytes) Hasha7be882db1666e95de81c4a852a1ad11 62e3cdd4601196ad765d44e450ee7b23db81e5f1 64e29ed18984dfccb1a6556af88b7a61836d51f63d2b0cb59d2f280feb1195a8
GET /hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319068
age: 5
server: nginx
date: Tue, 07 May 2024 17:48:57 GMT
last-modified: Tue, 07 May 2024 17:48:55 GMT
etag: "663a6987-4de5c"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: wgG_4RUM3RoprVYLzGPxTGzlCRyolS801Pa8d39CrxZ3GyQWCQoPNw==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 | 143.204.55.115 | | 323 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size323 kB (322552 bytes) Hash36dec36e838b829a8cb03517bdc2d573 e0ae31b62a5b07000aa65d8148453ea738374add 03df95c46f974236c65b4c57c3ce3987308b8a88c132246fac74fb94f06efb5f
GET /hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 322552
age: 3
server: nginx
date: Tue, 07 May 2024 17:48:59 GMT
last-modified: Tue, 07 May 2024 17:48:57 GMT
etag: "663a6989-4ebf8"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: v5tbjoLL-KMB6Yh4gNd2GKSF1_kXbcmW0dTe4ZglZ7nyueT3l-_ZCw==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size319 kB (319068 bytes) Hasha7be882db1666e95de81c4a852a1ad11 62e3cdd4601196ad765d44e450ee7b23db81e5f1 64e29ed18984dfccb1a6556af88b7a61836d51f63d2b0cb59d2f280feb1195a8
GET /hls/71220142/71220142_480p_2215_yqC4WL2hHg4xnRfF_1715104133.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319068
age: 5
server: nginx
date: Tue, 07 May 2024 17:48:57 GMT
last-modified: Tue, 07 May 2024 17:48:55 GMT
etag: "663a6987-4de5c"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 6rVlu_AXBV_YA8dHGhnjCuItIFvkwUEBJ9WBitxYows86tJoLJ6VTw==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 | 143.204.55.115 | | 323 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size323 kB (322552 bytes) Hash36dec36e838b829a8cb03517bdc2d573 e0ae31b62a5b07000aa65d8148453ea738374add 03df95c46f974236c65b4c57c3ce3987308b8a88c132246fac74fb94f06efb5f
GET /hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 322552
age: 3
server: nginx
date: Tue, 07 May 2024 17:48:59 GMT
last-modified: Tue, 07 May 2024 17:48:57 GMT
etag: "663a6989-4ebf8"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ZV7NU34rVsIp7z6jm4wBMBSKPsTFzz3aKMkeiLefmlG9zeNqkixupQ==
|
|
| go.bbrdbr.com/api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll&webp=1&sortBy=mlRank | 104.18.40.50 | 200 OK | 320 kB |
URL GET HTTP/3go.bbrdbr.com/api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll&webp=1&sortBy=mlRank IP104.18.40.50:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerCloudflare, Inc. Subjectbbrdbr.com Fingerprint54:D2:62:A8:E8:91:19:F3:B4:1C:47:61:81:1B:D4:97:94:1B:26:9E ValidityFri, 26 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Size320 kB (320203 bytes) Hash745af7dbd705c490b327076aff185ee2 3c32cc3e1114811d5549d17ad6fbc1e5838a27ab a2b44a009fd51b7afd504fc1752533871951311d22efc0aac2a07a91422e09fa
GET /api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll&webp=1&sortBy=mlRank HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Cookie: __cflb=0H28upDCGznfDm9XVEL2Ezfg4QRCzShudZt3EUk1krG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:49:02 GMT
content-type: application/json
access-control-allow-origin: https://creative.bbrdbr.com
access-control-allow-credentials: true
vary: Origin, Accept-Encoding
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Tue, 07 May 2024 17:48:51 GMT
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 88030b5b0db45687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 323 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size323 kB (322874 bytes) Hash67a2753db1b6572c7f8a18bc733e329f 75da8fd074711e76b1db6f3cb5d25cc9b96fe14f a574aaefba44f53bdc67b991d7e7482c037fa44ec0f64191780f7fb2c6d1de73
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-C1
server: nginx
date: Tue, 07 May 2024 17:49:03 GMT
last-modified: Tue, 07 May 2024 17:49:01 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-id: euEH7Nm1S0LuW8zOY03OzWRdJstMyj8Aak3WtEMCwEcovBpuvKP7Kw==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 | 143.204.55.115 | | 323 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size323 kB (322552 bytes) Hash36dec36e838b829a8cb03517bdc2d573 e0ae31b62a5b07000aa65d8148453ea738374add 03df95c46f974236c65b4c57c3ce3987308b8a88c132246fac74fb94f06efb5f
GET /hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 322552
age: 4
server: nginx
date: Tue, 07 May 2024 17:48:59 GMT
last-modified: Tue, 07 May 2024 17:48:57 GMT
etag: "663a6989-4ebf8"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ubBmbVoGcV9xXtKFuj6b3yVvqH4kf9UdbZQF6j6_SHzBPx1ShXCiIg==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 | 143.204.55.115 | | 319 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 IP143.204.55.115:0
Size319 kB (318825 bytes) Hash5512757f80426634c38b5e78b24c0f06 c849223ba79a97c2c7f38f52fdd686928c7e1130 3874a796e97c7626d8b42f0d93e4ecc01212cce7cb50a6e4295e5cffa3865b5c
GET /hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318825
age: 2
server: nginx
date: Tue, 07 May 2024 17:49:01 GMT
last-modified: Tue, 07 May 2024 17:48:59 GMT
etag: "663a698b-4dd69"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: f0H0BfkwWoqxnvt4_Dd-EPW_tGHy_ZWXV6UdrA2rw2fTDTis0SztHA==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 | 143.204.55.115 | | 323 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size323 kB (322552 bytes) Hash36dec36e838b829a8cb03517bdc2d573 e0ae31b62a5b07000aa65d8148453ea738374add 03df95c46f974236c65b4c57c3ce3987308b8a88c132246fac74fb94f06efb5f
GET /hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 322552
age: 4
server: nginx
date: Tue, 07 May 2024 17:48:59 GMT
last-modified: Tue, 07 May 2024 17:48:57 GMT
etag: "663a6989-4ebf8"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 5lWHMyUsZlAo2WJq4ilubBxoJuXgvxkXjviLSw-bzxo0kZ6uxAAQSw==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size319 kB (319147 bytes) Hash09da9a763b19d9f9fa3fa9568aa19e2a d704d126acae6aa750d33312aba39f5f33f8223f d53552deda43c341d86e9685fc147060aabf5a00aa4135cd90e14ad34c6994bc
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Tue, 07 May 2024 17:49:03 GMT
last-modified: Tue, 07 May 2024 17:49:01 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iQxgE21b8vgvu1ae0Dx3ezjvW40RQbpLDVC8OUtfjtQzcyyR-9Ybqg==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 323 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size323 kB (322874 bytes) Hash67a2753db1b6572c7f8a18bc733e329f 75da8fd074711e76b1db6f3cb5d25cc9b96fe14f a574aaefba44f53bdc67b991d7e7482c037fa44ec0f64191780f7fb2c6d1de73
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Tue, 07 May 2024 17:49:03 GMT
last-modified: Tue, 07 May 2024 17:49:01 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wiN1h85MGZ5QVsTwRRlrnSeMqg5sauxmkX-Rw6KN9Lu8CECf3_0z3Q==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 | 143.204.55.115 | | 319 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 IP143.204.55.115:0
Size319 kB (318825 bytes) Hash5512757f80426634c38b5e78b24c0f06 c849223ba79a97c2c7f38f52fdd686928c7e1130 3874a796e97c7626d8b42f0d93e4ecc01212cce7cb50a6e4295e5cffa3865b5c
GET /hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318825
age: 3
server: nginx
date: Tue, 07 May 2024 17:49:01 GMT
last-modified: Tue, 07 May 2024 17:48:59 GMT
etag: "663a698b-4dd69"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: w5afracNJwsAQrdQnqmg_Qb8PK8VvafCA0XyFVG-Wpm68cHi-sALvQ==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 | 143.204.55.115 | | 323 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size323 kB (322552 bytes) Hash36dec36e838b829a8cb03517bdc2d573 e0ae31b62a5b07000aa65d8148453ea738374add 03df95c46f974236c65b4c57c3ce3987308b8a88c132246fac74fb94f06efb5f
GET /hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 322552
age: 5
server: nginx
date: Tue, 07 May 2024 17:48:59 GMT
last-modified: Tue, 07 May 2024 17:48:57 GMT
etag: "663a6989-4ebf8"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: G7pZYAHVIeX1wzRlbL2qIwo3NXwJ8I26kKf8RzKxKMUyfQh8KMDuEA==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size319 kB (319147 bytes) Hash09da9a763b19d9f9fa3fa9568aa19e2a d704d126acae6aa750d33312aba39f5f33f8223f d53552deda43c341d86e9685fc147060aabf5a00aa4135cd90e14ad34c6994bc
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Tue, 07 May 2024 17:49:03 GMT
last-modified: Tue, 07 May 2024 17:49:01 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dWPmNFEXavs5BT7gLQUNn5C07nYViFYSdzKJmA4Y5O47BmRBZ40tnw==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 | 143.204.55.115 | | 323 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size323 kB (322552 bytes) Hash36dec36e838b829a8cb03517bdc2d573 e0ae31b62a5b07000aa65d8148453ea738374add 03df95c46f974236c65b4c57c3ce3987308b8a88c132246fac74fb94f06efb5f
GET /hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 322552
age: 5
server: nginx
date: Tue, 07 May 2024 17:48:59 GMT
last-modified: Tue, 07 May 2024 17:48:57 GMT
etag: "663a6989-4ebf8"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: lVDH-4KzmnOlt1VaBrfJAxlK_EUTn26RKZic07sEIeMpj2b-jHF4Ig==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 | 143.204.55.115 | | 319 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 IP143.204.55.115:0
Size319 kB (318825 bytes) Hash5512757f80426634c38b5e78b24c0f06 c849223ba79a97c2c7f38f52fdd686928c7e1130 3874a796e97c7626d8b42f0d93e4ecc01212cce7cb50a6e4295e5cffa3865b5c
GET /hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318825
age: 3
server: nginx
date: Tue, 07 May 2024 17:49:01 GMT
last-modified: Tue, 07 May 2024 17:48:59 GMT
etag: "663a698b-4dd69"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: qCXxEQfF-nPklxPuoEGejNd3B_G6SDZ08onCuG_riC22rVPmuEhxeQ==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 | 143.204.55.115 | | 323 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size323 kB (322552 bytes) Hash36dec36e838b829a8cb03517bdc2d573 e0ae31b62a5b07000aa65d8148453ea738374add 03df95c46f974236c65b4c57c3ce3987308b8a88c132246fac74fb94f06efb5f
GET /hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 322552
age: 5
server: nginx
date: Tue, 07 May 2024 17:48:59 GMT
last-modified: Tue, 07 May 2024 17:48:57 GMT
etag: "663a6989-4ebf8"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 2hyAIehYDJXT3OCQYzSlA5xODZHArJOhKtMMQEPS_sFPSiPKLahLUQ==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size319 kB (319147 bytes) Hash09da9a763b19d9f9fa3fa9568aa19e2a d704d126acae6aa750d33312aba39f5f33f8223f d53552deda43c341d86e9685fc147060aabf5a00aa4135cd90e14ad34c6994bc
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Tue, 07 May 2024 17:49:01 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Tue, 07 May 2024 17:49:04 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zZQQK26hxXoVoObSvQykvdMMCZ7q3-YB1DtLft71ip0EFh9nK5z5xg==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 | 143.204.55.115 | | 323 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size323 kB (322552 bytes) Hash36dec36e838b829a8cb03517bdc2d573 e0ae31b62a5b07000aa65d8148453ea738374add 03df95c46f974236c65b4c57c3ce3987308b8a88c132246fac74fb94f06efb5f
GET /hls/71220142/71220142_480p_2216_S07fjFVrToTpi6el_1715104135.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 322552
age: 6
server: nginx
date: Tue, 07 May 2024 17:48:59 GMT
last-modified: Tue, 07 May 2024 17:48:57 GMT
etag: "663a6989-4ebf8"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: B5g366kRAwhIGqGgeu7lcsubHcPyb7iKZLI7xdgUmuDtwmBQR4aBtA==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 319 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size319 kB (319152 bytes) Hash41a9a75a8bafbfa5a2088caf540311fd 439eb5f3bb0884c9cbda72cb0350f241a977a9bd efe4548046bf8a6195ba9ebcadae6bf194cb5f4a911bd3ae0ed51c4b32ffd709
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-C1
server: nginx
date: Tue, 07 May 2024 17:49:05 GMT
last-modified: Tue, 07 May 2024 17:49:03 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-id: oxUT5PmIUtbnnuuaFWG-tQ4vXz-w6Z24QwB9Tt4JG90yVVZw2wuQKg==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 | 143.204.55.115 | | 319 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 IP143.204.55.115:0
Size319 kB (318825 bytes) Hash5512757f80426634c38b5e78b24c0f06 c849223ba79a97c2c7f38f52fdd686928c7e1130 3874a796e97c7626d8b42f0d93e4ecc01212cce7cb50a6e4295e5cffa3865b5c
GET /hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318825
age: 4
server: nginx
date: Tue, 07 May 2024 17:49:01 GMT
last-modified: Tue, 07 May 2024 17:48:59 GMT
etag: "663a698b-4dd69"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: zX2fpvqQf4-WgWF96M9vUCjRxfxu1s3UpfjEPjAt9M01cFIkLTh9bw==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size312 kB (312443 bytes) Hash2edf1684af11b22e612745966e649210 ee417c71c588e186ba813c4d6727d4b5e486e30f 8c8e5b471630778ebc7c9ed1d7de24945216f21a0aa6df36b4103f8d6b66833a
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-C1
server: nginx
date: Tue, 07 May 2024 17:49:05 GMT
last-modified: Tue, 07 May 2024 17:49:03 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-id: BkBXpkxG6jFLIp1gEUxmSqfOQnBsIbU9Xpjr5iILdDtf9O9NeNoTGw==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 | 143.204.55.115 | | 319 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 IP143.204.55.115:0
Size319 kB (318825 bytes) Hash5512757f80426634c38b5e78b24c0f06 c849223ba79a97c2c7f38f52fdd686928c7e1130 3874a796e97c7626d8b42f0d93e4ecc01212cce7cb50a6e4295e5cffa3865b5c
GET /hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318825
age: 4
server: nginx
date: Tue, 07 May 2024 17:49:01 GMT
last-modified: Tue, 07 May 2024 17:48:59 GMT
etag: "663a698b-4dd69"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: tQZT1DGs_C3_SUVCtOXzyxcvYdbTNheQqwqXFv8dsUndF0d26YFz-A==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 | 143.204.55.115 | | 312 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (312116 bytes) Hashac0335d0ff0ce869ee110a80cb1906a2 6fe6a176c0cf2c3bdd972c3750d41ac6e15e9f7d ffc6f9ba88f98b121ec6829bad33287b3533f81efaa194a9a882525449f346db
GET /hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312116
age: 2
server: nginx
date: Tue, 07 May 2024 17:49:03 GMT
last-modified: Tue, 07 May 2024 17:49:01 GMT
etag: "663a698d-4c334"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ZmKkexh3E_deLeZGbinlc8naN38WfRtfl2QEu8WlCkOhDdLJvtBhxA==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 | 143.204.55.115 | | 319 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 IP143.204.55.115:0
Size319 kB (318825 bytes) Hash5512757f80426634c38b5e78b24c0f06 c849223ba79a97c2c7f38f52fdd686928c7e1130 3874a796e97c7626d8b42f0d93e4ecc01212cce7cb50a6e4295e5cffa3865b5c
GET /hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318825
age: 5
server: nginx
date: Tue, 07 May 2024 17:49:01 GMT
last-modified: Tue, 07 May 2024 17:48:59 GMT
etag: "663a698b-4dd69"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: TG1XRsP-pRkiniYB2SQOFUGHTsRWKiGmrqEehTHlCy39bp-RBvxhzA==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size312 kB (312443 bytes) Hash2edf1684af11b22e612745966e649210 ee417c71c588e186ba813c4d6727d4b5e486e30f 8c8e5b471630778ebc7c9ed1d7de24945216f21a0aa6df36b4103f8d6b66833a
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Tue, 07 May 2024 17:49:05 GMT
last-modified: Tue, 07 May 2024 17:49:03 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9cwF5XyoHNP56SQEDC7erc-zHebX4HMk-ZbHNjoTWZKub6_5gCLcBw==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 | 143.204.55.115 | | 319 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 IP143.204.55.115:0
Size319 kB (318825 bytes) Hash5512757f80426634c38b5e78b24c0f06 c849223ba79a97c2c7f38f52fdd686928c7e1130 3874a796e97c7626d8b42f0d93e4ecc01212cce7cb50a6e4295e5cffa3865b5c
GET /hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318825
age: 5
server: nginx
date: Tue, 07 May 2024 17:49:01 GMT
last-modified: Tue, 07 May 2024 17:48:59 GMT
etag: "663a698b-4dd69"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: iUpC22OrMjPBsxGMxaKbLudiTcUMcweHpTW3OMQezn31t9djo-3WKQ==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 | 143.204.55.115 | | 312 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (312116 bytes) Hashac0335d0ff0ce869ee110a80cb1906a2 6fe6a176c0cf2c3bdd972c3750d41ac6e15e9f7d ffc6f9ba88f98b121ec6829bad33287b3533f81efaa194a9a882525449f346db
GET /hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312116
age: 3
server: nginx
date: Tue, 07 May 2024 17:49:03 GMT
last-modified: Tue, 07 May 2024 17:49:01 GMT
etag: "663a698d-4c334"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: sy2QgYEhPliCkvrQ5a-v6AfBR0atFk2SMgRT6fwEhYAx8x6os16Xpg==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 | 143.204.55.115 | | 319 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 IP143.204.55.115:0
Size319 kB (318825 bytes) Hash5512757f80426634c38b5e78b24c0f06 c849223ba79a97c2c7f38f52fdd686928c7e1130 3874a796e97c7626d8b42f0d93e4ecc01212cce7cb50a6e4295e5cffa3865b5c
GET /hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318825
age: 5
server: nginx
date: Tue, 07 May 2024 17:49:01 GMT
last-modified: Tue, 07 May 2024 17:48:59 GMT
etag: "663a698b-4dd69"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: nkr6qGvwNDxTYOCbVuVKZL0UrBAPePqUqUQmjtQthKSPjb3qTGJS7A==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 | 143.204.55.115 | | 312 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (312116 bytes) Hashac0335d0ff0ce869ee110a80cb1906a2 6fe6a176c0cf2c3bdd972c3750d41ac6e15e9f7d ffc6f9ba88f98b121ec6829bad33287b3533f81efaa194a9a882525449f346db
GET /hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312116
age: 3
server: nginx
date: Tue, 07 May 2024 17:49:03 GMT
last-modified: Tue, 07 May 2024 17:49:01 GMT
etag: "663a698d-4c334"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ZXEH9ZmfShDTNS2_jTeNA1TCG-mpxFqpfwXu2wdpighgDHYz1EU12A==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 | 143.204.55.115 | | 319 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 IP143.204.55.115:0
Size319 kB (318825 bytes) Hash5512757f80426634c38b5e78b24c0f06 c849223ba79a97c2c7f38f52fdd686928c7e1130 3874a796e97c7626d8b42f0d93e4ecc01212cce7cb50a6e4295e5cffa3865b5c
GET /hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318825
age: 5
server: nginx
date: Tue, 07 May 2024 17:49:01 GMT
last-modified: Tue, 07 May 2024 17:48:59 GMT
etag: "663a698b-4dd69"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: VOfrFPKFeHnwpFlJ5BMOuLBxPIPz0GniG52ta1d3l-5vclM8nQITew==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 | 143.204.55.115 | | 312 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (312116 bytes) Hashac0335d0ff0ce869ee110a80cb1906a2 6fe6a176c0cf2c3bdd972c3750d41ac6e15e9f7d ffc6f9ba88f98b121ec6829bad33287b3533f81efaa194a9a882525449f346db
GET /hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312116
age: 4
server: nginx
date: Tue, 07 May 2024 17:49:03 GMT
last-modified: Tue, 07 May 2024 17:49:01 GMT
etag: "663a698d-4c334"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: BA8zhK8YgwRmCMOW8zZKU4OAoTa2bI5u-eG406eYBAirThcFduFprQ==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 | 143.204.55.115 | | 319 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 IP143.204.55.115:0
Size319 kB (318825 bytes) Hash5512757f80426634c38b5e78b24c0f06 c849223ba79a97c2c7f38f52fdd686928c7e1130 3874a796e97c7626d8b42f0d93e4ecc01212cce7cb50a6e4295e5cffa3865b5c
GET /hls/71220142/71220142_480p_2217_S4OfeIdCxY1HM1zi_1715104137.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 318825
age: 6
server: nginx
date: Tue, 07 May 2024 17:49:01 GMT
last-modified: Tue, 07 May 2024 17:48:59 GMT
etag: "663a698b-4dd69"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 7lfpjSUOTR265J4nZcjqqVpZ824oLt_KNsneKNaj9VGoVLNrlRiZ7Q==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 | 143.204.55.115 | | 312 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (312116 bytes) Hashac0335d0ff0ce869ee110a80cb1906a2 6fe6a176c0cf2c3bdd972c3750d41ac6e15e9f7d ffc6f9ba88f98b121ec6829bad33287b3533f81efaa194a9a882525449f346db
GET /hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312116
age: 4
server: nginx
date: Tue, 07 May 2024 17:49:03 GMT
last-modified: Tue, 07 May 2024 17:49:01 GMT
etag: "663a698d-4c334"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: g__0D2bVfvcEv7-BObpIU5qQCJq1BR4VxuSdkVbGCrTyslOYzqvoPg==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size312 kB (312442 bytes) Hashdd09b509ab704e05d28e7873b69bbbfb a6a33e14018094ffc206ba4a0ba5dedc535e3e45 2485d9ab385087e284a3f8760bc8b16e20d90e9e05af2957266461a27a2df434
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Tue, 07 May 2024 17:49:07 GMT
last-modified: Tue, 07 May 2024 17:49:05 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: HIT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qsy29TIVQZ1W-Ou-LGx5YPiH7J9dvOtcy0McWKu7QgxU-sI29ffG8g==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 314 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size314 kB (314069 bytes) Hash5c19f280de6ac45a2e43a71e6060c3f8 61cb4e6aad6ba84a6631dde440a77eeba950c9cd de039931f7efde6f657013e41190665d3c8e4d910f7184c7bd73a1ad314abf25
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-C1
server: nginx
date: Tue, 07 May 2024 17:49:07 GMT
last-modified: Tue, 07 May 2024 17:49:05 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: HIT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-id: YUUzvLn0qrTErYYIjA03fr8mqiWp2ph1Dj9WVFyHU9INLaMmh0deMA==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 | 143.204.55.115 | | 312 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (312116 bytes) Hashac0335d0ff0ce869ee110a80cb1906a2 6fe6a176c0cf2c3bdd972c3750d41ac6e15e9f7d ffc6f9ba88f98b121ec6829bad33287b3533f81efaa194a9a882525449f346db
GET /hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312116
age: 4
server: nginx
date: Tue, 07 May 2024 17:49:03 GMT
last-modified: Tue, 07 May 2024 17:49:01 GMT
etag: "663a698d-4c334"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: HGqx4JEJfZh8LcpeAkxoTFchxCq6Wp-SRTCcpN6TE-4atH3SLVxBdA==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 | 143.204.55.115 | | 314 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 IP143.204.55.115:0
Size314 kB (313743 bytes) Hash3e763e1b7ad305ee0710b1f0102d0f98 64e962a60aadc84f99f711b4c7c4911d46c8109a e9467a47ade65eccd73587d61a414416be0e32bce3fb461eac70dd94a942c2e7
GET /hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 313743
age: 2
server: nginx
date: Tue, 07 May 2024 17:49:05 GMT
last-modified: Tue, 07 May 2024 17:49:03 GMT
etag: "663a698f-4c98f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: A_7klZXIzGlP8QqQS_qqbkEmaWsWHTJgL8f-MJB5ngVok-ukiqp43w==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 | 143.204.55.115 | | 312 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (312116 bytes) Hashac0335d0ff0ce869ee110a80cb1906a2 6fe6a176c0cf2c3bdd972c3750d41ac6e15e9f7d ffc6f9ba88f98b121ec6829bad33287b3533f81efaa194a9a882525449f346db
GET /hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312116
age: 5
server: nginx
date: Tue, 07 May 2024 17:49:03 GMT
last-modified: Tue, 07 May 2024 17:49:01 GMT
etag: "663a698d-4c334"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: aKcGnsILFzdMSXzbZWwi7HzSK8l6l-9XPw7oH4q7ic3LtnppJzyAcA==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 314 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size314 kB (314069 bytes) Hash5c19f280de6ac45a2e43a71e6060c3f8 61cb4e6aad6ba84a6631dde440a77eeba950c9cd de039931f7efde6f657013e41190665d3c8e4d910f7184c7bd73a1ad314abf25
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-C1
server: nginx
last-modified: Tue, 07 May 2024 17:49:05 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: HIT
content-encoding: gzip
date: Tue, 07 May 2024 17:49:08 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-id: rwtnQz_K0sho2Inzwf5G3mi2YCzUjs98HVCfbfUMvOJfDJRiFDgf9w==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 | 143.204.55.115 | | 312 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (312116 bytes) Hashac0335d0ff0ce869ee110a80cb1906a2 6fe6a176c0cf2c3bdd972c3750d41ac6e15e9f7d ffc6f9ba88f98b121ec6829bad33287b3533f81efaa194a9a882525449f346db
GET /hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312116
age: 5
server: nginx
date: Tue, 07 May 2024 17:49:03 GMT
last-modified: Tue, 07 May 2024 17:49:01 GMT
etag: "663a698d-4c334"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: B8nDKidqAZVc_HS2v87PERG4p92BxIIpA0j3scxpoqYqMT89L-_UZA==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 | 143.204.55.115 | | 314 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 IP143.204.55.115:0
Size314 kB (313743 bytes) Hash3e763e1b7ad305ee0710b1f0102d0f98 64e962a60aadc84f99f711b4c7c4911d46c8109a e9467a47ade65eccd73587d61a414416be0e32bce3fb461eac70dd94a942c2e7
GET /hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 313743
age: 3
server: nginx
date: Tue, 07 May 2024 17:49:05 GMT
last-modified: Tue, 07 May 2024 17:49:03 GMT
etag: "663a698f-4c98f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 3dflwPFXQ67wVq38mFYHjx7Vx6gNv738h9cAu_B2fWz3lIq9O3Lr1w==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 312 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size312 kB (312442 bytes) Hashdd09b509ab704e05d28e7873b69bbbfb a6a33e14018094ffc206ba4a0ba5dedc535e3e45 2485d9ab385087e284a3f8760bc8b16e20d90e9e05af2957266461a27a2df434
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Tue, 07 May 2024 17:49:05 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: HIT
content-encoding: gzip
date: Tue, 07 May 2024 17:49:08 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SCK_bCddD2AwzAPcKaR48AHcKlKqjChJyV4UA9AfjK-_4MSNcJS4-g==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 | 143.204.55.115 | | 314 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 IP143.204.55.115:0
Size314 kB (313743 bytes) Hash3e763e1b7ad305ee0710b1f0102d0f98 64e962a60aadc84f99f711b4c7c4911d46c8109a e9467a47ade65eccd73587d61a414416be0e32bce3fb461eac70dd94a942c2e7
GET /hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 313743
age: 3
server: nginx
date: Tue, 07 May 2024 17:49:05 GMT
last-modified: Tue, 07 May 2024 17:49:03 GMT
etag: "663a698f-4c98f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: a93PjtjZemzwAqND6iG-H40kfSnvCp3KEoICsc8P_K3EXU5oX8jh7Q==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 | 143.204.55.115 | | 312 kB |
URL GET b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 IP143.204.55.115:0
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size312 kB (312116 bytes) Hashac0335d0ff0ce869ee110a80cb1906a2 6fe6a176c0cf2c3bdd972c3750d41ac6e15e9f7d ffc6f9ba88f98b121ec6829bad33287b3533f81efaa194a9a882525449f346db
GET /hls/71220142/71220142_480p_2218_j25z1aLDj9moLp2s_1715104139.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312116
age: 6
server: nginx
date: Tue, 07 May 2024 17:49:03 GMT
last-modified: Tue, 07 May 2024 17:49:01 GMT
etag: "663a698d-4c334"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: IF-584_bk0OxD4c0DSMpFoiDY_NqCmmHUvur2VpGtplYbJLH7qCzmQ==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 315 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size315 kB (315205 bytes) Hash6af8cb48b85d9bcaaf7ee10d6ecdf9fc 72bd8bd1e2747e74f7a62b80a66576a0dd82c553 c4fb7977306774eacaa8b909b513837aaf15a1334d823dc42acd3d820f018b74
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Tue, 07 May 2024 17:49:05 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: HIT
content-encoding: gzip
date: Tue, 07 May 2024 17:49:08 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ey0rj64ZRSEWxevHBiyahi9pKOp8B4EMrnKtONqx_qawT27pLWMn1Q==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 314 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size314 kB (314065 bytes) Hash1ff0f7522db64b12b00884d8ae06095d 07deb44060c2d8a21666ce4d075dd43942456bf6 95fe0eaf46d6e736d38bd2e15485ceb12de01fbdaf9ff60d2d7400308ae74004
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Tue, 07 May 2024 17:49:01 GMT
last-modified: Tue, 07 May 2024 17:48:59 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zCvrM9QU4kXw1rT3bMrzhBtm2qPx2mBZGKw8h-MU05Rw8Aeu7Bbk7Q==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 313 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size313 kB (312810 bytes) Hashba28969f3ce7191170227e174cbedebf 70633810ad63092b8b3d9d0039c70022ac761d3a cee01d6e630124266fc73bf4c6faf351858f8ce5c82e11d2371d4c6b35302136
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-C1
server: nginx
date: Tue, 07 May 2024 17:49:09 GMT
last-modified: Tue, 07 May 2024 17:49:07 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-id: 4Eqlzuj_m3aJRbfV2kEU_y80kTbgZh0jnVIvUBaLannGWp8McRsk9g==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 | 143.204.55.115 | | 314 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 IP143.204.55.115:0
Size314 kB (313743 bytes) Hash3e763e1b7ad305ee0710b1f0102d0f98 64e962a60aadc84f99f711b4c7c4911d46c8109a e9467a47ade65eccd73587d61a414416be0e32bce3fb461eac70dd94a942c2e7
GET /hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 313743
age: 4
server: nginx
date: Tue, 07 May 2024 17:49:05 GMT
last-modified: Tue, 07 May 2024 17:49:03 GMT
etag: "663a698f-4c98f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: MWelNe0dvStzIZWVWUZjlu_WdRqI6kjFLtnI1tAHdjjCsMfye9lqjw==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 313 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size313 kB (312810 bytes) Hashba28969f3ce7191170227e174cbedebf 70633810ad63092b8b3d9d0039c70022ac761d3a cee01d6e630124266fc73bf4c6faf351858f8ce5c82e11d2371d4c6b35302136
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Tue, 07 May 2024 17:49:09 GMT
last-modified: Tue, 07 May 2024 17:49:07 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: or8INyfvI-xCxvtseb6X-CUGdu6Zk2bQlYAgFg_2rHV2TLBWTm5S0Q==
|
|
| i.doodcdn.co/theme_2/img/loader.svg | 104.26.6.74 | 200 OK | 314 kB |
URL GET HTTP/3i.doodcdn.co/theme_2/img/loader.svg IP104.26.6.74:443
Requested byhttps://d0000d.com/e/pna44yw4diwt CertificateIssuerCloudflare, Inc. Subjectdoodcdn.co Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3 ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeexported SGML document, ASCII text Size314 kB (314106 bytes) Hashbe00fc4a29d03016e78b28c9943e3f51 10f2025f5aa96706cc81e050eadfcaa9bcc55af5 eec2c40d8b1bb98306990239204d8b90ca030f0def0e00dfe3117ae42991e126
GET /theme_2/img/loader.svg HTTP/1.1
Host: i.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://i.doodcdn.co/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:51 GMT
content-type: image/svg+xml
last-modified: Mon, 03 Jan 2022 15:43:40 GMT
cache-control: max-age=2592000
expires: Thu, 06 Jun 2024 17:27:27 GMT
access-control-allow-origin: *
cf-cache-status: HIT
age: 1283
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eiH9JhXXq7UhPj6Jtp3sZ2UGKclAUcxEbc9Ovi7OdFoKlFS21tjY31LUQsaAUGJXyU0uQqkcPmE53C31pTWwRcObe73Ehmx0RRhAn7CbXxkOabj5vja9xtRp7N3igA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88030b175fc0b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 313 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size313 kB (312810 bytes) Hashba28969f3ce7191170227e174cbedebf 70633810ad63092b8b3d9d0039c70022ac761d3a cee01d6e630124266fc73bf4c6faf351858f8ce5c82e11d2371d4c6b35302136
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Tue, 07 May 2024 17:49:09 GMT
last-modified: Tue, 07 May 2024 17:49:07 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9ofyExp5zyQPfPhLqSvge04DoeJaZP75EmPGVJPC9hQIfaqZfHxWeQ==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 | 143.204.55.115 | | 314 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 IP143.204.55.115:0
Size314 kB (313743 bytes) Hash3e763e1b7ad305ee0710b1f0102d0f98 64e962a60aadc84f99f711b4c7c4911d46c8109a e9467a47ade65eccd73587d61a414416be0e32bce3fb461eac70dd94a942c2e7
GET /hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 313743
age: 5
server: nginx
date: Tue, 07 May 2024 17:49:05 GMT
last-modified: Tue, 07 May 2024 17:49:03 GMT
etag: "663a698f-4c98f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: AIH8xa--tKbmLjnwY0ZpDFV1OI3QgkKyarcBvCfbZf7UCfH2_1PB4w==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 313 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size313 kB (312810 bytes) Hashba28969f3ce7191170227e174cbedebf 70633810ad63092b8b3d9d0039c70022ac761d3a cee01d6e630124266fc73bf4c6faf351858f8ce5c82e11d2371d4c6b35302136
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-C1
server: nginx
last-modified: Tue, 07 May 2024 17:49:07 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Tue, 07 May 2024 17:49:10 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-id: GrbxSDb6lFpOHTBj5TQ7-ItIf5zr8R6WuplDpraboc9qw_ffQ20Dbg==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 | 143.204.55.115 | | 314 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 IP143.204.55.115:0
Size314 kB (313743 bytes) Hash3e763e1b7ad305ee0710b1f0102d0f98 64e962a60aadc84f99f711b4c7c4911d46c8109a e9467a47ade65eccd73587d61a414416be0e32bce3fb461eac70dd94a942c2e7
GET /hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 313743
age: 5
server: nginx
date: Tue, 07 May 2024 17:49:05 GMT
last-modified: Tue, 07 May 2024 17:49:03 GMT
etag: "663a698f-4c98f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: uQQXpIZecHGq7VLCs9WY0Q8q63R-DSUaCwY740YjfxOl6hjlfbwdZQ==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2220_Iuc0gbGPWPi32gJ5_1715104143.mp4 | 143.204.55.115 | | 312 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2220_Iuc0gbGPWPi32gJ5_1715104143.mp4 IP143.204.55.115:0
Size312 kB (312487 bytes) Hash3095c83b7526a620ec2b3821d9902f59 af43e50fd8a5fa2bf5a46f2bf7ed67ae0749561a b3d6c5ac564206310709b91afdc962c7da0c41a5812c61b852c2bc944d811432
GET /hls/71220142/71220142_480p_2220_Iuc0gbGPWPi32gJ5_1715104143.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312487
age: 3
server: nginx
date: Tue, 07 May 2024 17:49:07 GMT
last-modified: Tue, 07 May 2024 17:49:05 GMT
etag: "663a6991-4c4a7"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: aU5VnLirXZsCIkJsnNFo0nt8DuDHAITBtXHk91ytEGOKEUYAjfI9Og==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 | 143.204.55.115 | | 314 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 IP143.204.55.115:0
Size314 kB (313743 bytes) Hash3e763e1b7ad305ee0710b1f0102d0f98 64e962a60aadc84f99f711b4c7c4911d46c8109a e9467a47ade65eccd73587d61a414416be0e32bce3fb461eac70dd94a942c2e7
GET /hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 313743
age: 5
server: nginx
date: Tue, 07 May 2024 17:49:05 GMT
last-modified: Tue, 07 May 2024 17:49:03 GMT
etag: "663a698f-4c98f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: xdLCu9uMtPldVc6IQE_VKZdbUN352_SIvMUzE5aTsrS-JIBqfDmg4Q==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 313 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size313 kB (312810 bytes) Hashba28969f3ce7191170227e174cbedebf 70633810ad63092b8b3d9d0039c70022ac761d3a cee01d6e630124266fc73bf4c6faf351858f8ce5c82e11d2371d4c6b35302136
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Tue, 07 May 2024 17:49:07 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Tue, 07 May 2024 17:49:10 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: FRFrYexb4xuMLQls40fXPY6XASsCPOsGjlfJiBK1bPhIpFa01QChSQ==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 | 143.204.55.115 | | 314 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 IP143.204.55.115:0
Size314 kB (313743 bytes) Hash3e763e1b7ad305ee0710b1f0102d0f98 64e962a60aadc84f99f711b4c7c4911d46c8109a e9467a47ade65eccd73587d61a414416be0e32bce3fb461eac70dd94a942c2e7
GET /hls/71220142/71220142_480p_2219_iZpkTHPCn3cZpnsZ_1715104141.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 313743
age: 6
server: nginx
date: Tue, 07 May 2024 17:49:05 GMT
last-modified: Tue, 07 May 2024 17:49:03 GMT
etag: "663a698f-4c98f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 9VPcNLuQIbxL3lMMqkl2oh6OnH5phhVdfXI6gLtAdgOiXun70r5egg==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2220_Iuc0gbGPWPi32gJ5_1715104143.mp4 | 143.204.55.115 | | 312 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2220_Iuc0gbGPWPi32gJ5_1715104143.mp4 IP143.204.55.115:0
Size312 kB (312487 bytes) Hash3095c83b7526a620ec2b3821d9902f59 af43e50fd8a5fa2bf5a46f2bf7ed67ae0749561a b3d6c5ac564206310709b91afdc962c7da0c41a5812c61b852c2bc944d811432
GET /hls/71220142/71220142_480p_2220_Iuc0gbGPWPi32gJ5_1715104143.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312487
age: 4
server: nginx
date: Tue, 07 May 2024 17:49:07 GMT
last-modified: Tue, 07 May 2024 17:49:05 GMT
etag: "663a6991-4c4a7"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: MfYxVUNP_K0lNZifeE0N5LJT9s0IOZ-v8IRpbZ_p05C_HTeIsuH-Lg==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2220_Iuc0gbGPWPi32gJ5_1715104143.mp4 | 143.204.55.115 | | 312 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2220_Iuc0gbGPWPi32gJ5_1715104143.mp4 IP143.204.55.115:0
Size312 kB (312487 bytes) Hash3095c83b7526a620ec2b3821d9902f59 af43e50fd8a5fa2bf5a46f2bf7ed67ae0749561a b3d6c5ac564206310709b91afdc962c7da0c41a5812c61b852c2bc944d811432
GET /hls/71220142/71220142_480p_2220_Iuc0gbGPWPi32gJ5_1715104143.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312487
age: 4
server: nginx
date: Tue, 07 May 2024 17:49:07 GMT
last-modified: Tue, 07 May 2024 17:49:05 GMT
etag: "663a6991-4c4a7"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: zBCGa06ZjxSVuoCxkDt5RAhISZe-5gBtVBaNU-EMsWr9TO38hBmU2Q==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2221_PdAv2wn4pyLADVw1_1715104145.mp4 | 143.204.55.115 | | 328 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2221_PdAv2wn4pyLADVw1_1715104145.mp4 IP143.204.55.115:0
Size328 kB (327525 bytes) Hash337a5e50f3f4d5ca8a8b9c07736350e3 be3169293e214a7c9256ba90baf2a2c003fafd78 8813dc1d0bc03fd99d5bd9bca9caa01bcbbd01306bee0a48bce668bf08d06667
GET /hls/71220142/71220142_480p_2221_PdAv2wn4pyLADVw1_1715104145.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 327525
age: 2
server: nginx
date: Tue, 07 May 2024 17:49:09 GMT
last-modified: Tue, 07 May 2024 17:49:07 GMT
etag: "663a6993-4ff65"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: dSVuqLWOL3FW9mFq_RCKZQt_p9o4xWVASCAsjgsMS3QYTi4GsIgReg==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2220_Iuc0gbGPWPi32gJ5_1715104143.mp4 | 143.204.55.115 | | 312 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2220_Iuc0gbGPWPi32gJ5_1715104143.mp4 IP143.204.55.115:0
Size312 kB (312487 bytes) Hash3095c83b7526a620ec2b3821d9902f59 af43e50fd8a5fa2bf5a46f2bf7ed67ae0749561a b3d6c5ac564206310709b91afdc962c7da0c41a5812c61b852c2bc944d811432
GET /hls/71220142/71220142_480p_2220_Iuc0gbGPWPi32gJ5_1715104143.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312487
age: 4
server: nginx
date: Tue, 07 May 2024 17:49:07 GMT
last-modified: Tue, 07 May 2024 17:49:05 GMT
etag: "663a6991-4c4a7"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: jWaR6afR9qjH5Li1TTg75pYf3JkZxmbq4RzPqCRMx8hsreRbgc3dog==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 | 143.204.55.115 | 200 OK | 328 kB |
URL GET HTTP/3b-hls-15.doppiocdn.net/hls/71220142/71220142_480p.m3u8 IP143.204.55.115:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size328 kB (327846 bytes) Hash683a455b438ac199bb3f6caca7e71a64 c8ac86f93d48bff569cc4efca298fcee4538493d 326fa39dfad816a938eb3081382df46e87f4802c925944bc88345604fcc5a529
GET /hls/71220142/71220142_480p.m3u8 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Tue, 07 May 2024 17:49:11 GMT
last-modified: Tue, 07 May 2024 17:49:09 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: HIT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bG39GRw-y4g5cLgYwJf2yS2nOehHujzF8JURrDryGPCcgLcAz8iF_g==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2220_Iuc0gbGPWPi32gJ5_1715104143.mp4 | 143.204.55.115 | | 312 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2220_Iuc0gbGPWPi32gJ5_1715104143.mp4 IP143.204.55.115:0
Size312 kB (312487 bytes) Hash3095c83b7526a620ec2b3821d9902f59 af43e50fd8a5fa2bf5a46f2bf7ed67ae0749561a b3d6c5ac564206310709b91afdc962c7da0c41a5812c61b852c2bc944d811432
GET /hls/71220142/71220142_480p_2220_Iuc0gbGPWPi32gJ5_1715104143.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312487
age: 5
server: nginx
date: Tue, 07 May 2024 17:49:07 GMT
last-modified: Tue, 07 May 2024 17:49:05 GMT
etag: "663a6991-4c4a7"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 1BWBxogTiolFik8v_VLeBIQcyifX_vC6mDquB03HC8Kf68nk05WZ1w==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2221_PdAv2wn4pyLADVw1_1715104145.mp4 | 143.204.55.115 | | 328 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2221_PdAv2wn4pyLADVw1_1715104145.mp4 IP143.204.55.115:0
Size328 kB (327525 bytes) Hash337a5e50f3f4d5ca8a8b9c07736350e3 be3169293e214a7c9256ba90baf2a2c003fafd78 8813dc1d0bc03fd99d5bd9bca9caa01bcbbd01306bee0a48bce668bf08d06667
GET /hls/71220142/71220142_480p_2221_PdAv2wn4pyLADVw1_1715104145.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 327525
age: 3
server: nginx
date: Tue, 07 May 2024 17:49:09 GMT
last-modified: Tue, 07 May 2024 17:49:07 GMT
etag: "663a6993-4ff65"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: iKM1y911LUD_omZFCi2RGlQL8Lc6qhvHlnrO7tuoCSBePK11uWlG3Q==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2220_Iuc0gbGPWPi32gJ5_1715104143.mp4 | 143.204.55.115 | | 312 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2220_Iuc0gbGPWPi32gJ5_1715104143.mp4 IP143.204.55.115:0
Size312 kB (312487 bytes) Hash3095c83b7526a620ec2b3821d9902f59 af43e50fd8a5fa2bf5a46f2bf7ed67ae0749561a b3d6c5ac564206310709b91afdc962c7da0c41a5812c61b852c2bc944d811432
GET /hls/71220142/71220142_480p_2220_Iuc0gbGPWPi32gJ5_1715104143.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 312487
age: 5
server: nginx
date: Tue, 07 May 2024 17:49:07 GMT
last-modified: Tue, 07 May 2024 17:49:05 GMT
etag: "663a6991-4c4a7"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: V9FiuHsFRLBJbHOfUfOsCNWTvEF2WUDZmY9p9QX7tS_wvrHQtJYrPA==
|
|
| b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2221_PdAv2wn4pyLADVw1_1715104145.mp4 | 143.204.55.115 | | 328 kB |
URL b-hls-15.doppiocdn.net/hls/71220142/71220142_480p_2221_PdAv2wn4pyLADVw1_1715104145.mp4 IP143.204.55.115:0
Size328 kB (327525 bytes) Hash337a5e50f3f4d5ca8a8b9c07736350e3 be3169293e214a7c9256ba90baf2a2c003fafd78 8813dc1d0bc03fd99d5bd9bca9caa01bcbbd01306bee0a48bce668bf08d06667
GET /hls/71220142/71220142_480p_2221_PdAv2wn4pyLADVw1_1715104145.mp4 HTTP/1.1
Host: b-hls-15.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 327525
age: 3
server: nginx
date: Tue, 07 May 2024 17:49:09 GMT
last-modified: Tue, 07 May 2024 17:49:07 GMT
etag: "663a6993-4ff65"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: juO10jHyyTMJ_kMRDqvYMUghGiY1nPDz259vOVbpOC7cK9pMAKTXzA==
|
|
| memeksiana.vip/wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0 | 104.21.32.176 | 200 OK | 5.8 kB |
URL GET HTTP/3memeksiana.vip/wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0 IP104.21.32.176:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerGoogle Trust Services LLC Subjectmemeksiana.vip FingerprintA1:4B:70:27:B8:00:01:28:2C:FC:2D:F4:C3:8D:99:60:A1:56:5A:B7 ValiditySun, 14 Apr 2024 06:51:40 GMT - Sat, 13 Jul 2024 06:51:39 GMT
File typeJavaScript source, ASCII text, with very long lines (5901), with no line terminators Hash81921d1450c36276ec0bfd5cb0cd570d 9659c62f3ca7b62a346407c1a9f3dc74716cd0a7 d053bb499134b35ffce2eb026515ef997bc03b488d497f460de52b4492cd5595
GET /wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0 HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: application/x-javascript
vary: X-Forwarded-Proto,Accept-Encoding,User-Agent
last-modified: Wed, 26 Jul 2023 13:35:19 GMT
etag: W/"167b-60163eb2933c0"
cache-control: public, max-age=31536000
expires: Wed, 30 Apr 2025 23:47:46 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.1
cf-cache-status: HIT
age: 583263
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P6nUITV9iVxcJoiVITp31QOIsOnc%2BoShtDvODiYBuEF6APVH3%2Bu0Hw0V3SDl5ullffEMUIXZZDBVXRN%2FvobfB9XjvQaqKZhqep9A8xR09BzX35uHy3GHfj64ecQWgFG2sQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b0dec205697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.ping-fast.com/iping.php?aut=EC153B028BB768C452A7D8CB0139455201155A64B952D34A750D6E8DD1AE0CB4854A7AD421D35CBBB2 | 172.67.136.97 | 200 OK | 136 B |
URL GET HTTP/2www.ping-fast.com/iping.php?aut=EC153B028BB768C452A7D8CB0139455201155A64B952D34A750D6E8DD1AE0CB4854A7AD421D35CBBB2 IP172.67.136.97:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerLet's Encrypt Subjectping-fast.com FingerprintF8:95:1B:4E:74:60:F6:C0:E9:D3:B4:F8:6D:C8:DD:51:DB:44:D7:22 ValidityWed, 24 Apr 2024 09:50:20 GMT - Tue, 23 Jul 2024 09:50:19 GMT
File typeGIF image data, version 87a, 61 x 13 Hash588fe4a1eab069ef1a93078a481f1e37 b571adb8f43c9964f7d60c1f7c4abaf59df91f21 95efb24b82b2ea115955fa84f86f4bf931639b0094a7198f34fd97327d0fd613
GET /iping.php?aut=EC153B028BB768C452A7D8CB0139455201155A64B952D34A750D6E8DD1AE0CB4854A7AD421D35CBBB2 HTTP/1.1
Host: www.ping-fast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://memeksiana.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: image/png
x-powered-by: PHP/7.3
pragma: public
expires: Mon, 26 Jul 2014 05:00:00 GMT
cache-control: max-age=604800
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zJIoKGrrpexlePAXKXEI7SPJG3Toil%2Fv528rXpTeD2NjSWJT5hwSGCDKccbUUHHfns9qTR1as4UxcJl6pjQ1XIpOHWYsuT83HIVSBIvUuRBkizeCVKWUq1fNd4zRo914ntEDmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b0e3c0856be-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| go.bbrdbr.com/metric/store/creative-playback-error | 104.18.40.50 | 204 No Content | 0 B |
URL POST HTTP/3go.bbrdbr.com/metric/store/creative-playback-error IP104.18.40.50:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerCloudflare, Inc. Subjectbbrdbr.com Fingerprint54:D2:62:A8:E8:91:19:F3:B4:1C:47:61:81:1B:D4:97:94:1B:26:9E ValidityFri, 26 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /metric/store/creative-playback-error HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 222
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
date: Tue, 07 May 2024 17:48:53 GMT
access-control-allow-origin: https://creative.bbrdbr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtqFVkgfjmU48Q4QE1YgEsMCfUyji; SameSite=None; Secure; path=/; expires=Wed, 08-May-24 17:48:53 GMT; HttpOnly
server: cloudflare
cf-ray: 88030b218b9f5687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| poweredby.jads.co/adshow.php?adzone=890543 | 185.94.236.247 | 200 OK | 3.6 kB |
URL GET HTTP/1.1poweredby.jads.co/adshow.php?adzone=890543 IP185.94.236.247:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerSectigo Limited Subject*.jads.co Fingerprint6C:79:49:F2:EA:3B:68:61:E1:57:17:4B:BA:C8:E9:7C:91:0C:AB:38 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sun, 23 Feb 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3805), with no line terminators Hashc135de998415ea850bea75a3af67f2bb 338ad62a38057acb5b0f071d619dd3b7007ba1cd cdc8de7119089c0b000753048607f562f12f37d045e5d9b245a59fd820f4ca9d
GET /adshow.php?adzone=890543 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://memeksiana.vip/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 17:48:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=68858ff3e241077a9486b01bbae1366a; expires=Wed, 07-May-2025 17:48:50 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps155=1; expires=Wed, 08-May-2024 17:48:51 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjE3MTEzMzI7aToxNzE1MzYzMzMwO30%3D; expires=Fri, 10-May-2024 17:48:50 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Fri, 10-May-2024 17:48:50 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
|
|
| go.mnaspm.com/checkUrl | 104.18.40.50 | 200 OK | 15 B |
IP104.18.40.50:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerGoogle Trust Services LLC Subjectmnaspm.com Fingerprint41:FC:20:C5:2D:89:14:17:87:EB:2D:BA:2E:DE:61:87:1E:53:19:CE ValiditySun, 14 Apr 2024 17:19:29 GMT - Sat, 13 Jul 2024 17:19:28 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash1d644ae7e24f3430d634f21c1d94a975 5752bf80588493a9914d4fddf9ed3b31857d90ac c9df5a7f763aff50375511af681843ba40d4d6ce044521c440515f7e04a2bff7
GET /checkUrl HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:53 GMT
content-type: application/json
content-length: 15
access-control-allow-origin: https://creative.bbrdbr.com
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtr56RXfnndb8PqaHw4TEuDRgFsQg; SameSite=None; Secure; path=/; expires=Wed, 08-May-24 17:48:53 GMT; HttpOnly
server: cloudflare
cf-ray: 88030b1f0c2156ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| go.bbrdbr.com/abc.gif?sourceId=300cps2girlwl&creativeId=300cps2girlwl&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&action=sbSignupWithModel&thumbSizeKey=big&language=en&thumbFit=cover&quality=original&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=1&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Fr.trackwilltrk.com%2F&i=0&ib=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A678%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A332%2C%22duration%22%3A221%2C%22transferSize%22%3A4646%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A333%2C%22duration%22%3A228%2C%22transferSize%22%3A82319%7D%5D&mh=-651169943 | 104.18.40.50 | 200 OK | 0 B |
URL GET HTTP/3go.bbrdbr.com/abc.gif?sourceId=300cps2girlwl&creativeId=300cps2girlwl&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&action=sbSignupWithModel&thumbSizeKey=big&language=en&thumbFit=cover&quality=original&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=1&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Fr.trackwilltrk.com%2F&i=0&ib=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A678%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A332%2C%22duration%22%3A221%2C%22transferSize%22%3A4646%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A333%2C%22duration%22%3A228%2C%22transferSize%22%3A82319%7D%5D&mh=-651169943 IP104.18.40.50:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerCloudflare, Inc. Subjectbbrdbr.com Fingerprint54:D2:62:A8:E8:91:19:F3:B4:1C:47:61:81:1B:D4:97:94:1B:26:9E ValidityFri, 26 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /abc.gif?sourceId=300cps2girlwl&creativeId=300cps2girlwl&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&action=sbSignupWithModel&thumbSizeKey=big&language=en&thumbFit=cover&quality=original&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=1&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Fr.trackwilltrk.com%2F&i=0&ib=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A678%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A332%2C%22duration%22%3A221%2C%22transferSize%22%3A4646%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A333%2C%22duration%22%3A228%2C%22transferSize%22%3A82319%7D%5D&mh=-651169943 HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:52 GMT
content-type: image/gif
content-length: 103
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28upDCGznfDm9XVEL2Ezfg4QRCzShudZt3EUk1krG; SameSite=None; Secure; path=/; expires=Wed, 08-May-24 17:48:52 GMT; HttpOnly
server: cloudflare
cf-ray: 88030b1dfd205687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| memeksiana.vip/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 | 104.21.32.176 | 200 OK | 19 kB |
URL GET HTTP/3memeksiana.vip/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 IP104.21.32.176:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerGoogle Trust Services LLC Subjectmemeksiana.vip FingerprintA1:4B:70:27:B8:00:01:28:2C:FC:2D:F4:C3:8D:99:60:A1:56:5A:B7 ValiditySun, 14 Apr 2024 06:51:40 GMT - Sat, 13 Jul 2024 06:51:39 GMT
File typeJavaScript source, ASCII text, with very long lines (15752) Hashb976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 HTTP/1.1
Host: memeksiana.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/
DNT: 1
Connection: keep-alive
Cookie: bnState_1988384={"impressions":1,"delayStarted":0}; bnState_1988383={"impressions":2,"delayStarted":0}
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: application/x-javascript
vary: X-Forwarded-Proto,Accept-Encoding,User-Agent
last-modified: Wed, 03 Apr 2024 05:16:42 GMT
etag: W/"4926-6152a5408518b"
cache-control: public, max-age=31536000
expires: Wed, 30 Apr 2025 23:47:48 GMT
referrer-policy: no-referrer-when-downgrade
pragma: public
x-powered-by: W3 Total Cache/2.7.1
cf-cache-status: HIT
age: 583262
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F3GlGjlYEN7oxhhXOMe93vC3kPaJyqDnUXg88hCTFt%2FlzBN37h6ix6oPnm%2FEmVqsuCD0yaLPhyvi87K1%2BvjFGWsK%2FjLrQBTiSBkdr1Ed%2Bv7l%2FlTVW2L%2FSScRiS8vSWgXdg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b124ad25697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| creative.bbrdbr.com/widgets/v4/Universal/hls.4cfa5b780bfed20a8b26.js | 104.18.40.50 | 200 OK | 61 B |
URL GET HTTP/3creative.bbrdbr.com/widgets/v4/Universal/hls.4cfa5b780bfed20a8b26.js IP104.18.40.50:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerCloudflare, Inc. Subjectbbrdbr.com Fingerprint54:D2:62:A8:E8:91:19:F3:B4:1C:47:61:81:1B:D4:97:94:1B:26:9E ValidityFri, 26 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash22f22b49cc901aa95826401f7ce0930c 6471abdd35ab6d511b67d73ad1375f1ee0f255de 0fae8b03858a764bad3e9af19bfc924ead5b9e25c760432c19e91cba3dff1cf3
GET /widgets/v4/Universal/hls.4cfa5b780bfed20a8b26.js HTTP/1.1
Host: creative.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid}
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 17:48:53 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 29 Apr 2024 08:14:47 GMT
etag: W/"662f56f7-3d"
expires: Tue, 07 May 2024 17:48:46 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 9
vary: Accept-Encoding
server: cloudflare
cf-ray: 88030b1fd8765687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| poweredby.jads.co/adshow.php?adzone=788997 | 185.94.236.247 | 200 OK | 3.6 kB |
URL GET HTTP/1.1poweredby.jads.co/adshow.php?adzone=788997 IP185.94.236.247:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerSectigo Limited Subject*.jads.co Fingerprint6C:79:49:F2:EA:3B:68:61:E1:57:17:4B:BA:C8:E9:7C:91:0C:AB:38 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sun, 23 Feb 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3806), with no line terminators Hashe31c5d91b757a12078134af09c1cab13 ff7877a76cede7c04b414bd37420dd56f809acd0 658fc91f7efc917af40e9cdccd760ffbfa2a463a935abc194dba89fea2577397
GET /adshow.php?adzone=788997 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://memeksiana.vip/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 17:48:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=68858ff3e241077a9486b01bbae1366a; expires=Wed, 07-May-2025 17:48:50 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps155=1; expires=Wed, 08-May-2024 17:48:51 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjE3MDk4NDA7aToxNzE1MzYzMzMwO30%3D; expires=Fri, 10-May-2024 17:48:50 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Fri, 10-May-2024 17:48:50 GMT; Max-Age=259199; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
|
|
| d0000d.com/e/pna44yw4diwt | 172.67.68.158 | 200 OK | 123 kB |
URL GET HTTP/2d0000d.com/e/pna44yw4diwt IP172.67.68.158:443
Requested byhttps://memeksiana.vip/bapak-ngentot-dengan-anak-sendiri-top-bgt/ CertificateIssuerLet's Encrypt Subjectd0000d.com FingerprintBD:90:21:00:88:3D:C8:E3:51:87:A1:6E:F2:99:0D:FC:98:3D:87:37 ValidityMon, 01 Apr 2024 12:55:14 GMT - Sun, 30 Jun 2024 12:55:13 GMT
Size123 kB (123053 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | suspicious | Suspicious - Anti-debugging code |
GET /e/pna44yw4diwt HTTP/1.1
Host: d0000d.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://memeksiana.vip/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Mon, 06 May 2024 17:48:50 GMT
set-cookie: lang=1; domain=.d0000d.com; path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MuVdZ1tGrzDtJi4hdCaM6GEmGc5o8gW94ghvKTzBc9rAqD606VBu21x76lVqQLxSSrtV%2Fpcx7hzBW6shaPtHgN4m3yxDPk66%2F%2Fjm%2FhpiwHXZPDoy9a1w8UFhbvs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b0c4d47b50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| pogothere.xyz/ | 188.114.97.1 | 200 OK | 26 B |
IP188.114.97.1:443
Requested byhttps://d0000d.com/e/pna44yw4diwt CertificateIssuerGoogle Trust Services LLC Subjectpogothere.xyz Fingerprint34:D3:33:F8:49:E2:1E:3E:44:A8:5D:74:68:9C:B8:A0:D5:F8:DD:0B ValidityWed, 27 Mar 2024 02:15:30 GMT - Tue, 25 Jun 2024 02:15:29 GMT
File typeASCII text, with no line terminators Hashd69b390250f605d09efc5c3a0143902d 205bb259f4f44f2cf3ac16fa8eff6d11ca9bef88 37f55921c5c1d023cf0c76f8d124f98c8e10aa7666c26bd41fc3b92d2c0e14c1
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d0000d.com/
Origin: https://d0000d.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:52 GMT
content-type: text/plain
set-cookie: csu=585288651834665@1@1715104131; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://d0000d.com
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2r6%2FEBCeGezaul7MK6XnxvgbaZ9utgi9GVsnsjPa8JFJt%2BW%2BZII8pOJhe0eQxBLJwKqWvitQ79AX3u3YMmEHqjrSK7rTvzvRDJ5oH8EpgjcEsZAD1yeu18ee%2F7lDctUL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88030b186dec7131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.doodcdn.co/js/embed3.js | 104.26.6.74 | 200 OK | 113 kB |
URL GET HTTP/2static.doodcdn.co/js/embed3.js IP104.26.6.74:443
Requested byhttps://d0000d.com/e/pna44yw4diwt CertificateIssuerCloudflare, Inc. Subjectdoodcdn.co Fingerprint8C:32:D4:AB:AF:53:AF:34:D3:6F:F9:E0:66:DC:21:B2:03:C6:34:F3 ValidityFri, 12 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Size113 kB (112790 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/embed3.js HTTP/1.1
Host: static.doodcdn.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d0000d.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 17:48:50 GMT
content-type: application/javascript
content-length: 112790
access-control-allow-origin: *
cache-control: public, max-age=2592000, no-transform
cf-bgj: minify
cf-polished: origSize=112944
etag: "65bf48c8-1b930"
expires: Wed, 05 Jun 2024 18:35:55 GMT
last-modified: Sun, 04 Feb 2024 08:20:24 GMT
cf-cache-status: HIT
age: 83424
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M6EhOS1pT4lV1xSr9nGkfzzrexrlRfvpqkS0CyvVy%2BMi1b74DnzwZHg5S9RgT0g5dQGxXlsep%2BNI0Bs4W1JTPOOrT0bSrwbUK8nhSz3scDh%2F5PUI5vSVyKM08MEPRECvJRsY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88030b0ffb7956aa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|