{"report_id":"063a89f5-566d-4ab5-be6e-33993129dcf0","version":6,"status":"done","tags":[],"date":"2026-01-08T13:38:40Z","url":{"schema":"https","addr":"www.xrares.com/video/2154/forced-to-fuck-by-bullies-","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.xrares.com/video/2154/forced-to-fuck-by-bullies-","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"title":"fuckd to fuck by bullies [香港][自拍][手機自拍] MOV00423 吉野家 強暴 - Xrares","dom":{"size":13913,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (13913), with no line terminators","md5":"8ab463c28167be73c5fcecbcb4af0666","sha1":"8d9bd998669938e25dda4a2fd54b6ce05917a50a","sha256":"6c56552db020ccf65126a7a7a1856a4f4cb5ba8c2dc048d6c1a39d85b7f1c211","sha512":"51236273a8d59d1817bc5c603f33119bd89ccabacd63977234bbc10627ef91eba28b965f37ff1516ec50f272ff870d08d248964f7aa1f92d82bc55133474eac9","ssdeep":"192:GoVS+hJF8k8PntxrI+35a5EOlsjrI44ZhDrc4v6hChqvrc4vLqhDrhqFi+3hq+k1:XPeIogiO+XeZhDYhChkxqhDrhq9hihGA","tlshash":"105295384190413c6e2a8bdce719b1e871ce59aef1d0e731b56883f0f2d59d6b26c8b4","dom_hash":"domhashb3cdf56517183b963158b609d9075bb2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.xrares.com/video/2154/forced-to-fuck-by-bullies-","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-12T13:38:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fapchatvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.xrares.com","ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-03-28","domain_rank":0,"first_seen":"2021-02-08T22:19:36Z","last_seen":"2026-01-08T13:18:24.520688Z","alert_count":0,"request_count":12,"received_data":81569,"sent_data":5355,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":2,"received_data":18339,"sent_data":950,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.xraress.com","ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"domain_registered":"2022-04-12","domain_rank":0,"first_seen":"2022-04-12T20:55:22Z","last_seen":"2025-08-18T09:26:24.978066Z","alert_count":0,"request_count":1,"received_data":1955,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-01-04T22:24:22.284555Z","alert_count":0,"request_count":1,"received_data":852763,"sent_data":492,"comment":"","tags":null,"fingerprints":null},{"fqdn":"go.mnaspm.com","ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-05","domain_rank":180461,"first_seen":"2023-10-04T11:16:29Z","last_seen":"2026-01-06T11:15:38.438449Z","alert_count":0,"request_count":5,"received_data":11968,"sent_data":3295,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"creative.bluetrafficstream.com","ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-18","domain_rank":0,"first_seen":"2025-11-06T04:51:37.066546Z","last_seen":"2026-01-06T11:15:38.365674Z","alert_count":0,"request_count":21,"received_data":5788717,"sent_data":19400,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-01-04T22:24:34.159986Z","alert_count":0,"request_count":1,"received_data":1717,"sent_data":424,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":7,"received_data":204765,"sent_data":3835,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.youtube.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2026-01-04T23:49:28.803174Z","alert_count":0,"request_count":2,"received_data":35740,"sent_data":871,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-04T22:18:41.67311Z","alert_count":0,"request_count":2,"received_data":723866,"sent_data":887,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fapchatvip.com","ip":{"addr":"77.93.87.1","port":443,"asn":43293,"as":"Proxility B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-04-23","domain_rank":44916,"first_seen":"2025-07-24T09:14:17.646084Z","last_seen":"2026-01-08T13:18:24.377379Z","alert_count":1,"request_count":1,"received_data":483,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"img.doppiocdn.com","ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-16","domain_rank":38793,"first_seen":"2025-02-10T15:14:32Z","last_seen":"2026-01-06T08:02:30.458951Z","alert_count":0,"request_count":20,"received_data":163344,"sent_data":9480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-01-04T22:45:39.840493Z","alert_count":0,"request_count":1,"received_data":96772,"sent_data":444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"go.bluetrafficstream.com","ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-18","domain_rank":0,"first_seen":"2025-10-30T22:51:12.441736Z","last_seen":"2026-01-08T13:18:24.329076Z","alert_count":0,"request_count":21,"received_data":75324,"sent_data":19741,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.xrares.com","ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-03-28","domain_rank":133479,"first_seen":"2017-04-17T14:41:09Z","last_seen":"2026-01-08T13:18:24.764572Z","alert_count":0,"request_count":21,"received_data":903924,"sent_data":10612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:1.11.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.xrares.com/video/2154/forced-to-fuck-by-bullies-","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"1a8696db1fed2bd243e617b5062e6098","sha1":"d7cec7b6b62600e4bc071e0ecdc6d67c2f2632f7","sha256":"063e9b42f119da0f6984aa49411be9d2218c947fc845b125b8658d151002986c","sha512":"0ea148855b770c4472d1af9c41df2b5e24f5101a2737028fcabc5ec31caeb6ca7ff0207c024bf12316c980d038f12c7b7afa6de24994990a70e5813262f1b49b","ssdeep":"","tlshash":"15a012c31868a07807524700ac323a2263124c558400205880100411254c28ef057b42","size":82,"data":"","first_seen":"2025-07-04T04:12:03.039798Z","last_seen":"2026-01-27T22:27:44.465912Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","size":4930,"data":"","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","size":4930,"data":"","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154/forced-to-fuck-by-bullies-","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8d8a3a4c49ac3ad14bbcf5cb31aa456","sha1":"5d54017d31751eb0e48d3a20f11ecbd539ee3163","sha256":"857caaa6ed280d9379e57238f4578f71167961f7ac09d9cac3353c2d7c64cf64","sha512":"1a270ab7ace14fe6a582fe56a5907b8e676c85ea8305ee4c9fdef00393a4ab9a40d6067b72d33b9da3f0edf34567fd7b1421146a72e75e6fad51ca6cbbda537c","ssdeep":"","tlshash":"aeb092cb200856ef86d2e809d4a66bd696782151e1000abadcf5401a5cda6506ec22a0","size":121,"data":"","first_seen":"2023-03-08T13:16:44Z","last_seen":"2026-01-08T13:42:26.001628Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/media/videojs/js/anyhtm.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2def17f53ffbf570fe77f29349b207b4","sha1":"92445e4d4937aaa12d71f7072f1e934e43f2d879","sha256":"bf92ecc4594938de3bed4d4ff607b744e31a618ceea127408d062e751cf011d7","sha512":"565eafc066d932838830fe70fbc6742c08731b418e1b1a0d911fec1cd8db5c884bc876ee9cab086ebd7d500efa9178083f1438b029cad6ca514c28a3997e8e56","ssdeep":"96:sW+xpCaWNNssLKOL7i8HWJ7i6UStmj8RZE1DG07icVZEBzv57i1xwPFjZZtS7iKk:R+GaWNcrYUZbvootjZ76/Pj7exsvG6G1","tlshash":"94d18283f74a315cc8fe537b644d8295223e492b6c4a8e14e610d3b5396d648ed2e2ff","size":6179,"data":"","first_seen":"2023-03-08T13:16:44Z","last_seen":"2026-01-08T13:42:25.873903Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154/forced-to-fuck-by-bullies-","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f004fcf512cafa4b61f5950e99315273","sha1":"af163c76f64ed62a1cbce378c8fa9577a71f82ef","sha256":"969b574748cbfe6ee620eccc15b1bb92660da1684637870d1ee332f05722fdca","sha512":"cbb4859610295074d286b56ea71017e0636b1d481129de8e0104c57267e429641fb31ace98bbec6cfb3dead39c84d1248cdde2fbb87a529fe190975ac8b23d85","ssdeep":"","tlshash":"01e02b241b34806f219a205b767143ec7eec51e7ef0d149251de9f3c7a69c53057aca8","size":302,"data":"","first_seen":"2023-03-07T01:43:05Z","last_seen":"2026-03-31T14:48:07.806287Z","times_seen":296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95786,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-04T02:33:48.15248Z","times_seen":45607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154/forced-to-fuck-by-bullies-","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"73e2cdaf87028143a6eff72ecb5938bf","sha1":"8877e8092ff9a5fc200150f011c86c3be5c6cd4c","sha256":"5c944ad38fd7aa5604758ab6b4429b36dc3974bd01082d268c4e9fc45558e5c5","sha512":"d42dde0be015883651bff67687183f84a173a5b88ef972d1d840e1770276141ab2b51babf61643f6585fd9999af4e4e216bec68dfda9e393a8f67f89e133528f","ssdeep":"768:pfMvU/CkEjUJLvn5pTPtzaMU68j+veR1DBevsnZkRNkLMMbfYCF5vU:OmBpztzoj+veR1eAy2B5vU","tlshash":"9e43f818326095be80f701f7b03b4b2571339112d506a218f57afdec6efee85846f6a9","size":59453,"data":"","first_seen":"2023-03-08T13:16:44Z","last_seen":"2026-01-08T13:42:25.999537Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-04T02:33:47.900911Z","times_seen":125751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154/forced-to-fuck-by-bullies-","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"224a873b2c5d415e7089550caa121ec8","sha1":"10175f043c97e56982aa8a5184ac441da98c66e0","sha256":"0d653bcd74ba4f9e8a270e1515be770dbeae2b43536d4da7eb48ff15186e1516","sha512":"d3eb97b6ef3750075df6c742ea3f0252c7e562e8b4b43b20965d7b8c6b3689a96ef6a5cfd8403ccc88e661e8f1b97ca4d465812a933d23ea2d66784f071bce92","ssdeep":"","tlshash":"47b012736c89b1bcd2e5468a1a39e233e32458a5d5095444c170922c3c4c0cdfc70652","size":105,"data":"","first_seen":"2025-07-04T04:12:03.049614Z","last_seen":"2026-01-08T13:42:25.984298Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154/forced-to-fuck-by-bullies-","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c395f8a01499024aee63031868f989d6","sha1":"393fa7ee6e22a62be01160e8a85ce3e0d7681266","sha256":"2ec6876a08130af4c56b08ade58e4a6f3f306ebafd8dfd49c2110d836db074ae","sha512":"f9677a1716910a8abb623ab02382fbf1792b8c86c951d3b689e92e9519dc447a5b2f39caa2fdd444ad75c115cb950b29e86f61094c962e634c9a8a27f89be3e6","ssdeep":"","tlshash":"1bf05931d13a779c1a2a30210e7d110c4d68c132275ab5e7f35ef46008cacda3ab5998","size":520,"data":"","first_seen":"2026-01-08T13:38:55.135991Z","last_seen":"2026-01-08T13:41:01.936496Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154/forced-to-fuck-by-bullies-","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70684d41bf3d3d2b9f9dffda460049fe","sha1":"4e3dd4efb3a1ad2c773e9d12393d5d62bf26e15a","sha256":"e62e43de286a78af7c6fbb17203c69a52bfa844bb2db9b1cf8b1c07a886a0fe4","sha512":"5a50c27a9f87284a5ee968aa81531d781e6bf42bb6efddd43103d264f7eda5825b288f66f143fdc7483334b6cf58b01dbeba097a3dae79dac93a71b271b188df","ssdeep":"","tlshash":"63a00287ab60c874a9a66b8eb4f058802b2d508785ab0978d15659349ace4553222a9b","size":66,"data":"","first_seen":"2023-03-08T13:16:44Z","last_seen":"2026-01-08T13:42:25.986617Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154/forced-to-fuck-by-bullies-","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"479abb82298e82d4be451dd556e1494e","sha1":"4c755cc34626ef3bc9ed51b07ddb9f9a292cefa9","sha256":"24a12e70b44116919825dbf4639802cafdc38e10c536bd4e7577e48f6c41fc65","sha512":"efee14be566e5ac09850ed05129422ba676a67628cd41e7fd60573f3cdc9c5234720038bfe41bef514bb7a61b2b3ac15f3ee62709d7d471afb8b31c4bb1d0329","ssdeep":"","tlshash":"ecf0d456935c37ea1cfc5355be2c9505b5af7622385045c57895a5821f4c70a443d903","size":486,"data":"","first_seen":"2024-10-16T06:27:38.462168Z","last_seen":"2026-01-27T22:27:44.462392Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/bootstrap.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"987facf80adec365394402f2026b943d","sha1":"755f3cfcc389a89194926fef94c7ab250fc71242","sha256":"36a326c783a12f72498d41fb32371da87fe0cbd1595248f3f154fd939f07f10c","sha512":"9e57976ae90df75ede6fca96e4030cebc972908c30056ffc9da09ed6c216b576d4e55d976969e7286822994bd38e6b70da3ddf5a5f38ce67280bec51af245452","ssdeep":"768:2oBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqc:pAr2MRCqc","tlshash":"e2e28446b23031a107dfb2e5515f020b723a6a6de906907c38b999f53db9c48727bf39","size":31824,"data":"","first_seen":"2023-03-07T01:42:29Z","last_seen":"2026-04-02T20:26:42.265423Z","times_seen":931,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-XL8963DSXG\u0026cx=c\u0026gtm=4e6160","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e60efd3080aa854d46c5eb18abb477d","sha1":"d1f04098d4300207c2800aa0facb19ce0fd126c0","sha256":"d9878737fe09401ddb06b2d81013b2435bff35abbf3849d6ee3e6b72d083d466","sha512":"a4cf80d7f0deb4f030be37843fcc4c8ee1929ef0007bb651458d962b211dd38a0cfed1a716ed8a4a4f76cc752aeb358488a5d0626dfd051fb7017cd1fbb47a87","ssdeep":"6144:WaQAdAM7ox31lf/6V5AWtNV1qTCEh2phH4lhueXJjO67YM+TkYa+nhul0UY:FnChwH4nY/TkU","tlshash":"0494088e73ca74269396e478503f018ba57b29e2b45cc896f1c9cce02d7469a4277f7c","size":429608,"data":"","first_seen":"2026-01-08T13:38:55.050987Z","last_seen":"2026-01-08T13:38:55.050987Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?hl=en","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40fdf88a04e21eb30f8a7cba11f36503","sha1":"66803134bc759b83f6f50f1d9cb69e46b25dbc70","sha256":"f357d31f579a1b06abde68f76229d4a6a86d59f51284af7b3765133ae710cc53","sha512":"be7c6fc771e32ad6eb8286f949cfcdaae15777f78b52b5d39e4c59227f50c17b706c1d9fa874972dfa823094245cdda2266f9518628ad96589333f402b9424a1","ssdeep":"","tlshash":"b01102771a04a0365b7219e1e2facbb5e492701cb16885e8a512dec81e6accbce14989","size":1017,"data":"","first_seen":"2026-01-07T20:19:38.909175Z","last_seen":"2026-01-15T02:57:18.445944Z","times_seen":3752,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/media/videojs/nuevo.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ca22d74b3990c6412ef8b0de1f3ddf0","sha1":"5c1cdc2a82f85019fda11c967e9aafb97316177f","sha256":"e71acc1b7f76a9762a951815d5873669a1789146353f90e7238bbf046d63e275","sha512":"7aee6a1e8177263d4f3073548824eea7ed62be02896c10576bf63eb56ad44d292444662269e96bd53aa6d1588b5758e8258174aa9bbe50f849a779e2374223b7","ssdeep":"768:f53rYPTCQlWjCKxsfHIlFH5HOHSHB+pEwUzuT2TCgbM4xmB:fWm/TxsfElw3TtgM4sB","tlshash":"f5f219bc14af4b1bab81e15d10ae544c376318aa447f50e0ed96e0eb3c4aadde1db1cd","size":35477,"data":"","first_seen":"2023-03-08T13:16:44Z","last_seen":"2026-01-08T13:42:25.859832Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-97426429-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"97f3af4a025bd427434c3df8e74cf6be","sha1":"c284d9bfb8a038d430534a5edc5833849fe544c0","sha256":"2c7cbb039a421c59af712ee17b0c4b88e76cefc2e9d7e5f996c67bbbe5e48e80","sha512":"a05762072e44b5fca4f5ae0a6f80c34d7fb67b864dcc7aeae7b136d1d1f852f1baea76463dc6c74067f936a1cf202581acf0b7c0b7b7a2c7228738d451d9b4cb","ssdeep":"3072:GlWEtrIxV/i4AV0PbKsB67ZKrEv5wtfvvph3rNh8nbzlXJjO67gxMOTkkadYoSp:TNV/jxEh2phZhYRXJjO67YMOTkJdYog","tlshash":"4f5418cdb7dab46683a36478503f004bb23b79d1e84cc894e186d8d42e74aa94277f7d","size":293070,"data":"","first_seen":"2026-01-08T13:18:31.17371Z","last_seen":"2026-01-08T13:38:55.086603Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-04T02:33:47.900911Z","times_seen":125751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-04T02:33:47.900911Z","times_seen":125751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T02:29:40.598677Z","times_seen":291681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154/forced-to-fuck-by-bullies-","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"224a873b2c5d415e7089550caa121ec8","sha1":"10175f043c97e56982aa8a5184ac441da98c66e0","sha256":"0d653bcd74ba4f9e8a270e1515be770dbeae2b43536d4da7eb48ff15186e1516","sha512":"d3eb97b6ef3750075df6c742ea3f0252c7e562e8b4b43b20965d7b8c6b3689a96ef6a5cfd8403ccc88e661e8f1b97ca4d465812a933d23ea2d66784f071bce92","ssdeep":"","tlshash":"47b012736c89b1bcd2e5468a1a39e233e32458a5d5095444c170922c3c4c0cdfc70652","size":105,"data":"","first_seen":"2025-07-04T04:12:03.049614Z","last_seen":"2026-01-08T13:42:25.984298Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/roiejd.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"389df22376f00ab326345155cce982fc","sha1":"ba335ec6da726959b0c22e7b23ae59b2fa3ae84b","sha256":"7eb4d912958c4f9ac34b5042055cf2013e3fcfaa2ce17a85325645b71c8a9e76","sha512":"943049de9a8e01cf56d5ed804dced196bec43fa56a5dea33d801e76678d7a6984dfc553be2894f6251812fd0bdacd1af62ebcf16c6a4d9af4d5a9636fc50fa35","ssdeep":"1536:0+rCqGRCe2boMYdofAPtHv6UnDXn6bSia3NiBiChJxo1WJD8701t7QO2/5aQxtX:NrCqGR9VdpPtCgzTNiQ4n8701l2NtX","tlshash":"03b32e40200748e521e2e67ee56bb0d93c24a813f5e9cda72d05e7c1f8dec99469bde3","size":107796,"data":"","first_seen":"2026-01-08T13:18:31.192Z","last_seen":"2026-01-27T22:27:44.39404Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154/sandbox%20eval%20code","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-04T02:30:45.877631Z","times_seen":770763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-04T02:30:45.87274Z","times_seen":769214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/721caf0b/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"212ecade2ccab1d277a4f25252442fce","sha1":"41ebf899a2d00b0d8d28897434894349694ee5d7","sha256":"11aa7946df12674187e45a29c8a083a30cefb5e625985b2405c1d0fb710e56b2","sha512":"af8a2b3f4d9e2c770214917085012643d845d474befeb1cf58290bfb2d5bff1a49953d624eb3b6da4a5a2c44893cc49296277c08b813ae3212860f02ac4664ac","ssdeep":"384:LJrDFJE658O7nfTwu3hZKjDOYjPncmXjVGv+E4aiz2wZBat1CUS6UTGdtmv4nU+g:LpHV5PfnhQjyYJjEV4jLlUS6UKZg","tlshash":"07d2d6cd77b1b431437366b5902f100fb23e98aab40cc999b188d8e16cb49694637f7e","size":30432,"data":"","first_seen":"2025-10-16T17:59:48.894792Z","last_seen":"2026-04-01T04:43:01.189781Z","times_seen":43437,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-04T02:33:47.900911Z","times_seen":125751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154/forced-to-fuck-by-bullies-","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"224a873b2c5d415e7089550caa121ec8","sha1":"10175f043c97e56982aa8a5184ac441da98c66e0","sha256":"0d653bcd74ba4f9e8a270e1515be770dbeae2b43536d4da7eb48ff15186e1516","sha512":"d3eb97b6ef3750075df6c742ea3f0252c7e562e8b4b43b20965d7b8c6b3689a96ef6a5cfd8403ccc88e661e8f1b97ca4d465812a933d23ea2d66784f071bce92","ssdeep":"","tlshash":"47b012736c89b1bcd2e5468a1a39e233e32458a5d5095444c170922c3c4c0cdfc70652","size":105,"data":"","first_seen":"2025-07-04T04:12:03.049614Z","last_seen":"2026-01-08T13:42:25.984298Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/jquery.video-0.2.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67c93a05af241992cff22a25a4c9f1be","sha1":"d3030938ba2132106da0cc4419b591b0bf735ee8","sha256":"6db1d7f7692985e1d29141770d8789f1307d4cf00c42f61916c78f5808c21b6d","sha512":"b7f61678227f6c13467d00de3d178d8978d4673cd36c0d1c9d4eb2c70243c0c6c27089e19c6d8f528f9390aa25199fe033a1353b9c65d34413f64ea61b48d165","ssdeep":"192:l+eT3dP7Jt7cQWL+6p1W0VqPH6tCWmTCvvvmr66pky+vA6Nc:lfrHjmmuv3mr6PrI6i","tlshash":"7122ac19f6f35aa42677317c1f2f988439a40053a108de08bd1e6de02f81b599776fee","size":10702,"data":"","first_seen":"2025-07-04T04:12:02.989339Z","last_seen":"2026-01-08T13:42:25.954173Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-04T02:33:47.900911Z","times_seen":125751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154/forced-to-fuck-by-bullies-","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e82b07bc51448b26c7f89e06b5a06b67","sha1":"0ae9c7f1713300c31d2e89c49baeadae51da6625","sha256":"bbf7f56b4095d8223c59cf6b42050657cf53d14c57584f347634f89ef14356cf","sha512":"83b0539d3866db9ebd09829d6e92187d25d904decfe5af432c303c1b5038e1dcfe14996105f107fe27500660cf2f42d8f50b0f58a6460b67d5b8d4da5fc142b5","ssdeep":"","tlshash":"00a022c30cb8f0bc03a28300ec333b22a32b8cab88002080c20000a0380c3cee0abb82","size":72,"data":"","first_seen":"2025-07-04T04:12:03.048364Z","last_seen":"2026-01-27T22:27:44.457643Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-04T02:10:30.767128Z","times_seen":94339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6264faf747172d4118734f941fea2ae5","sha1":"76fa6ea5ec9b6ca6473b13817f7aa73492a25d6b","sha256":"135170b39398df2d60ace8a7899cd85f929b4bdee2aeeba815a4bdcda5f9fe11","sha512":"fc4b130b959198f02d65b3f1d2a5fafb9791c200a64695224fc68eb5619c212656129b697fdbbefde60d415236323a05679f8057c2bdb3c06f748e307684a350","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJf:tRe0Y+AWZTdXYrntI0tPqX2vqDdT5+","tlshash":"423539897756b47646c79146e03f0203f235695a201a905cb3aeecec656ceceb237b37","size":1144541,"data":"","first_seen":"2026-01-08T13:18:31.226447Z","last_seen":"2026-01-13T02:40:20.387872Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154/forced-to-fuck-by-bullies-","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"012673d82374d46bbde66489b18b1e95","sha1":"8013eb94d0b10d1ec52bb1024f7bb8ecd00fdef6","sha256":"b5288af6615857f1f7b705eb3841f3776d47486aab5f64445cbdf783d810f9a5","sha512":"e03833f04d7f75510106b695fc09e9b963b737853b87a684560ab65347340ae672e992fcdde7123ed230760260927ae361acaf6a579ba72843712e17f48a91ba","ssdeep":"","tlshash":"acf08439a605588842c009b8a83d2881dc5908d9332dfc98632ee19c175ccdd23fe6a2","size":555,"data":"","first_seen":"2026-01-08T13:38:55.145682Z","last_seen":"2026-01-08T13:41:01.894323Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/jquery.rotator-0.2.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e38a3d0ef9625af4a0ae17e907c1e5a","sha1":"f62cef879b87536c507ca5e8dc652e288d0a73e6","sha256":"3db2da534cf2cccf21a77fc4e25c3a8436ca4934e4265c828ac5aa3f79cde5ee","sha512":"80382ee3cf388a384b5cf88a49af208cdce075b7ade72ce55952e93f5be85d6640e08362fbc917d82f95736174e0dc284475bfb949d750e5b968861a8cb152d7","ssdeep":"","tlshash":"9241e1850ab2976f5613b2b42f1e05483a9650671140ed083e1ea5a4dfa037d53fabf9","size":1889,"data":"","first_seen":"2025-07-04T04:12:03.031131Z","last_seen":"2026-01-27T22:27:44.393383Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/media//videojs/video.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b7cd4bfef76118f4e37d5b0ddaf3c24","sha1":"22515637083d1c077f2abb38525be6f4240c1cfa","sha256":"406fe9f8f931910a9621443786f97ea505727c9e023314475b2f2cdba776de17","sha512":"4a0545de85aafc7e350fbbcd8a89978b1667c9de1311cbca605d77eed40904085be94dd6d83d9f66f0186689a3913dac47fe5e9136315fc0a4dc6c624392ae21","ssdeep":"6144:cSX/GHubMblZyqranNWYWtq9q4kDdpi6T4S2tx6FL5HM6Uvjb55/c0YUIGFqlPyY:cnDyqranNWYWtq9q4kDdpi6T4S2tx6FH","tlshash":"9854fa89f1b4b16642d765908c3b8d0db239b97c901890e8f2fbe4f65ff48594627b38","size":290830,"data":"","first_seen":"2026-01-08T13:38:55.023682Z","last_seen":"2026-01-08T13:42:25.974806Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/jquery.avs-0.2.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83f4d7283a8cf90e27388ad899629e3b","sha1":"ddc73a63dd3be64f765bb54e3a02b21af585cd3c","sha256":"44da8db1e2ee0e9a7d1b09426e73de8fdf79932b721078753497b8f0ae69e320","sha512":"21275df240eb5f44271f5287bb7268b8275d75bf764e37671d56a478324a429bbe8bf3072e7f904440e9783573ac34b8d1e40761f19808276efb08992fa51008","ssdeep":"192:dbokmTMZiQ+5qsgXO9SQgGJSE3sTfGU37Gh7nb+kSdodb2ZxWeGAuAkADdv:TGOGh7n/+","tlshash":"f462df08a9f351b9123771be1f2f69583a6841576104ef08b82d7ee06f80724d7b6fe6","size":15403,"data":"","first_seen":"2025-07-04T04:12:02.942224Z","last_seen":"2026-01-27T22:27:44.386724Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","size":4930,"data":"","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","size":4930,"data":"","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6264faf747172d4118734f941fea2ae5","sha1":"76fa6ea5ec9b6ca6473b13817f7aa73492a25d6b","sha256":"135170b39398df2d60ace8a7899cd85f929b4bdee2aeeba815a4bdcda5f9fe11","sha512":"fc4b130b959198f02d65b3f1d2a5fafb9791c200a64695224fc68eb5619c212656129b697fdbbefde60d415236323a05679f8057c2bdb3c06f748e307684a350","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJf:tRe0Y+AWZTdXYrntI0tPqX2vqDdT5+","tlshash":"423539897756b47646c79146e03f0203f235695a201a905cb3aeecec656ceceb237b37","size":1144541,"data":"","first_seen":"2026-01-08T13:18:31.226447Z","last_seen":"2026-01-13T02:40:20.387872Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/jquery.voting-video-0.1.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f2af2b97bf00af0c15e2a8019953697","sha1":"7970f72caf38b75c818d14dbb7a8f1a61f36b0d0","sha256":"f16ae6a99564d192347ce6902e6d43f9d040a0711b36a13a9bac6cfe5e35844a","sha512":"ab23b5126849d4b0bfd082fe6e58ae0aed027c2256bb850c98c789a3806e597923f1850fd90daf2c4d564a551ae4654ea1f953a5aaf49dbb56bf7e0eedbefb08","ssdeep":"","tlshash":"91310a5cdb9e5725933f30f92e4f48cc295808b28594c556bc3da9998f04268433eeb6","size":1497,"data":"","first_seen":"2023-03-08T05:34:03Z","last_seen":"2026-02-08T18:07:09.056489Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6264faf747172d4118734f941fea2ae5","sha1":"76fa6ea5ec9b6ca6473b13817f7aa73492a25d6b","sha256":"135170b39398df2d60ace8a7899cd85f929b4bdee2aeeba815a4bdcda5f9fe11","sha512":"fc4b130b959198f02d65b3f1d2a5fafb9791c200a64695224fc68eb5619c212656129b697fdbbefde60d415236323a05679f8057c2bdb3c06f748e307684a350","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJf:tRe0Y+AWZTdXYrntI0tPqX2vqDdT5+","tlshash":"423539897756b47646c79146e03f0203f235695a201a905cb3aeecec656ceceb237b37","size":1144541,"data":"","first_seen":"2026-01-08T13:18:31.226447Z","last_seen":"2026-01-13T02:40:20.387872Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154/forced-to-fuck-by-bullies-","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc896948e0f5b7752c9f15616b0dc31a","sha1":"59ec2e3879892eab6bdd24997c2da6f60c5a6c5a","sha256":"f900f5265e2eafed7d7d1509807fc84ca47d99425b3b8c67d77db1585e732175","sha512":"d176dc694a7ac8cdc631294c6a33d7d6097e9ab45afa366d2ef06725eec9782ac1549a9c6afec2a980f7e45954f58a5a3f411f589e03557c514a5dd499ee6634","ssdeep":"384:kB0IdIAnRHGWp2qlNyC7XClTwSk6UYUk6UG0F1aAryGDAGs53/XdM+:kB0IdzRHGWp2qlNyC7XClz1aKyGDAGsp","tlshash":"95423e55a7586c3cc6a7ec189f3bd545309bf8479d52dd86f2c6e83484ebea38e31a00","size":12753,"data":"","first_seen":"2026-01-08T13:38:55.148757Z","last_seen":"2026-01-08T13:42:25.988946Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/iframe_api","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5c005d2442ed34725871390825cbaec","sha1":"885c6e931361202d4415808eb3c5293c3a756ed3","sha256":"ce4023c12700238c416abd879ea09a7440cecb301f7c890f66795937526d7374","sha512":"519ef43125ac5232f3ddcbf8ef20bd76f0f3ad93ffa02df226b7bd06bfabecbb24dd6bbaf0b6398f0e4fc494d927ef66192e1a17737522c2c3551ffad358b7ad","ssdeep":"","tlshash":"7c11ed7b3d84e6398658a4e4a03fd31cf1b224957c51cd9110cde889e65cbcadd2d5bc","size":993,"data":"","first_seen":"2026-01-06T16:30:28.099644Z","last_seen":"2026-01-13T04:56:27.166157Z","times_seen":525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/9TiwnJFHeuIw_s0wSd3fiKfN/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"03d9b88f050dca0423663c08a6351d61","sha1":"8a170f34f7390a1926557bb07c336dcabaf8965b","sha256":"64c4f34a5dd84ed645c723c1a6cadcf0e9299060fb2529476752406bbbb31180","sha512":"4f2bf3aff87c7557b7081c3c73ada5578884f9c68432685b53de85c367be5ab97eb0291292ad10de22187c620d0d501c96c92e458b0e90e905f4885b8b07f1ed","ssdeep":"12288:CGl2AF8mhLTGizXGMcK2JKGeD/6r99koATGL2rn0JE:vl2AFfLTGiiE2JKPD/6Z9kNTGL2r0JE","tlshash":"db054bc8b05236b5e323b9f510a7504ea73d9255d4081c2eb29988f93fb4c89717aef7","size":851854,"data":"","first_seen":"2026-01-07T20:19:38.966305Z","last_seen":"2026-03-03T09:58:21.001911Z","times_seen":20093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","size":4930,"data":"","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6264faf747172d4118734f941fea2ae5","sha1":"76fa6ea5ec9b6ca6473b13817f7aa73492a25d6b","sha256":"135170b39398df2d60ace8a7899cd85f929b4bdee2aeeba815a4bdcda5f9fe11","sha512":"fc4b130b959198f02d65b3f1d2a5fafb9791c200a64695224fc68eb5619c212656129b697fdbbefde60d415236323a05679f8057c2bdb3c06f748e307684a350","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJf:tRe0Y+AWZTdXYrntI0tPqX2vqDdT5+","tlshash":"423539897756b47646c79146e03f0203f235695a201a905cb3aeecec656ceceb237b37","size":1144541,"data":"","first_seen":"2026-01-08T13:18:31.226447Z","last_seen":"2026-01-13T02:40:20.387872Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6264faf747172d4118734f941fea2ae5","sha1":"76fa6ea5ec9b6ca6473b13817f7aa73492a25d6b","sha256":"135170b39398df2d60ace8a7899cd85f929b4bdee2aeeba815a4bdcda5f9fe11","sha512":"fc4b130b959198f02d65b3f1d2a5fafb9791c200a64695224fc68eb5619c212656129b697fdbbefde60d415236323a05679f8057c2bdb3c06f748e307684a350","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJf:tRe0Y+AWZTdXYrntI0tPqX2vqDdT5+","tlshash":"423539897756b47646c79146e03f0203f235695a201a905cb3aeecec656ceceb237b37","size":1144541,"data":"","first_seen":"2026-01-08T13:18:31.226447Z","last_seen":"2026-01-13T02:40:20.387872Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154/forced-to-fuck-by-bullies-","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbc7552d455c220ba1dc7f525e37a1e7","sha1":"7d94c726e11b3e5bc3b42c103255b4a75b9993cd","sha256":"33c8f9117cb0dbd98c7910232ed909587776d95c2e832942ac00de3c6ee9ce94","sha512":"fbad691ef7e7e179ab50aa962618c2c8132aa259a547cc87cdef3e4319d9c16c1169322f16f04e6b64bcf696f8bbb0ed3b3eea9677e24701a9b9074f591bce5e","ssdeep":"","tlshash":"71c02bc8211e0cb181f727008f3ffa00b442321494d96d32480d234d4e20f03e754804","size":154,"data":"","first_seen":"2023-03-08T13:16:44Z","last_seen":"2026-01-27T22:27:44.459283Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"go.bluetrafficstream.com/config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3De20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33889","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3De20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33889 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac18331a5e120a-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7706,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d6d4de4c33f3cdebb0912599bc0b3883","sha1":"7f273c3ecbdf58040053943663fa836251a89c02","sha256":"6ac9397134ee7db670ed9ab2a4ba12fa0ea16bb6a440a7a5dd7b2ed139547087","sha512":"0758803cdeac8db839c780a773112dd3424161ddf473350158ee61f9e4435f6dedfc8bbe32db72adacf568d1104d561b00942035a5b925106a5d7a16e6331b9f","ssdeep":"192:wDy9Zh+9mIWkUmJCJD2Qj4Hh8nyayqh13/7VlloqJIwm13YAyQ13/7VlloqJIw1:V943WkXJC4S+lgbeH","tlshash":"25f165eb8b1d25b30a880d4d7e1d65c86a9c44a75e828debdc8a9834431d7f113fb74d","first_seen":"2026-01-08T13:38:54.972257Z","last_seen":"2026-01-08T13:38:54.972257Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879270/168314364_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:38:19.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879270/168314364_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15316\r\ncf-ray: 9bac18366b390731-OSL\r\netag: \"49ca1ee4e97d42d6ef32d3f48a117a4b\"\r\nlast-modified: Thu, 08 Jan 2026 13:33:48 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 219\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15316,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"49ca1ee4e97d42d6ef32d3f48a117a4b","sha1":"85b89e424e4ca4594810a20343736aa2499dce52","sha256":"268d8331c5bf5c47dff4b4030d8eb6c58a774bcb70d8d0c4c47dc7c466d3e766","sha512":"dff78589eb7b768d8a5a808bcea3cc4539d1690ef606a7502642a0fca9a82cdb8388a6d99cf7b804577a34ecebfe032ce65c728c58c808f6b394d76775209bac","ssdeep":"384:+RqiFPNavGoVgngu0DYo+bspjI/L6rD4vBjWdx:TinqGrgu0DTNU/LY8vBo","tlshash":"f962cf9c6e715d42ba35eb07194268a46023953c4e09bf0e7384cfc67f37867296eb39","first_seen":"2026-01-08T13:38:54.973811Z","last_seen":"2026-01-08T13:42:25.941125Z","times_seen":3,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":13,"dns":0,"connect":1,"send":0,"wait":8,"receive":2,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OIL%2FWlpNfbF3Nax31ThU1A46resymnsczJPqKHeJl5Oai4iiu02Enbq5hHPvWd2AEsf%2B6M%2FSVHKVkqvpBDcd5rEPzkHBZ4I%2BfPkS1QFO23NBOUCnez%2Ftt5McJXLqPw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.0392e0f6c7b6d376d1e1.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2090\r\ncf-cache-status: HIT\r\netag: W/\"6264faf747172d4118734f941fea2ae5\"\r\ncf-ray: 9bac183009de120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1144541,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"38aae49805e8e835d39ca677256ddd3a","sha1":"f6acb5b16b97585c582e77165660ddf22f90dd80","sha256":"c9f21fe56aea40cd8c743dcc96d926514ed046e07bf150efc010fc3b796852bd","sha512":"9e2ae8ae8797283a4921700f90b99bcbb05739c21bea5a435ef10995b433dcbaf28a8479aabcf5d786dbf5caa66f6a7b38eb93eb71aa8935e984dfd0a97461d8","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJT:tRe0Y+AWZTdXYrntI0tPqX2vqDdu","tlshash":"642539897756b47646c69146e03f0203f235699a201a905cb3deecec665ceceb237b37","first_seen":"2026-01-08T13:18:31.205655Z","last_seen":"2026-01-13T02:40:20.342138Z","times_seen":37,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879270/168314364_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879270/168314364_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15316\r\ncf-ray: 9bac1837cf073181-OSL\r\netag: \"49ca1ee4e97d42d6ef32d3f48a117a4b\"\r\nlast-modified: Thu, 08 Jan 2026 13:33:48 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 219\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15316,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"49ca1ee4e97d42d6ef32d3f48a117a4b","sha1":"85b89e424e4ca4594810a20343736aa2499dce52","sha256":"268d8331c5bf5c47dff4b4030d8eb6c58a774bcb70d8d0c4c47dc7c466d3e766","sha512":"dff78589eb7b768d8a5a808bcea3cc4539d1690ef606a7502642a0fca9a82cdb8388a6d99cf7b804577a34ecebfe032ce65c728c58c808f6b394d76775209bac","ssdeep":"384:+RqiFPNavGoVgngu0DYo+bspjI/L6rD4vBjWdx:TinqGrgu0DTNU/LY8vBo","tlshash":"f962cf9c6e715d42ba35eb07194268a46023953c4e09bf0e7384cfc67f37867296eb39","first_seen":"2026-01-08T13:38:54.973811Z","last_seen":"2026-01-08T13:42:25.941125Z","times_seen":3,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?hl=en","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:31 GMT","end":"Wed, 25 Feb 2026 15:57:30 GMT"},"fingerprint":{"sha1":"68:80:26:07:1C:4F:AC:C8:FF:32:F4:DD:86:41:D6:6E:85:27:90:D4","sha256":"6D:27:81:39:F2:6D:26:4E:B8:CE:4F:0B:02:95:B6:5D:C4:E2:58:C9:A9:A0:80:1D:02:70:91:FB:E9:98:E6:8B"}}},"request":{"raw":"GET /recaptcha/api.js?hl=en HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Thu, 08 Jan 2026 13:38:18 GMT\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1017,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1017), with no line terminators","md5":"40fdf88a04e21eb30f8a7cba11f36503","sha1":"66803134bc759b83f6f50f1d9cb69e46b25dbc70","sha256":"f357d31f579a1b06abde68f76229d4a6a86d59f51284af7b3765133ae710cc53","sha512":"be7c6fc771e32ad6eb8286f949cfcdaae15777f78b52b5d39e4c59227f50c17b706c1d9fa874972dfa823094245cdda2266f9518628ad96589333f402b9424a1","ssdeep":"","tlshash":"b01102771a04a0365b7219e1e2facbb5e492701cb16885e8a512dec81e6accbce14989","first_seen":"2026-01-07T20:19:38.909175Z","last_seen":"2026-01-15T02:57:18.445944Z","times_seen":3752,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":124,"dns":0,"connect":15,"send":0,"wait":35,"receive":0,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/css/responsive.css","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/css/responsive.css HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Jun 2021 12:32:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CkI9tzDbPk%2BTBkuHBsZtH0%2BzS1HVEE9pAx3S10Do7u2K6lL1XGCrHgDkShN2%2F10mzveJUeEQ8D9cXLHSUqTHSDTesU5TNwfnLDO3dw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Fri, 16 Jan 2026 04:29:36 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 551320\r\ncf-cache-status: HIT\r\netag: W/\"90b-5c42c3bc62600\"\r\ncf-ray: 9bac182afb940afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2315,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"63c9978a2b4c11fb1d1ffb1bf92e0320","sha1":"5bf3d5f96575936c96c752bb5c582ac0cefe6067","sha256":"77e847c82024e95bd16a68d12545094e541a394e07658807d889c764ec9bff9a","sha512":"4c03399fe51a42e61a4f9039ca0fc24f1219922b7888cba925bea1b4cb3fe04a7e76a27a25576a3ce86e872e996506bd80756e84ebed61bba4ed71bc44763f15","ssdeep":"","tlshash":"af41bc93efc2b10c865231664db225a5177728369bdfaecbcd83912cadc039900b6f5c","first_seen":"2025-07-04T04:12:02.972747Z","last_seen":"2026-01-27T22:27:44.374555Z","times_seen":8,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889 HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 09:21:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9s%2BtuhB2KPaE%2Bc%2BGx%2FHxreUKzfl2LllEcuWclMTJizrtHLDOl%2FLIOD4Fn4KQWmJFklgZT3uUMNxOAMYlXQ%2Blt9SJxykPV7mbUD%2BpwNnRMXde%2Bvx8bbLWDkUqWtVkZQ%3D%3D\"}]}\r\nexpires: Thu, 08 Jan 2026 13:40:30 GMT\r\ncache-control: max-age=300\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nvary: accept-encoding\r\nage: 167\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9bac182e099d5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1427), with no line terminators","md5":"bdce4b8365f3e70efa9c2a9411a3c0d5","sha1":"6207ed4e4a3815ac5f43331cbe05971a47a2e7db","sha256":"ef038e4c01e0947177dd9fe69b895f8f1088d940a4a0a02c18432e90c760cd4b","sha512":"89a9c90b3366346e660b737b718835bce0c5cd3a3786fbdf7e9814a9f20bcaebe981ad69243b67996ffc84b38be64a40c2635ee03e93a0bfba6f92269a9c4d33","ssdeep":"","tlshash":"af21cd22d844c44d65b0d276be913239d48f7b1fe620bad0ec2118dff8a8f8a4265d47","first_seen":"2026-01-08T13:18:31.140958Z","last_seen":"2026-01-13T02:40:20.366837Z","times_seen":37,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":44,"dns":1,"connect":3,"send":0,"wait":8,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1328%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A753%2C%22duration%22%3A31%2C%22transferSize%22%3A2807%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A753%2C%22duration%22%3A58%2C%22transferSize%22%3A266162%7D%5D\u0026mh=646737734","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:38:18.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1328%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A753%2C%22duration%22%3A31%2C%22transferSize%22%3A2807%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A753%2C%22duration%22%3A58%2C%22transferSize%22%3A266162%7D%5D\u0026mh=646737734 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1833ba72120a-OSL\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/app/domain-checker/get-check","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\npriority: u=4,i=?0\r\ncf-ray: 9bac18364abd120a-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-expose-headers: *\r\nvary: Origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/media/videos/tmb/5490/9.jpg","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /media/videos/tmb/5490/9.jpg HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:38:17 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:50:18 GMT\r\nETag: \"1d43-5bb018d053bf4\"\r\nAccept-Ranges: bytes\r\nContent-Length: 7491\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7491,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x53, segment length 16, baseline, precision 8, 256x144, components 3","md5":"e9a64a733939a90f89cfe6588532c10b","sha1":"2c50534adc8caf903de60dd6818149c37ed73a64","sha256":"1a9d59444aaeb905b495c0555168c3e8d3cf069a99dce2a42f5634738410aa76","sha512":"0013f7d66d8a9a6e55b78df610d47e8a9847dc2a7497e0040ebe1efb7c958f4722f2d35793c2784925f85f9f58bf610909527cf5821f71dce28229673942c985","ssdeep":"192:997B6XB8rycWWBmmdBg+/C7DQuAmG67Zfx:PwXKrydWBhdBg+/i1G67ZJ","tlshash":"26f1a0a261074f6cdf0b963937f7612127af9e4d517083b680c6cfb64327d755254584","first_seen":"2026-01-08T13:38:54.978347Z","last_seen":"2026-01-08T13:41:01.776041Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 08 Jan 2026 14:26:17 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GSlBWIT3n7QLBDqC4MI7fOOHU5I6Mu%2FPJYwOnlTU12ZJnwjyDkugdb1f7gaG%2FKEEvblmxpsZ3puIHdbjpWFXrfhavCbbFaOzBF%2FNow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\ncf-ray: 9bac182b6ba00afa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T02:29:40.598677Z","times_seen":291681,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RTR5eGIVn3ifLyB5fl%2BTQ4cgW7XSclLxPuNU9Ehh8AqqI%2F0ufwiedntmyG2UrIEYZQ%2B3Qaxt2jwfyJxTOccNk4%2B9gWjb8XrNoLxaNc0Uz4rwXu%2BWi0sZxNi6I%2F3Vpw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"saretarget.e25d7729d6aa0892d869.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:18 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2094\r\ncf-cache-status: HIT\r\netag: W/\"bf4ad79a8f3c33c2af6b13887462fe86\"\r\ncf-ray: 9bac183009df120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4930,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4930), with no line terminators","md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3De20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33889","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3De20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33889 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1832ea58120a-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7706,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"27e2f137b1080217bfafa811e322e00b","sha1":"7d1d7e7ec5c7345391517fb96a34f9aecc7e2738","sha256":"d6bb406e01b77971ceded3fb5b622918e2d505c92e19694008e71b773552fc0b","sha512":"8eae6055416e2b1f74758ad2c7195174e7552df2fa964b4cc56e66fb34a1e3ef714d0b1f0ee42035db2d8e4767fc9a0a11ebd160151103b1546b2d2945e47513","ssdeep":"192:wDy9Zh+9mIWkUTgNTEAyR4Hh8nyayqh13/7VlloqJIwm13YAyQ13/7VlloqJIw1:V943WkqgvyR+lgbeH","tlshash":"4ff165eb8b1d25b30a880d4d7e1d65c86a9c44a75e828debdc8a9834431d7f113fb74d","first_seen":"2026-01-08T13:38:54.980897Z","last_seen":"2026-01-08T13:38:54.980897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878700/216642829_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878700/216642829_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3664\r\ncf-ray: 9bac18379e8a3181-OSL\r\netag: \"1801c062634dce29c3492a6c082a28b5\"\r\nlast-modified: Thu, 08 Jan 2026 13:23:52 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 776\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1801c062634dce29c3492a6c082a28b5","sha1":"249bb8937d28a99ac596682a61bc294b3794cfc4","sha256":"9b06c7005911296910637ae7551038c98699789765f51171cf8549cf81be5e03","sha512":"c249dcc6fd77f0a7f6a38adf04de4544e518b487312ea06ee0340fcbaee9c9231dc264e6d699894082a3e89bde5cab45f80078d91cf4eb3cd77819895993da1c","ssdeep":"","tlshash":"68716da4566c584ed8e2f2a32930f4534c21e0d194450a6db76dcb3a14d8cb56677c52","first_seen":"2026-01-08T13:38:54.982007Z","last_seen":"2026-01-08T13:41:01.773118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/media/videos/tmb/3085/4.jpg","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /media/videos/tmb/3085/4.jpg HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:38:17 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:50:32 GMT\r\nETag: \"1170-5bb018dd71259\"\r\nAccept-Ranges: bytes\r\nContent-Length: 4464\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4464,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 256x144, components 3","md5":"50a8786655dcb1c009253a265f636d68","sha1":"6902463dd3363aefbd98916cde7c45b821808387","sha256":"bfeab53a8d8809ea5173e821ead841aaa9b57b7c2429a4a3b311181d58210dc9","sha512":"f206a1c3849816c32933317424a6a91b3acbfea88f3ae4404cd3231847e6d8811d209904a224d5b9dcd32516628f0476374c00fdf836bf2f6d9ddaad337523d3","ssdeep":"96:FgZzEPsB57u2nMuNqrSShY8bb0EfrFGjNuwvbmPgG:F2Ae5y2TNgq0b0kRbwO","tlshash":"1a919eaebb632341c60289bf4e421fdba119d44672987852c6a7c33fce04a42de1a185","first_seen":"2026-01-08T13:38:54.983367Z","last_seen":"2026-01-08T13:41:01.890637Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878730/220345789_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878730/220345789_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15070\r\ncf-ray: 9bac1837bedb3181-OSL\r\netag: \"6fe4f6c20a715754058cd4e3aea8dcd3\"\r\nlast-modified: Thu, 08 Jan 2026 13:24:50 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 730\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15070,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6fe4f6c20a715754058cd4e3aea8dcd3","sha1":"c3c63f3ccbdd9f9dfafe6f1e87643cc25d5936e1","sha256":"b91cec9e1a42450ab8a3b4d2ae3fef86d81a999dbc29d5f18df778e85476aee2","sha512":"035cbaf5ba607a8889c6df3e82efcc76e19082f4c995b767efc899a009ddb28a42950f12e6c19b3b6ed1ff4a30697a7a848ca6b9652ebab6a998cf0fde0fd6f1","ssdeep":"384:/5NY3eUknnC8mCqNJNFtNI4mVjrshnB93Nu1tXx8tNMwhn:h+e7mCqNJNu4UCBLu1tXx8XME","tlshash":"c062c052f2e1d3ea32b11660a019a0d36da165d68f4d7db367ed07723084be356f28b4","first_seen":"2026-01-08T13:38:54.985378Z","last_seen":"2026-01-08T13:41:01.85753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/media/videos/tmb/7692/1.jpg","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /media/videos/tmb/7692/1.jpg HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:38:17 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:50:38 GMT\r\nETag: \"1735-5bb018e2dcd53\"\r\nAccept-Ranges: bytes\r\nContent-Length: 5941\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5941,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 256x144, components 3","md5":"08c107da10996bd30332e78ec87bd6b4","sha1":"51f84a22e32ed95edc26bcd1af8eb73d6b678940","sha256":"419299bd03c4fb6bfccce6093fbef22460b5afccbc476738254444738e44912d","sha512":"8c1375ab4be3acb42a8a87710c19beaf9ac80964e91c5097441ae47d178527389f1d23cf937c0e3488e1915c8a01ccf664b5a23de2878e6b24bf9fbed9382eaf","ssdeep":"96:wEveNevJOO8XpIVp0/powEjk+XO9y47JqfPqdVCykrZclpjZzBlp+U:waeEvjG+bjkiqJ74fPqj7kapjVBvF","tlshash":"08c18faff18501f072b5b86bab006cf1aaed5293c255600117dc328fc563efa965878d","first_seen":"2026-01-08T13:38:54.986605Z","last_seen":"2026-01-27T22:27:44.435803Z","times_seen":3,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 08 Jan 2026 13:38:18 GMT\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5379,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"56351891ce8fb221bb3590d9841cf0c0","sha1":"29b8c5a1216c54bb8832edcceed2beca6090b98e","sha256":"3515c7b2de099d47b9488f1d37b842c001ec454a998dd51861065b34868cfe8f","sha512":"6953ed577894d470eaa0f379f887b0a02951a8e258c3a929453eccae8ef4e2987028bd664a555fc986a446ec1940db809217f1f018ddad8cc1525398fd55c637","ssdeep":"96:CYgFasyYgFarFZfYgFatYgFafLYgFao3YgFalYgFaZJc+uDYgFaXNTOFaYyOFaWh:XHsnHEHKHf0HoIHCHZVHzYIW62OBSdvz","tlshash":"90b199a1001bd480db870cc277cfbd3aae4e61597445d0baaffe48dcac96c629394b1d","first_seen":"2025-09-09T07:58:30.235801Z","last_seen":"2026-04-04T02:11:24.836566Z","times_seen":3342,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/logo.png","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:38:17 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:00:51 GMT\r\nETag: \"a8b-5bb00dc2b07f3\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2699\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2699,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 179 x 32, 8-bit/color RGBA, non-interlaced","md5":"f1e8ede9333c8bcafcd8fdec2ad72f40","sha1":"8f68daadc94d3497b04877ab9e598fe7dff230cf","sha256":"fc45e859185deb9e0b866a1718acf24cb0f3f4fc17c5d2b1e751bae1cf61cbbc","sha512":"4ab21e58d216d10ee023f53b1cf6efe54fa685fa1d9f54050639dbd22688dcc6255a64b7eacd1580441a1b5d5fc584beea38644e3e128e9e41bcf2554acaa81b","ssdeep":"","tlshash":"10514c9c6af1161dc242ba4fff3829b1394d1a9715b5db34805763702b55539f2f00ac","first_seen":"2023-06-15T04:01:20Z","last_seen":"2026-01-27T22:27:44.40313Z","times_seen":13,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":37,"dns":1,"connect":22,"send":0,"wait":29,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7MyXoeVjQVvujfN%2BKylUUFVkZYpe0AiWj5SB1%2BBIOH09gJCfEknHH%2BrGZpJtyFGhiajk6CyOuXBbiwbgZx5cSD32jxFPm6kNDlcItFM6bxjsusM1vIAH%2BzEUqHLXew%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"saretarget.e25d7729d6aa0892d869.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:18 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2094\r\ncf-cache-status: HIT\r\netag: W/\"bf4ad79a8f3c33c2af6b13887462fe86\"\r\ncf-ray: 9bac183009dd120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4930,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4930), with no line terminators","md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/roiejd.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /roiejd.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 13:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2BXPdLePp8bRdDOPZh0qCjBY7coM9NypmwzSxvS514iWaFKVoFCh2kjBrZ3YcgPPqW1YpPP4M5QEAoir8Dccyj0lZvpG25SUtDtKng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Sat, 17 Jan 2026 13:22:20 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 432957\r\ncf-cache-status: HIT\r\netag: W/\"1a514-6454852b60e21\"\r\ncf-ray: 9bac1830ec120afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107796,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"389df22376f00ab326345155cce982fc","sha1":"ba335ec6da726959b0c22e7b23ae59b2fa3ae84b","sha256":"7eb4d912958c4f9ac34b5042055cf2013e3fcfaa2ce17a85325645b71c8a9e76","sha512":"943049de9a8e01cf56d5ed804dced196bec43fa56a5dea33d801e76678d7a6984dfc553be2894f6251812fd0bdacd1af62ebcf16c6a4d9af4d5a9636fc50fa35","ssdeep":"1536:0+rCqGRCe2boMYdofAPtHv6UnDXn6bSia3NiBiChJxo1WJD8701t7QO2/5aQxtX:NrCqGR9VdpPtCgzTNiQ4n8701l2NtX","tlshash":"03b32e40200748e521e2e67ee56bb0d93c24a813f5e9cda72d05e7c1f8dec99469bde3","first_seen":"2026-01-08T13:18:31.192Z","last_seen":"2026-01-27T22:27:44.39404Z","times_seen":5,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/media/videojs/js/anyhtm.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /media/videojs/js/anyhtm.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 25 Nov 2021 18:47:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GpWbP7psGM%2FbJNgOj%2FRDEB5Axd4PmK%2BaDpQLnxSmdfKZQvcffGsRmTC62IOco9gByukzoaRG6URJ9C70XN2NEBrfH%2BggO5Vj680sBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Thu, 22 Jan 2026 13:38:18 GMT\r\netag: W/\"1823-5d1a1672e107b\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9bac1830ec160afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6179,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"2def17f53ffbf570fe77f29349b207b4","sha1":"92445e4d4937aaa12d71f7072f1e934e43f2d879","sha256":"bf92ecc4594938de3bed4d4ff607b744e31a618ceea127408d062e751cf011d7","sha512":"565eafc066d932838830fe70fbc6742c08731b418e1b1a0d911fec1cd8db5c884bc876ee9cab086ebd7d500efa9178083f1438b029cad6ca514c28a3997e8e56","ssdeep":"96:sW+xpCaWNNssLKOL7i8HWJ7i6UStmj8RZE1DG07icVZEBzv57i1xwPFjZZtS7iKk:R+GaWNcrYUZbvootjZ76/Pj7exsvG6G1","tlshash":"94d18283f74a315cc8fe537b644d8295223e492b6c4a8e14e610d3b5396d648ed2e2ff","first_seen":"2023-03-08T13:16:44Z","last_seen":"2026-01-08T13:42:25.873903Z","times_seen":7,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/jquery.video-0.2.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/js/jquery.video-0.2.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Nov 2023 02:19:55 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6cxWLWvzJeuk3lwhJe%2BNAnffhwFr7VGjGZ0FBxNxRAtTPceWmppU%2B0zk9ahwmLgBo5HRL7Scdxcy8H0bGRElSNCZ90VCFW%2F%2BgCNG6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Fri, 16 Jan 2026 07:07:25 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 541853\r\ncf-cache-status: HIT\r\netag: W/\"29ce-60adc968f2f0c\"\r\ncf-ray: 9bac1830fc1a0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10702,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"67c93a05af241992cff22a25a4c9f1be","sha1":"d3030938ba2132106da0cc4419b591b0bf735ee8","sha256":"6db1d7f7692985e1d29141770d8789f1307d4cf00c42f61916c78f5808c21b6d","sha512":"b7f61678227f6c13467d00de3d178d8978d4673cd36c0d1c9d4eb2c70243c0c6c27089e19c6d8f528f9390aa25199fe033a1353b9c65d34413f64ea61b48d165","ssdeep":"192:l+eT3dP7Jt7cQWL+6p1W0VqPH6tCWmTCvvvmr66pky+vA6Nc:lfrHjmmuv3mr6PrI6i","tlshash":"7122ac19f6f35aa42677317c1f2f988439a40053a108de08bd1e6de02f81b599776fee","first_seen":"2025-07-04T04:12:02.989339Z","last_seen":"2026-01-08T13:42:25.954173Z","times_seen":5,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3De20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33889","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3De20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33889 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1832da54120a-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7706,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c2a981f7353a66c4b92191a9d611e8ec","sha1":"ea7cd17b4a084d6ef6b83a4c5770b535455a2a5d","sha256":"470d9d6d79c72e73af44762266733beb8837d5d595597af6b287c2b249648be1","sha512":"44f14dff7ce0ba5f37c540412edaf6d945d02fdfa7fbbc03b2771f8438f1c4a3cd24140f9bfbb91d34af520423783eec85fe484dad947bafa5e804c12dabcdd7","ssdeep":"192:wDy9Zh+9mIWkUQOoc7oL04Hh8nyayqh13/7VlloqJIwm13YAyQ13/7VlloqJIw1:V943Wkp1cC0+lgbeH","tlshash":"21f165eb8b1d25b30a880d4d7e1d65c86a9c44a75e828debdc8a9834431d7f113fb74d","first_seen":"2026-01-08T13:38:54.999916Z","last_seen":"2026-01-08T13:38:54.999916Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/lang/en.json","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/lang/en.json HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SPG59xayt7L0rglfFqPqcYGdVHXAnsO5mdYX4TU8ZzB7bzR2SagKIAyjr1lekp9OEr9n9LXtS4HHyYrNRHZje3pqkaYl7g9gq0yqY4c%2FbYQ8PweXhLV6roRMY%2FPd6w%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2083\r\ncf-cache-status: HIT\r\netag: W/\"69a54638b649d7ce4748bd42c4b6dade\"\r\ncf-ray: 9bac1832ea57120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"69a54638b649d7ce4748bd42c4b6dade","sha1":"a2dfe9f8791952fbc5cc44d4757b031a6cee1731","sha256":"0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750","sha512":"1e98b8977577f6daca587310456d38ab870571a0bec392072f38287d274465b3ebc867e6eefe5efd7653c7c0d2a23dabe7636a94c0cfda52321a84fd68d868e3","ssdeep":"","tlshash":"1ac08c09220b0f0389c83c23a223352a0b422bbaeb033730c262c3012c8c1b734e33cc","first_seen":"2023-04-07T07:09:28Z","last_seen":"2026-04-03T20:18:42.254179Z","times_seen":3544,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=6","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=6 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac18362ab1120a-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 08 Jan 2026 13:38:19 GMT\r\ncf-cache-status: MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8688,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d928b5201925f9447bea47a6b299ff48","sha1":"7537ca2c2bcff72ca8a2b256979572c16407a4e2","sha256":"ed5ee7faa63a8f6f1b45157d9f3daa26fe3cb5af4633e2964e9792c738f16885","sha512":"7224317a024bef4656d6bb0a4760b4b2f4a869d29577fee7a0869d4f6fba31ea74e69ca2eda0c40e3e4e6cffba4627247939fd7aebaa33045c198f1ded73ad12","ssdeep":"192:iCLestzKzRzGKvpUMtzCdzNzPgoYeGxZDcnzWbzWuzW3sdatJKzPzyzinvXtzNcc:iQtzKzRzjvxtzCdzNzPgoYeWZWzGz9zR","tlshash":"e50276f787cc4d3e0f0612c4c98d790cd9a71e27a2c9b75591dc9e8646b6dca222ce63","first_seen":"2026-01-08T13:38:55.010334Z","last_seen":"2026-01-08T13:38:55.010334Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/9TiwnJFHeuIw_s0wSd3fiKfN/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /recaptcha/releases/9TiwnJFHeuIw_s0wSd3fiKfN/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nOrigin: https://www.xrares.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 363821\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Jan 2026 23:19:37 GMT\r\nexpires: Tue, 05 Jan 2027 23:19:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 05 Jan 2026 05:02:41 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 224321\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":851854,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (582)","md5":"03d9b88f050dca0423663c08a6351d61","sha1":"8a170f34f7390a1926557bb07c336dcabaf8965b","sha256":"64c4f34a5dd84ed645c723c1a6cadcf0e9299060fb2529476752406bbbb31180","sha512":"4f2bf3aff87c7557b7081c3c73ada5578884f9c68432685b53de85c367be5ab97eb0291292ad10de22187c620d0d501c96c92e458b0e90e905f4885b8b07f1ed","ssdeep":"12288:CGl2AF8mhLTGizXGMcK2JKGeD/6r99koATGL2rn0JE:vl2AFfLTGiiE2JKPD/6Z9kNTGL2r0JE","tlshash":"db054bc8b05236b5e323b9f510a7504ea73d9255d4081c2eb29988f93fb4c89717aef7","first_seen":"2026-01-07T20:19:38.966305Z","last_seen":"2026-03-03T09:58:21.001911Z","times_seen":20093,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":53,"dns":0,"connect":15,"send":0,"wait":16,"receive":70,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1324%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A749%2C%22duration%22%3A41%2C%22transferSize%22%3A2805%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A749%2C%22duration%22%3A66%2C%22transferSize%22%3A266156%7D%5D\u0026mh=465379695","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1324%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A749%2C%22duration%22%3A41%2C%22transferSize%22%3A2805%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A749%2C%22duration%22%3A66%2C%22transferSize%22%3A266156%7D%5D\u0026mh=465379695 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\npriority: u=4,i=?0\r\ncf-ray: 9bac18340a77120a-OSL\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878730/220345789_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878730/220345789_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15070\r\ncf-ray: 9bac18371d223181-OSL\r\netag: \"6fe4f6c20a715754058cd4e3aea8dcd3\"\r\nlast-modified: Thu, 08 Jan 2026 13:24:50 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 730\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15070,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6fe4f6c20a715754058cd4e3aea8dcd3","sha1":"c3c63f3ccbdd9f9dfafe6f1e87643cc25d5936e1","sha256":"b91cec9e1a42450ab8a3b4d2ae3fef86d81a999dbc29d5f18df778e85476aee2","sha512":"035cbaf5ba607a8889c6df3e82efcc76e19082f4c995b767efc899a009ddb28a42950f12e6c19b3b6ed1ff4a30697a7a848ca6b9652ebab6a998cf0fde0fd6f1","ssdeep":"384:/5NY3eUknnC8mCqNJNFtNI4mVjrshnB93Nu1tXx8tNMwhn:h+e7mCqNJNu4UCBLu1tXx8XME","tlshash":"c062c052f2e1d3ea32b11660a019a0d36da165d68f4d7db367ed07723084be356f28b4","first_seen":"2026-01-08T13:38:54.985378Z","last_seen":"2026-01-08T13:41:01.85753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878700/216642829_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878700/216642829_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3664\r\ncf-ray: 9bac1837aebf3181-OSL\r\netag: \"1801c062634dce29c3492a6c082a28b5\"\r\nlast-modified: Thu, 08 Jan 2026 13:23:52 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 776\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1801c062634dce29c3492a6c082a28b5","sha1":"249bb8937d28a99ac596682a61bc294b3794cfc4","sha256":"9b06c7005911296910637ae7551038c98699789765f51171cf8549cf81be5e03","sha512":"c249dcc6fd77f0a7f6a38adf04de4544e518b487312ea06ee0340fcbaee9c9231dc264e6d699894082a3e89bde5cab45f80078d91cf4eb3cd77819895993da1c","ssdeep":"","tlshash":"68716da4566c584ed8e2f2a32930f4534c21e0d194450a6db76dcb3a14d8cb56677c52","first_seen":"2026-01-08T13:38:54.982007Z","last_seen":"2026-01-08T13:41:01.773118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Jan 2026 17:56:30 GMT\r\nexpires: Tue, 05 Jan 2027 17:56:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243709\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-04-04T02:11:24.86288Z","times_seen":6253,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/css/font-awesome.min.css","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/css/font-awesome.min.css HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2014 07:25:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d5cYOof9OQUhkcosO%2BbIhl%2BVNeUz8uaBitKFZoz6X8BKlOQNONE1mZSO5tLoc%2BZtO2Dp3zsKyjEbCto0sNMWTfm8G%2FzeUyvanLGEMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Thu, 15 Jan 2026 06:52:08 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 629169\r\ncf-cache-status: HIT\r\netag: W/\"511e-5024c5e27f400\"\r\ncf-ray: 9bac182b0b960afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20766,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20604)","md5":"bbfef9385083d307ad2692c0cf99f611","sha1":"63a234ea4d60f6643a60a4d79e28f291b93c1743","sha256":"b769324e0921f9f649611113e65f528ebae5e140da8a7e63c5d6ea7bc7a33bc0","sha512":"efb922772183246596989d0c54ed02469fba9d181944aebb7eb515051be72f5cc2726730f45902431a431eae7649e6d6f8a5930279ee5f4424dbf3105a8816a1","ssdeep":"192:xq9jjI+ab2edrK/TUKIErArKlcZJVrJ3ee+cR6waWW215Uvf0:+jPyW/TUK1+KlkJ5de2UWWyAf0","tlshash":"c99266f8e54d01c66731c48bff85b36862baf33dd5804d99f11f294c29d22a912c5bba","first_seen":"2023-04-05T10:34:03Z","last_seen":"2026-04-04T01:15:38.19945Z","times_seen":7692,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.mnaspm.com/smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45","fqdn":"go.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.mnaspm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 14:45:10 GMT","end":"Mon, 09 Feb 2026 15:45:02 GMT"},"fingerprint":{"sha1":"08:B3:F2:8D:13:1C:EB:A1:77:F3:4F:6D:79:41:EC:E1:F5:51:C8:61","sha256":"75:27:CE:45:8A:C8:5C:F8:FB:5C:83:64:C2:23:8F:FB:69:DE:F7:BB:D5:5B:53:12:BC:CD:68:FF:FF:75:C6:21"}}},"request":{"raw":"GET /smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45 HTTP/1.1\r\nHost: go.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\ncontent-length: 0\r\nlocation: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890\r\ncf-ray: 9bac182c1a6756bd-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":43,"dns":16,"connect":5,"send":0,"wait":32,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.mnaspm.com/smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45","fqdn":"go.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.mnaspm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 14:45:10 GMT","end":"Mon, 09 Feb 2026 15:45:02 GMT"},"fingerprint":{"sha1":"08:B3:F2:8D:13:1C:EB:A1:77:F3:4F:6D:79:41:EC:E1:F5:51:C8:61","sha256":"75:27:CE:45:8A:C8:5C:F8:FB:5C:83:64:C2:23:8F:FB:69:DE:F7:BB:D5:5B:53:12:BC:CD:68:FF:FF:75:C6:21"}}},"request":{"raw":"GET /smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45 HTTP/1.1\r\nHost: go.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\ncontent-length: 0\r\nlocation: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\ncf-ray: 9bac182c1a6f56bd-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":45,"dns":16,"connect":5,"send":0,"wait":41,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.mnaspm.com/smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45","fqdn":"go.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.mnaspm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 14:45:10 GMT","end":"Mon, 09 Feb 2026 15:45:02 GMT"},"fingerprint":{"sha1":"08:B3:F2:8D:13:1C:EB:A1:77:F3:4F:6D:79:41:EC:E1:F5:51:C8:61","sha256":"75:27:CE:45:8A:C8:5C:F8:FB:5C:83:64:C2:23:8F:FB:69:DE:F7:BB:D5:5B:53:12:BC:CD:68:FF:FF:75:C6:21"}}},"request":{"raw":"GET /smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45 HTTP/1.1\r\nHost: go.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\ncontent-length: 0\r\nlocation: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\ncf-ray: 9bac182c1a7256bd-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":45,"dns":2,"connect":9,"send":0,"wait":33,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889 HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 09:21:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ai90jVATgdXdOtWzTos59%2BEVFFPCsrqxDhupOEHLbm8cKXg5Tm%2Bg%2BqBtl7%2FAjXZ7KgAX5TkAkEB4LdPPsH%2BfrZjRDEgHPbQh96YeMybXgpiLxtcNEdD9fjuOYxykkA%3D%3D\"}]}\r\nexpires: Thu, 08 Jan 2026 13:40:30 GMT\r\ncache-control: max-age=300\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nvary: accept-encoding\r\nage: 167\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9bac182e19a45fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1427), with no line terminators","md5":"bdce4b8365f3e70efa9c2a9411a3c0d5","sha1":"6207ed4e4a3815ac5f43331cbe05971a47a2e7db","sha256":"ef038e4c01e0947177dd9fe69b895f8f1088d940a4a0a02c18432e90c760cd4b","sha512":"89a9c90b3366346e660b737b718835bce0c5cd3a3786fbdf7e9814a9f20bcaebe981ad69243b67996ffc84b38be64a40c2635ee03e93a0bfba6f92269a9c4d33","ssdeep":"","tlshash":"af21cd22d844c44d65b0d276be913239d48f7b1fe620bad0ec2118dff8a8f8a4265d47","first_seen":"2026-01-08T13:18:31.140958Z","last_seen":"2026-01-13T02:40:20.366837Z","times_seen":37,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":47,"dns":1,"connect":3,"send":0,"wait":11,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879060/163825515_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879060/163825515_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7302\r\ncf-ray: 9bac1837bee93181-OSL\r\netag: \"ca12b8bd9a847fe5d5e142f509dc5ee8\"\r\nlast-modified: Thu, 08 Jan 2026 13:30:17 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 409\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7302,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ca12b8bd9a847fe5d5e142f509dc5ee8","sha1":"d369c8cf75f3201a7dc0bf8d53983928da7ead72","sha256":"52609f8183c12bec0efd71cc59db2999091a454a95126cdf5904cdae2b09adb8","sha512":"ded738c06215435c2ec649592d26137ecf6e84411d46519bd00233f85a9fc5fffab4251ed017903abf637f10649db10317acc707a21bfb1e7b7c5f2eb3531c8d","ssdeep":"192:ds/VASTX/nxsozVQ3y3hNmiWKakyQ2nWOI2KJ:a/iStsozmi3hNDNaZ+OuJ","tlshash":"c9e1af2318f9b78481fd9a1ffa39db358aec8dc85914e216d231189a5ff02301791ee7","first_seen":"2026-01-08T13:38:55.018807Z","last_seen":"2026-01-08T13:38:55.018807Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/media/videos/tmb/12645/1.jpg","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /media/videos/tmb/12645/1.jpg HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:38:17 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:50:21 GMT\r\nETag: \"2191-5bb018d2c867b\"\r\nAccept-Ranges: bytes\r\nContent-Length: 8593\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8593,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 256x144, components 3","md5":"77deaaf2fc22501f5d170cf26913d327","sha1":"c10f65422d922f70b1e1ae25e65ec73f4ba9c931","sha256":"825e585aaa591084ef91f98c4ab3c6aca926b1cc17d8e4877476c45ba8bd8cad","sha512":"9fdaac313b3586e7f55189836a9859adc15f9105d2a94e2c92ad89ba183ab68a060afb10dd9222c96f683139a0ec2763a3ee07ea7f7c5fed01fe5e2d7679504d","ssdeep":"192:wH0+RrG5KJFx5wWBFHYXoPh6QOh5J2ocutQp8jN:wdVG5KJFxiamXGh6QKEocOx","tlshash":"6702aeb0576a9ac2752340c60336bec1c7fdb0c1bf69ab4e97f500a6d4dc0c96d545c6","first_seen":"2026-01-08T13:38:55.020617Z","last_seen":"2026-01-08T13:38:55.020617Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":44,"dns":0,"connect":26,"send":0,"wait":26,"receive":5,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890 HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 09:21:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d5vnSC65k2ckN9pJQHp3XH78p8MlO6kWB5Dfy1nT83u86Gez%2FaxrZBuGp3BIwpUaPV%2BcZrDebldDEKtBBefPmzB87SHm2M1MWTiP09z94ukyqyLFTcPeHIOVW%2F646g%3D%3D\"}]}\r\nexpires: Thu, 08 Jan 2026 13:40:30 GMT\r\ncache-control: max-age=300\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nvary: accept-encoding\r\nage: 167\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9bac182e09975fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1427), with no line terminators","md5":"bdce4b8365f3e70efa9c2a9411a3c0d5","sha1":"6207ed4e4a3815ac5f43331cbe05971a47a2e7db","sha256":"ef038e4c01e0947177dd9fe69b895f8f1088d940a4a0a02c18432e90c760cd4b","sha512":"89a9c90b3366346e660b737b718835bce0c5cd3a3786fbdf7e9814a9f20bcaebe981ad69243b67996ffc84b38be64a40c2635ee03e93a0bfba6f92269a9c4d33","ssdeep":"","tlshash":"af21cd22d844c44d65b0d276be913239d48f7b1fe620bad0ec2118dff8a8f8a4265d47","first_seen":"2026-01-08T13:18:31.140958Z","last_seen":"2026-01-13T02:40:20.366837Z","times_seen":37,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":43,"dns":3,"connect":1,"send":0,"wait":9,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/app/domain-checker/get-check","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\npriority: u=4,i=?0\r\ncf-ray: 9bac18366ac3120a-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-expose-headers: *\r\nvary: Origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878700/216642829_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878700/216642829_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3664\r\ncf-ray: 9bac18381fff3181-OSL\r\netag: \"1801c062634dce29c3492a6c082a28b5\"\r\nlast-modified: Thu, 08 Jan 2026 13:23:52 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 776\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1801c062634dce29c3492a6c082a28b5","sha1":"249bb8937d28a99ac596682a61bc294b3794cfc4","sha256":"9b06c7005911296910637ae7551038c98699789765f51171cf8549cf81be5e03","sha512":"c249dcc6fd77f0a7f6a38adf04de4544e518b487312ea06ee0340fcbaee9c9231dc264e6d699894082a3e89bde5cab45f80078d91cf4eb3cd77819895993da1c","ssdeep":"","tlshash":"68716da4566c584ed8e2f2a32930f4534c21e0d194450a6db76dcb3a14d8cb56677c52","first_seen":"2026-01-08T13:38:54.982007Z","last_seen":"2026-01-08T13:41:01.773118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889 HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 09:21:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7xpz1AuEejLw%2BHPbpdC6HOVZVLC8%2BksH1vZORAWq%2BktBRTUkChNbaCGIaEk%2BERYxC8wAruqASVnYYsc0qWv84%2B%2FnTdZM9cGk%2BYMJV6lrCuMfOIMu6mOA7%2FVWxLo4pg%3D%3D\"}]}\r\nexpires: Thu, 08 Jan 2026 13:40:30 GMT\r\ncache-control: max-age=300\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nvary: accept-encoding\r\nage: 167\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9bac182e29ad5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1427), with no line terminators","md5":"bdce4b8365f3e70efa9c2a9411a3c0d5","sha1":"6207ed4e4a3815ac5f43331cbe05971a47a2e7db","sha256":"ef038e4c01e0947177dd9fe69b895f8f1088d940a4a0a02c18432e90c760cd4b","sha512":"89a9c90b3366346e660b737b718835bce0c5cd3a3786fbdf7e9814a9f20bcaebe981ad69243b67996ffc84b38be64a40c2635ee03e93a0bfba6f92269a9c4d33","ssdeep":"","tlshash":"af21cd22d844c44d65b0d276be913239d48f7b1fe620bad0ec2118dff8a8f8a4265d47","first_seen":"2026-01-08T13:18:31.140958Z","last_seen":"2026-01-13T02:40:20.366837Z","times_seen":37,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":52,"dns":5,"connect":1,"send":0,"wait":7,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6H%2B8ywLD01%2BjpEhBjQc6cYYJfj%2BR%2BrnvJhDlD2M0GE8drzuypqP5AwPzbW6iM1g3sqzkasS6LArE6Epp4vSsTFfFoXO8g5dQCob3vdGUjhFO8%2FWLQjrebK3dfwEZ2g%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"saretarget.e25d7729d6aa0892d869.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:18 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2094\r\ncf-cache-status: HIT\r\netag: W/\"bf4ad79a8f3c33c2af6b13887462fe86\"\r\ncf-ray: 9bac182f89bb120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4930,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4930), with no line terminators","md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878700/216642829_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878700/216642829_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3664\r\ncf-ray: 9bac1837cf1b3181-OSL\r\netag: \"1801c062634dce29c3492a6c082a28b5\"\r\nlast-modified: Thu, 08 Jan 2026 13:23:52 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 776\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1801c062634dce29c3492a6c082a28b5","sha1":"249bb8937d28a99ac596682a61bc294b3794cfc4","sha256":"9b06c7005911296910637ae7551038c98699789765f51171cf8549cf81be5e03","sha512":"c249dcc6fd77f0a7f6a38adf04de4544e518b487312ea06ee0340fcbaee9c9231dc264e6d699894082a3e89bde5cab45f80078d91cf4eb3cd77819895993da1c","ssdeep":"","tlshash":"68716da4566c584ed8e2f2a32930f4534c21e0d194450a6db76dcb3a14d8cb56677c52","first_seen":"2026-01-08T13:38:54.982007Z","last_seen":"2026-01-08T13:41:01.773118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/favicon-16x16.png","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:38:18 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:00:52 GMT\r\nETag: \"495-5bb00dc343b67\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1173\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"818c989ac6e8e032d3c3820d3a1bff48","sha1":"2903f52c29784f03cd86cc10e7350a7e10572c97","sha256":"a575eeb2a3448599cbb890d2ad2fbbd1fdcec30dcbfd0886ea50f249d6712c8d","sha512":"aba1c31e40aeefb87c66e83c117490eb7a711640dace7a338963b20e823b02ad2305a3bbf4e6a9fbdfe32c53079815bc409258dee6686d00b2214ca3a3e2a383","ssdeep":"","tlshash":"382132d1bebbd7abc866c37e62820654b83182556700795e8257c2b82e38b40a755bce","first_seen":"2023-06-15T04:01:20Z","last_seen":"2026-01-27T22:27:44.45625Z","times_seen":13,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/721caf0b/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:19.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:09 GMT","end":"Wed, 25 Feb 2026 15:50:08 GMT"},"fingerprint":{"sha1":"70:35:5F:58:F3:50:B0:2A:0E:11:9A:FD:D4:67:00:94:17:0E:03:EF","sha256":"01:93:34:8C:59:AC:52:25:54:81:E8:50:E1:E9:8A:11:1F:3C:82:81:00:B2:90:35:17:5F:25:9C:C2:2D:D2:E2"}}},"request":{"raw":"GET /s/player/721caf0b/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 10138\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 06 Jan 2026 08:31:37 GMT\r\nexpires: Wed, 06 Jan 2027 08:31:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 06 Jan 2026 05:33:44 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 191202\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30432,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (570)","md5":"212ecade2ccab1d277a4f25252442fce","sha1":"41ebf899a2d00b0d8d28897434894349694ee5d7","sha256":"11aa7946df12674187e45a29c8a083a30cefb5e625985b2405c1d0fb710e56b2","sha512":"af8a2b3f4d9e2c770214917085012643d845d474befeb1cf58290bfb2d5bff1a49953d624eb3b6da4a5a2c44893cc49296277c08b813ae3212860f02ac4664ac","ssdeep":"384:LJrDFJE658O7nfTwu3hZKjDOYjPncmXjVGv+E4aiz2wZBat1CUS6UTGdtmv4nU+g:LpHV5PfnhQjyYJjEV4jLlUS6UKZg","tlshash":"07d2d6cd77b1b431437366b5902f100fb23e98aab40cc999b188d8e16cb49694637f7e","first_seen":"2025-10-16T17:59:48.894792Z","last_seen":"2026-04-01T04:43:01.189781Z","times_seen":43437,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/media//videojs/video.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /media//videojs/video.min.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 16 Jan 2020 11:35:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2B%2FYTWm%2BlzJpANFrimnWBGwV%2B%2FoijKULoGCnUZRFT477nh6a3Y3bTq9Ngy2ysgPcC2a6x2IlbYU5vI9oQ6%2BTEr3MaA4XE2BL0MebQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Thu, 22 Jan 2026 13:38:18 GMT\r\netag: W/\"4700e-59c40371c6100\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9bac1830fc180afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":290830,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"3b7cd4bfef76118f4e37d5b0ddaf3c24","sha1":"22515637083d1c077f2abb38525be6f4240c1cfa","sha256":"406fe9f8f931910a9621443786f97ea505727c9e023314475b2f2cdba776de17","sha512":"4a0545de85aafc7e350fbbcd8a89978b1667c9de1311cbca605d77eed40904085be94dd6d83d9f66f0186689a3913dac47fe5e9136315fc0a4dc6c624392ae21","ssdeep":"6144:cSX/GHubMblZyqranNWYWtq9q4kDdpi6T4S2tx6FL5HM6Uvjb55/c0YUIGFqlPyY:cnDyqranNWYWtq9q4kDdpi6T4S2tx6FH","tlshash":"9854fa89f1b4b16642d765908c3b8d0db239b97c901890e8f2fbe4f65ff48594627b38","first_seen":"2026-01-08T13:38:55.023682Z","last_seen":"2026-01-08T13:42:25.974806Z","times_seen":3,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xraress.com/picon.png","fqdn":"cdn.xraress.com","domain":"xraress.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /picon.png HTTP/1.1\r\nHost: cdn.xraress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:38:17 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:00:52 GMT\r\nETag: \"68f-5bb00dc3cedf3\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1679\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced","md5":"d98e1b3a618ad365cb02bd0c33758d8a","sha1":"7ee60562a0aa6c0d6b479f155ce71fe9317f2173","sha256":"62aec2212792b5456014befac66f80dc1924e5f36e8cfe8091a509ec60ac01a5","sha512":"ccbe7a0fc3c5ff2a15b9c421784ae8967ba371aedf28cfc254d61a5e6c0d9715973f06abdf193df83449383b7758f895b154e524c6d181588c3bd0bebca7e835","ssdeep":"","tlshash":"8c314046380cc13b50203d3af94f14a0a8e55650e4b6e34ff3945e92534d60ff8769b3","first_seen":"2023-06-15T04:01:20Z","last_seen":"2026-01-08T13:42:25.966425Z","times_seen":7,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":49,"dns":3,"connect":22,"send":0,"wait":24,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.07e699c4152364e49f36.css","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/main.07e699c4152364e49f36.css HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AyoalQZbUfVK8O5d1w2roCt%2FL3HlfbIQyWQOAJO87FRyV%2BWxvpfsdouNlVUKFAK2FFGgvvIV0TPX2CHljk6DRupo%2F5Rzz3X3WF1cdkUnOjxXAHMMaknCZk2touNtzQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.07e699c4152364e49f36.css\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2094\r\ncf-cache-status: HIT\r\netag: W/\"60110d98346f0ea28e6d2ee459b321ae\"\r\ncf-ray: 9bac182f89b4120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14479,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14479), with no line terminators","md5":"60110d98346f0ea28e6d2ee459b321ae","sha1":"737dbaace53a76f2cd33165f6a81c4fd22412469","sha256":"2a144b35a80dd5fd70e0183d3ffce80d5c416a48360cd1ab8402d323cfb7141b","sha512":"c756fa5e05ae040bc716efe70e126add1057285ce37a2228e9d1ed3c247df7ec87a6efe1c2b7c2f5925129803fa583115de6bdb022bb385aa76609dfcb1554b7","ssdeep":"192:LXDldVstnXOVXqeXS3N1baTIHnACMm6+FBuHVAjV9wwL+Yz:DDkOERHnACA+FgHVAjVyi7","tlshash":"3f52b83356612618f41bcd2167a527dba268c417e11227fced527a39cbcb4870fb618e","first_seen":"2026-01-08T13:18:31.217114Z","last_seen":"2026-01-13T02:40:20.370898Z","times_seen":37,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=8","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=8 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac18364abf120a-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 08 Jan 2026 13:38:19 GMT\r\ncf-cache-status: MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11562,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a35d4c12f1f35f60d24fb83d6d817b75","sha1":"2b768d67cfd9404fa0162a76f617afbaf5b3faeb","sha256":"29cec02d6b880c270ebf4c645c984a95a1026a13c8c7ee508a7e9129d3ebb896","sha512":"c96820a0176a8f8cbbec8a68d741ba83ed77f3bd3656cf5cdfbea875e636e5e1626ae6b3e5709c22a887bb6a93c04d6299fb7bdc546b8a66939add40afd8a752","ssdeep":"192:bCLxFtzKzRzmdvpLLtzCdzNzYj7tBgPZDDCzWbzWuzWOEdata1zPzyzin6XtzS9V:bktzKzRzwvVtzCdzNzYj7tBaZizGz9zu","tlshash":"293233f7c6cc5d3e0f0612c8c98d790ce9a71a17a689b395c1dc5f8645b6dca221ce63","first_seen":"2026-01-08T13:38:55.029435Z","last_seen":"2026-01-08T13:38:55.029435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879450/231824312_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879450/231824312_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2346\r\ncf-ray: 9bac18370d123181-OSL\r\netag: \"1d4cfff4db38e2cd5e88ce34b381cf1e\"\r\nlast-modified: Thu, 08 Jan 2026 13:36:23 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 38\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2346,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1d4cfff4db38e2cd5e88ce34b381cf1e","sha1":"ce6e8d5ddf6054dc8aa92d3872195da141280e8c","sha256":"9c69fd9d29345bac8f18a941ecb3071aa8e882154123226769e6c75a478ea72f","sha512":"e3a4cf6285f84eac7b6be6e3a7751198a9f9a865bdc288697f6a993fa19cb6746bcbe08ebdb0a8b401ec017826368819d4a8516eaea75c5d84fe2dab9182ae7a","ssdeep":"","tlshash":"50413bcb4d95e4954820240618f9fa60a792eec11edad5686f521f3a8b6d107aeb801c","first_seen":"2026-01-08T13:38:55.032939Z","last_seen":"2026-01-08T13:38:55.032939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/app/domain-checker/check-result","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"POST /app/domain-checker/check-result HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 250\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":250,"data":"{\"checkId\":97,\"result\":\"success\",\"currentDomain\":\"go.bluetrafficstream.com\",\"requestSignature\":\"1767879499-81676f8164e229e44f684ae7181e29ff\",\"configLoadTimeMs\":103,\"checkPerformTimeMs\":126,\"resultResponse\":\"{\\\"it\\\":\\\"works\\\"}\",\"resultStatusCode\":200}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\npriority: u=4,i=?0\r\ncf-ray: 9bac18389af0120a-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-expose-headers: *\r\nvary: Origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/media/videos/tmb/24695/1.jpg","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /media/videos/tmb/24695/1.jpg HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:38:17 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Thu, 29 Jul 2021 19:31:26 GMT\r\nETag: \"1a38-5c8482622279f\"\r\nAccept-Ranges: bytes\r\nContent-Length: 6712\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6712,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 256x144, components 3","md5":"9092db35ecc6966d3144c94eb360b083","sha1":"03dddb182ec9cdab50d2d157468dbac242793c2d","sha256":"69b1fa34a1320816eee39a5917d829d0e425e4425eaecd428be1be5e596fd74d","sha512":"e81202ca58cbf7b575d93cbe0d613b6ea133328cf172ecbfc231e2ea3c7f4877dd8c6798a561478e97dca78005e3113e48d43188b3bf5bbfdcb6f2d2966b55d2","ssdeep":"192:k0FlA2apNlClxZe7EcjmY/YCwSBMCgo2J:k0Fy2boyrtqpq","tlshash":"60d19d98e7d273c13717aa225b8c2cad07dcd7e69ce1291d2cd5860fa644ae12a88d64","first_seen":"2026-01-08T13:38:55.034352Z","last_seen":"2026-01-08T13:38:55.034352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":1,"connect":40,"send":0,"wait":41,"receive":1,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/app/domain-checker/get-check","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\npriority: u=4,i=?0\r\ncf-ray: 9bac18364abc120a-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-expose-headers: *\r\nvary: Origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/video/2154/forced-to-fuck-by-bullies-","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-08T13:38:16.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /video/2154/forced-to-fuck-by-bullies- HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: PHP/7.4.33\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: AVS=39ddjpb7vu6l2t1i684csbaiu7; path=/\r\nlast-modified: Thu, 08 Jan 2026 13:38:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wf3z%2BYQizA59R5GO5vdrSMy70KIzt5GIVEjLiR0Qf8XVD83MoPzGZ8U1fLT0YB1Ejd7sy2sNJ09xlmlf0lbfdORRsQngc46SyCAIbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9bac1825a9610b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:1.11.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34385,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7997)","md5":"d56ea1074df875ae0bf7cb0920477b64","sha1":"cb61288596261ed7707369722da4d9420fe78551","sha256":"331124008da20f7fe42d8cb96398129f19dc2fe1423367e881beba2d12865f07","sha512":"02f25ab5f06acd5645ff9f1649f727c8e4cce0fcbba4025f1967c751805c0e8e4d4a0668dc7081dd9a1f2e676e6b43cef57fb63e85d5cd066aadd219b43f204c","ssdeep":"768:6yHsVSq8QmSgJh2fRwgV4so1W2et5DE8BH0B1kQH0b4:IV8QmSUMSgC1U2iY9HM4","tlshash":"60f282319458cd3b01e3c2ddaa71bf1e62c2d2b5ce279a42b3f58b5e0bc6d81dc06566","first_seen":"2026-01-08T13:38:55.036138Z","last_seen":"2026-01-08T13:38:55.036138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":26,"dns":6,"connect":1,"send":0,"wait":652,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 08 Jan 2026 14:26:17 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDV0Ui002lNKK%2FdbHyHyIGv5hGNeNhLTK0EFHZW%2FkGDoK6Ajc0lMoQbuGcuyZjv6mqWApqNkMGA%2FQa7pK8u2bxeOxnQ99XbNWuJ0TQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\ncf-ray: 9bac182b7ba20afa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-04T02:10:30.767128Z","times_seen":94339,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.mnaspm.com/smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45","fqdn":"go.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.mnaspm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 14:45:10 GMT","end":"Mon, 09 Feb 2026 15:45:02 GMT"},"fingerprint":{"sha1":"08:B3:F2:8D:13:1C:EB:A1:77:F3:4F:6D:79:41:EC:E1:F5:51:C8:61","sha256":"75:27:CE:45:8A:C8:5C:F8:FB:5C:83:64:C2:23:8F:FB:69:DE:F7:BB:D5:5B:53:12:BC:CD:68:FF:FF:75:C6:21"}}},"request":{"raw":"GET /smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45 HTTP/1.1\r\nHost: go.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\ncontent-length: 0\r\nlocation: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\ncf-ray: 9bac182c1a6056bd-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":44,"dns":7,"connect":1,"send":0,"wait":33,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/jquery.avs-0.2.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/js/jquery.avs-0.2.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Nov 2023 01:32:59 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cIOEO7hAcu8wuDpYdYpTy3%2FM%2BuMmhFkcVYA4yYOF8gzdDj1oL93NrovpGPn8jo6HKXfCcHuKB%2FOjQSE97RZz%2FcghBU0ZKfexs1gq0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Fri, 16 Jan 2026 07:13:10 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 541507\r\ncf-cache-status: HIT\r\netag: W/\"3c2b-60adbeeba3442\"\r\ncf-ray: 9bac1830ec130afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15403,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"83f4d7283a8cf90e27388ad899629e3b","sha1":"ddc73a63dd3be64f765bb54e3a02b21af585cd3c","sha256":"44da8db1e2ee0e9a7d1b09426e73de8fdf79932b721078753497b8f0ae69e320","sha512":"21275df240eb5f44271f5287bb7268b8275d75bf764e37671d56a478324a429bbe8bf3072e7f904440e9783573ac34b8d1e40761f19808276efb08992fa51008","ssdeep":"192:dbokmTMZiQ+5qsgXO9SQgGJSE3sTfGU37Gh7nb+kSdodb2ZxWeGAuAkADdv:TGOGh7n/+","tlshash":"f462df08a9f351b9123771be1f2f69583a6841576104ef08b82d7ee06f80724d7b6fe6","first_seen":"2025-07-04T04:12:02.942224Z","last_seen":"2026-01-27T22:27:44.386724Z","times_seen":8,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/lang/en.json","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:38:18.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/lang/en.json HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fVSy1Ry8NcGu874B3Mr46Eg3WAmHgdO2bBZVt%2F4njV3P60jr2uFEaoaJF7UDegMRjS4AURTOjeIEtGrabxaT5HELbvqTGveuKn2B8Hcj7jdBvaIl7Yo0KA2jK0iHSA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2083\r\ncf-cache-status: HIT\r\netag: W/\"69a54638b649d7ce4748bd42c4b6dade\"\r\ncf-ray: 9bac18321a42120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"69a54638b649d7ce4748bd42c4b6dade","sha1":"a2dfe9f8791952fbc5cc44d4757b031a6cee1731","sha256":"0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750","sha512":"1e98b8977577f6daca587310456d38ab870571a0bec392072f38287d274465b3ebc867e6eefe5efd7653c7c0d2a23dabe7636a94c0cfda52321a84fd68d868e3","ssdeep":"","tlshash":"1ac08c09220b0f0389c83c23a223352a0b422bbaeb033730c262c3012c8c1b734e33cc","first_seen":"2023-04-07T07:09:28Z","last_seen":"2026-04-03T20:18:42.254179Z","times_seen":3544,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/apple-touch-icon.png","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:38:18 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:00:52 GMT\r\nETag: \"1610-5bb00dc312270\"\r\nAccept-Ranges: bytes\r\nContent-Length: 5648\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5648,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"1e867232c4e67bde6a944ba08a59c290","sha1":"bffe3fe365a4642af1dde4991d95c3cac502f5cf","sha256":"3eeef0b9f46422bd1db6a491e6d731edc81742a4fb81b481c8f3c8727b9f3ec5","sha512":"c926aca662dfe0c730804e482458b1059879c92090ab25a6531f95bcc1a2ccbf61c96ddd3185b0daefe5319d41f1a90eb4be75e7b2b3b7fe94b2b12a935e8afc","ssdeep":"96:2UXOKzM+pO++2JZOD3c+Ldk8WQR5y5rSGovS/Z2OZnE0ljR2dgt:RzznpOTT3civW1GGx/hXKU","tlshash":"6bc17d8e0e9883e9ab4e2e56976001f2c03ba3d6637240f4f67ad794c13160e3956bd7","first_seen":"2023-06-15T04:01:20Z","last_seen":"2026-01-27T22:27:44.409493Z","times_seen":13,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:38:19.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Jan 2026 17:56:30 GMT\r\nexpires: Tue, 05 Jan 2027 17:56:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243709\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-04-04T02:11:24.86288Z","times_seen":6253,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878700/216642829_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878700/216642829_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3664\r\ncf-ray: 9bac18370d0e3181-OSL\r\netag: \"1801c062634dce29c3492a6c082a28b5\"\r\nlast-modified: Thu, 08 Jan 2026 13:23:52 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 776\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1801c062634dce29c3492a6c082a28b5","sha1":"249bb8937d28a99ac596682a61bc294b3794cfc4","sha256":"9b06c7005911296910637ae7551038c98699789765f51171cf8549cf81be5e03","sha512":"c249dcc6fd77f0a7f6a38adf04de4544e518b487312ea06ee0340fcbaee9c9231dc264e6d699894082a3e89bde5cab45f80078d91cf4eb3cd77819895993da1c","ssdeep":"","tlshash":"68716da4566c584ed8e2f2a32930f4534c21e0d194450a6db76dcb3a14d8cb56677c52","first_seen":"2026-01-08T13:38:54.982007Z","last_seen":"2026-01-08T13:41:01.773118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/css/colors.css","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/css/colors.css HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 27 Dec 2015 14:31:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OF4QpKpg7kjvzXSbmvy4bdxAZw7QLLS7Ez79zbMaeqHT7GZ8lY%2Fm1QKfwWWld6PQmOW8DDDJBAP1le2GKKG7akTKzVuq3o3e9yH30w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Sat, 17 Jan 2026 02:28:57 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 472160\r\ncf-cache-status: HIT\r\netag: W/\"33b1-527e20a45ec00\"\r\ncf-ray: 9bac182b0b970afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13233,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"6c3dd0164a4630d09e17db0a3fc65a0e","sha1":"4782842ba85edceffbe5dd86c6cb281f65d49af3","sha256":"a77dfcfe0dd0113138522f9675e26c3fce2c62153442d5b5403f65dfa430738b","sha512":"6413ecad4cca15e2f7fb64169f266b8c7bc9294b22ad0818f962803c3499d82263988e88912cfbdb82696146f64476c1692f0bfd04d4be2c9a21888fcddb33e4","ssdeep":"192:Qby9V0uRHt2rVsFWwu5R8e1c/vP9O0I2yBv9Qd5fnV0Ve30PTuLKs1UdYNUltSj:esSPaOsqui7G","tlshash":"ca5201edf242704b3623999d51b3c9928fa961d4cc090f3e796541b4138e4e8bf39dae","first_seen":"2025-07-03T23:27:00.07796Z","last_seen":"2026-01-27T22:27:44.395309Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.mnaspm.com/smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45","fqdn":"go.mnaspm.com","domain":"mnaspm.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.mnaspm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 14:45:10 GMT","end":"Mon, 09 Feb 2026 15:45:02 GMT"},"fingerprint":{"sha1":"08:B3:F2:8D:13:1C:EB:A1:77:F3:4F:6D:79:41:EC:E1:F5:51:C8:61","sha256":"75:27:CE:45:8A:C8:5C:F8:FB:5C:83:64:C2:23:8F:FB:69:DE:F7:BB:D5:5B:53:12:BC:CD:68:FF:FF:75:C6:21"}}},"request":{"raw":"GET /smartpop/ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a?userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45 HTTP/1.1\r\nHost: go.mnaspm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\ncontent-length: 0\r\nlocation: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\ncf-ray: 9bac182c2a7856bd-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":45,"dns":2,"connect":9,"send":0,"wait":35,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:38:18.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PNfke%2FgQ6A88rd2pBHoCiYAgNiNdtpfHpGtJJLiFPHpRFEbd7g8cBm8fHCDitWWP1w09Ehyy3%2FzBJc70myprXJl8AWnS6ucvXvyvY9DLzEMDs7Lu8PvlOwkzifGMgw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"saretarget.e25d7729d6aa0892d869.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:18 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2094\r\ncf-cache-status: HIT\r\netag: W/\"bf4ad79a8f3c33c2af6b13887462fe86\"\r\ncf-ray: 9bac182fb9d5120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4930,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4930), with no line terminators","md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1218%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A743%2C%22duration%22%3A15%2C%22transferSize%22%3A2813%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A743%2C%22duration%22%3A57%2C%22transferSize%22%3A266435%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A743%2C%22duration%22%3A16%2C%22transferSize%22%3A5359%7D%5D\u0026mh=-1044977005","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1218%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A743%2C%22duration%22%3A15%2C%22transferSize%22%3A2813%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A743%2C%22duration%22%3A57%2C%22transferSize%22%3A266435%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A743%2C%22duration%22%3A16%2C%22transferSize%22%3A5359%7D%5D\u0026mh=-1044977005 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\npriority: u=4,i=?0\r\ncf-ray: 9bac1833ca74120a-OSL\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/app/domain-checker/get-check","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:38:19.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\npriority: u=4,i=?0\r\ncf-ray: 9bac18364abe120a-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-expose-headers: *\r\nvary: Origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879150/233751993_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879150/233751993_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5754\r\ncf-ray: 9bac18371d143181-OSL\r\netag: \"f5694abb0ee016e8d71a7f573f0f028a\"\r\nlast-modified: Thu, 08 Jan 2026 13:31:28 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 329\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5754,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f5694abb0ee016e8d71a7f573f0f028a","sha1":"bf11c5baa2fa8ff6bdcddd012273bb6100b36ca9","sha256":"ebae66b82345d2457135e201193df54637a384ee3d141bd1780bbb248c4c4d53","sha512":"b3a68e6b2c50c4efb8ca73582c1b6bba9d58f35930c03c1193c57bee344d6de3651361d78603b0d3b017007244ec462e6fe7e20cf7853db10cc441baf2a0e199","ssdeep":"96:2/ZTc6ztSrFiMLDynFR7bicvnd9bRFQV/rZe9k4gD8RBD:2/ZTc6ztSBLDyHXicPd91KV/8kVD8b","tlshash":"4ec1ae75551b5fe9298367f3884aa9ef8130760234001bccb89c81b83a496d76f4dfce","first_seen":"2026-01-08T13:38:55.043378Z","last_seen":"2026-01-08T13:42:25.937877Z","times_seen":3,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878610/224622499_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878610/224622499_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12166\r\ncf-ray: 9bac1837aec73181-OSL\r\netag: \"bc8b92cea78be03b74b3da7c703cb1cd\"\r\nlast-modified: Thu, 08 Jan 2026 13:22:51 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 873\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12166,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bc8b92cea78be03b74b3da7c703cb1cd","sha1":"74e0f963b998fd27b5d94fa4ea080149e0b49e0b","sha256":"87b892f2a6b4e76e5b1cd5355867de69b5d6720fb56fe264414994d03f7838b7","sha512":"138f967a66f2831a594538b49d3984116c561635162f35e120922a10d4594c0611a7dc688fccbcbe21e299392596a68e2fa42345a18fc70c644a0c8fbb1c1be3","ssdeep":"192:UUrwU+IBUdaqekCsib9lMPNTD1qUcIhCB4rYk7SDcQpp9zKkeaGwRpFz4:pWIBUdaq/meZ15cYm/E6p9zAF","tlshash":"4b42bf866d6f64937196b4c8b01020c537a6e7a9a24e81ae43c8f9b6cc395e1bff0515","first_seen":"2026-01-08T13:38:55.045249Z","last_seen":"2026-01-08T13:38:55.045249Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/media/users/nopic-Male.gif","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /media/users/nopic-Male.gif HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:38:17 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:39:37 GMT\r\nETag: \"e64-5bb0166cd8812\"\r\nAccept-Ranges: bytes\r\nContent-Length: 3684\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3684,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 450 x 450","md5":"040a34aa6bfded35d355f8457304a2cc","sha1":"fb506cbdb0ef3b6caf416fd85a34f8de7dc5ffde","sha256":"e86558ec0e214497d1e95a16125ca9499ae87fe97073bbd7193f0420d2f89647","sha512":"b3aefe657f818a0ef682a2f4b4c465543dbf3c389fe16ef33613fb223c8fe7503b00dc30114efef6b2a27b92084111f645e2b76db12851c7ac53a4603e325701","ssdeep":"","tlshash":"0a716da15f62a5d59dfd832f4028d5de00246c0aa2186692d2a87e4f70b56ba9c5ca31","first_seen":"2023-05-14T08:40:17Z","last_seen":"2026-04-02T07:45:31.577015Z","times_seen":183,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":53,"dns":5,"connect":32,"send":0,"wait":35,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tEeaMZ85oDrtmGwA9k59Pe5L2w5%2F3T2tVHxb6mXata9MPWXc%2F2EYjUjiekQVHxURw1kCUXpizh9pEMRgy5ze6KD%2BVyYR4wM1CduIQhjBrGazyZ18JOvD0rg9fR648g%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.0392e0f6c7b6d376d1e1.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2090\r\ncf-cache-status: HIT\r\netag: W/\"6264faf747172d4118734f941fea2ae5\"\r\ncf-ray: 9bac182f89b5120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1144541,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"38aae49805e8e835d39ca677256ddd3a","sha1":"f6acb5b16b97585c582e77165660ddf22f90dd80","sha256":"c9f21fe56aea40cd8c743dcc96d926514ed046e07bf150efc010fc3b796852bd","sha512":"9e2ae8ae8797283a4921700f90b99bcbb05739c21bea5a435ef10995b433dcbaf28a8479aabcf5d786dbf5caa66f6a7b38eb93eb71aa8935e984dfd0a97461d8","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJT:tRe0Y+AWZTdXYrntI0tPqX2vqDdu","tlshash":"642539897756b47646c69146e03f0203f235699a201a905cb3deecec665ceceb237b37","first_seen":"2026-01-08T13:18:31.205655Z","last_seen":"2026-01-13T02:40:20.342138Z","times_seen":37,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-XL8963DSXG\u0026cx=c\u0026gtm=4e6160","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:19.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id=G-XL8963DSXG\u0026cx=c\u0026gtm=4e6160 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\nexpires: Thu, 08 Jan 2026 13:38:19 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 142482\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":429608,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7828)","md5":"3e60efd3080aa854d46c5eb18abb477d","sha1":"d1f04098d4300207c2800aa0facb19ce0fd126c0","sha256":"d9878737fe09401ddb06b2d81013b2435bff35abbf3849d6ee3e6b72d083d466","sha512":"a4cf80d7f0deb4f030be37843fcc4c8ee1929ef0007bb651458d962b211dd38a0cfed1a716ed8a4a4f76cc752aeb358488a5d0626dfd051fb7017cd1fbb47a87","ssdeep":"6144:WaQAdAM7ox31lf/6V5AWtNV1qTCEh2phH4lhueXJjO67YM+TkYa+nhul0UY:FnChwH4nY/TkU","tlshash":"0494088e73ca74269396e478503f018ba57b29e2b45cc896f1c9cce02d7469a4277f7c","first_seen":"2026-01-08T13:38:55.050987Z","last_seen":"2026-01-08T13:38:55.050987Z","times_seen":1,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/jquery.rotator-0.2.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/js/jquery.rotator-0.2.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 12 Apr 2022 21:12:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bzGmPdjA32rDSyW51upaI463XcH8Y%2BzO49KXahISrYFqp1oM7KlKYDWNq9R%2BaxtddhZ1F6lE0Icygz48anVy%2BoZNZifgBnBOnWqJsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Sat, 17 Jan 2026 04:35:44 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 464553\r\ncf-cache-status: HIT\r\netag: W/\"761-5dc7b84ddc248\"\r\ncf-ray: 9bac1830ec140afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1889,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9e38a3d0ef9625af4a0ae17e907c1e5a","sha1":"f62cef879b87536c507ca5e8dc652e288d0a73e6","sha256":"3db2da534cf2cccf21a77fc4e25c3a8436ca4934e4265c828ac5aa3f79cde5ee","sha512":"80382ee3cf388a384b5cf88a49af208cdce075b7ade72ce55952e93f5be85d6640e08362fbc917d82f95736174e0dc284475bfb949d750e5b968861a8cb152d7","ssdeep":"","tlshash":"9241e1850ab2976f5613b2b42f1e05483a9650671140ed083e1ea5a4dfa037d53fabf9","first_seen":"2025-07-04T04:12:03.031131Z","last_seen":"2026-01-27T22:27:44.393383Z","times_seen":8,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1328%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A766%2C%22duration%22%3A68%2C%22transferSize%22%3A2815%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A766%2C%22duration%22%3A115%2C%22transferSize%22%3A266162%7D%5D\u0026mh=383607799","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1328%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A766%2C%22duration%22%3A68%2C%22transferSize%22%3A2815%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A766%2C%22duration%22%3A115%2C%22transferSize%22%3A266162%7D%5D\u0026mh=383607799 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\npriority: u=4,i=?0\r\ncf-ray: 9bac18342a79120a-OSL\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878610/224622499_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878610/224622499_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12166\r\ncf-ray: 9bac18370d103181-OSL\r\netag: \"bc8b92cea78be03b74b3da7c703cb1cd\"\r\nlast-modified: Thu, 08 Jan 2026 13:22:51 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 873\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12166,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bc8b92cea78be03b74b3da7c703cb1cd","sha1":"74e0f963b998fd27b5d94fa4ea080149e0b49e0b","sha256":"87b892f2a6b4e76e5b1cd5355867de69b5d6720fb56fe264414994d03f7838b7","sha512":"138f967a66f2831a594538b49d3984116c561635162f35e120922a10d4594c0611a7dc688fccbcbe21e299392596a68e2fa42345a18fc70c644a0c8fbb1c1be3","ssdeep":"192:UUrwU+IBUdaqekCsib9lMPNTD1qUcIhCB4rYk7SDcQpp9zKkeaGwRpFz4:pWIBUdaq/meZ15cYm/E6p9zAF","tlshash":"4b42bf866d6f64937196b4c8b01020c537a6e7a9a24e81ae43c8f9b6cc395e1bff0515","first_seen":"2026-01-08T13:38:55.045249Z","last_seen":"2026-01-08T13:38:55.045249Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879150/182984051_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879150/182984051_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11088\r\ncf-ray: 9bac1837cf173181-OSL\r\netag: \"03f49bd0964d00eca14431ab84b773dc\"\r\nlast-modified: Thu, 08 Jan 2026 13:31:48 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 342\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11088,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"03f49bd0964d00eca14431ab84b773dc","sha1":"8d58a37caee6131d445ab04579dd90afb5d39693","sha256":"ea3933d49f7596a0e77939f7ded8773528a982348b3add282bbfd45e1a0f848d","sha512":"e6db73141b84c2a2e0b9a1cbb63095dc30b79fbb85ce67284069dada9540721b0a49271546e72f739c1d2f03cb3d2ebcfb04954beab6de6cf719e2539ee836c6","ssdeep":"192:f6s5OBU8wU+UVNz47gfJ6LDLWilmeENuWWX/3lQyTgB5NbeJPI8k5MzhmWjuMeAD:DI6rGNz2tXFlbENHWXvlbTKwydMqMeLO","tlshash":"3a32cfb1dfb111b619c52a583e4fd801fb7de8c2098a87ea0b2a72c4111b66cadd4f0d","first_seen":"2026-01-08T13:38:55.054419Z","last_seen":"2026-01-08T13:41:01.893151Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/media/videos/tmb/46449/1.jpg","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /media/videos/tmb/46449/1.jpg HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:38:17 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Sat, 13 Jul 2024 14:18:16 GMT\r\nETag: \"3ce1-61d21aacb3d23\"\r\nAccept-Ranges: bytes\r\nContent-Length: 15585\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15585,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 256x144, components 3","md5":"9a2f800af1ac4f94345ec9624cff16a6","sha1":"181f5a9013dbcb2dbaafede8fb0cdf3988a7fcbf","sha256":"9eb9168b0e77eaab173a301c97afd56b3012ec0afcdf49888a94409fc5c017d7","sha512":"fe98632cda0e2c6c0b5786cc15b1f0cdbeda2e29b155298993da1f526b0e4b250841ea6a4a945ce38a914d0de785bc0e43313f9ead31afa2ab3d8be1ef9a9150","ssdeep":"384:kXehdNbO1KloNuNtDiVkmLmVRg9wFdBTjbJ2PS5n1f:ku5SebNN3gYTFdBT0mn1f","tlshash":"af62d0fe993097c8b99709f2141a0d630ee10e5eb2cc75a8eaf24b540492e9ec85cd5e","first_seen":"2026-01-08T13:38:55.057106Z","last_seen":"2026-01-08T13:38:55.057106Z","times_seen":1,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":46,"dns":1,"connect":40,"send":0,"wait":40,"receive":43,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/media/videojs/js/anyhtm.css","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /media/videojs/js/anyhtm.css HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Oct 2023 12:54:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l4l1wZSf7jpEqAjJR87r8BDPUljximmHAhlaMCthGwNTqdo%2FRIhvqx%2B0T60Z6cRPM76YuA6HlYwFhWQjZ%2Bnq7y%2BVM7GVzK5oAKEsPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Thu, 22 Jan 2026 13:38:17 GMT\r\netag: W/\"ab0-60861b81d9023\"\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9bac182b1b990afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2736,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"428cd89e0b1f32a175c8d6ff979d7ec7","sha1":"9cbeb444f5dfdca0762b730543752f43c6d84bed","sha256":"304518ac805cb6484cc928938464d8b3252bcab67a07bfa5132ba0a34e0fc677","sha512":"137f1c70740fba3c929957e2b0e06292262a4f978434c065fce4616b10063bcefbfdacdc2ac8d533e04caa6cd1d58810f64648d8c085dff2fe0b70749868df06","ssdeep":"","tlshash":"2f510323e540000ce13bd265ba866b7e373c9113aa17597cea6ab761c75a0eb469c342","first_seen":"2025-07-04T04:12:02.968985Z","last_seen":"2026-01-08T13:42:25.918118Z","times_seen":5,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/lang/en.json","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/lang/en.json HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nWYpj%2FP1Zj0u%2Fwf%2BfUdkDrp6MDvjMTc2Pat%2BtDZUAuiXIb5COlFfBDcH72fpFbOVGZeiKb9XPlpCWMXVGf63NmiFUZhu0TjZ6kNXfHE8Z%2BB6aQpAD1lrxa1bA4G7jg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2083\r\ncf-cache-status: HIT\r\netag: W/\"69a54638b649d7ce4748bd42c4b6dade\"\r\ncf-ray: 9bac1832da53120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"69a54638b649d7ce4748bd42c4b6dade","sha1":"a2dfe9f8791952fbc5cc44d4757b031a6cee1731","sha256":"0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750","sha512":"1e98b8977577f6daca587310456d38ab870571a0bec392072f38287d274465b3ebc867e6eefe5efd7653c7c0d2a23dabe7636a94c0cfda52321a84fd68d868e3","ssdeep":"","tlshash":"1ac08c09220b0f0389c83c23a223352a0b422bbaeb033730c262c3012c8c1b734e33cc","first_seen":"2023-04-07T07:09:28Z","last_seen":"2026-04-03T20:18:42.254179Z","times_seen":3544,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Jan 2026 17:56:30 GMT\r\nexpires: Tue, 05 Jan 2027 17:56:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243709\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-04-04T02:11:24.86288Z","times_seen":6253,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/fonts/glyphicons-halflings-regular.woff","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/fonts/glyphicons-halflings-regular.woff HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xrares.com/templates/frontend/dark-magenta/css/bootstrap.css\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Jul 2018 12:19:12 GMT\r\netag: \"5b18-571a9a7317000\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Wed, 14 Jan 2026 21:03:14 GMT\r\ncontent-length: 23320\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/font-woff\r\nage: 664504\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wwCMHGGu8zWEjPIj8kd5B%2FjNCosuKv%2FWugY%2FvLZz4rprhuQpBLI1aQhTfBtzBXBQaoqYYTisdPgI1b07CRKyJ6v14w9OIo%2Fnf01vOA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9bac18302c040afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23320,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 23320, version 1.0","md5":"68ed1dac06bf0409c18ae7bc62889170","sha1":"22037a3455914e5662fa51a596677bdb329e2c5c","sha256":"fc969dc1c6ff531abcf368089dcbaf5775133b0626ff56b52301a059fc0f9e1e","sha512":"88beda715a3de8ea031048feb71fd3ffff9c695fd9874b06c8b1d31c88c7a8a653c4a67efab3b6f0b1f4dedc3c18a6436a4455984c0abce10a210baca0cb689d","ssdeep":"384:nPImthkcJE4kdRJe7gl601jRx2GbhjBrr7plKUl2yCIvSAF2KFXthj1D:PImth2Je70jxphjZp0UMyPSyhD","tlshash":"1ea2d0e7af93450ff75e1279c384429e368dac09a19b0dc546edac1d91c80bced426f5","first_seen":"2023-04-05T07:13:03Z","last_seen":"2026-04-03T23:31:06.468388Z","times_seen":5134,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=1","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=1 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac18362ab2120a-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 08 Jan 2026 13:38:19 GMT\r\ncf-cache-status: EXPIRED\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1693,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5dec883142c5a59c6ff452478f93c03a","sha1":"9ab2bf86c89f798f317923b39f2906038329ce08","sha256":"faa2468fbe35647ec13600545a701fa85cec1cd871567a631780ddafc315ba20","sha512":"37f007cfc6afd77a6e99ce78ec90955ccae93b1d82fd26d82b18c7c0f018d3b0b993d4868e952524aff565168807656193d4fb0d471d4c7df90603f5bc9d14a3","ssdeep":"","tlshash":"b931f0f785cc8e7e0f0602c4d5493cc8e5d72523a297b74491988e5d09b5cca22dda66","first_seen":"2026-01-08T13:38:55.062961Z","last_seen":"2026-01-08T13:38:55.062961Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=1","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026limit=1 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac18363ab8120a-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 08 Jan 2026 13:38:19 GMT\r\ncf-cache-status: EXPIRED\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1693,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fdf354c93b2209c2aa819cf32e118aa9","sha1":"868a914c73503a91521627c557fd7985f0ee6c69","sha256":"ddc46106f52fd69a3f62c1442098d89094dde1c98a67030f35579b0408019c0a","sha512":"714d180f01cc3a371207709dfa622edb1b81b82b1b9031aaac1c040588abdea7339922fd0bb23db2ba9579297bf66f500e90e9e30a3000c1505264d83ded2bb8","ssdeep":"","tlshash":"5731f0f785cc8e7e0f0602c4d5493cc8e5972523a297bb4491988e5d49b5cc532dda66","first_seen":"2026-01-08T13:38:55.065432Z","last_seen":"2026-01-08T13:38:55.065432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/app/domain-checker/get-check","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac18364aba120a-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-expose-headers: *\r\nvary: Origin, accept-encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ebcd8757f09ec6e59b7db1933d5f9268","sha1":"996e0785a920035d2cf3248d20b1cbdf9caa55c6","sha256":"3005331302eebb45fcc1606d234569dfa03781e4ecbd173f965865d4e57b1741","sha512":"ff2d9aad6fff541d406920d1b584c532e0eac63106a8a6a36228fbc5aed933d4509ea37b5d0480bc06485adf742166d50ce898e87e9e9364513ac6a0698f95f8","ssdeep":"","tlshash":"82d02267410cb203c0c4c1c13e3f5584180428a01d018cf08ecc30acc0dc2300c37a10","first_seen":"2026-01-08T13:38:55.070432Z","last_seen":"2026-01-08T13:38:55.070432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/jquery.voting-video-0.1.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/js/jquery.voting-video-0.1.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Jun 2020 08:32:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nq5VNaKkEBrMfvz2J1Ux8O8DfDNuV1DeQs8Ps2OKzM5i5HNNzC7OoEjr8h9xMkv%2B8crvLQbifIJAkCpSNuHk%2Br18zm%2BCVjXa7h6nNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Thu, 15 Jan 2026 04:01:51 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 639386\r\ncf-cache-status: HIT\r\netag: W/\"5d9-5a82f6101f200\"\r\ncf-ray: 9bac1830fc190afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1497,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0f2af2b97bf00af0c15e2a8019953697","sha1":"7970f72caf38b75c818d14dbb7a8f1a61f36b0d0","sha256":"f16ae6a99564d192347ce6902e6d43f9d040a0711b36a13a9bac6cfe5e35844a","sha512":"ab23b5126849d4b0bfd082fe6e58ae0aed027c2256bb850c98c789a3806e597923f1850fd90daf2c4d564a551ae4654ea1f953a5aaf49dbb56bf7e0eedbefb08","ssdeep":"","tlshash":"91310a5cdb9e5725933f30f92e4f48cc295808b28594c556bc3da9998f04268433eeb6","first_seen":"2023-03-08T05:34:03Z","last_seen":"2026-02-08T18:07:09.056489Z","times_seen":58,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/iframe_api","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:09 GMT","end":"Wed, 25 Feb 2026 15:50:08 GMT"},"fingerprint":{"sha1":"70:35:5F:58:F3:50:B0:2A:0E:11:9A:FD:D4:67:00:94:17:0E:03:EF","sha256":"01:93:34:8C:59:AC:52:25:54:81:E8:50:E1:E9:8A:11:1F:3C:82:81:00:B2:90:35:17:5F:25:9C:C2:2D:D2:E2"}}},"request":{"raw":"GET /iframe_api HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, require-trusted-types-for 'script'\r\nexpires: Thu, 08 Jan 2026 13:38:19 GMT\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncache-control: private, max-age=0\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy-report-only: report-uri https://csp.withgoogle.com/csp/youtube_main/strict;base-uri 'self';object-src 'none';script-src 'nonce-o3nvxXh1IuseAsRGa1FNNA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval'\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-YNID=14.YT=WXYgFlTPjNh11ENow17k_JEze2JeWpfKZgsyfxz7ta6VuvKSSRmS2QPC6k5eA3BNRhMVzV3Uc6BiA9FxYsk1KPBkFtno7CoPmTwpGF6KkRO-e02HdWUjEemiIQ1eRXR8AJo2h-x9JrUjp3w2_Ds3FH3LQ4OcsMEIo3eXohhPlAAJOf6GRt65_7-RfAtNE0-OVaI7tZ3kAc5W7OOUHiPF5GK7dRBwE7URIizoKW0r4zGo4OmyVgQhwJVGPNghtmGbuEbS884fOC6F0MAMeOrvuoCU0k5_VHiv7Bslc7Qzxyk-FM1ILA9zkF50qzD1cnI-YoeSF5ER4ih3jf53qbsLfQ; expires=Tue, 07-Jul-2026 13:38:19 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none\nYSC=BX5-iMYOriA; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CIKZuu_tjI3qIxCP5a-siPyRAxiP5a-siPyRAw%3D%3D; Domain=youtube.com; Expires=Tue, 07-Jul-2026 13:38:19 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\n__Secure-YEC=; Domain=.youtube.com; Expires=Fri, 14-Apr-2023 13:38:19 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=APTJbcNJPEM; Domain=.youtube.com; Expires=Tue, 07-Jul-2026 13:38:19 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIhEh0SGwsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJiBu; Domain=.youtube.com; Expires=Tue, 07-Jul-2026 13:38:19 GMT; Path=/; Secure; HttpOnly; SameSite=none\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":993,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (501)","md5":"a5c005d2442ed34725871390825cbaec","sha1":"885c6e931361202d4415808eb3c5293c3a756ed3","sha256":"ce4023c12700238c416abd879ea09a7440cecb301f7c890f66795937526d7374","sha512":"519ef43125ac5232f3ddcbf8ef20bd76f0f3ad93ffa02df226b7bd06bfabecbb24dd6bbaf0b6398f0e4fc494d927ef66192e1a17737522c2c3551ffad358b7ad","ssdeep":"","tlshash":"7c11ed7b3d84e6398658a4e4a03fd31cf1b224957c51cd9110cde889e65cbcadd2d5bc","first_seen":"2026-01-06T16:30:28.099644Z","last_seen":"2026-01-13T04:56:27.166157Z","times_seen":525,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":150,"dns":5,"connect":14,"send":0,"wait":49,"receive":0,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33434\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 04 Jan 2026 11:11:11 GMT\r\nexpires: Mon, 04 Jan 2027 11:11:11 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 354427\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95786,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32086)","md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-04T02:33:48.15248Z","times_seen":45607,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":69,"dns":1,"connect":15,"send":0,"wait":16,"receive":25,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/css/bootstrap.css","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/css/bootstrap.css HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 25 Sep 2014 10:41:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=1209600\r\nexpires: Wed, 14 Jan 2026 05:18:41 GMT\r\ncontent-type: text/css\r\nage: 721175\r\ncf-cache-status: HIT\r\netag: W/\"217f6-503e172e9c080\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZFNYt0Ud3QkXU07tDpSqnWgZG83rMJs2ZZDkBjCowGvScWgG47MwtRJbvNkKmPzesgCE%2BuFP84U5zk2Hx0zp7o4vRAqhYFcde8wzg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bac182afb920afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137206,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (540)","md5":"d57ef8e8e64a9a6b75f6442736232604","sha1":"e7c76b0ce7346db16677264d7fcc73a41d09b9f1","sha256":"058fc3e7644d2b3104a08c1f99be9adeea8498aa82c3cf366c3ed1e5049cbc44","sha512":"a7b23f9285142f142e921861c35c3979d799dd08ae39ab921461e50cb488428b65f4060c7368999f55f85ffaa517401afa93eb1df8ac1ec0accd4040315048c1","ssdeep":"1536:kKLvT5jGG11R3f8XxEQI0BM2d1wTGlx0zPEv8IQwor6/:kG5jGm/P8DIovwTGlx0zPEv8IQwog","tlshash":"67d393d8bab435443223c09835938e92771d9043d41fed79bbe2347cafc95998973b8a","first_seen":"2023-05-10T09:20:02Z","last_seen":"2026-01-27T22:27:44.379255Z","times_seen":34,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:38:18.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OPDDmuTYyTdds5skB9HfrUBs5Jfvj4u7PSmiNyKeuRnX5a%2BTeqyG%2FuPZ1GsmK5CvaHh3WLWX5ICMVuAwdYBwARThOuxB%2BKsE4TWyhjsxd0%2FUO9J%2BNubgqVEZLLNeBw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.0392e0f6c7b6d376d1e1.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2090\r\ncf-cache-status: HIT\r\netag: W/\"6264faf747172d4118734f941fea2ae5\"\r\ncf-ray: 9bac182fb9d2120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1144541,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"38aae49805e8e835d39ca677256ddd3a","sha1":"f6acb5b16b97585c582e77165660ddf22f90dd80","sha256":"c9f21fe56aea40cd8c743dcc96d926514ed046e07bf150efc010fc3b796852bd","sha512":"9e2ae8ae8797283a4921700f90b99bcbb05739c21bea5a435ef10995b433dcbaf28a8479aabcf5d786dbf5caa66f6a7b38eb93eb71aa8935e984dfd0a97461d8","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJT:tRe0Y+AWZTdXYrntI0tPqX2vqDdu","tlshash":"642539897756b47646c69146e03f0203f235699a201a905cb3deecec665ceceb237b37","first_seen":"2026-01-08T13:18:31.205655Z","last_seen":"2026-01-13T02:40:20.342138Z","times_seen":37,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.xrares.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 07 Jan 2026 00:01:19 GMT\r\nexpires: Thu, 07 Jan 2027 00:01:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 135419\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-04T02:32:49.943955Z","times_seen":198594,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":135,"dns":1,"connect":27,"send":0,"wait":62,"receive":33,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jHa2Ub8yRlJSCD3kJrUGyWDZosLbLIU3atBaBRH4S4jc8tm51MdEqt76kzHAGOY8NeVWBaI6wgmWl0sqfrFq3u8pyAURamqF6Dx1NpehMu%2FN4I%2B9gE9EHfwd1IJhTg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.0392e0f6c7b6d376d1e1.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2090\r\ncf-cache-status: HIT\r\netag: W/\"6264faf747172d4118734f941fea2ae5\"\r\ncf-ray: 9bac183009dc120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1144541,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"38aae49805e8e835d39ca677256ddd3a","sha1":"f6acb5b16b97585c582e77165660ddf22f90dd80","sha256":"c9f21fe56aea40cd8c743dcc96d926514ed046e07bf150efc010fc3b796852bd","sha512":"9e2ae8ae8797283a4921700f90b99bcbb05739c21bea5a435ef10995b433dcbaf28a8479aabcf5d786dbf5caa66f6a7b38eb93eb71aa8935e984dfd0a97461d8","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJT:tRe0Y+AWZTdXYrntI0tPqX2vqDdu","tlshash":"642539897756b47646c69146e03f0203f235699a201a905cb3deecec665ceceb237b37","first_seen":"2026-01-08T13:18:31.205655Z","last_seen":"2026-01-13T02:40:20.342138Z","times_seen":37,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/lang/en.json","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/lang/en.json HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rzyMQamU2jk66DcOTOUsEHg%2BRRN3x%2FQbWw%2Fdf9Ea07t7%2BE0EAQ5XFfkWb%2FLsagVhK1vMssX%2F1WuQEeHL1fNqIk8k94qdwAwehC1CDKoNiwF9yy8J2ItBHFUyQS%2FCvg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2083\r\ncf-cache-status: HIT\r\netag: W/\"69a54638b649d7ce4748bd42c4b6dade\"\r\ncf-ray: 9bac18331a5d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"69a54638b649d7ce4748bd42c4b6dade","sha1":"a2dfe9f8791952fbc5cc44d4757b031a6cee1731","sha256":"0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750","sha512":"1e98b8977577f6daca587310456d38ab870571a0bec392072f38287d274465b3ebc867e6eefe5efd7653c7c0d2a23dabe7636a94c0cfda52321a84fd68d868e3","ssdeep":"","tlshash":"1ac08c09220b0f0389c83c23a223352a0b422bbaeb033730c262c3012c8c1b734e33cc","first_seen":"2023-04-07T07:09:28Z","last_seen":"2026-04-03T20:18:42.254179Z","times_seen":3544,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/css/style.css","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/css/style.css HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 12 Apr 2022 21:51:03 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tEe0sGrpQ0WqqAnNODTfU%2BKV2b4O9kS3sLgEXFle8RAbdQhPUTInhqw%2BGwzfs%2FdCgDfcp3mUYGpFQYZe7iDK9Sy%2BRYnw8p5CF%2FCydQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Fri, 16 Jan 2026 06:48:36 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 542980\r\ncf-cache-status: HIT\r\netag: W/\"4975-5dc7c0ea1d289\"\r\ncf-ray: 9bac182afb930afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18805,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (321)","md5":"e8aab69a9241ddc33d133d4c73006acf","sha1":"aeee21817e1747d86d981d52c6714bc4fea18803","sha256":"7fc1cfeb78cd4cf05fb40c97b931dc3dd5c7ead85dacbec7a28444f36e20d4e0","sha512":"d88ba5454c3411daa2cb644426e3e5ab67ff17b5f16552e65f16adab34ed1a7585e4151b3744124fc71e7bf712f39f96b55578f411a0222820572c6f991ad982","ssdeep":"384:Lnihi0fl8EbOWL8irb4ktl+qrDTnJ9/D4Zy:Lnihi0fldL8iYktl+qrDDJ9b4y","tlshash":"cf826377be681804a02fe498ae51efe6a72f0153d74f8ca5b5d4342cd782be90563e4c","first_seen":"2025-07-04T04:12:02.95005Z","last_seen":"2026-01-27T22:27:44.371676Z","times_seen":8,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-97426429-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id=UA-97426429-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\nexpires: Thu, 08 Jan 2026 13:38:18 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 104156\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":293070,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3550)","md5":"97f3af4a025bd427434c3df8e74cf6be","sha1":"c284d9bfb8a038d430534a5edc5833849fe544c0","sha256":"2c7cbb039a421c59af712ee17b0c4b88e76cefc2e9d7e5f996c67bbbe5e48e80","sha512":"a05762072e44b5fca4f5ae0a6f80c34d7fb67b864dcc7aeae7b136d1d1f852f1baea76463dc6c74067f936a1cf202581acf0b7c0b7b7a2c7228738d451d9b4cb","ssdeep":"3072:GlWEtrIxV/i4AV0PbKsB67ZKrEv5wtfvvph3rNh8nbzlXJjO67gxMOTkkadYoSp:TNV/jxEh2phZhYRXJjO67YMOTkJdYog","tlshash":"4f5418cdb7dab46683a36478503f004bb23b79d1e84cc894e186d8d42e74aa94277f7d","first_seen":"2026-01-08T13:18:31.17371Z","last_seen":"2026-01-08T13:38:55.086603Z","times_seen":2,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":150,"dns":1,"connect":31,"send":0,"wait":47,"receive":68,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3De20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33889","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 09:53:39 GMT","end":"Wed, 11 Feb 2026 10:53:35 GMT"},"fingerprint":{"sha1":"C2:7D:A8:62:E6:F4:E6:F3:7E:AF:2E:53:7F:BF:58:37:C3:8E:2B:73","sha256":"BE:53:14:20:34:91:1E:14:B4:9E:4D:77:E4:2E:12:41:13:5B:E9:F8:08:54:AB:D1:EF:8F:98:B2:29:23:D0:F0"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3De20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33889 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/json\r\ncf-ray: 9bac18321c831525-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7706,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fa2b7053283c52e324db6f9ffa00c05c","sha1":"65cd26f549b2f5061aac263484b9987a8415e69a","sha256":"29a7a2e99ce5ce0ce76428324e72cdcc59b1b42fab141e0e0b3c5efa111267be","sha512":"bffc37bef580fdd9e7eb3e53bc109b51d2e2e061cd516e658c76625832046d56f676a5c361990ebbcb8d70edc1f5e13551262e8c4cfe6e822c567c4967832288","ssdeep":"192:wDy9Zh+9mIWkUVPSV1tZE4Hh8nyayqh13/7VlloqJIwm13YAyQ13/7VlloqJIw1:V943Wk8PmZE+lgbeH","tlshash":"86f165eb8b1d25b30a880d4d7e1d65c86a9c44a75e828debdc8a9834431d7f113fb74d","first_seen":"2026-01-08T13:38:55.087584Z","last_seen":"2026-01-08T13:38:55.087584Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":25,"dns":1,"connect":1,"send":0,"wait":32,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879150/233751993_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879150/233751993_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5754\r\ncf-ray: 9bac1837bed43181-OSL\r\netag: \"f5694abb0ee016e8d71a7f573f0f028a\"\r\nlast-modified: Thu, 08 Jan 2026 13:31:28 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 329\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5754,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f5694abb0ee016e8d71a7f573f0f028a","sha1":"bf11c5baa2fa8ff6bdcddd012273bb6100b36ca9","sha256":"ebae66b82345d2457135e201193df54637a384ee3d141bd1780bbb248c4c4d53","sha512":"b3a68e6b2c50c4efb8ca73582c1b6bba9d58f35930c03c1193c57bee344d6de3651361d78603b0d3b017007244ec462e6fe7e20cf7853db10cc441baf2a0e199","ssdeep":"96:2/ZTc6ztSrFiMLDynFR7bicvnd9bRFQV/rZe9k4gD8RBD:2/ZTc6ztSBLDyHXicPd91KV/8kVD8b","tlshash":"4ec1ae75551b5fe9298367f3884aa9ef8130760234001bccb89c81b83a496d76f4dfce","first_seen":"2026-01-08T13:38:55.043378Z","last_seen":"2026-01-08T13:42:25.937877Z","times_seen":3,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/media/videos/tmb/22045/1.jpg","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /media/videos/tmb/22045/1.jpg HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:38:17 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:50:36 GMT\r\nETag: \"25d8-5bb018e14906e\"\r\nAccept-Ranges: bytes\r\nContent-Length: 9688\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9688,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 256x144, components 3","md5":"79178a6d10abde407f9b4534ee1691d9","sha1":"0683fc61ca8da14fff5b94ff59fc7868343f62a8","sha256":"328ea3a20ec7c57b0d9096df4df8b147359e5d87f2a03d132d797d1ceaf0dd86","sha512":"b4dc408eacbf1aef1b48904055eb4c1f2d199cefedadeab8b992ed6a3daf6d014ebe60e1ccc090a55f0a6c12acb710cf6925cbecb6c15dffa2c73439decd59ff","ssdeep":"192:kXAy68V4brQJCm2allDL2Duwo0/Crl60ByhDFLTJrN55m7UuwpkoJ:k5686QJCXauDuQ/e60ByhDFLlrNJuwLJ","tlshash":"08127b75abc2c7d2bb07156d88be3e7387c882c139e1420b16d36c9892a5fb2484b50d","first_seen":"2026-01-08T13:38:55.091173Z","last_seen":"2026-01-08T13:38:55.091173Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":56,"dns":1,"connect":28,"send":0,"wait":30,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.xrares.com/media/videos/tmb/7693/1.jpg","fqdn":"cdn.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"94.102.54.195","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.xrares.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 11:33:44 GMT","end":"Fri, 13 Mar 2026 11:33:43 GMT"},"fingerprint":{"sha1":"9A:30:89:A4:AD:BE:83:0A:C1:3A:EA:25:10:68:9B:83:52:C3:27:17","sha256":"FD:81:7A:F5:36:62:D7:FC:39:2C:31:D6:8D:FE:B9:B1:88:66:2A:23:19:CC:12:B0:68:D9:69:7A:ED:BC:82:44"}}},"request":{"raw":"GET /media/videos/tmb/7693/1.jpg HTTP/1.1\r\nHost: cdn.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 08 Jan 2026 13:38:17 GMT\r\nServer: Apache/2.4.6\r\nLast-Modified: Wed, 10 Feb 2021 20:50:24 GMT\r\nETag: \"19a7-5bb018d5d6a06\"\r\nAccept-Ranges: bytes\r\nContent-Length: 6567\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.6","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6567,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 256x144, components 3","md5":"ca26d6f7a31adc4c3a2bb49e4fdc3b20","sha1":"eeb4307ce5f5b9df8a77d05c39aca23a7e436c6b","sha256":"e95c8bc9433d4728b0696c289a5f122a420cf3ac7ca663b987a0658aaf5d11d4","sha512":"89e937e99376110c847b2bd830c60ce55a5543d49e69a3a60f5d191ef780a59ba9caef78998d35df190718832193c30b6b4cab0b168093429e2d14344dc9f54d","ssdeep":"96:wEKBvVqPqVBYTFUVxYH8iTmuQ4LVgf3N3frTQOBJcBLMf/V5nRkcT24qV5Ai+Sca:whSqVB+UVk8KVnWf3lhJoC/VJRbZtSca","tlshash":"d9d1af8f82ab41e036a1b4af8e142cecc1f856455794279c58fc0559d0f31d0a6f8efd","first_seen":"2026-01-08T13:38:55.09377Z","last_seen":"2026-01-08T13:41:01.859923Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:400,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css?family=Open+Sans:400,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xrares.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 08 Jan 2026 13:38:18 GMT\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11588,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"28e0e3d1db179a6b0b454a6a42a382b7","sha1":"637e0ca2efa06fb7bcdadb1ed0cade98aa6f6c08","sha256":"f1251b5aa44c40639d940adcbebe2d7d88573dfac9a2ba63d71ca06ea67bbad9","sha512":"bfe57657f404dacdef4e7bed130a8a739fcc007f9f6d6a9a81d57f10a25776048b664cf58ddc935c6dcecd6fb7ac373b74b03367ae91be7e9ce4badf853fbd3a","ssdeep":"192:wCAAN21/rqbnbqGIwV4Razq4CZZE2s6rqmnbqGIwV4YfzvY:TjXqY4nU8qY4Z","tlshash":"bc322ba00017185067431de623de7e34ee0fa2657044d0766bfd8b9beedad6963b431d","first_seen":"2025-09-17T00:46:50.629094Z","last_seen":"2026-04-04T02:33:26.757513Z","times_seen":7379,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":238,"dns":1,"connect":15,"send":0,"wait":33,"receive":0,"ssl":328},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/fonts/fontawesome-webfont.woff?v=4.1.0","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/fonts/fontawesome-webfont.woff?v=4.1.0 HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xrares.com/templates/frontend/dark-magenta/css/font-awesome.min.css\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Jul 2018 12:19:12 GMT\r\netag: \"14730-571a9a7317000\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Thu, 15 Jan 2026 07:49:25 GMT\r\ncontent-length: 83760\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/font-woff\r\nage: 625732\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BpxhVra%2BPVpq4nOoP4JffbgN6T6eRQE0YmVDz7baL992mRyIWuTF%2FKDJY2vrzwa%2FzIFkEhqr%2BqDDoxTPMIeZm43K1dw3gVp7PDcRMg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9bac18307c0a0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83760,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 83760, version 1.0","md5":"fdf491ce5ff5b2da02708cd0e9864719","sha1":"7f2f3c55c2de192387c351b995115f6b79e09173","sha256":"66db52b456efe7e29cec11fa09421d03cb09e37ed1b567307ec0444fd605ce31","sha512":"80fdfde7eabd3e7d74ab6df84ab6c8fea4cce1c1ac27acb7cb92b03424ddba642076c464f09111ddd03e59119a165bf4c131a749c724834c07ab599a32aa5863","ssdeep":"1536:ioGcwJ8Nw/KjI0XbEzFg4CwE34IgCjORCiQw42QrHJB0kY1V8QafpMQADLmwnbpR:io1wSw/KjI+o5js4IgCqvQpbrjY1V+GZ","tlshash":"d08312ef9df3769d8e16602ce2628fbc3ddd974118e3c5681b8c92a0f682152df53650","first_seen":"2023-04-05T11:30:37Z","last_seen":"2026-04-04T02:37:53.765824Z","times_seen":7601,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878700/216642829_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878700/216642829_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3664\r\ncf-ray: 9bac18380fdc3181-OSL\r\netag: \"1801c062634dce29c3492a6c082a28b5\"\r\nlast-modified: Thu, 08 Jan 2026 13:23:52 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 776\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1801c062634dce29c3492a6c082a28b5","sha1":"249bb8937d28a99ac596682a61bc294b3794cfc4","sha256":"9b06c7005911296910637ae7551038c98699789765f51171cf8549cf81be5e03","sha512":"c249dcc6fd77f0a7f6a38adf04de4544e518b487312ea06ee0340fcbaee9c9231dc264e6d699894082a3e89bde5cab45f80078d91cf4eb3cd77819895993da1c","ssdeep":"","tlshash":"68716da4566c584ed8e2f2a32930f4534c21e0d194450a6db76dcb3a14d8cb56677c52","first_seen":"2026-01-08T13:38:54.982007Z","last_seen":"2026-01-08T13:41:01.773118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.xrares.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 07 Jan 2026 00:01:19 GMT\r\nexpires: Thu, 07 Jan 2027 00:01:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 135419\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-04T02:32:49.943955Z","times_seen":198594,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":159,"dns":1,"connect":29,"send":0,"wait":28,"receive":38,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Jan 2026 17:56:30 GMT\r\nexpires: Tue, 05 Jan 2027 17:56:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243709\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-04-04T02:11:24.86288Z","times_seen":6253,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZeIBJIBRt9j2dvk2B9Ht0oNoRcgYbgLvFS7ZDewXmG79AVKAkYjACPwnBuDmBevGF3UKMwXAtH5ewumVpXoooEVvhP7tzgMCuSNHDTb9vsYNGsYMUcM%2FCIbF6WS2Sw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"saretarget.e25d7729d6aa0892d869.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:18 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2094\r\ncf-cache-status: HIT\r\netag: W/\"bf4ad79a8f3c33c2af6b13887462fe86\"\r\ncf-ray: 9bac182fc9d7120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4930,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4930), with no line terminators","md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3D68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%252Fteens%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33890","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:38:18.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 09:53:39 GMT","end":"Wed, 11 Feb 2026 10:53:35 GMT"},"fingerprint":{"sha1":"C2:7D:A8:62:E6:F4:E6:F3:7E:AF:2E:53:7F:BF:58:37:C3:8E:2B:73","sha256":"BE:53:14:20:34:91:1E:14:B4:9E:4D:77:E4:2E:12:41:13:5B:E9:F8:08:54:AB:D1:EF:8F:98:B2:29:23:D0:F0"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.bluetrafficstream.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26campaignId%3Dba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a%26campaignType%3Dsmartpop%26creativeId%3D68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586%26hideTitle%3D1%26iterationId%3D893666%26masterSmartpopId%3D0%26ruleId%3D0%26smartpopId%3D12508%26tag%3Dgirls%252Fteens%26trafficType%3DbannerIframeOrJS%26userId%3D20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45%26variationId%3D33890 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/json\r\ncf-ray: 9bac18321c861525-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7706,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2ede172793b354bdbafbd8bc3732b484","sha1":"b81dac36d22558e15d2dbc220199cf1a89ccf495","sha256":"a748cf7212f6c4f189ff3e23ad3429aba9f74cc2887c19ee43d73d3b622e009f","sha512":"39563090eb41ed1079934cf838be303b4dd80a51c262435e6caa043cf46de4bce74665377180aaf8d6c385282b8432ad7d918bea098f26efa595c950d62e9bdc","ssdeep":"192:wDy9Zh+9mIWkUF+frZHS34Hh8nyayqh13/7VlloqJIwm13YAyQ13/7VlloqJIw1:V943WkMGrZC+lgbeH","tlshash":"17f165eb8b1d25b30a880d4d7e1d65c86a9c44a75e828debdc8a9834431d7f113fb74d","first_seen":"2026-01-08T13:38:55.100768Z","last_seen":"2026-01-08T13:38:55.100768Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026limit=1","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=68f62a0351b414d0954bcaab43094a07527609a6ba9158599c60bacedcf17586\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33890","date":"2026-01-08T13:38:18.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026masterSmartpopId=0\u0026smartpopId=12508\u0026tag=girls%2Fteens\u0026trafficType=bannerIframeOrJS\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026limit=1 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9bac18343a7f120a-OSL\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 08 Jan 2026 13:38:18 GMT\r\ncf-cache-status: MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1661,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b2243fbe01eeac093437682a1b2b849d","sha1":"31fccb97be22ed9d366584c8be4d4338a62d5499","sha256":"9c804d4c0465dac593e667ca4805d28c15998aafdcadcd413616c2621c8fe5de","sha512":"87e2146e49803407b9bc24d70e207a5702ec949262d2c1609ef16183025a9c70224ab586bfca058e9f0c10935ff097b59c2a8873daf4df454c7b3159e6213836","ssdeep":"","tlshash":"9531e1ab9acc0e750f9512c8e449381adb77161baa8973d3d29c4f5501779cd330869b","first_seen":"2026-01-08T13:38:55.10181Z","last_seen":"2026-01-08T13:38:55.10181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879060/163825515_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879060/163825515_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7302\r\ncf-ray: 9bac18371d263181-OSL\r\netag: \"ca12b8bd9a847fe5d5e142f509dc5ee8\"\r\nlast-modified: Thu, 08 Jan 2026 13:30:17 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 409\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7302,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ca12b8bd9a847fe5d5e142f509dc5ee8","sha1":"d369c8cf75f3201a7dc0bf8d53983928da7ead72","sha256":"52609f8183c12bec0efd71cc59db2999091a454a95126cdf5904cdae2b09adb8","sha512":"ded738c06215435c2ec649592d26137ecf6e84411d46519bd00233f85a9fc5fffab4251ed017903abf637f10649db10317acc707a21bfb1e7b7c5f2eb3531c8d","ssdeep":"192:ds/VASTX/nxsozVQ3y3hNmiWKakyQ2nWOI2KJ:a/iStsozmi3hNDNaZ+OuJ","tlshash":"c9e1af2318f9b78481fd9a1ffa39db358aec8dc85914e216d231189a5ff02301791ee7","first_seen":"2026-01-08T13:38:55.018807Z","last_seen":"2026-01-08T13:38:55.018807Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767878700/216642829_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767878700/216642829_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3664\r\ncf-ray: 9bac18379e9c3181-OSL\r\netag: \"1801c062634dce29c3492a6c082a28b5\"\r\nlast-modified: Thu, 08 Jan 2026 13:23:52 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 776\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1801c062634dce29c3492a6c082a28b5","sha1":"249bb8937d28a99ac596682a61bc294b3794cfc4","sha256":"9b06c7005911296910637ae7551038c98699789765f51171cf8549cf81be5e03","sha512":"c249dcc6fd77f0a7f6a38adf04de4544e518b487312ea06ee0340fcbaee9c9231dc264e6d699894082a3e89bde5cab45f80078d91cf4eb3cd77819895993da1c","ssdeep":"","tlshash":"68716da4566c584ed8e2f2a32930f4534c21e0d194450a6db76dcb3a14d8cb56677c52","first_seen":"2026-01-08T13:38:54.982007Z","last_seen":"2026-01-08T13:41:01.773118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767879420/231824312_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767879420/231824312_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2346\r\ncf-ray: 9bac1837aecc3181-OSL\r\netag: \"1d4cfff4db38e2cd5e88ce34b381cf1e\"\r\nlast-modified: Thu, 08 Jan 2026 13:36:23 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 65\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2346,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1d4cfff4db38e2cd5e88ce34b381cf1e","sha1":"ce6e8d5ddf6054dc8aa92d3872195da141280e8c","sha256":"9c69fd9d29345bac8f18a941ecb3071aa8e882154123226769e6c75a478ea72f","sha512":"e3a4cf6285f84eac7b6be6e3a7751198a9f9a865bdc288697f6a993fa19cb6746bcbe08ebdb0a8b401ec017826368819d4a8516eaea75c5d84fe2dab9182ae7a","ssdeep":"","tlshash":"50413bcb4d95e4954820240618f9fa60a792eec11edad5686f521f3a8b6d107aeb801c","first_seen":"2026-01-08T13:38:55.032939Z","last_seen":"2026-01-08T13:38:55.032939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/main.0392e0f6c7b6d376d1e1.js HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EI3HvsWnvpdcvTwFgj9DaotbUpEHcRGoeCBA8ODHBGS2FUPYQYRtbxmH8tPlicZb8CR3vcFBjZzL37RgWn74tMZry8IBBiUkc2H8TQK%2B3RJzaM5pbJZ1%2BeLv2lhqQg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.0392e0f6c7b6d376d1e1.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2090\r\ncf-cache-status: HIT\r\netag: W/\"6264faf747172d4118734f941fea2ae5\"\r\ncf-ray: 9bac182fc9d6120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1144541,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"38aae49805e8e835d39ca677256ddd3a","sha1":"f6acb5b16b97585c582e77165660ddf22f90dd80","sha256":"c9f21fe56aea40cd8c743dcc96d926514ed046e07bf150efc010fc3b796852bd","sha512":"9e2ae8ae8797283a4921700f90b99bcbb05739c21bea5a435ef10995b433dcbaf28a8479aabcf5d786dbf5caa66f6a7b38eb93eb71aa8935e984dfd0a97461d8","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJT:tRe0Y+AWZTdXYrntI0tPqX2vqDdu","tlshash":"642539897756b47646c69146e03f0203f235699a201a905cb3deecec665ceceb237b37","first_seen":"2026-01-08T13:18:31.205655Z","last_seen":"2026-01-13T02:40:20.342138Z","times_seen":37,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/static/c3b22658/s/widgets/v4/Universal/lang/en.json","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:18.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /static/c3b22658/s/widgets/v4/Universal/lang/en.json HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iO8XyXpRPqz42UkYyJl%2FoM0l4vnTjZksnkfnXmD0414LNs%2FViPqyq9RBfpnWoUrvsPtLwPf8Bm4HH%2FjToG5iSAyxzQ20Z4onGvHXmSzkzbG0qIsLWTbe5Ex9d1rnIA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 10:57:56 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\ncontent-encoding: br\r\nage: 2083\r\ncf-cache-status: HIT\r\netag: W/\"69a54638b649d7ce4748bd42c4b6dade\"\r\ncf-ray: 9bac1831ea3e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"69a54638b649d7ce4748bd42c4b6dade","sha1":"a2dfe9f8791952fbc5cc44d4757b031a6cee1731","sha256":"0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750","sha512":"1e98b8977577f6daca587310456d38ab870571a0bec392072f38287d274465b3ebc867e6eefe5efd7653c7c0d2a23dabe7636a94c0cfda52321a84fd68d868e3","ssdeep":"","tlshash":"1ac08c09220b0f0389c83c23a223352a0b422bbaeb033730c262c3012c8c1b734e33cc","first_seen":"2023-04-07T07:09:28Z","last_seen":"2026-04-03T20:18:42.254179Z","times_seen":3544,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.bluetrafficstream.com/abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1331%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A759%2C%22duration%22%3A112%2C%22transferSize%22%3A266028%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A760%2C%22duration%22%3A68%2C%22transferSize%22%3A2811%7D%5D\u0026mh=816714311","fqdn":"go.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /abc.gif?campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer=https%3A%2F%2Fwww.xrares.com%2F\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_46\u0026seenAbTest=1\u0026seenDomain=1\u0026seenLanding=1\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A1331%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A759%2C%22duration%22%3A112%2C%22transferSize%22%3A266028%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A760%2C%22duration%22%3A68%2C%22transferSize%22%3A2811%7D%5D\u0026mh=816714311 HTTP/1.1\r\nHost: go.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.bluetrafficstream.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\npriority: u=4,i=?0\r\ncf-ray: 9bac18364ab9120a-OSL\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapchatvip.com/checkUrl","fqdn":"fapchatvip.com","domain":"fapchatvip.com","tld":"com"},"ip":{"addr":"77.93.87.1","port":443,"asn":43293,"as":"Proxility B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapchatvip.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 12:48:14 GMT","end":"Tue, 24 Mar 2026 12:48:13 GMT"},"fingerprint":{"sha1":"A7:E8:EB:53:CE:1E:B7:ED:AE:C5:01:78:73:CE:B4:28:F9:AC:54:75","sha256":"0A:8C:BF:4D:D3:AD:87:AF:97:62:21:A1:96:49:1D:C3:56:CB:FC:E4:35:91:14:81:64:B1:18:44:D5:10:A4:B7"}}},"request":{"raw":"GET /checkUrl HTTP/1.1\r\nHost: fapchatvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.bluetrafficstream.com/\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\naccess-control-allow-origin: https://creative.bluetrafficstream.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json\r\ndate: Thu, 08 Jan 2026 13:38:19 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvia: 1.1 Caddy\r\ncontent-length: 15\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7fb97eb7c8636552ad068f6d56b5ea34","sha1":"b69679936779fb02503bc0fe1374a737cc762ecb","sha256":"e78008828abaa93c4462e326ef384dcda1443352a0f24bdeedada6a6fdbfd1d5","sha512":"b9a8b6626fe32bc433f46e6726523b51029398d691b76006c2ae7c0aea25e2296dd35587c6e45bb94363de8e30b66667015aa1542d75e0db4eaf3edfe3680d04","ssdeep":"","tlshash":"bc60003c00000003c0c033003f03030000000030cf0000c000c0000000c00000000003","first_seen":"2023-07-14T21:39:19Z","last_seen":"2026-04-04T02:11:24.781651Z","times_seen":7503,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":46,"dns":5,"connect":17,"send":0,"wait":19,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"fapchatvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","date":"2026-01-08T13:38:19.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.bluetrafficstream.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Jan 2026 17:56:30 GMT\r\nexpires: Tue, 05 Jan 2027 17:56:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243709\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-04-04T02:11:24.86288Z","times_seen":6253,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/media/videojs/video-js.min.css","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /media/videojs/video-js.min.css HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Jun 2020 08:32:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sdUxZexnfvGjmOqfkMGs40%2B%2Fko2qdVgMRKvCW3xyJmuuREMgp3ugraf5DpSce3kSvPlbH0aWXDpQvaRYQOShI%2BluUdlL1rW%2F6DybfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Thu, 22 Jan 2026 13:38:17 GMT\r\netag: W/\"90ed-5a82f609e30fd\"\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9bac182b0b980afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37101,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37101), with no line terminators","md5":"c607037fe4d2ced229e8124a3cbef0f7","sha1":"a21c15b1666f5e82b79fe13fa179254c3a9996a7","sha256":"d772113b920c9947d665417136fe99422b53359f9b0fff62d6c26f0816ee4400","sha512":"34921e1d13bb6fc6a844b2dcc74c9f7c91ab5da4926396e2b179de644b9cd0ea300bc4b86e8d44c3e367d2c74f951259b61dc1f8bca4c3b48ab3439a43cb6d9f","ssdeep":"384:Nde0Ykl3joViNf6KI9fsDzBkIkNrRIM6PeeJEteop7N9KmO:n3UctpZ8MM6PeR4mO","tlshash":"f4f28662f44891eea13fc65169d1a37aa238f116d2220aedf25b777ccfcb1d620572c4","first_seen":"2023-06-15T04:01:20Z","last_seen":"2026-01-08T13:42:25.910411Z","times_seen":7,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.bluetrafficstream.com/widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889","fqdn":"creative.bluetrafficstream.com","domain":"bluetrafficstream.com","tld":"com"},"ip":{"addr":"104.21.57.128","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:17.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bluetrafficstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 08:02:27 GMT","end":"Wed, 11 Feb 2026 08:57:08 GMT"},"fingerprint":{"sha1":"CF:7A:42:1E:76:BE:C9:2C:60:F4:3E:5E:37:CC:D5:38:A0:21:9F:7F","sha256":"87:42:94:E5:5D:45:01:11:76:84:67:05:A0:49:5C:65:DE:D1:FF:6B:E4:B1:64:F9:69:49:42:65:62:E8:77:24"}}},"request":{"raw":"GET /widgets/v4/Universal?autoplay=onHover\u0026campaignId=ba73124a2c6c57367843a6902fbc57bd4d80927212551c3c8b6c77fdb0b39a3a\u0026campaignType=smartpop\u0026creativeId=e20d33228f0ed21f7595cf60b049beb5c9b72c08784b0efbdc54812a8a50194e\u0026hideTitle=1\u0026iterationId=893666\u0026masterSmartpopId=0\u0026ruleId=0\u0026smartpopId=12508\u0026tag=girls\u0026trafficType=bannerIframeOrJS\u0026userId=20a87280cfb0a57cf2debd02bb6e30b12f9ac0d8f3aedc443903798e0e59be45\u0026variationId=33889 HTTP/1.1\r\nHost: creative.bluetrafficstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 08 Jan 2026 09:21:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LIa3OT92X6cRx1UQ0BPbMj4s6Xuf%2BlyPaxXHIdEy7vp5H1LnE0uISAcyUmIoeMvOLo81zFkkimzJJs3Led%2BukojVmVhGR2LkQMM47ASc32W5Hudl6k%2BgYwz5j07QAw%3D%3D\"}]}\r\nexpires: Thu, 08 Jan 2026 13:40:30 GMT\r\ncache-control: max-age=300\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nvary: accept-encoding\r\nage: 167\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9bac182e09955fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1427), with no line terminators","md5":"bdce4b8365f3e70efa9c2a9411a3c0d5","sha1":"6207ed4e4a3815ac5f43331cbe05971a47a2e7db","sha256":"ef038e4c01e0947177dd9fe69b895f8f1088d940a4a0a02c18432e90c760cd4b","sha512":"89a9c90b3366346e660b737b718835bce0c5cd3a3786fbdf7e9814a9f20bcaebe981ad69243b67996ffc84b38be64a40c2635ee03e93a0bfba6f92269a9c4d33","ssdeep":"","tlshash":"af21cd22d844c44d65b0d276be913239d48f7b1fe620bad0ec2118dff8a8f8a4265d47","first_seen":"2026-01-08T13:18:31.140958Z","last_seen":"2026-01-13T02:40:20.366837Z","times_seen":37,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":42,"dns":0,"connect":1,"send":0,"wait":11,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/templates/frontend/dark-magenta/js/bootstrap.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /templates/frontend/dark-magenta/js/bootstrap.min.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Jul 2018 12:19:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=1209600\r\nexpires: Fri, 16 Jan 2026 02:35:27 GMT\r\ncontent-type: application/javascript\r\nage: 558170\r\ncf-cache-status: HIT\r\netag: W/\"7c50-571a9a712eb80\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GPkaWholfBFSgD%2B11y8bFi1cZcVZdUw4lU%2BzJRhYvp8Nvll8VjI8QO2amfrT3rMsW%2BbzvV43vz0AoQvrugS5jkOVna5ca52rEhKPPA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9bac1830ec150afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31824,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31650), with CRLF line terminators","md5":"987facf80adec365394402f2026b943d","sha1":"755f3cfcc389a89194926fef94c7ab250fc71242","sha256":"36a326c783a12f72498d41fb32371da87fe0cbd1595248f3f154fd939f07f10c","sha512":"9e57976ae90df75ede6fca96e4030cebc972908c30056ffc9da09ed6c216b576d4e55d976969e7286822994bd38e6b70da3ddf5a5f38ce67280bec51af245452","ssdeep":"768:2oBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqc:pAr2MRCqc","tlshash":"e2e28446b23031a107dfb2e5515f020b723a6a6de906907c38b999f53db9c48727bf39","first_seen":"2023-03-07T01:42:29Z","last_seen":"2026-04-02T20:26:42.265423Z","times_seen":931,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xrares.com/media/videojs/nuevo.min.js","fqdn":"www.xrares.com","domain":"xrares.com","tld":"com"},"ip":{"addr":"172.67.170.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xrares.com/video/2154/forced-to-fuck-by-bullies-","date":"2026-01-08T13:38:18.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrares.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 14:27:50 GMT","end":"Sun, 15 Mar 2026 15:26:33 GMT"},"fingerprint":{"sha1":"49:48:74:E5:6D:D9:D0:4C:C0:8D:E8:5E:7E:AA:C6:EA:96:38:93:1B","sha256":"A8:6A:08:10:B2:5D:54:35:4D:A8:E2:E9:09:05:7F:A7:B6:09:34:3E:C0:2E:0B:25:18:C1:80:A3:32:D4:1B:7C"}}},"request":{"raw":"GET /media/videojs/nuevo.min.js HTTP/1.1\r\nHost: www.xrares.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xrares.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AVS=39ddjpb7vu6l2t1i684csbaiu7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 13:38:18 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Jun 2020 08:32:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZgqOGhkxEDF1gnbFwNfVOrkMI6wqTHG9dBsZskUa7%2FwsLZJZXIQ4wKDSuDy%2BDsoD4HUio5q3s%2BpEYazQJ3UJrJ%2BQ1VWKzQJaLqYv1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=1209600\r\nexpires: Thu, 22 Jan 2026 13:38:18 GMT\r\netag: W/\"8a95-5a82f609e1d75\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9bac1830ec170afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35477,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35476)","md5":"3ca22d74b3990c6412ef8b0de1f3ddf0","sha1":"5c1cdc2a82f85019fda11c967e9aafb97316177f","sha256":"e71acc1b7f76a9762a951815d5873669a1789146353f90e7238bbf046d63e275","sha512":"7aee6a1e8177263d4f3073548824eea7ed62be02896c10576bf63eb56ad44d292444662269e96bd53aa6d1588b5758e8258174aa9bbe50f849a779e2374223b7","ssdeep":"768:f53rYPTCQlWjCKxsfHIlFH5HOHSHB+pEwUzuT2TCgbM4xmB:fWm/TxsfElw3TtgM4sB","tlshash":"f5f219bc14af4b1bab81e15d10ae544c376318aa447f50e0ed96e0eb3c4aadde1db1cd","first_seen":"2023-03-08T13:16:44Z","last_seen":"2026-01-08T13:42:25.859832Z","times_seen":7,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}