| famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page |  104.21.60.86 | | 4.2 kB |
URL famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page IP104.21.60.86:0
Hash04b180613dddbf03d60a99a007693d22 6bd58d0062f905efb49272818f5c016009dd1196 02d21e443b641924a6a51af093ddb21a73d0e9bf7de8bd3465e94389f3c9bda2
GET /deportistas-desnudos/paquete-andre-silva?page HTTP/1.1
Host: famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Wed, 24 Apr 2024 13:59:43 GMT
content-type: text/html
location: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F90QCZM0%2BvvHVxt8adKfm2XngkIJAtd8ymvdTcNPbc6tn%2BoIkTzytn0OiK3mIyxJr31JdBGmmE0w6aqmFf0TqsZJym28lJB4CdSTsZx8I0bMvG1ZGtiuBCPfiDhmGcl1XL5GSKY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 87969d8f6b49b512-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| famososenbolas.com/ | 104.21.60.86 | | 167 B |
IP104.21.60.86:0
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET / HTTP/1.1
Host: famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Wed, 24 Apr 2024 13:59:46 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 24 Apr 2024 14:59:46 GMT
Location: https://famososenbolas.com/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cxYWaImWhA8tWKamRH4DjGCSMGaMe%2FDHHdQYOFovQtj1lS%2F4DVES6h5EFs8DKDgN3BaqTbyjJIYlKASHW17jtm9KDMKWE2LIKOZolA1hg9A%2BCDwAlKeT1NGtWM3NPYezRpzTFQc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87969da16fbeb523-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.famososenbolas.com/ |  188.114.97.1 | | 65 kB |
IP188.114.97.1:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (53623), with CRLF, LF line terminators Hash4e256b5b5be56d54937ac6e43faa667c 6adfc15621607319ee6bb1471a5857c70271919f 21458c6358d96cc7f6ad80d46b5fc8b0e9b3e33c9fc6f3d78fd83ae4cf2d4301
GET / HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:46 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding,User-Agent
last-modified: Wed, 24 Apr 2024 11:23:47 GMT
x-cache-status: BYPASS
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pnJhr7gtSZFOwrZy1ehrBzSQSZpRVEtiUcffLHeP4NFEw0umro2WvDAf%2Fi3sj7Z9xQGFuCIstQF5STr4Lyi1N4a%2FK2VAZhnVkvKy854Ld5FuGGY7sVP%2FY0HkAz3SrcjjPt8H9euuOE3R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87969da30afcb4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.famososenbolas.com/wp-content/uploads/2022/11/Logo-FEB_horizontal-1.png.webp | 188.114.96.1 | | 2.6 kB |
URL www.famososenbolas.com/wp-content/uploads/2022/11/Logo-FEB_horizontal-1.png.webp IP188.114.96.1:0
File typeRIFF (little-endian) data, Web/P image Hash0037adee7b32883b5ae05ea7b8f8f56e 451c9890e2c162cd359a04c37e5e9888ef2f5a3b 852ffe88448f2332865b36ceb5d03fb3250d5c9f572870a1710545ada290d4db
GET /wp-content/uploads/2022/11/Logo-FEB_horizontal-1.png.webp HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: image/webp
content-length: 2558
last-modified: Tue, 11 Jul 2023 12:41:41 GMT
etag: "64ad4e05-9fe"
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2891
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vwPo6Vq055TdGnA37H1XThEXcTRq0N5c6q14kbl7OBoOXKa2k8rZLxVgByDyNTlw0slxoi9G3ZFmPNLMw66xAMN%2BXWJ2JjLb8ZZ%2BYI%2B9xUP68u0HNxgRPCx8bQfcB9oo0pv7gzAG0Ij3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc1a9125690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=UA-157794196-2 |  142.250.74.168 | | 73 kB |
URL www.googletagmanager.com/gtag/js?id=UA-157794196-2 IP142.250.74.168:0
File typeJavaScript source, ASCII text, with very long lines (4179) Hashe3c2dc20b839a51ebfa80763d9750cad a388798cde410232a31a7c1b72305dce3d610ceb 478cdebad34cf18edb420acd195ab80ec43eb0e8704e0092ba4e01e649cb3093
GET /gtag/js?id=UA-157794196-2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 13:59:51 GMT
expires: Wed, 24 Apr 2024 13:59:51 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 73251
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| poweredby.jads.co/js/jads.js | 185.94.236.246 | | 178 B |
URL poweredby.jads.co/js/jads.js IP185.94.236.246:0
File typeHTML document, ASCII text, with CRLF line terminators Hashcd2e0e43980a00fb6a2742d3afd803b8 81ffbd1712afe8cdf138b570c0fc9934742c33c1 bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 24 Apr 2024 13:59:51 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
|
|
| www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page | 188.114.96.1 | | 34 kB |
URL www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page IP188.114.96.1:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (11874), with CRLF, LF line terminators Hash8ed2d05f8408fa4671a66217b1de772f 1ab754aa41d0a08ab2669454a415e3ade1f96efe 248b45fb1eba7c68dfb943bebb2d3b74b83edb20c014256c3160dbbbc129802a
GET /deportistas-desnudos/paquete-andre-silva?page HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: text/html; charset=UTF-8
link: <https://www.famososenbolas.com/wp-json/>; rel="https://api.w.org/", <https://www.famososenbolas.com/wp-json/wp/v2/posts/31149>; rel="alternate"; type="application/json", <https://www.famososenbolas.com/?p=31149>; rel=shortlink
vary: Accept-Encoding
x-cache-status: BYPASS
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MgTpuKhIJUkcKonYDBmTum%2FE5qmGfBFXbGDDUNzk%2B12%2Fmz2Up%2FsPiTnYURI9GQG33Seq8VQY1yi6hpl9QjMSh1TQCAJF4CUvK3bCkxFghEy%2BCa0dkI6y256YdAj0As86MBxkvhvTTKBA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87969da65b84b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.famososenbolas.com/wp-content/themes/customizr-pro/assets/shared/fonts/customizr/customizr.woff2?128396981 | 188.114.96.1 | | 4.4 kB |
URL www.famososenbolas.com/wp-content/themes/customizr-pro/assets/shared/fonts/customizr/customizr.woff2?128396981 IP188.114.96.1:0
File typeWeb Open Font Format (Version 2), TrueType, length 4436, version 1.0 Hasha7930a0f91a2b5321893e9f2f6cd6ed5 2abaa10335a2d940e0c3f5a37c354161c18df3d5 d16e7188d633449ef3846627c426f15de98e0b2f241bdc8358da715062d416ec
GET /wp-content/themes/customizr-pro/assets/shared/fonts/customizr/customizr.woff2?128396981 HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: font/woff2
content-length: 4436
last-modified: Sat, 06 Apr 2024 16:30:39 GMT
etag: "661178af-1154"
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S6OU%2BtDjNKrQi7cDW9%2BYUgQ6paTfgJJdX3eyiUCbK6WqV7LaL33RF57WJW1t3ue%2B%2FCUFMe6Rn7eMAc%2B6ZUdhsPFBIVUV3aNtr09SA2gaaWqe%2FkBtCSawMQCTF7F4qACuYzF%2FzDfXXpg%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc1a90d5690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.famososenbolas.com/wp-content/uploads/2023/07/Thegrefg-CLUSTER-300x225.jpg.webp | 188.114.96.1 | | 11 kB |
URL www.famososenbolas.com/wp-content/uploads/2023/07/Thegrefg-CLUSTER-300x225.jpg.webp IP188.114.96.1:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x225, Scaling: [none]x[none], YUV color, decoders should clamp Hash584a1cc3f89c3867a4410a45d39a455b 00944b7c0e8e00d3e173a04b6238557bd1c1b983 faf0873a5b662952ccc99c53cb3ff8fcecebc507ff4002e0555286783e67298a
GET /wp-content/uploads/2023/07/Thegrefg-CLUSTER-300x225.jpg.webp HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: image/webp
content-length: 11366
last-modified: Sat, 22 Jul 2023 15:02:51 GMT
etag: "64bbef9b-2c66"
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YiVzxyalj7KEc%2BvrFHcgsetaTFfSPYNbOWeH5Jeev7iUg%2BrRAkVjL3bfte%2F7bvBio20UdZK8VkYULyq6A%2F1KBRT9LMETI72Y9L41q1z3DVq%2BOOgft%2Fi%2BqqM58K2Kxz3plDrzHoQ7km20"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc1c9435690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.famososenbolas.com/wp-content/uploads/2022/07/Telmo-Trenado-CLUSTER-300x225.jpg.webp | 188.114.96.1 | | 10 kB |
URL www.famososenbolas.com/wp-content/uploads/2022/07/Telmo-Trenado-CLUSTER-300x225.jpg.webp IP188.114.96.1:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x225, Scaling: [none]x[none], YUV color, decoders should clamp Hashdaf95254e77e4eeb1b628f174652ed2e 4e7295feb9a8ca345b69b91e2ce0f534b8574101 2997bc2bbf340ffded5b7d2651ae38017cd73dfcc0d97a98a2043bdc427c5b19
GET /wp-content/uploads/2022/07/Telmo-Trenado-CLUSTER-300x225.jpg.webp HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: image/webp
content-length: 10056
last-modified: Wed, 26 Apr 2023 17:31:25 GMT
etag: "64495fed-2748"
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eV%2FbNEsx1QdzDOF8DgtZJJRWRXIN6EEmUzvvHhVT3Ex50tRKJYqRRhHobRFl%2BTv5IV15TvTb7vY6p3k6wypMq7t12Adh%2Bx3jrjbZSnUUga40nqGW4%2BxWvWb0045kNYJP2Q2K%2FJPJu2vw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc1b9395690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.famososenbolas.com/wp-content/uploads/2021/11/Leo-Messi-CLUSTER-300x225.jpg.webp | 188.114.96.1 | | 6.6 kB |
URL www.famososenbolas.com/wp-content/uploads/2021/11/Leo-Messi-CLUSTER-300x225.jpg.webp IP188.114.96.1:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x225, Scaling: [none]x[none], YUV color, decoders should clamp Hashd777fb6b5577edb7033b07e2fc9d57b2 2970004314245e41ea261978d9760a003886634c 0c94000ddf225f874bca11c12ee152c93782af87befeb3df4d38ccb90198dd44
GET /wp-content/uploads/2021/11/Leo-Messi-CLUSTER-300x225.jpg.webp HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: image/webp
content-length: 6564
last-modified: Fri, 09 Dec 2022 15:42:18 GMT
etag: "6393575a-19a4"
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jkn%2BEWcG0wmdBL3f%2BAophSGeM46uH%2BMRkeSI1EJmBGCq0617AKrB1oOriDB1G3pKD24odVELq9HbE8R%2FpKImC5%2BFXCtOrVbtMPyfqi0d6K7uG9Bkv1ijwmO4LvZ2a88cpx6%2FI%2Fn%2FFCOv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc1b9365690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.famososenbolas.com/wp-content/uploads/2022/11/Paquetes-de-futbolistas-CLUSTER-300x225.jpg.webp | 188.114.96.1 | | 10 kB |
URL www.famososenbolas.com/wp-content/uploads/2022/11/Paquetes-de-futbolistas-CLUSTER-300x225.jpg.webp IP188.114.96.1:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x225, Scaling: [none]x[none], YUV color, decoders should clamp Hashdc163a556165463810f3204b69260311 7aa253344f81d5446cd85460f3bfff92e8b5f7c7 2a540640110c7fb480a60eb5ee5c511013773c43295d73758719127cc06bd15e
GET /wp-content/uploads/2022/11/Paquetes-de-futbolistas-CLUSTER-300x225.jpg.webp HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: image/webp
content-length: 10400
last-modified: Fri, 23 Dec 2022 15:28:59 GMT
etag: "63a5c93b-28a0"
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UqsbfgTX%2BZ1uwswOb7A6smISmGeObfuQkEaFpqiCU3ltTLK%2FvYL58iGiGmbmUEE6M47Cpzx9myfIUBY7dWvQgl9M9CCT7SV0%2BYJz2f%2FYm1sFDEIXByZ1BGVATw0%2BPEoyunCp%2BGc02OUP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc1c9455690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.famososenbolas.com/wp-content/uploads/2022/12/Paquetes-de-futbolistas-023-Andre-Silva-FEB-20221223.jpg.webp | 188.114.96.1 | | 30 kB |
URL www.famososenbolas.com/wp-content/uploads/2022/12/Paquetes-de-futbolistas-023-Andre-Silva-FEB-20221223.jpg.webp IP188.114.96.1:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 576x720, Scaling: [none]x[none], YUV color, decoders should clamp Hash16f3b69b2b41140dc2a6b65de5a28b67 e092238cdbccd0ac20a6a5a64df26069ada3f843 87945962f2abb3e7e28e57f0b2a98d54e6771112885a248e4f0cb7c55e1a7b2b
GET /wp-content/uploads/2022/12/Paquetes-de-futbolistas-023-Andre-Silva-FEB-20221223.jpg.webp HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: image/webp
content-length: 29540
last-modified: Tue, 11 Jul 2023 12:30:14 GMT
etag: "64ad4b56-7364"
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T39F99hBxnqKs3oP4rXVNqQrjo8uT8ueHFDet4y5%2BbiGLQ74tc6AmmKIQ2CDVoUBalE%2BvIHIl5%2FlHyUDReMgTt97uR8%2BXMZKm2pIzdCTzCzFz4eOklx1QlQUJLdV1ZImpuQsMS3CMze4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc1b92a5690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.famososenbolas.com/wp-content/uploads/2024/03/PROMO-Kiko-Jimenez.jpg | 188.114.96.1 | | 31 kB |
URL www.famososenbolas.com/wp-content/uploads/2024/03/PROMO-Kiko-Jimenez.jpg IP188.114.96.1:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x533, components 3 Hashd35c2a3bb283853cc57584290d2fdcad 28753d893efa14552896531a72531f6936a819e8 15d081541cc8e20bbeffc225d4786cde5a2d039726e38c0330f4b03a9a5b4f28
GET /wp-content/uploads/2024/03/PROMO-Kiko-Jimenez.jpg HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: image/jpeg
content-length: 31051
last-modified: Fri, 22 Mar 2024 12:55:02 GMT
etag: "65fd7fa6-794b"
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qPVPiq0b7tSOOjCOvphybMNOekfZbM%2BuvgJhwO17%2FPJrTQkGgJoG24vQkrKwFFU09TPiMq1zq4M9oAcdf%2F6LKhoStA0ZCzpYEMXJTrN3Ufesx36AJ3TwQhlaVzm8d6%2BpAYh%2F05X%2BJ9MV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc1a9195690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.famososenbolas.com/wp-content/uploads/2022/06/Gerard-Pique-P-CLUSTER-300x225.jpg.webp | 188.114.96.1 | | 7.3 kB |
URL www.famososenbolas.com/wp-content/uploads/2022/06/Gerard-Pique-P-CLUSTER-300x225.jpg.webp IP188.114.96.1:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x225, Scaling: [none]x[none], YUV color, decoders should clamp Hash0a1aab7bd8f6cdd56f2c4baef6715923 e78101b1806ddf1214e99c6d1ed1836f0dd90eac 263828dba0acd1be3416da13e40ad740e2a1de3994acbd9c5d3d985ed1d7f896
GET /wp-content/uploads/2022/06/Gerard-Pique-P-CLUSTER-300x225.jpg.webp HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: image/webp
content-length: 7258
last-modified: Fri, 02 Dec 2022 13:28:33 GMT
etag: "6389fd81-1c5a"
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gNpMnW3LDiDJyZGKkPCGp11QmF7QGTMIgpPNGnALkw216%2BZCP0%2FqovAXuufrdoSS5baAaVDXFyEn6qTgnfjq2vW84oZ1u1emmP1NZ0SX4%2Fr%2B1ia3SdtqpX0xtMkwOAV%2FCPm0E5zOWLLi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc1c9405690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.famososenbolas.com/wp-content/uploads/2022/11/Bultos-Tiktokers-CLUSTER-300x225.jpg.webp | 188.114.96.1 | | 13 kB |
URL www.famososenbolas.com/wp-content/uploads/2022/11/Bultos-Tiktokers-CLUSTER-300x225.jpg.webp IP188.114.96.1:0
File typeRIFF (little-endian) data, Web/P image Hashf373ad22c62a4e8a792d4d100e79ef2c 811e8a98e7224a1be87f1dd7ff6071b7e2def26f d60cf1b9106ce1ed673898c765921d7050defb86fe2007b20e1b768f3a89a8c3
GET /wp-content/uploads/2022/11/Bultos-Tiktokers-CLUSTER-300x225.jpg.webp HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: image/webp
content-length: 13026
last-modified: Tue, 15 Nov 2022 17:42:51 GMT
etag: "6373cf9b-32e2"
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=akZR5H4zEXRQZyHn6NlAWxMBg8tQf2h55cZQwc3AFXJrzInqe1BoTHoFm8XT9bAJ1OsBKEw9PiJRcDhSavR6kj5euhGCSTMD7HoPWStLMIyyXB2LVjz7Fg8NogQ0YQlPmqZ8pUBK3R%2FO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc1c9425690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.famososenbolas.com/wp-content/plugins/chp-ads-block-detector/assets/img/icon.png | 188.114.96.1 | | 16 kB |
URL www.famososenbolas.com/wp-content/plugins/chp-ads-block-detector/assets/img/icon.png IP188.114.96.1:0
File typePNG image data, 350 x 350, 8-bit colormap, non-interlaced Hash134fce13c189ed0e483a1bddb6406204 eed559ac52e9731c56a1fb03eb94fc82e551bb66 723597ec6e9461e79c420faf0454170cf6f9243246a4fac3cef5f05a4b5be791
GET /wp-content/plugins/chp-ads-block-detector/assets/img/icon.png HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: image/png
content-length: 15671
last-modified: Wed, 17 Jan 2024 15:07:59 GMT
etag: "65a7ed4f-3d37"
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IJasC60%2FZVIs5CRIYNltArQG31wHHBZS7B5qyxlGOFlV3GDQhrkpl9aj6LVyEJccfdKzavn7oLK1iDFcsGv2qZGlQj8MoXUqBwnlIFlwYwI20s81ZR0WFoM95Tb04gUXzVJR9KslHdoW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc1c94a5690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.famososenbolas.com/wp-content/uploads/2022/09/Futbolistas-EC-CLUSTER-300x225.jpg.webp | 188.114.96.1 | | 11 kB |
URL www.famososenbolas.com/wp-content/uploads/2022/09/Futbolistas-EC-CLUSTER-300x225.jpg.webp IP188.114.96.1:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x225, Scaling: [none]x[none], YUV color, decoders should clamp Hash4e96e60c686b059241a7c03f2fd0fc9c ecab1af323d450411988d7206e8d7ca86f421331 c2141b8a105dfe99207b96b20c441f982acd59eb66ee915e96fa4f492c20d97a
GET /wp-content/uploads/2022/09/Futbolistas-EC-CLUSTER-300x225.jpg.webp HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: image/webp
content-length: 11204
last-modified: Fri, 07 Oct 2022 11:11:51 GMT
etag: "63400977-2bc4"
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sz8I2WG0vneIGTaQu8%2FDYzoF4l5NSgyZ2J8Fo9R8%2FtzPQSyUtCo9VGnfyD65ZwuEBNPD46ZpS78yGA6IXoZfr%2FjUmrLWswn04%2F1mipHWE1u%2FOMiE1Lt%2BibVM7icBZbqnVOl%2FyQH8ksgO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc1c93c5690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.famososenbolas.com/wp-content/uploads/2023/02/David-Mengual-CLUSTER-300x225.jpg.webp | 188.114.96.1 | | 12 kB |
URL www.famososenbolas.com/wp-content/uploads/2023/02/David-Mengual-CLUSTER-300x225.jpg.webp IP188.114.96.1:0
File typeRIFF (little-endian) data, Web/P image Hashbd8495a1276f4e07bb5376464f2d972d 781beebcda4fd290c8f356c4556810ee22682db0 972c2d38411075e97d5368f25b1432be688e182bc5dacd95b0954894a3cb939f
GET /wp-content/uploads/2023/02/David-Mengual-CLUSTER-300x225.jpg.webp HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: image/webp
content-length: 11734
last-modified: Thu, 16 Feb 2023 22:41:03 GMT
etag: "63eeb0ff-2dd6"
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1qjGdMZ7SfrK%2Bfm3AuVhNIzHxoMRjfS496mcK2BRNLpi%2BXjGZR48fDq2P0xamYwkEtaafXZbLoByGyG1JEgVfBnanWPd7zawmD9huEznLgTaQU8RQe0zyTtdHYuHfFU8kxxkUbs6ND5R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc1b9375690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| poweredby.jads.co/js/jads2.js | 185.94.236.246 | | 1.7 kB |
URL poweredby.jads.co/js/jads2.js IP185.94.236.246:0
File typeJavaScript source, ASCII text, with very long lines (3758), with no line terminators Hashbc8141c4650030c41f6a98026b12ce80 af5618f7e467a207d4c64627be580283ab5640cd 5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.famososenbolas.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 13:59:51 GMT
Content-Type: application/x-javascript
Last-Modified: Fri, 22 Mar 2024 21:09:33 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"65fdf38d-eae"
Content-Encoding: gzip
|
|
| www.famososenbolas.com/wp-content/uploads/2022/12/Paquetes-de-futbolistas-024-Andre-Silva-FEB-20221223.jpg.webp | 188.114.96.1 | | 52 kB |
URL www.famososenbolas.com/wp-content/uploads/2022/12/Paquetes-de-futbolistas-024-Andre-Silva-FEB-20221223.jpg.webp IP188.114.96.1:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 576x720, Scaling: [none]x[none], YUV color, decoders should clamp Hash26e175ab268088ee11e4cc1bfd1555a4 d5f649a6aea5e1bf965863dd91ad9837c3dd945b e73a4809d3df133e44cb2e04dba95405a4d6b16adf81827bf0fc42a846284a30
GET /wp-content/uploads/2022/12/Paquetes-de-futbolistas-024-Andre-Silva-FEB-20221223.jpg.webp HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: image/webp
content-length: 51982
last-modified: Tue, 11 Jul 2023 12:30:12 GMT
etag: "64ad4b54-cb0e"
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=835bG5K8dHXU9CXQti6zyqkws1%2BKmYTV8FHidKBmnbnVeN6J1A3Q0cpnKUp5do%2BhpHm467KILmgUWtM7GKFlRG%2BehpDDvZZipqlf1moZ6N5ZpDxwDWdYT3BUATzY05pCYt2NavnpxSLb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc1b92c5690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=G-5G1BP3RL0X&l=dataLayer&cx=c | 142.250.74.168 | | 90 kB |
URL www.googletagmanager.com/gtag/js?id=G-5G1BP3RL0X&l=dataLayer&cx=c IP142.250.74.168:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (5945) Hashd44f7201fd617095c8ee2be6ebecb302 649c84a11d57f6d5e550f1250f496d688749bc15 a2f005c9ac27e808ed0f826e01465d57375f7ede4f2c456b06ccd7dff60e576c
GET /gtag/js?id=G-5G1BP3RL0X&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 13:59:51 GMT
expires: Wed, 24 Apr 2024 13:59:51 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89785
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| poweredby.jads.co/js/jads.js | 185.94.236.246 | | 178 B |
URL poweredby.jads.co/js/jads.js IP185.94.236.246:0
File typeHTML document, ASCII text, with CRLF line terminators Hashcd2e0e43980a00fb6a2742d3afd803b8 81ffbd1712afe8cdf138b570c0fc9934742c33c1 bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 24 Apr 2024 13:59:51 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
|
|
| www.famososenbolas.com/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css | 188.114.96.1 | | 860 B |
URL www.famososenbolas.com/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css IP188.114.96.1:0
File typeASCII text, with very long lines (2593), with no line terminators Hashe66edcec9bad7f9cda2eb94ee608753c 8b8133c9915dacc312bb42596b697dae6e183169 b1f4247657f994f6c9520c982ab95f953ee1c052706594d74f521cae670cf8be
GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=3106
etag: W/"66212b94-c22"
last-modified: Thu, 18 Apr 2024 14:17:56 GMT
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ntLDxybGIhODgFyGRRstCIvnmN0gtax%2BJeH4OOFvrDVL6BlVLOFm3bjql%2F602H%2FA9ImLfiQuYjo%2FkyMaLIEthiw656hOa%2F6%2FLN8LvICYnco2hPvKwPXIsvzIxUDZyX63whfLu9rI0BVJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc138815690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.famososenbolas.com/wp-content/themes/customizr-pro/addons/bundle/menu-customizer/assets/front/css/mc-front.min.css | 188.114.96.1 | | 1.2 kB |
URL www.famososenbolas.com/wp-content/themes/customizr-pro/addons/bundle/menu-customizer/assets/front/css/mc-front.min.css IP188.114.96.1:0
File typeASCII text, with very long lines (7897), with no line terminators Hash1fdc86c9cbe8cd9901ff909e49befc65 9df585c0fc4b1e2ea8b4c5c31d9a04f23a072cc6 3d7ba0a718bf34dc33212c4bc661516fd02bb0a3a9827445c837180fc9806478
GET /wp-content/themes/customizr-pro/addons/bundle/menu-customizer/assets/front/css/mc-front.min.css HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: text/css
last-modified: Sat, 06 Apr 2024 16:30:39 GMT
etag: W/"661178af-1ed9"
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gkR0038HJIWIqu%2B2POKVZu2xtJ3jvTEbFZduj3lBVlzlf%2F%2F%2F3oSJKaBJUEGG8uzg37ZILfbXpmgeCtm8vtUTLtBkBxhjNl%2B2K5obQHGMKf8YlO60RPFA0ntZ%2BKtDcQe4iT8QHRiYPMDC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc138775690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| poweredby.jads.co/js/jads2.js | 185.94.236.246 | | 1.7 kB |
URL poweredby.jads.co/js/jads2.js IP185.94.236.246:0
File typeJavaScript source, ASCII text, with very long lines (3758), with no line terminators Hashbc8141c4650030c41f6a98026b12ce80 af5618f7e467a207d4c64627be580283ab5640cd 5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.famososenbolas.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 13:59:52 GMT
Content-Type: application/x-javascript
Last-Modified: Fri, 22 Mar 2024 21:09:33 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"65fdf38d-eae"
Content-Encoding: gzip
|
|
| poweredby.jads.co/js/jads2.js | 185.94.236.246 | | 1.7 kB |
URL poweredby.jads.co/js/jads2.js IP185.94.236.246:0
File typeJavaScript source, ASCII text, with very long lines (3758), with no line terminators Hashbc8141c4650030c41f6a98026b12ce80 af5618f7e467a207d4c64627be580283ab5640cd 5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.famososenbolas.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 13:59:52 GMT
Content-Type: application/x-javascript
Last-Modified: Fri, 22 Mar 2024 21:09:33 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"65fdf38d-eae"
Content-Encoding: gzip
|
|
| www.famososenbolas.com/wp-content/uploads/2023/09/Andre-Silva-paquete-FEB-20230926-000.jpg.avif | 188.114.96.1 | | 57 kB |
URL www.famososenbolas.com/wp-content/uploads/2023/09/Andre-Silva-paquete-FEB-20230926-000.jpg.avif IP188.114.96.1:0
Hash8a41bd251e1ae9c2be88e215b154d54a e5d5a45b5842e0a10a21be094e15a4b207c9022e 858437ad2111a5c20319eaa7975164f16bda49597cc3426a6fadd4039b00b7f1
GET /wp-content/uploads/2023/09/Andre-Silva-paquete-FEB-20230926-000.jpg.avif HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: image/avif
last-modified: Sat, 16 Mar 2024 01:51:30 GMT
vary: Accept-Encoding
x-cache-status: MISS
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MCV%2FhmzMtooyTbQ2iO%2BAem3jzAG%2BN5k6vwBZVb0F8wvOIrn7TjvBKrP%2FO6RLCaeKZVedDPxho6kywLlgGHgAzky0%2BiO48b3PNGWNjMO414ls1U9JvQeC5cSm4J%2FiNdWkcpBh%2BsuxJ1OY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87969dc1a9155690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.famososenbolas.com/wp-includes/css/dist/block-library/style.min.css | 188.114.96.1 | | 17 kB |
URL www.famososenbolas.com/wp-includes/css/dist/block-library/style.min.css IP188.114.96.1:0
File typeASCII text, with very long lines (59701) Hash51a8390b47aa0582cf2d9c96c5addee2 b16a640874025d085c38119a1a02a3460f83f2de 98cecf88a23542fa047ce46eedb650b5c5128761ed4386c0977b847094ddfa20
GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: text/css
last-modified: Wed, 10 Apr 2024 17:14:07 GMT
etag: W/"6616c8df-1bae5"
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tnzdkQsxD0N5qYVwXdQ9XJPMV3pqTPrGeKtWXEhCuIzTj5%2BG22TVkGWptwiaUA6jarQ6W47YwzUPXK5G7yFbi7boOneGnwrkvO39EX%2BjtJ8NBP4YhcQfDK0JozSj%2FzWKyetP6nDnibH6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc1387f5690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.famososenbolas.com/wp-content/plugins/pt-content-views-pro/public/assets/css/cvpro.min.css | 188.114.96.1 | | 18 kB |
URL www.famososenbolas.com/wp-content/plugins/pt-content-views-pro/public/assets/css/cvpro.min.css IP188.114.96.1:0
File typeASCII text, with very long lines (59285), with CRLF line terminators Hash2403096e081d353cc03b197727bd1dfb f7655b92333ad9b2ef7e503275b5a2da06de31b0 53948075293f5d4a1c0a2d48f3b452fd376b415b4ca0699d12a0c5461ea160f6
GET /wp-content/plugins/pt-content-views-pro/public/assets/css/cvpro.min.css HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: text/css
last-modified: Tue, 02 Apr 2024 21:48:28 GMT
etag: W/"660c7d2c-fc9a"
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L08OxKbFcLUQfRQfMJTH7pJ3edXxXI7JX6gqpeKBbwTH5%2FHz55nBf7r%2FDksvQMBGiKrJZpods%2BIEybhhjPqF%2Bd%2B8rGEZGr0iZTPmqi6jJF6plE4raNHT7CniFfdv1WKEzXnrVgyBHx%2Ff"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc138705690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pagead2.googlesyndication.com/pagead/js/adsbygoogle.js | 142.250.74.162 | | 51 kB |
URL pagead2.googlesyndication.com/pagead/js/adsbygoogle.js IP142.250.74.162:0
File typeJavaScript source, ASCII text, with very long lines (3920) Hash87f96c127b3e7dc5e44dbe065f588169 3227e18f8571ab7da52c3cf0d4bdd645cc13e0dd c06f52b9b7dab65d7e026a1e5a86735659de2c14d8f930213ddeacc4d53f4c44
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.famososenbolas.com
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
link: <https://googleads.g.doubleclick.net>; rel="preconnect"; crossorigin
vary: Accept-Encoding
date: Wed, 24 Apr 2024 13:59:52 GMT
expires: Wed, 24 Apr 2024 13:59:52 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 17316335230115366916
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 50995
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| poweredby.jads.co/adshow.php?adzone=962112 | 185.94.236.246 | | 1.5 kB |
URL poweredby.jads.co/adshow.php?adzone=962112 IP185.94.236.246:0
File typeHTML document, ASCII text, with very long lines (405), with CRLF, LF line terminators Hash13a845fd58735153b92a4e1cb62abcf9 c6ad189ec7e3839b501c6597eb9af45aa131e2fc 2e4c94e1994d90724742eab9bc373e6c87367ac1979f1cb19a2f8b5598eaebf7
GET /adshow.php?adzone=962112 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 13:59:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=99ff827dda13599cf32b431353149edc; expires=Thu, 24-Apr-2025 13:59:52 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YTowOnt9; expires=Sat, 27-Apr-2024 13:59:52 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Sat, 27-Apr-2024 13:59:52 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
|
|
| poweredby.jads.co/adshow.php?adzone=904631 | 185.94.236.246 | | 1.5 kB |
URL poweredby.jads.co/adshow.php?adzone=904631 IP185.94.236.246:0
File typeHTML document, ASCII text, with very long lines (423), with CRLF, LF line terminators Hash74c141c0b379edd56cc9013b592e9b63 0fbb87349e66fe8c103f2581b317a123762dc996 e9118ba19b93b1882d43defe5866adb6df337958f1bb029e28590d50b1ebcada
GET /adshow.php?adzone=904631 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 13:59:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=99ff827dda13599cf32b431353149edc; expires=Thu, 24-Apr-2025 13:59:52 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps44080=1; expires=Thu, 25-Apr-2024 13:59:52 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjEyMTI0MjQ7aToxNzE0MjI2MzkyO30%3D; expires=Sat, 27-Apr-2024 13:59:52 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Sat, 27-Apr-2024 13:59:52 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
|
|
| www.famososenbolas.com/wp-content/uploads/2022/12/cropped-Logo-FEB-290x290.jpg | 188.114.96.1 | | 45 kB |
URL www.famososenbolas.com/wp-content/uploads/2022/12/cropped-Logo-FEB-290x290.jpg IP188.114.96.1:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "Compressed by jpeg-recompress", baseline, precision 8, 290x290, components 3 Hash973edb13b313be681943798c38c9e000 72e69dcdf5ce52a7c3e440e51aa3d79fdfff1030 39897c971b084c88cf5e5280403bd58ff6a983c08afdd9ccd9c24c308a8ec69a
GET /wp-content/uploads/2022/12/cropped-Logo-FEB-290x290.jpg HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Cookie: _ga_5G1BP3RL0X=GS1.1.1713967192.1.0.1713967192.0.0.0; _ga=GA1.1.694802479.1713967192; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:52 GMT
content-type: image/jpeg
content-length: 45064
last-modified: Mon, 12 Dec 2022 15:58:25 GMT
etag: "63974fa1-b008"
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2892
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vkYVxLgvFsKF0%2BV5s%2F8QMZ27XEWM6tCKwBw05QGZuoT5PTElNO%2BmUiQArnw9bX6YUYdxkY1uUK16nrTQkzn8gaghsvMLtuXcl1GEEPGppuneScEYcKOf8IHyRf1XBCm94oO3SJFN1kjv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc94afa5690-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.famososenbolas.com/wp-content/plugins/content-views-query-and-display-post-page/public/assets/css/cv.css | 188.114.96.1 | | 58 kB |
URL www.famososenbolas.com/wp-content/plugins/content-views-query-and-display-post-page/public/assets/css/cv.css IP188.114.96.1:0
File typeASCII text, with very long lines (65452) Hashb23b3dcf5f2c8282a5704d95be3fff22 cee3a959fd8fd7045ce65cad594140d042bc3064 f18a82b575d329c2b28f288f949be19eb8f493a2202c0ac1cc240babc0767498
GET /wp-content/plugins/content-views-query-and-display-post-page/public/assets/css/cv.css HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=86798
etag: W/"66268580-1530e"
last-modified: Mon, 22 Apr 2024 15:42:56 GMT
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e%2B4phuAcJ2ITwCLeIVUXtzTNmMLfbxODuSzg4lH7kmzVDasVpnyniBAU3dtYBbyt%2FTxDswEjSCvLSFnQORa7RX%2BG2iIho9eLEc39B4QDDOI5I7mnTa8s9Qf2xcac8MBppFe012vdDAyD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc128695690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hqq.ac/ad/top/popunder.js |  190.115.19.71 | | 21 B |
URL hqq.ac/ad/top/popunder.js IP190.115.19.71:0
File typeASCII text, with no line terminators Hash533a813ddb8f84d7e018bf8e6296c44d 8c95af23d5dc502f1bc3395a6d2e339e696c0d3e a499068cf858aa2cd9b077e2e354b6bf8435eaa8e44c2047f403c7283031977f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ad/top/popunder.js HTTP/1.1
Host: hqq.ac
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.ac/e/ODRmbUxMRjUzaW9LdG01TTNjSzQxQT09
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: application/javascript; charset=UTF-8
content-length: 21
last-modified: Wed, 15 Sep 2021 14:06:22 GMT
etag: "6141fdde-15"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 | 142.250.74.99 | | 7.9 kB |
URL fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 IP142.250.74.99:0
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0 Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.famososenbolas.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 05:54:09 GMT
expires: Wed, 23 Apr 2025 05:54:09 GMT
cache-control: public, max-age=31536000
age: 115543
last-modified: Fri, 22 Mar 2024 00:00:38 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| r.trackwilltrk.com/s1/13337860-c378-4763-940f-ee9469d3f57d?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=160800&cv4=262892&cv5=962112&cv6=61010 |  45.131.147.145 | | 1.2 kB |
URL r.trackwilltrk.com/s1/13337860-c378-4763-940f-ee9469d3f57d?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=160800&cv4=262892&cv5=962112&cv6=61010 IP45.131.147.145:0 ASN#39572 DataWeb Global Group B.V.
File typeHTML document, ASCII text, with very long lines (386) Hashdbc7d47ca9c56363af2d358970ba7a05 e47869ad037a9f4f286abd7fb6f50fa9947dbb17 93f1052b87ff5d28cfa9841b7c86a291185add6f35003c6ad42acb27a68292a5
GET /s1/13337860-c378-4763-940f-ee9469d3f57d?externalId={extPlaceholder}&cost={costPlaceholder}&cv1={dynamicCON}&cv2=NO&cv3=160800&cv4=262892&cv5=962112&cv6=61010 HTTP/1.1
Host: r.trackwilltrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Wed, 24 Apr 2024 13:59:52 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: uid=RJCemZq-pH; Path=/; Domain=trackwilltrk.com; Expires=Thu, 25 Apr 2024 13:59:52 GMT; HttpOnly
X-Request-Id: 00017fc1-1293-4ba6-a123-528bb6d4ecbc
Content-Encoding: gzip
|
|
| hqq.ac/js/websocket_ip.min.js | 190.115.19.71 | | 1.5 kB |
URL hqq.ac/js/websocket_ip.min.js IP190.115.19.71:0
File typeJavaScript source, ASCII text, with very long lines (4292) Hash0e455c930eb772725553d8ab1f92fdc6 e3b6edf2d24bbf1ec3afeb8fae51bc25d4f18e52 419b600e2a3d2523ed458633a946a9a07fcf046077f0ea79f3e435f154f04ee7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/websocket_ip.min.js HTTP/1.1
Host: hqq.ac
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.ac/e/ODRmbUxMRjUzaW9LdG01TTNjSzQxQT09
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Fri, 20 Jan 2023 13:44:36 GMT
etag: W/"63ca9ac4-121c"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
|
|
| hqq.ac/styles/global/embed_player.3.css?130 | 190.115.19.71 | | 6.4 kB |
URL hqq.ac/styles/global/embed_player.3.css?130 IP190.115.19.71:0
File typegzip compressed data, from Unix Hashee71d71719bffbf28a09bfdd26f0bc1f 66cc029118220908588de7099333716e25b3621c 79e00c8b957843cf017029bd01fcf935978506b9366381c83e5db6d86b46ce82
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /styles/global/embed_player.3.css?130 HTTP/1.1
Host: hqq.ac
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.ac/e/ODRmbUxMRjUzaW9LdG01TTNjSzQxQT09
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
last-modified: Wed, 09 Dec 2020 22:16:37 GMT
etag: W/"5fd14cc5-1701"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
|
|
| www.famososenbolas.com/wp-content/plugins/rate-my-post/public/css/rate-my-post.css | 188.114.96.1 | | 50 kB |
URL www.famososenbolas.com/wp-content/plugins/rate-my-post/public/css/rate-my-post.css IP188.114.96.1:0
File typeUnicode text, UTF-8 text, with very long lines (10468), with no line terminators Hash08164ded795980797b7e7454fa69ceae 0fa359dc8bf8f2bdb1bc02d129e73c8cc2ef4a8c 36ecf00031ffc0faaf8a8dfb348dfd9c2383be343026b88599d76a11b09f7e18
GET /wp-content/plugins/rate-my-post/public/css/rate-my-post.css HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=10492
etag: W/"65f9eed1-28fc"
last-modified: Tue, 19 Mar 2024 20:00:17 GMT
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mRV4WTyuv8U2fsLY0RUwq6cghEj3UffPCjollKe8CExfGlNCyd7rZJgj5T4s2%2FX8ISNugqLK%2FfoA3VB9ziopDnyOHOUaYPuVy5WAWda0hynWcBbPMAvKXGhQYgGhO84nrJk2%2FOt0Cs8S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc148875690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hqq.ac/cdn-cgi/trace | 190.115.19.71 | | 146 B |
IP190.115.19.71:0
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/trace HTTP/1.1
Host: hqq.ac
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://hqq.ac/e/ODRmbUxMRjUzaW9LdG01TTNjSzQxQT09
Cookie: uid=pE2clnn3iaqbsFnT2c1qkfBBK5OJIQvS
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Wed, 24 Apr 2024 13:59:52 GMT
content-type: text/html; charset=UTF-8
content-length: 146
x-origin-location: /
server: Google Frontend
x-cache-status-inferno: MISS
x-inferno-location: /
X-Firefox-Spdy: h2
|
|
| i.jads.co/1x1.gif |  185.76.9.18 | | 28 kB |
IP185.76.9.18:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 250x250, components 3 Hash2acfb73fd2df022a7dad5595adef5bda 939b803ea641bd427b7599f92a816262e7a5bf48 3d4610a2ab69d08e54685d0d3cfcf03ec663bacff8cc89a1e0a2904a7769e641
GET /1x1.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=99ff827dda13599cf32b431353149edc; imps58989=1; imps44080=1; imps203=1; juicy_data_1=YToxOntpOjEyMTI0MjQ7aToxNzE0MjI2MzkyO30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:53 GMT
content-type: image/jpeg
content-length: 27460
last-modified: Thu, 03 Nov 2016 21:36:07 GMT
etag: "581badc7-6b44"
x-77-nzt: EwwBuUwJDQH3dtcPAAwBuUwKCQH3BS4GAAwBisclwQHXNjYDAA
x-77-nzt-ray: c0a4cc2823ab2b8a59102966db1c9708
x-accel-expires: @1715520995
x-accel-date: 1712928995
x-77-cache: HIT
x-77-age: 1653681
server: CDN77-Turbo
x-cache: HIT
x-age: 1038198
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i.jads.co/network/user189593/58989-1695869646-0879094001695869646.jpg | 185.76.9.18 | | 15 kB |
URL i.jads.co/network/user189593/58989-1695869646-0879094001695869646.jpg IP185.76.9.18:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 300x300, components 3 Hash0bfa717fe2054668d9a033c73782f06b 1962d912022e6decb977c1a776a98d3f7b516a7c 391c3f269e247986fcf06c7d016908979b94f7b8904ce6d013296f104c8bce9b
GET /network/user189593/58989-1695869646-0879094001695869646.jpg HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=99ff827dda13599cf32b431353149edc; imps58989=1; imps44080=1; imps203=1; juicy_data_1=YToxOntpOjEyMTI0MjQ7aToxNzE0MjI2MzkyO30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:53 GMT
content-type: image/jpeg
content-length: 15267
last-modified: Thu, 28 Sep 2023 02:54:06 GMT
etag: "6514eace-3ba3"
x-77-nzt: EwwBuUwJDQH3+2YGAAwBuUwKAQH3wE0BAAgBnJIhHwGB
x-77-nzt-ray: c0a4cc2823ab2b8a591029668b54a208
x-accel-expires: @1716136474
x-77-cache: HIT
x-accel-date: 1713547614
x-77-age: 505019
server: CDN77-Turbo
x-cache: HIT
x-age: 419579
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i.jads.co/network/user500/30185-1558159918-0279541001558159918.gif | 185.76.9.18 | | 55 kB |
URL i.jads.co/network/user500/30185-1558159918-0279541001558159918.gif IP185.76.9.18:0 ASN#60068 Datacamp Limited
File typeGIF image data, version 89a, 728 x 90 Hash0131eae6b84dfd7647bfc86da7b12333 7f10fa9fd9ee34750c19a638550f91acb6a934e7 16b7c060f83f35ed503f71e8e018ec7f212eee50904ba20bd16400903c8faa83
GET /network/user500/30185-1558159918-0279541001558159918.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=99ff827dda13599cf32b431353149edc; imps58989=1; imps44080=1; imps203=1; juicy_data_1=YToxOntpOjEyMTI0MjQ7aToxNzE0MjI2MzkyO30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:53 GMT
content-type: image/gif
content-length: 55394
last-modified: Sat, 18 May 2019 06:11:58 GMT
etag: "5cdfa22e-d862"
x-77-nzt: EwgBuUwJDQFBDAG5TAoMAfdVaAYACAGckiEnAYE
x-77-nzt-ray: c0a4cc2823ab2b8a591029664bd73908
x-accel-expires: @1716139268
x-77-cache: HIT
x-accel-date: 1713547268
x-77-age: 419925
server: CDN77-Turbo
x-cache: MISS
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i.jads.co/network/user500/30185-1558255890-0163109001558255890.gif | 185.76.9.18 | 200 OK | 432 kB |
URL GET HTTP/2i.jads.co/network/user500/30185-1558255890-0163109001558255890.gif IP185.76.9.18:443 ASN#60068 Datacamp Limited
Requested byhttps://poweredby.jads.co/adshow.php?adzone=904631 CertificateIssuerSectigo Limited Subject*.jads.co Fingerprint6C:79:49:F2:EA:3B:68:61:E1:57:17:4B:BA:C8:E9:7C:91:0C:AB:38 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sun, 23 Feb 2025 23:59:59 GMT
File typeGIF image data, version 89a, 300 x 250 Size432 kB (432286 bytes) Hash9b6143d91c1fbcc8a3edf55506d565bf 34f1244004220d585b07b6aa6b3516e3e137c067 b5be96916c2def9ea57eb4a707d62c11ab3e39cd93a15561dc340172e5bbe46b
GET /network/user500/30185-1558255890-0163109001558255890.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=99ff827dda13599cf32b431353149edc; imps58989=1; imps44080=1; imps203=1; juicy_data_1=YToxOntpOjEyMTI0MjQ7aToxNzE0MjI2MzkyO30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:53 GMT
content-type: image/gif
content-length: 432286
last-modified: Sun, 19 May 2019 08:51:30 GMT
etag: "5ce11912-6989e"
x-77-nzt: EwwBuUwJDQHXIv0DAAwBuUwKCQH3JXICAAwBisclxAH3IDIAAA
x-77-nzt-ray: c0a4cc2823ab2b8a5910296679867308
x-accel-expires: @1716137490
x-accel-date: 1713705783
x-77-cache: HIT
x-77-age: 434535
server: CDN77-Turbo
x-cache: HIT
x-age: 261410
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i.jads.co/network/user1037/203-1711049098-0687392001711049098.jpg | 185.76.9.18 | | 53 kB |
URL i.jads.co/network/user1037/203-1711049098-0687392001711049098.jpg IP185.76.9.18:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3 Hash58e2a5a2d8e28ffb07a104152d9bca5d 780dbdd260db158ee0028b5ea8e7a463198d3332 2751e88d9737c2fe3ff5342b4cda2c69d9a41405e25412d624c57c8adeedf32c
GET /network/user1037/203-1711049098-0687392001711049098.jpg HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=99ff827dda13599cf32b431353149edc; imps58989=1; imps44080=1; imps203=1; juicy_data_1=YToxOntpOjEyMTI0MjQ7aToxNzE0MjI2MzkyO30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:53 GMT
content-type: image/jpeg
content-length: 53378
last-modified: Thu, 21 Mar 2024 19:24:58 GMT
etag: "65fc898a-d082"
x-77-nzt: EwwBuUwJDQH3zjAEAAwBuUwKAQH3yQUAAAgBisclwQGB
x-77-nzt-ray: c0a4cc2823ab2b8a59102966206ef908
x-accel-expires: @1716283995
x-77-cache: HIT
x-accel-date: 1713692555
x-77-age: 276119
server: CDN77-Turbo
x-cache: HIT
x-age: 274638
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i.jads.co/network/user500/23973-1525423358.jpg | 185.76.9.18 | | 88 kB |
URL i.jads.co/network/user500/23973-1525423358.jpg IP185.76.9.18:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3 Hashff032548125c04baee909b5bb8e09fa7 e6dd48c696d9b511a06917501f6d1321b4261203 ef72e2e23226dafdd4058f08913710ac22dfe5505bd7b2264ac177a5ecb5070c
GET /network/user500/23973-1525423358.jpg HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=99ff827dda13599cf32b431353149edc; imps58989=1; imps44080=1; imps203=1; juicy_data_1=YToxOntpOjEyMTI0MjQ7aToxNzE0MjI2MzkyO30%3D; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:53 GMT
content-type: image/jpeg
content-length: 88025
last-modified: Fri, 04 May 2018 08:42:38 GMT
etag: "5aec1cfe-157d9"
x-77-nzt: EwwBuUwJDQH3QTkGAAwBuUwKDAH3G78BAAgBJRPCLgGB
x-77-nzt-ray: c0a4cc2823ab2b8a59102966b6d0b208
x-accel-expires: @1716137851
x-77-cache: HIT
x-accel-date: 1713559320
x-77-age: 522332
server: CDN77-Turbo
x-cache: HIT
x-age: 407873
x-77-pop: stockholmSE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| hqq.ac/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=57687514 | 190.115.19.71 | | 2 B |
URL hqq.ac/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=57687514 IP190.115.19.71:0
Hashd751713988987e9331980363e24189ce 97d170e1550eee4afc0af065b78cda302a97674c 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=57687514 HTTP/1.1
Host: hqq.ac
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.ac/e/ODRmbUxMRjUzaW9LdG01TTNjSzQxQT09
Cookie: uid=pE2clnn3iaqbsFnT2c1qkfBBK5OJIQvS
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:52 GMT
content-type: application/json
content-length: 2
server: Google Frontend
access-control-allow-origin: *
x-inferno-location: banner
X-Firefox-Spdy: h2
|
|
| www.famososenbolas.com/wp-includes/js/underscore.min.js | 188.114.96.1 | | 8.8 kB |
URL www.famososenbolas.com/wp-includes/js/underscore.min.js IP188.114.96.1:0
File typeJavaScript source, ASCII text, with very long lines (18798) Hashf88d5720bb454ed5d204cbdb56901f6b f1952292fde4b15936e9aac16b2b9896684db95b 726b820e44f6ab90ad991d30a4bf26d3a5d71493cbcd1fb1efd0d14e89b9df2a
GET /wp-includes/js/underscore.min.js HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: application/javascript
last-modified: Wed, 10 Apr 2024 17:14:07 GMT
etag: W/"6616c8df-4991"
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2891
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mnWDy92mygoyf%2B9mNkwJLw%2FSIogwlij18WX7Epao%2FrQ5M5z%2FuoULJI%2FHXTULrADa914ApMAm3PNYP%2Bx%2Fs3%2FjNSw0rfY%2FinNW0RIBrx3bKGm8TQVSfMygjPS4Ja1wegU96j%2FRtJcUmCBR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc1a9065690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| video.ktkjmp.com/adsbygoogle.js | 104.18.48.21 | | 16 B |
URL video.ktkjmp.com/adsbygoogle.js IP104.18.48.21:0
Hash3d7f7a60216d40dea48e495fef6903c9 fecdb5184f55cf012563d78940eb97b10b9cc99b 96d83ac9f20fc0b88404f307f135e212642e02d6ea295c96b28aed0d771a224f
GET /adsbygoogle.js HTTP/1.1
Host: video.ktkjmp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:53 GMT
content-type: application/javascript
content-length: 16
x-amz-id-2: Uy+BI0f9xi3njNOl7P4PsULkPp0g6ssxBGHnYb4mQe+eet3x2+C470ZEAYzLvRraWhXf8LMEGWU=
x-amz-request-id: WWWZDEMQD0DJ51HX
last-modified: Thu, 10 Mar 2022 13:52:07 GMT
etag: "3d7f7a60216d40dea48e495fef6903c9"
x-amz-meta-s3cmd-attrs: atime:1646920284/ctime:1646920283/gid:20/gname:staff/md5:3d7f7a60216d40dea48e495fef6903c9/mode:33188/mtime:1646920283/uid:501/uname:mikhailchubar
x-amz-version-id: eIgLIBoMMcsEXtxOH6UDjWyfAquRpkIG
access-control-allow-origin: https://creative.bbrdbr.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: HIT
age: 6678
expires: Wed, 24 Apr 2024 17:59:53 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dcfaee556a2-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| hqq.ac/js/video.counters.2.js?117 | 190.115.19.71 | | 39 kB |
URL hqq.ac/js/video.counters.2.js?117 IP190.115.19.71:0
File typegzip compressed data, from Unix Hash96a0cb17aac42a475ac40b74bc323c72 aaadf0d65667d7aa4aeba06b57b95ef758c6a4cf 76ad5595054514ae75d3fdebbbcb4f1299ae5641e4fa15c947c75ea8592267a5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/video.counters.2.js?117 HTTP/1.1
Host: hqq.ac
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.ac/e/ODRmbUxMRjUzaW9LdG01TTNjSzQxQT09
Cookie: uid=pE2clnn3iaqbsFnT2c1qkfBBK5OJIQvS
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:52 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Sun, 06 Feb 2022 19:35:56 GMT
etag: W/"6200231c-2b8"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
|
|
| s.sutraf.com/prbanners/2017/11/13/BhdSLmGRmfMxtu4QTJTEoJ5cikrDbY | 172.67.191.84 | | 104 kB |
URL s.sutraf.com/prbanners/2017/11/13/BhdSLmGRmfMxtu4QTJTEoJ5cikrDbY IP172.67.191.84:0
File typePNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced Size104 kB (103780 bytes) Hashe799f54b785e7ba70c47d3fdea4738b8 64f127abbd584685e439520ed286ee74795615a4 5f206cd80afd3ae6dd5af685f6da7509ccbbacda194be8f56e11210e8ac488f0
GET /prbanners/2017/11/13/BhdSLmGRmfMxtu4QTJTEoJ5cikrDbY HTTP/1.1
Host: s.sutraf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:54 GMT
content-type: application/octet-stream
content-length: 103780
last-modified: Mon, 13 Nov 2017 14:27:14 GMT
etag: "5a09abc2-19564"
expires: Sat, 18 May 2024 16:24:46 GMT
cache-control: public, max-age=2592000
pragma: public
cf-cache-status: HIT
age: 509708
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bf8AFXz3fysv%2BWwahIgfXQ3apzH1D7WqPVODC12IyyqDiLVMYmr6yY8uw6OWuw6InpvfZP2FK%2BR6mAGPHfYxCdso0Z4zdaXJ61FDnPQE85yhmlEoYW%2FwH5tN%2FolOMiU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dd53cb9568a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| d.sutraf.com/t.php | 23.235.244.225 | | 20 B |
IP23.235.244.225:0
File typegzip compressed data, from Unix Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /t.php HTTP/1.1
Host: d.sutraf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 13:59:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: guid=4aec248c-f3e4-4990-a026-82d8c5ad3266; expires=Thu, 24-Apr-2025 13:59:54 GMT; Max-Age=31536000; path=/; domain=suptraf.com; secure; SameSite=None
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| go.bbrdbr.com/abc.gif?sourceId=300cps2girlwl&creativeId=300cps2girlwl&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&action=sbSignupWithModel&thumbSizeKey=big&language=en&thumbFit=cover&quality=original&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=1&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Fr.trackwilltrk.com%2F&i=0&ib=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A479%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A320%2C%22duration%22%3A71%2C%22transferSize%22%3A82320%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A320%2C%22duration%22%3A58%2C%22transferSize%22%3A4647%7D%5D&mh=-453381488 | 104.18.40.50 | | 103 B |
URL go.bbrdbr.com/abc.gif?sourceId=300cps2girlwl&creativeId=300cps2girlwl&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&action=sbSignupWithModel&thumbSizeKey=big&language=en&thumbFit=cover&quality=original&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=1&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Fr.trackwilltrk.com%2F&i=0&ib=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A479%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A320%2C%22duration%22%3A71%2C%22transferSize%22%3A82320%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A320%2C%22duration%22%3A58%2C%22transferSize%22%3A4647%7D%5D&mh=-453381488 IP104.18.40.50:0
Hash8c99886486b9a004383cb4df29011c43 d79ca4754481fc59598bc08fcdf354900918bffe bda00b0f6892b1c6991e793b42654ad1807694e2ffabcbc4eb1399379737ef6c
GET /abc.gif?sourceId=300cps2girlwl&creativeId=300cps2girlwl&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&action=sbSignupWithModel&thumbSizeKey=big&language=en&thumbFit=cover&quality=original&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=1&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Fr.trackwilltrk.com%2F&i=0&ib=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A479%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A320%2C%22duration%22%3A71%2C%22transferSize%22%3A82320%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A320%2C%22duration%22%3A58%2C%22transferSize%22%3A4647%7D%5D&mh=-453381488 HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:54 GMT
content-type: image/gif
content-length: 103
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtrsnD7QZBLqqpmg3qqzT5GqduFqE; SameSite=None; Secure; path=/; expires=Thu, 25-Apr-24 13:59:54 GMT; HttpOnly
server: cloudflare
cf-ray: 87969dd7dd5956ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| go.bbrdbr.com/config?url=https%3A%2F%2Fcreative.bbrdbr.com%2Fwidgets%2Fv4%2FUniversal%3Ftag%3Dgirls%26thumbsMargin%3D0%26gridRows%3D1%26gridColumns%3D1%26sourceId%3D300cps2girlwl%26creativeId%3D300cps2girlwl%26responsive%3D0%26hideButton%3D1%26hideTitle%3D1%26userId%3Debe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75%26autoplay%3Dall%26autoplayForce%3D1%26action%3DsbSignupWithModel%26memberId%3D%7Bclickid%7D | 104.18.40.50 | | 17 kB |
URL go.bbrdbr.com/config?url=https%3A%2F%2Fcreative.bbrdbr.com%2Fwidgets%2Fv4%2FUniversal%3Ftag%3Dgirls%26thumbsMargin%3D0%26gridRows%3D1%26gridColumns%3D1%26sourceId%3D300cps2girlwl%26creativeId%3D300cps2girlwl%26responsive%3D0%26hideButton%3D1%26hideTitle%3D1%26userId%3Debe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75%26autoplay%3Dall%26autoplayForce%3D1%26action%3DsbSignupWithModel%26memberId%3D%7Bclickid%7D IP104.18.40.50:0
Hash62ea0dfcf52a1b640ae82a59f330fef3 a604937900380cc93f43a4c01edb197cc47746f7 995e5a95f3be042c1d2184698ae77b0b9f7c23b31082c2f7c92ae556bfa948d1
GET /config?url=https%3A%2F%2Fcreative.bbrdbr.com%2Fwidgets%2Fv4%2FUniversal%3Ftag%3Dgirls%26thumbsMargin%3D0%26gridRows%3D1%26gridColumns%3D1%26sourceId%3D300cps2girlwl%26creativeId%3D300cps2girlwl%26responsive%3D0%26hideButton%3D1%26hideTitle%3D1%26userId%3Debe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75%26autoplay%3Dall%26autoplayForce%3D1%26action%3DsbSignupWithModel%26memberId%3D%7Bclickid%7D HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:54 GMT
content-type: application/json
access-control-allow-origin: https://creative.bbrdbr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Wed, 24 Apr 2024 13:53:11 GMT
cf-cache-status: HIT
age: 102
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dd76cfb0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| go.bbrdbr.com/app/domain-checker/get-check | 104.18.40.50 | | 6.7 kB |
URL go.bbrdbr.com/app/domain-checker/get-check IP104.18.40.50:0
Hasha790fba8962d03efbfba2f5df3ca94f3 c4d4ff288570a3f6cec87ad9e604c32e3a6cd754 bc73ea526c0e681763ab695b0164db381327f03762b72e80dea0cba76cfaee8a
POST /app/domain-checker/get-check HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:54 GMT
content-type: application/json
access-control-allow-origin: https://creative.bbrdbr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtrth8k2gcTaYMvv7TDaJirsxHc68; SameSite=None; Secure; path=/; expires=Thu, 25-Apr-24 13:59:54 GMT; HttpOnly
server: cloudflare
cf-ray: 87969dd84e3656ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| video.saawsedge.com/checkUrl | 143.204.55.121 | | 15 B |
URL video.saawsedge.com/checkUrl IP143.204.55.121:0
Hash7fb97eb7c8636552ad068f6d56b5ea34 b69679936779fb02503bc0fe1374a737cc762ecb e78008828abaa93c4462e326ef384dcda1443352a0f24bdeedada6a6fdbfd1d5
GET /checkUrl HTTP/1.1
Host: video.saawsedge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
content-length: 15
date: Wed, 24 Apr 2024 07:37:27 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87946d9adde64c40-MXP
x-cache: Hit from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: nN2qhMc0Pw1e9AqcqKBuOOMOo1J07n09mZQz52ouJYG9ys5O05QAGw==
age: 22948
X-Firefox-Spdy: h2
|
|
| go.bbrdbr.com/app/domain-checker/check-result | 104.18.40.50 | | 0 B |
URL go.bbrdbr.com/app/domain-checker/check-result IP104.18.40.50:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /app/domain-checker/check-result HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 240
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 13:59:55 GMT
access-control-allow-origin: https://creative.bbrdbr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28upDCGznfDm9XVEL2Ezfg4QRCzSj1iGoRLhHMFF2; SameSite=None; Secure; path=/; expires=Thu, 25-Apr-24 13:59:55 GMT; HttpOnly
server: cloudflare
cf-ray: 87969dd9986856ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| correlationcocktailinevitably.com/a6/b0/b8/a6b0b8925d9b3a4154c035c24b4ed97e.js | 172.240.108.68 | | 14 kB |
URL correlationcocktailinevitably.com/a6/b0/b8/a6b0b8925d9b3a4154c035c24b4ed97e.js IP172.240.108.68:0
File typeJavaScript source, ASCII text, with very long lines (39581), with no line terminators Hashe6074ea8e5a497aa8a6ccbceb58e2b48 d427a4d47a8c08bbacf7c8977859df2febb2a29c d274641abfced50e17baa7a34784ac89a372d8ec56c559c16fe2af306f6bb27c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /a6/b0/b8/a6b0b8925d9b3a4154c035c24b4ed97e.js HTTP/1.1
Host: correlationcocktailinevitably.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.ac/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 13:59:55 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ef7c1b7b7156ebffe99680bc0f4c8cb1
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_init_7kEz4tQUtSQJFokT.mp4 | 54.230.111.45 | | 1.2 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_init_7kEz4tQUtSQJFokT.mp4 IP54.230.111.45:0
File typeISO Media, MP4 Base Media v5 Hashd2746d8c84452fad0fbcaa8aa8655df4 ba183afe288717c403835989cb4e94d8fb20e71a d73fe4083b892cfc00ada5690a2d9b7b4ac8258a957b584f6e5c570d6dd25a10
GET /hls/19358621/19358621_480p_init_7kEz4tQUtSQJFokT.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: video/mp4
content-length: 1237
server: nginx
last-modified: Wed, 24 Apr 2024 13:44:53 GMT
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 24 Apr 2024 13:59:44 GMT
cache-control: public, max-age=60, s-maxage=60, no-transform
etag: "66290cd5-4d5"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 8ECM7I4xeYnsFid0j852Xnlxevh1jDT5TWO2AHlyZ3NqKBoFcef25A==
age: 11
X-Firefox-Spdy: h2
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_447_1tWys7tiaB7kfy6v_1713967187.mp4 | 54.230.111.45 | | 315 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_447_1tWys7tiaB7kfy6v_1713967187.mp4 IP54.230.111.45:0
Size315 kB (314671 bytes) Hash4f6da5e29195cd9810cbe587adb69886 31c6400415d8443ad91bbd266c79b9e5a244da76 7624217e4738d2314a194b1e08b25a919fdd676fea24848cc60d441a27af7814
GET /hls/19358621/19358621_480p_447_1tWys7tiaB7kfy6v_1713967187.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 314671
age: 5
server: nginx
date: Wed, 24 Apr 2024 13:59:50 GMT
last-modified: Wed, 24 Apr 2024 13:59:49 GMT
etag: "66291055-4cd2f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: An0Ix_wwpCdToJkVzGp7hRKOOhTKjoSynkz83MxaU2VDlw3eoNNrHQ==
|
|
| proftrafficcounter.com/stats |  35.158.46.84 | | 40 B |
URL proftrafficcounter.com/stats IP35.158.46.84:0
File typeASCII text, with no line terminators Hash9be9f018d836e03a8a8c6924952e2951 f8ea38d1d2012e85f66361794da80995dbe888d5 7af2a4fd3ddb889da0f723cdf5915feb1ccc6e31842b5d7f1189eb0c67b657b3
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hqq.ac
DNT: 1
Connection: keep-alive
Referer: https://hqq.ac/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:55 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://hqq.ac
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=1f9d52b6-01f4-4a02-8bc9-d108f0886ff7:1:1; expires=Sat, 22 Apr 2034 13:59:55 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_447_1tWys7tiaB7kfy6v_1713967187.mp4 | 54.230.111.45 | | 315 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_447_1tWys7tiaB7kfy6v_1713967187.mp4 IP54.230.111.45:0
Size315 kB (314671 bytes) Hash4f6da5e29195cd9810cbe587adb69886 31c6400415d8443ad91bbd266c79b9e5a244da76 7624217e4738d2314a194b1e08b25a919fdd676fea24848cc60d441a27af7814
GET /hls/19358621/19358621_480p_447_1tWys7tiaB7kfy6v_1713967187.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 314671
age: 5
server: nginx
date: Wed, 24 Apr 2024 13:59:50 GMT
last-modified: Wed, 24 Apr 2024 13:59:49 GMT
etag: "66291055-4cd2f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: mdxz2aOaHGaBG4LdeN3nPodhE-Nd03_mY7Ta1qCYhAif2ul2pvDCFw==
|
|
| xml.popmansion.com/sub/ED05GzY | 188.114.97.1 | | 310 kB |
URL xml.popmansion.com/sub/ED05GzY IP188.114.97.1:0
File typeHTML document, ASCII text Size310 kB (309478 bytes) Hash84339c1f9ae9e75dcd3c003bb7b4f16a 112d802802882ac2e3ced1cf61dc0331a175bc7c e92c85ca0c0ac78a1428bfaf1420a7eb42ae95004ea9566a7061380934e20faa
GET /sub/ED05GzY HTTP/1.1
Host: xml.popmansion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.ac/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:55 GMT
content-type: text/html; charset=utf-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Hj%2B%2FIec5d%2F89lTjqmmMA7qCcHlx4WalvxGLKeg13vSpKPc8E9nNe%2Bo4qcTKz2LB3kjhU4G60SpSjntYkX5e83LGjWJUuAquy8HmAFYVFWdwJkpEt4Rc%2BAfjxP6A6K5KDii1FaE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87969ddcceb45695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_447_1tWys7tiaB7kfy6v_1713967187.mp4 | 54.230.111.45 | | 315 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_447_1tWys7tiaB7kfy6v_1713967187.mp4 IP54.230.111.45:0
Size315 kB (314671 bytes) Hash4f6da5e29195cd9810cbe587adb69886 31c6400415d8443ad91bbd266c79b9e5a244da76 7624217e4738d2314a194b1e08b25a919fdd676fea24848cc60d441a27af7814
GET /hls/19358621/19358621_480p_447_1tWys7tiaB7kfy6v_1713967187.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 314671
age: 6
server: nginx
date: Wed, 24 Apr 2024 13:59:50 GMT
last-modified: Wed, 24 Apr 2024 13:59:49 GMT
etag: "66291055-4cd2f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: NgP-u2sNP7TXRtBXykxzlSqvRA5va9ryGkwmoYooRQUCGYtdcOb43g==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 8.8 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Hash959d41fbcc559051bfb3c6cb6888ae1e fb733c471c74a403f62720f247cbd42ae1205539 fd558b32654db4180f4a8a255646bb0db6f1b5519acf8e85d0fcfa422f4a675a
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-P1
server: nginx
date: Wed, 24 Apr 2024 13:59:56 GMT
last-modified: Wed, 24 Apr 2024 13:59:55 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-id: XcjXe7wiNcxK3nzeiJOL3qVrobwVt-VoPiYRrLvMT7cSFN2P4rw39g==
|
|
| lessonworkman.com/0a/6e/9a/0a6e9a96058c7f39edbf4999920d05a3.js | 192.243.61.225 | | 31 kB |
URL lessonworkman.com/0a/6e/9a/0a6e9a96058c7f39edbf4999920d05a3.js IP192.243.61.225:0 ASN#39572 DataWeb Global Group B.V.
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashbdb1e8e6d6f126775f5dbaa548739af9 b55684f55eb6c3e74321af252a99c4db3957e11f 9a86322aea928dd3dbfd95ed9296559ade048c2822e1db394d1230b19dca7240
GET /0a/6e/9a/0a6e9a96058c7f39edbf4999920d05a3.js HTTP/1.1
Host: lessonworkman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.ac/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 13:59:55 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 71a4e994dcf7bc5d91f1bd27c113e066
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 | 54.230.111.45 | | 309 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 IP54.230.111.45:0
Size309 kB (309334 bytes) Hashac0eb8e28ac0bfdbd10143dc4ca03813 11b4822e4f0a65a2886651535208e553b8f11c89 fcf59e47bbf8c0e49407fd7b854cf8ea44d44b26079be80c5d38fb451ba2e722
GET /hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 309334
age: 4
server: nginx
date: Wed, 24 Apr 2024 13:59:52 GMT
last-modified: Wed, 24 Apr 2024 13:59:51 GMT
etag: "66291057-4b856"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: DbrHEL9Nghx69AdoKb4WCRl7Z2M-5mDRjaX2stou1VuZ-1IlTLtD6w==
|
|
| lessonworkman.com/sbar.json?key=a6b0b8925d9b3a4154c035c24b4ed97e&uuid=1f9d52b6-01f4-4a02-8bc9-d108f0886ff7%3A1%3A1 | 192.243.61.225 | | 8.3 kB |
URL lessonworkman.com/sbar.json?key=a6b0b8925d9b3a4154c035c24b4ed97e&uuid=1f9d52b6-01f4-4a02-8bc9-d108f0886ff7%3A1%3A1 IP192.243.61.225:0 ASN#39572 DataWeb Global Group B.V.
Hash841df0d693354f33edb68515a104c392 120c875f1b3503eec92342b853ea92bff6e5125d 31c0177ad990bed02f7fec79b1dc3697827bbb44b93862e4981b472266db8f68
GET /sbar.json?key=a6b0b8925d9b3a4154c035c24b4ed97e&uuid=1f9d52b6-01f4-4a02-8bc9-d108f0886ff7%3A1%3A1 HTTP/1.1
Host: lessonworkman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hqq.ac
DNT: 1
Connection: keep-alive
Referer: https://hqq.ac/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 13:59:56 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://hqq.ac
Access-Control-Allow-Origin: https://hqq.ac
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17334956; expires=Thu, 25 Apr 2024 13:59:56 GMT; secure; SameSite=None
uid_id2=1f9d52b6-01f4-4a02-8bc9-d108f0886ff7:1:1; expires=Wed, 01 May 2024 13:59:56 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 25 Apr 2024 13:59:56 GMT; secure; SameSite=None
uncs=1; expires=Thu, 25 Apr 2024 13:59:56 GMT; secure; SameSite=None
pdhtkv29=true; expires=Thu, 25 Apr 2024 13:59:56 GMT; secure; SameSite=None
uncs29=1; expires=Thu, 25 Apr 2024 13:59:56 GMT; secure; SameSite=None
sleca6b0b8925d9b3a4154c035c24b4ed97e=[4376831,4243974]; expires=Wed, 24 Apr 2024 14:00:01 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ad37771c46053e7d07f9fd58d6af4078
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 310 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size310 kB (309658 bytes) Hash3d100f4a84a8ec42f4658de4cd3bd92a a0b406b754ff47d13bd43393a52b42afddc198ec e05bb569074e22d6b2239748a4cfd350c8db1f67d991e728787c0de6c4e03562
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Wed, 24 Apr 2024 13:59:56 GMT
last-modified: Wed, 24 Apr 2024 13:59:55 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XjFutqXTpW35_M6MyibQGtpO0W0YPl576CazVYNkR2uWwvkku2Rw9A==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 | 54.230.111.45 | | 319 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 IP54.230.111.45:0
Size319 kB (319201 bytes) Hash8bbe2ad3b23e4ed19d3b5ec13dcab9a5 8b9d6b323b17b5c65f36f4d8607458c7827815ff 08f1b255d0dd20e0ad09d6ba25530a7ad7282983af7dffc4b5e4537bd461290f
GET /hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319201
age: 2
server: nginx
date: Wed, 24 Apr 2024 13:59:54 GMT
last-modified: Wed, 24 Apr 2024 13:59:53 GMT
etag: "66291059-4dee1"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: jAhxTzKYthRYBVA5dNcgAwR2tgoDAj-lWD7HHyiMUjI0sSK2b48QZQ==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 | 54.230.111.45 | 200 OK | 320 kB |
URL GET HTTP/3b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 IP54.230.111.45:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size320 kB (319964 bytes) Hash70956d149a8c30f52109ef4af2c47363 4071b9322cfacb14d0376b8385906ebcc3b0254f 4849efaed892b4f931ef23614cc5454300c8176ee0bf4f260b435a118b928b6b
GET /hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319964
alt-svc: h3=":443"; ma=86400
server: nginx
date: Wed, 24 Apr 2024 13:59:56 GMT
last-modified: Wed, 24 Apr 2024 13:59:55 GMT
etag: "6629105b-4e1dc"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: G4FBF57lIdWnkcT806ZrQsvrDyJsdNxxpAVO1vU8adX2XILkT6-EIQ==
|
|
| lessonworkman.com/ren.gif?sid=H4sIAAAAAAAC%2F1RS0WscRRifTYMKfanSNxXuoQ8WzGV3727vzj5UY4wEY1NaRR8UmdnZvYyZ3dnM7Nxe8hRakD4e%2FgWb3yUNahD9A1p0U1AIFHuCEND8E0LfRLkzePaD4fu%2B%2Bf0Gft%2Fvmy%2F27BnxYenp8vtqR0hJF1t1t%2Fbax553rbYmUjuoDTrBZ0HzWk333%2BgGdfdq7d0o3FSLvuu5rud6tRWho1gNFicgRHbU9epdt970616riYF%2BtjfWgaEOeP%2BMvATBx%2FOPnMsQYYU0%2BW45Mpu5yl5%2FJ7GS5kqjzw8%2FTDdTVaRIZmWsHcTp4TkbyjxZeQiVHkzlQvX%2FIzIxJs5PD8HSw3ORYP39qU4mEaVg%2FCKKfoVIVhC0QqjuQvAnBAg5bqwjTe7fULqg2%2F%2BidIKOyfzTPyGKMZn%2F4zLS5NslKQa120raXKjUYBCXEIMKolchs8fId%2BYgimOE%2BR0I%2FpgsPl1DmuyvG6kg%2BOkVL%2B7yls%2BCBdeLmwtN6voLHRZ2F7jndmK30wniuD01SIgKIq4goyGocWAnRziwsQObOUj4aS30PK%2Ft8pC6nW4YNng7YgF3PdqOPeq5QQc2nMwwRJ4NEcohQr2LTO9iUwyh7Q8wGyUMd2Bygj4vUUQEhSEoKEEhCIqcoOiXB1wa35T3uTSWeefZP8%2BNcqTy3h49UHkvSgmoHkLzci87Iy9ODHReuHOEzei0RgPmsk7Xb%2FEua9Cm12qGbqMV%2Bk3WjHi3HcGIEsLMTcfdEWPyyoM6MjEmz3%2F6Oxg9hpHHCMUlUPsqaFGCbpTYSY8otzJf2NjaqucKXJXI8nnk286ePCMvT1e49PPfiMKT67%2BQaSDUJTJd4nPxiKAn741uqYLs31KFId%2BvZ7lIxA6drPd2TvPowtfvRduF0nx12Qy%2FeiucAJPy6IPI5Gs05SLtGfLNkuA80itKhxF5sGo%2BithNazaWrE5ttnbz7ZXVJNORMUKlFagYE1JtIRRjcvGvx9Ofe%2BW3HyF0BW1LJPaEnAeEOkaY7cJkM%2F1GEWg547DMQWHLkfbZ7FIKAhnNespKmP%2F1bFaPNJ28pqLcM%2FfQ03Og%2BV2kSYm%2BLtGXJagcwtgLozzTJ9d%2FbUwDTM6NmNRz%2B0xq%2BeXU5jF5s3oORpzW2o2GS4Nuy2u3adRmTb8TBx6n1G8GfhDQBnIzjq9e%2BuQfAAAA%2F%2F8BAAD%2F%2F6AXZcSTBAAA | 192.243.61.225 | | 7 B |
URL lessonworkman.com/ren.gif?sid=H4sIAAAAAAAC%2F1RS0WscRRifTYMKfanSNxXuoQ8WzGV3727vzj5UY4wEY1NaRR8UmdnZvYyZ3dnM7Nxe8hRakD4e%2FgWb3yUNahD9A1p0U1AIFHuCEND8E0LfRLkzePaD4fu%2B%2Bf0Gft%2Fvmy%2F27BnxYenp8vtqR0hJF1t1t%2Fbax553rbYmUjuoDTrBZ0HzWk333%2BgGdfdq7d0o3FSLvuu5rud6tRWho1gNFicgRHbU9epdt970616riYF%2BtjfWgaEOeP%2BMvATBx%2FOPnMsQYYU0%2BW45Mpu5yl5%2FJ7GS5kqjzw8%2FTDdTVaRIZmWsHcTp4TkbyjxZeQiVHkzlQvX%2FIzIxJs5PD8HSw3ORYP39qU4mEaVg%2FCKKfoVIVhC0QqjuQvAnBAg5bqwjTe7fULqg2%2F%2BidIKOyfzTPyGKMZn%2F4zLS5NslKQa120raXKjUYBCXEIMKolchs8fId%2BYgimOE%2BR0I%2FpgsPl1DmuyvG6kg%2BOkVL%2B7yls%2BCBdeLmwtN6voLHRZ2F7jndmK30wniuD01SIgKIq4goyGocWAnRziwsQObOUj4aS30PK%2Ft8pC6nW4YNng7YgF3PdqOPeq5QQc2nMwwRJ4NEcohQr2LTO9iUwyh7Q8wGyUMd2Bygj4vUUQEhSEoKEEhCIqcoOiXB1wa35T3uTSWeefZP8%2BNcqTy3h49UHkvSgmoHkLzci87Iy9ODHReuHOEzei0RgPmsk7Xb%2FEua9Cm12qGbqMV%2Bk3WjHi3HcGIEsLMTcfdEWPyyoM6MjEmz3%2F6Oxg9hpHHCMUlUPsqaFGCbpTYSY8otzJf2NjaqucKXJXI8nnk286ePCMvT1e49PPfiMKT67%2BQaSDUJTJd4nPxiKAn741uqYLs31KFId%2BvZ7lIxA6drPd2TvPowtfvRduF0nx12Qy%2FeiucAJPy6IPI5Gs05SLtGfLNkuA80itKhxF5sGo%2BithNazaWrE5ttnbz7ZXVJNORMUKlFagYE1JtIRRjcvGvx9Ofe%2BW3HyF0BW1LJPaEnAeEOkaY7cJkM%2F1GEWg547DMQWHLkfbZ7FIKAhnNespKmP%2F1bFaPNJ28pqLcM%2FfQ03Og%2BV2kSYm%2BLtGXJagcwtgLozzTJ9d%2FbUwDTM6NmNRz%2B0xq%2BeXU5jF5s3oORpzW2o2GS4Nuy2u3adRmTb8TBx6n1G8GfhDQBnIzjq9e%2BuQfAAAA%2F%2F8BAAD%2F%2F6AXZcSTBAAA IP192.243.61.225:0 ASN#39572 DataWeb Global Group B.V.
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RS0WscRRifTYMKfanSNxXuoQ8WzGV3727vzj5UY4wEY1NaRR8UmdnZvYyZ3dnM7Nxe8hRakD4e%2FgWb3yUNahD9A1p0U1AIFHuCEND8E0LfRLkzePaD4fu%2B%2Bf0Gft%2Fvmy%2F27BnxYenp8vtqR0hJF1t1t%2Fbax553rbYmUjuoDTrBZ0HzWk333%2BgGdfdq7d0o3FSLvuu5rud6tRWho1gNFicgRHbU9epdt970616riYF%2BtjfWgaEOeP%2BMvATBx%2FOPnMsQYYU0%2BW45Mpu5yl5%2FJ7GS5kqjzw8%2FTDdTVaRIZmWsHcTp4TkbyjxZeQiVHkzlQvX%2FIzIxJs5PD8HSw3ORYP39qU4mEaVg%2FCKKfoVIVhC0QqjuQvAnBAg5bqwjTe7fULqg2%2F%2BidIKOyfzTPyGKMZn%2F4zLS5NslKQa120raXKjUYBCXEIMKolchs8fId%2BYgimOE%2BR0I%2FpgsPl1DmuyvG6kg%2BOkVL%2B7yls%2BCBdeLmwtN6voLHRZ2F7jndmK30wniuD01SIgKIq4goyGocWAnRziwsQObOUj4aS30PK%2Ft8pC6nW4YNng7YgF3PdqOPeq5QQc2nMwwRJ4NEcohQr2LTO9iUwyh7Q8wGyUMd2Bygj4vUUQEhSEoKEEhCIqcoOiXB1wa35T3uTSWeefZP8%2BNcqTy3h49UHkvSgmoHkLzci87Iy9ODHReuHOEzei0RgPmsk7Xb%2FEua9Cm12qGbqMV%2Bk3WjHi3HcGIEsLMTcfdEWPyyoM6MjEmz3%2F6Oxg9hpHHCMUlUPsqaFGCbpTYSY8otzJf2NjaqucKXJXI8nnk286ePCMvT1e49PPfiMKT67%2BQaSDUJTJd4nPxiKAn741uqYLs31KFId%2BvZ7lIxA6drPd2TvPowtfvRduF0nx12Qy%2FeiucAJPy6IPI5Gs05SLtGfLNkuA80itKhxF5sGo%2BithNazaWrE5ttnbz7ZXVJNORMUKlFagYE1JtIRRjcvGvx9Ofe%2BW3HyF0BW1LJPaEnAeEOkaY7cJkM%2F1GEWg547DMQWHLkfbZ7FIKAhnNespKmP%2F1bFaPNJ28pqLcM%2FfQ03Og%2BV2kSYm%2BLtGXJagcwtgLozzTJ9d%2FbUwDTM6NmNRz%2B0xq%2BeXU5jF5s3oORpzW2o2GS4Nuy2u3adRmTb8TBx6n1G8GfhDQBnIzjq9e%2BuQfAAAA%2F%2F8BAAD%2F%2F6AXZcSTBAAA HTTP/1.1
Host: lessonworkman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.ac/
Cookie: u_pl=17334956; uid_id2=1f9d52b6-01f4-4a02-8bc9-d108f0886ff7:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleca6b0b8925d9b3a4154c035c24b4ed97e=[4376831,4243974]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 13:59:56 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b942cb418b9a7948c086aefdebfa8eed
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 | 54.230.111.45 | | 309 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 IP54.230.111.45:0
Size309 kB (309334 bytes) Hashac0eb8e28ac0bfdbd10143dc4ca03813 11b4822e4f0a65a2886651535208e553b8f11c89 fcf59e47bbf8c0e49407fd7b854cf8ea44d44b26079be80c5d38fb451ba2e722
GET /hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 309334
age: 4
server: nginx
date: Wed, 24 Apr 2024 13:59:52 GMT
last-modified: Wed, 24 Apr 2024 13:59:51 GMT
etag: "66291057-4b856"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: vxznWImvZF5nFN_qvSmZ8_aelmo6aMgBR8pGXiA5hg6jIrdfiGwlHA==
|
|
| xml.poprtb.com/redirect?feed=491010&auth=OpDJQF&pubid=152420 | 174.137.133.17 | | 0 B |
URL xml.poprtb.com/redirect?feed=491010&auth=OpDJQF&pubid=152420 IP174.137.133.17:0 ASN#27257 WEBAIR-INTERNET
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?feed=491010&auth=OpDJQF&pubid=152420 HTTP/1.1
Host: xml.poprtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://marazma.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 24 Apr 2024 13:59:56 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Location: https://r.mylot.com/p.aspx?u=4fb91ece-a662-4402-8a4b-357592a7b1ba
|
|
| www.famososenbolas.com/wp-content/plugins/cookie-law-info/legacy/admin/modules/ccpa/assets/js/cookie-law-info-ccpa.js | 188.114.96.1 | | 3.3 kB |
URL www.famososenbolas.com/wp-content/plugins/cookie-law-info/legacy/admin/modules/ccpa/assets/js/cookie-law-info-ccpa.js IP188.114.96.1:0
File typeJavaScript source, ASCII text, with very long lines (2198) Hash0c7827d2191ce4a3807a47ee29ec84ec b9a66e994e2d00b9f6831d6c71a45b4ffff97beb 4960db9edea9d65ecb7e0f31319087b88c78aadc758ee65c660340c801077250
GET /wp-content/plugins/cookie-law-info/legacy/admin/modules/ccpa/assets/js/cookie-law-info-ccpa.js HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=7331
etag: W/"66212b94-1ca3"
last-modified: Thu, 18 Apr 2024 14:17:56 GMT
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u5Ze2uXnsCUZGvnBNuZYqrZMybzFYwpkAZLP9%2FfHHXf9PUuqdZQGvnxHChN7V3oHEdKk76%2B2rpLOgZ1is6D3oe2Zpi40vRjA%2BQuDnhET7lhvmhZjYF3d7i19IFaW9aCQRSRO5je784f7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc198fb5690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 | 54.230.111.45 | | 319 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 IP54.230.111.45:0
Size319 kB (319201 bytes) Hash8bbe2ad3b23e4ed19d3b5ec13dcab9a5 8b9d6b323b17b5c65f36f4d8607458c7827815ff 08f1b255d0dd20e0ad09d6ba25530a7ad7282983af7dffc4b5e4537bd461290f
GET /hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319201
age: 2
server: nginx
date: Wed, 24 Apr 2024 13:59:54 GMT
last-modified: Wed, 24 Apr 2024 13:59:53 GMT
etag: "66291059-4dee1"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 1n67wlnem9tPC36B8vFu7rnuTH1ZKrFwzWm2Aff3Jkyk9mtN4Gw98g==
|
|
| evaluateuncanny.com/pixel/purst?dl=0&th=0&sc=0&rs=4282&rd=4282&fd=620&bv=24.4.4887&tmpl=136 | 192.243.61.225 | | 0 B |
URL evaluateuncanny.com/pixel/purst?dl=0&th=0&sc=0&rs=4282&rd=4282&fd=620&bv=24.4.4887&tmpl=136 IP192.243.61.225:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/purst?dl=0&th=0&sc=0&rs=4282&rd=4282&fd=620&bv=24.4.4887&tmpl=136 HTTP/1.1
Host: evaluateuncanny.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.ac/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 13:59:56 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/img/close.png | 104.21.70.253 | | 4.0 kB |
URL cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/img/close.png IP104.21.70.253:0
File typePNG image data, 500 x 500, 8-bit gray+alpha, non-interlaced Hash23e9690b0e7ac26868363a6248f44467 d7ad0eae64e0c1e65b12eda0aa9d2b91996dd64f f362c67320d739ccf3bea21f857b9620075bd20ceacda8c51261b9612fe28395
GET /sb/notifications/dating/default/us/desk-all/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:56 GMT
content-type: image/png
content-length: 4022
last-modified: Fri, 19 Jan 2024 14:23:50 GMT
etag: "65aa85f6-fb6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 6051262
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hW4aTfZnc7QuyJFmiorXM7HunnIfzi7NbXg2O4Cn6RGCzTZoiC12B0lPisT5qcrTY%2BUEy7rpaBexXfdy60406mgxwIHIkgyvbdl2H%2B7TRE5aJzOn67Hss1eV6siOjVtcN%2BoMa7B6izPo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969de4285a568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 | 54.230.111.45 | | 309 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 IP54.230.111.45:0
Size309 kB (309334 bytes) Hashac0eb8e28ac0bfdbd10143dc4ca03813 11b4822e4f0a65a2886651535208e553b8f11c89 fcf59e47bbf8c0e49407fd7b854cf8ea44d44b26079be80c5d38fb451ba2e722
GET /hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 309334
age: 4
server: nginx
date: Wed, 24 Apr 2024 13:59:52 GMT
last-modified: Wed, 24 Apr 2024 13:59:51 GMT
etag: "66291057-4b856"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: iWeJUwc3e7bUmtSeS417313qIAjWF0tSKnzuoufdsrBUtZ9KdMlt0Q==
|
|
| go.bbrdbr.com/metric/store/play | 104.18.40.50 | | 0 B |
URL go.bbrdbr.com/metric/store/play IP104.18.40.50:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /metric/store/play HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 230
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 13:59:56 GMT
access-control-allow-origin: https://creative.bbrdbr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtr56iJZADJK12Pn13BDGWiyC6iqi; SameSite=None; Secure; path=/; expires=Thu, 25-Apr-24 13:59:56 GMT; HttpOnly
server: cloudflare
cf-ray: 87969de4eae056ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.cloudimagesb.com/si/05/c8/20/05c820d9ce67af6dea2e5441dbe3e8f9/1683231080.png | 45.133.44.10 | | 39 kB |
URL cdn.cloudimagesb.com/si/05/c8/20/05c820d9ce67af6dea2e5441dbe3e8f9/1683231080.png IP45.133.44.10:0 ASN#39572 DataWeb Global Group B.V.
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash6451b63b68b5068db02571051f6f6a30 32badef5d69090b4d2ea7b300bb5264938e198ef b1b0a314a2d4924b2849fec48b7863ccc68413e58330d99f6ad901bfa6282819
GET /si/05/c8/20/05c820d9ce67af6dea2e5441dbe3e8f9/1683231080.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:56 GMT
content-type: image/png
content-length: 39220
server: nginx/1.21.6
last-modified: Thu, 04 May 2023 20:11:29 GMT
etag: "64541171-9934"
expires: Fri, 26 Apr 2024 13:59:56 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| downstairsnegotiatebarren.com/sfp.js | 188.114.96.1 | | 28 kB |
URL downstairsnegotiatebarren.com/sfp.js IP188.114.96.1:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Hashf4a2f8f9f99541c6f105bbd0a025bd40 1f8e3eff12168fdd9e719adfc098d24a45b6916a b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.ac/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:55 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: f4916de12a73dcb43f03c0e0e0ea2c52
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Wed, 24 Apr 2024 13:59:55 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ytv0LGxJf517c%2F2p0%2F%2Fqq0sYHXUV5G8srMWWMCx0JxiWobdGV3moKEnef6%2Bjx9RO7AToaUR8WgF9jva%2BBtvDNLIcAJpexzCXfuq%2Fxs5CKKzfAjdOtSWtIf%2Bo%2FIJVOg8W9H0tjeXsixP5oX5NqrDBtw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969ddc28815684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.cloudimagesb.com/si/b3/dd/fd/b3ddfd7cf6f212b3bce3129fb7a007fc/1683231156.png | 45.133.44.10 | | 65 kB |
URL cdn.cloudimagesb.com/si/b3/dd/fd/b3ddfd7cf6f212b3bce3129fb7a007fc/1683231156.png IP45.133.44.10:0 ASN#39572 DataWeb Global Group B.V.
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash887812a53b8ea2dbad33f6ae105b8c2d f83d97ef46827200fa62093ed09b4b6fa25b26d8 9443edf293511b0732211234002c799508a2bfc63a3e28a57d7b12ee30f277e9
GET /si/b3/dd/fd/b3ddfd7cf6f212b3bce3129fb7a007fc/1683231156.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:56 GMT
content-type: image/png
content-length: 64601
server: nginx/1.21.6
last-modified: Thu, 04 May 2023 20:12:45 GMT
etag: "645411bd-fc59"
expires: Fri, 26 Apr 2024 13:59:56 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 | 54.230.111.45 | | 319 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 IP54.230.111.45:0
Size319 kB (319201 bytes) Hash8bbe2ad3b23e4ed19d3b5ec13dcab9a5 8b9d6b323b17b5c65f36f4d8607458c7827815ff 08f1b255d0dd20e0ad09d6ba25530a7ad7282983af7dffc4b5e4537bd461290f
GET /hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319201
age: 3
server: nginx
date: Wed, 24 Apr 2024 13:59:54 GMT
last-modified: Wed, 24 Apr 2024 13:59:53 GMT
etag: "66291059-4dee1"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _LxogPc8-lUw5JDQmyD0NjGDYIlbBOK_P6LY-Hjfnzcqa-ounVl7nw==
|
|
| r.mylot.com/p.aspx?u=4fb91ece-a662-4402-8a4b-357592a7b1ba | 34.194.137.172 | | 526 B |
URL r.mylot.com/p.aspx?u=4fb91ece-a662-4402-8a4b-357592a7b1ba IP34.194.137.172:0
File typeHTML document, ASCII text, with very long lines (526), with no line terminators Hashe10c9d48f81d0caa25c1315281e306fe 95fde8f4c095b494fc593e86e2871a76f0ffae7f 3d2ab7e343eb551a7ff9b34a78e49ba0440afffa2ddaca4ec10818eb33ef0b55
GET /p.aspx?u=4fb91ece-a662-4402-8a4b-357592a7b1ba HTTP/1.1
Host: r.mylot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://marazma.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:57 GMT
content-type: text/html; charset=utf-8
content-length: 526
cache-control: private
set-cookie: ASP.NET_SessionId=gxpeayygrcnz1gagwu4njvgg; path=/; HttpOnly; SameSite=Lax
X-Firefox-Spdy: h2
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 | 54.230.111.45 | | 309 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 IP54.230.111.45:0
Size309 kB (309334 bytes) Hashac0eb8e28ac0bfdbd10143dc4ca03813 11b4822e4f0a65a2886651535208e553b8f11c89 fcf59e47bbf8c0e49407fd7b854cf8ea44d44b26079be80c5d38fb451ba2e722
GET /hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 309334
age: 5
server: nginx
date: Wed, 24 Apr 2024 13:59:52 GMT
last-modified: Wed, 24 Apr 2024 13:59:51 GMT
etag: "66291057-4b856"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: bw2nQ0tv6Ievlgm6nk_vIT2HKwqL_R_ZtV7VoXdRiEu-gedM1mR7KQ==
|
|
| xml.popmansion.com/load | 188.114.97.1 | | 371 B |
IP188.114.97.1:0
File typeHTML document, ASCII text Hash2064d5639efbd0a6b8885570f7c59f2a d9d8f4aff93bf32ca12e81625ce5a373fc0260d6 640327605879cb3e1bdbf9f06db63dd457a315d862809b68cdab811215aaf597
POST /load HTTP/1.1
Host: xml.popmansion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 98
Origin: https://xml.popmansion.com
DNT: 1
Connection: keep-alive
Referer: https://xml.popmansion.com/sub/KpEzn38
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Wed, 24 Apr 2024 13:59:55 GMT
content-type: text/html; charset=utf-8
location: https://xml.cachegorilla.com/redirect?feed=652770&auth=kWcHhV&pubid=202912
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SaJ7Qn3H%2FGXrl%2FQ0pFsPs%2BDBPcQ%2BwU%2B5ZppwN1cKAF5AP0ogotIPzSQL6T2bYr2rYOrH1dwH308dB%2BEZyJH0JouLpTRmwIcJ3EmGM8RJODTykr%2BF90mD9VB84sXMcPAXwzEZA3Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87969dde3f5356bd-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lessonworkman.com/impr.gif?sid=H4sIAAAAAAAC%2F1RS32scVRS%2BkwYV%2BlKlbyrsQx8smM3M%2Fl77UI0xEoxNaRV9UOT%2Bms01d%2BZO7p3Z2eQptCB9XPwLJt8mDWoQ%2FQNadFJQCBS7ghDQ%2FBNC30TZNbj2wOWcc7%2Fvwne%2Bc7%2FYy85IDRk9XX7f7Cit6WKz6lde%2BzgIrlXWVJwNKoNO67NW41rF9t%2Fotqr%2B1cq7km%2BaxZof%2BH7gB5UVZWVoBosTECo56gbVrl9t1KpBs4GBfbZ3mQdHPYj%2BGXkJSoznH3mXoXiJOPpuWbrN1CSvvxNlmqbGoi8OP4w3Y5PHiGZlaD2E8eE5G8Y9WXkIEx9M5cL0%2FyMyNSbeTw%2FB4sNzkWD9%2FalOpiFjMHEReb%2BE1CUULcHNXSjxhABc4MY64uj%2BDWNzuv0vSifomMw%2F%2FRMqH5P5Py4jjr5d0mpQuW10lioTOwzCAmpQQvVKJNkx0p05qPwYPL0DJR6TxadriKP9dacNlDi9EoRd0ayx1oIfhI2FBvVrCx3Guwsi8Duh3%2Bm0wrA9NUipEiosoeUQ1HnIJkd5yEIPWeIhEqcVHgRB2xec%2Bp0u53XRlqwl%2FIC2w4AGfquDjE9mGCJNhuB6CG53kdhdbKohbPYD3EYBJzy4lKAvCuSSIHcEOSXIFUGeEuT94kBoV3PFfaFdxoLzXDvP9WJk0t4ePTBpT8YE1A5hRbGXnJEXJwZ6L9w5wqY8rdAW81mnW2uKLqvTRtBscL%2Fe5LUGa0jRbUs4VUC5uem4O2pMXnlQRaLG5PlPfwejx3D6GFxdAs1eBc0L0I0CO%2FERFZlOFza2tqqpgTAFknQe6ba3p8%2FIy9MVLv38NyQ%2Fuf4LmQa4LZDYAp%2BrRwQ9fW90y%2BRk%2F5bJHfl%2BPUlVpHboZL23U5rKC1%2B%2FJ7dzY8Xqsht%2B9RafAJPy6APp0jUaCxX3HPlmSQkh7YqxXJIHq%2B4jyW5mbmMps3GWrN18e2U1Sqx0Tpm4BFVjQsotcDUmF%2F96PP25V377EcqWsFmBKDsh5wFljsGTXbhkpt8ZAqtnHJZ4yLNiZGtsdqkVgZaznrIC7n89m9UjSyevqSr23D307BxoehdxVKBvC%2FR1AaqHcNmFUZrYk%2Bu%2F1qcBpudGTNu5faat%2FnJq85i8WT4Hp04rdV%2B0mQxlm8lGsxFKLlizyXweclYXnQ5H6sbh1Uuf%2FAMAAP%2F%2FAQAA%2F%2F8gw7AskwQAAA%3D%3D | 192.243.61.225 | | 7 B |
URL lessonworkman.com/impr.gif?sid=H4sIAAAAAAAC%2F1RS32scVRS%2BkwYV%2BlKlbyrsQx8smM3M%2Fl77UI0xEoxNaRV9UOT%2Bms01d%2BZO7p3Z2eQptCB9XPwLJt8mDWoQ%2FQNadFJQCBS7ghDQ%2FBNC30TZNbj2wOWcc7%2Fvwne%2Bc7%2FYy85IDRk9XX7f7Cit6WKz6lde%2BzgIrlXWVJwNKoNO67NW41rF9t%2Fotqr%2B1cq7km%2BaxZof%2BH7gB5UVZWVoBosTECo56gbVrl9t1KpBs4GBfbZ3mQdHPYj%2BGXkJSoznH3mXoXiJOPpuWbrN1CSvvxNlmqbGoi8OP4w3Y5PHiGZlaD2E8eE5G8Y9WXkIEx9M5cL0%2FyMyNSbeTw%2FB4sNzkWD9%2FalOpiFjMHEReb%2BE1CUULcHNXSjxhABc4MY64uj%2BDWNzuv0vSifomMw%2F%2FRMqH5P5Py4jjr5d0mpQuW10lioTOwzCAmpQQvVKJNkx0p05qPwYPL0DJR6TxadriKP9dacNlDi9EoRd0ayx1oIfhI2FBvVrCx3Guwsi8Duh3%2Bm0wrA9NUipEiosoeUQ1HnIJkd5yEIPWeIhEqcVHgRB2xec%2Bp0u53XRlqwl%2FIC2w4AGfquDjE9mGCJNhuB6CG53kdhdbKohbPYD3EYBJzy4lKAvCuSSIHcEOSXIFUGeEuT94kBoV3PFfaFdxoLzXDvP9WJk0t4ePTBpT8YE1A5hRbGXnJEXJwZ6L9w5wqY8rdAW81mnW2uKLqvTRtBscL%2Fe5LUGa0jRbUs4VUC5uem4O2pMXnlQRaLG5PlPfwejx3D6GFxdAs1eBc0L0I0CO%2FERFZlOFza2tqqpgTAFknQe6ba3p8%2FIy9MVLv38NyQ%2Fuf4LmQa4LZDYAp%2BrRwQ9fW90y%2BRk%2F5bJHfl%2BPUlVpHboZL23U5rKC1%2B%2FJ7dzY8Xqsht%2B9RafAJPy6APp0jUaCxX3HPlmSQkh7YqxXJIHq%2B4jyW5mbmMps3GWrN18e2U1Sqx0Tpm4BFVjQsotcDUmF%2F96PP25V377EcqWsFmBKDsh5wFljsGTXbhkpt8ZAqtnHJZ4yLNiZGtsdqkVgZaznrIC7n89m9UjSyevqSr23D307BxoehdxVKBvC%2FR1AaqHcNmFUZrYk%2Bu%2F1qcBpudGTNu5faat%2FnJq85i8WT4Hp04rdV%2B0mQxlm8lGsxFKLlizyXweclYXnQ5H6sbh1Uuf%2FAMAAP%2F%2FAQAA%2F%2F8gw7AskwQAAA%3D%3D IP192.243.61.225:0 ASN#39572 DataWeb Global Group B.V.
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RS32scVRS%2BkwYV%2BlKlbyrsQx8smM3M%2Fl77UI0xEoxNaRV9UOT%2Bms01d%2BZO7p3Z2eQptCB9XPwLJt8mDWoQ%2FQNadFJQCBS7ghDQ%2FBNC30TZNbj2wOWcc7%2Fvwne%2Bc7%2FYy85IDRk9XX7f7Cit6WKz6lde%2BzgIrlXWVJwNKoNO67NW41rF9t%2Fotqr%2B1cq7km%2BaxZof%2BH7gB5UVZWVoBosTECo56gbVrl9t1KpBs4GBfbZ3mQdHPYj%2BGXkJSoznH3mXoXiJOPpuWbrN1CSvvxNlmqbGoi8OP4w3Y5PHiGZlaD2E8eE5G8Y9WXkIEx9M5cL0%2FyMyNSbeTw%2FB4sNzkWD9%2FalOpiFjMHEReb%2BE1CUULcHNXSjxhABc4MY64uj%2BDWNzuv0vSifomMw%2F%2FRMqH5P5Py4jjr5d0mpQuW10lioTOwzCAmpQQvVKJNkx0p05qPwYPL0DJR6TxadriKP9dacNlDi9EoRd0ayx1oIfhI2FBvVrCx3Guwsi8Duh3%2Bm0wrA9NUipEiosoeUQ1HnIJkd5yEIPWeIhEqcVHgRB2xec%2Bp0u53XRlqwl%2FIC2w4AGfquDjE9mGCJNhuB6CG53kdhdbKohbPYD3EYBJzy4lKAvCuSSIHcEOSXIFUGeEuT94kBoV3PFfaFdxoLzXDvP9WJk0t4ePTBpT8YE1A5hRbGXnJEXJwZ6L9w5wqY8rdAW81mnW2uKLqvTRtBscL%2Fe5LUGa0jRbUs4VUC5uem4O2pMXnlQRaLG5PlPfwejx3D6GFxdAs1eBc0L0I0CO%2FERFZlOFza2tqqpgTAFknQe6ba3p8%2FIy9MVLv38NyQ%2Fuf4LmQa4LZDYAp%2BrRwQ9fW90y%2BRk%2F5bJHfl%2BPUlVpHboZL23U5rKC1%2B%2FJ7dzY8Xqsht%2B9RafAJPy6APp0jUaCxX3HPlmSQkh7YqxXJIHq%2B4jyW5mbmMps3GWrN18e2U1Sqx0Tpm4BFVjQsotcDUmF%2F96PP25V377EcqWsFmBKDsh5wFljsGTXbhkpt8ZAqtnHJZ4yLNiZGtsdqkVgZaznrIC7n89m9UjSyevqSr23D307BxoehdxVKBvC%2FR1AaqHcNmFUZrYk%2Bu%2F1qcBpudGTNu5faat%2FnJq85i8WT4Hp04rdV%2B0mQxlm8lGsxFKLlizyXweclYXnQ5H6sbh1Uuf%2FAMAAP%2F%2FAQAA%2F%2F8gw7AskwQAAA%3D%3D HTTP/1.1
Host: lessonworkman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.ac/
Cookie: u_pl=17334956; uid_id2=1f9d52b6-01f4-4a02-8bc9-d108f0886ff7:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleca6b0b8925d9b3a4154c035c24b4ed97e=[4376831,4243974]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 13:59:57 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e00bcfcd07f13c01711c16f35b30d7ef
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| lessonworkman.com/pixel/sbs?c=1 | 192.243.59.13 | | 0 B |
URL lessonworkman.com/pixel/sbs?c=1 IP192.243.59.13:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbs?c=1 HTTP/1.1
Host: lessonworkman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.ac/
Cookie: u_pl=17334956; uid_id2=1f9d52b6-01f4-4a02-8bc9-d108f0886ff7:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; sleca6b0b8925d9b3a4154c035c24b4ed97e=[4376831,4243974]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 24 Apr 2024 13:59:57 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| go.bbrdbr.com/metric/store/creative-playback-error | 104.18.40.50 | | 0 B |
URL go.bbrdbr.com/metric/store/creative-playback-error IP104.18.40.50:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /metric/store/creative-playback-error HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 222
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 13:59:57 GMT
access-control-allow-origin: https://creative.bbrdbr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtrsxk9i19ervseJR7ELqWvAB9h64; SameSite=None; Secure; path=/; expires=Thu, 25-Apr-24 13:59:57 GMT; HttpOnly
server: cloudflare
cf-ray: 87969ddc9d2b56ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 | 54.230.111.45 | | 319 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 IP54.230.111.45:0
Size319 kB (319201 bytes) Hash8bbe2ad3b23e4ed19d3b5ec13dcab9a5 8b9d6b323b17b5c65f36f4d8607458c7827815ff 08f1b255d0dd20e0ad09d6ba25530a7ad7282983af7dffc4b5e4537bd461290f
GET /hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319201
age: 3
server: nginx
date: Wed, 24 Apr 2024 13:59:54 GMT
last-modified: Wed, 24 Apr 2024 13:59:53 GMT
etag: "66291059-4dee1"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: isdeMbmFzRh2K3l8bKg3_FvRuCgvhsK4I9LmYrMWWhRKuM4qHL_3UQ==
|
|
| xml.popmansion.com/load | 188.114.97.1 | | 359 B |
IP188.114.97.1:0
File typeHTML document, ASCII text Hashf219f4e1a432fbb2980f91563407cc2b 434419565b9b9e48baedb78c889dfda7b18b722d 05d912b6cb9b24ddb89ab6144f1f93a139be169d649ec68fc55bfb2d0ca93359
POST /load HTTP/1.1
Host: xml.popmansion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 92
Origin: https://xml.popmansion.com
DNT: 1
Connection: keep-alive
Referer: https://xml.popmansion.com/sub/ED05GzY
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Wed, 24 Apr 2024 13:59:55 GMT
content-type: text/html; charset=utf-8
location: https://xml.xmlwiz.com/redirect?feed=598894&auth=FqgVMV&pubid=196092
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SoI4B%2FGOKfs1K3TdCjiPZdIUXY1JbbRaWpF8RRlogOzz0NABRnnLvdnRPza0A4KHGeFV4HRZJC8e%2B5Js5TtFeHYoWTnRsxYCnkrdtOXkf7%2FgcjpkxFrGujCPuDilkATIvfK96vY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87969dde9fd456bd-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 142.250.74.99 | | 16 kB |
URL fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP142.250.74.99:0
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hqq.ac
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 10:46:32 GMT
expires: Wed, 23 Apr 2025 10:46:32 GMT
cache-control: public, max-age=31536000
age: 98005
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.99 | | 16 kB |
URL fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.99:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hqq.ac
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:37:01 GMT
expires: Fri, 18 Apr 2025 02:37:01 GMT
cache-control: public, max-age=31536000
age: 559376
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 | 54.230.111.45 | | 309 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 IP54.230.111.45:0
Size309 kB (309334 bytes) Hashac0eb8e28ac0bfdbd10143dc4ca03813 11b4822e4f0a65a2886651535208e553b8f11c89 fcf59e47bbf8c0e49407fd7b854cf8ea44d44b26079be80c5d38fb451ba2e722
GET /hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 309334
age: 5
server: nginx
date: Wed, 24 Apr 2024 13:59:52 GMT
last-modified: Wed, 24 Apr 2024 13:59:51 GMT
etag: "66291057-4b856"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: S9vpGG5GxURfjrVWd8pc17foi4Ny6XyYtePs_a0KXMYvBul0LE3jJQ==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 | 54.230.111.45 | | 319 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 IP54.230.111.45:0
Size319 kB (319201 bytes) Hash8bbe2ad3b23e4ed19d3b5ec13dcab9a5 8b9d6b323b17b5c65f36f4d8607458c7827815ff 08f1b255d0dd20e0ad09d6ba25530a7ad7282983af7dffc4b5e4537bd461290f
GET /hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319201
age: 3
server: nginx
date: Wed, 24 Apr 2024 13:59:54 GMT
last-modified: Wed, 24 Apr 2024 13:59:53 GMT
etag: "66291059-4dee1"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _OCGaUInkjdLrvOif9SAbTSK8UH6C9HtdQWg3tlB3nqnOBl1F3_TaA==
|
|
| ocsp.r2m03.amazontrust.com/ | 143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hash47372499897366c6df6030e1fca707fc e4d90334439e3b5bf46df8570cf5ab635811da26 eb7780e8cc066ee3d92c744ea3a6bc063fe7bb15d08083b6ba0b56e254856dfe
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 24 Apr 2024 13:59:57 GMT
Last-Modified: Wed, 24 Apr 2024 13:05:00 GMT
Server: ECAcc (amb/6AD5)
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: BgQ7VfTTvL73NT4SL6hClskKDbfw5FTpj94oJIL4Yn0fWI6Y1ZXvxA==
Age: 3297
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 648 B |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
Hash5e1058cb631206deee568729ad7b8f1a 19151d67420a9d42f9206f65160ae14fd3af7f70 9834801b609368a5ae9596f4366434f99271d5f41d9bd244800b4a9e295608d7
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Wed, 24 Apr 2024 13:59:56 GMT
last-modified: Wed, 24 Apr 2024 13:59:55 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wgvTedZjlUx9GSDBCgJmEI2zICcdrwnz9M97uT1fVc6I-IXZn8pSyw==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 | 54.230.111.45 | | 309 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 IP54.230.111.45:0
Size309 kB (309334 bytes) Hashac0eb8e28ac0bfdbd10143dc4ca03813 11b4822e4f0a65a2886651535208e553b8f11c89 fcf59e47bbf8c0e49407fd7b854cf8ea44d44b26079be80c5d38fb451ba2e722
GET /hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 309334
age: 5
server: nginx
date: Wed, 24 Apr 2024 13:59:52 GMT
last-modified: Wed, 24 Apr 2024 13:59:51 GMT
etag: "66291057-4b856"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: BcPrw0noNtpc6OfPV9VP1DFI3wnFHJU1QrK1rG3tnhYOJYDqehsnUA==
|
|
| ownxmlclick.admidainsight.com/nrtb/click?bid=8oOCR6pdv1Rn1la0EikCU2e-IITpDrptW1WYY6nhHWn07Go8h9bmD4DdrIrUs2Mp_0_4 | 23.226.122.79 | | 99 B |
URL ownxmlclick.admidainsight.com/nrtb/click?bid=8oOCR6pdv1Rn1la0EikCU2e-IITpDrptW1WYY6nhHWn07Go8h9bmD4DdrIrUs2Mp_0_4 IP23.226.122.79:0
File typeHTML document, ASCII text Hash9489078b97deb1c28322ed7bc3c04349 48230a06ae34ff51d047e8c86d9f71ced57bc482 51747136ef0a5b3b7896770f895c8fa06a81429e0fa97fde6fc6a14a05aa9019
GET /nrtb/click?bid=8oOCR6pdv1Rn1la0EikCU2e-IITpDrptW1WYY6nhHWn07Go8h9bmD4DdrIrUs2Mp_0_4 HTTP/1.1
Host: ownxmlclick.admidainsight.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xml.popmansion.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.18.0 (Ubuntu)
date: Wed, 24 Apr 2024 13:59:57 GMT
content-type: text/html; charset=utf-8
content-length: 99
location: https://meetbenjen.com/in/p/?spot_id=548226&cat=25&sub_id=1982928765
X-Firefox-Spdy: h2
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 | 54.230.111.45 | | 319 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 IP54.230.111.45:0
Size319 kB (319201 bytes) Hash8bbe2ad3b23e4ed19d3b5ec13dcab9a5 8b9d6b323b17b5c65f36f4d8607458c7827815ff 08f1b255d0dd20e0ad09d6ba25530a7ad7282983af7dffc4b5e4537bd461290f
GET /hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319201
age: 3
server: nginx
date: Wed, 24 Apr 2024 13:59:54 GMT
last-modified: Wed, 24 Apr 2024 13:59:53 GMT
etag: "66291059-4dee1"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Flp2bWZ5rB4i_2VXokjr10fpq6e4kfCtMjR3wJTFWE13XLcYGPAEKw==
|
|
| filter.clickmeniaads.com/filter?q=&i=AluHgwPYUZM_0&ci=-5730622920063948262&t=1186656602&h=1 | 174.137.133.17 | | 13 kB |
URL filter.clickmeniaads.com/filter?q=&i=AluHgwPYUZM_0&ci=-5730622920063948262&t=1186656602&h=1 IP174.137.133.17:0 ASN#27257 WEBAIR-INTERNET
File typeHTML document, ASCII text, with very long lines (524) Hash9cd7d3e020d2b289097e5cab0b8ed614 45a01fb454b52c3ccac48914cae254a69525474f 3357e7ed80e8111dbd14005f16dbb853a10208bb1c71e43cb4e800f273fd394f
GET /filter?q=&i=AluHgwPYUZM_0&ci=-5730622920063948262&t=1186656602&h=1 HTTP/1.1
Host: filter.clickmeniaads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xml.popmansion.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 13:59:57 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 12952
Connection: keep-alive
Referrer-Policy: unsafe-url
Cache-Control: no-store
Set-Cookie: c-1132570969=-1522390430
x3328772=1522390430; Domain=.clickmeniaads.com
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 | 54.230.111.45 | | 309 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 IP54.230.111.45:0
Size309 kB (309334 bytes) Hashac0eb8e28ac0bfdbd10143dc4ca03813 11b4822e4f0a65a2886651535208e553b8f11c89 fcf59e47bbf8c0e49407fd7b854cf8ea44d44b26079be80c5d38fb451ba2e722
GET /hls/19358621/19358621_480p_448_y2lDRo1XV9m1iTbM_1713967189.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 309334
age: 6
server: nginx
date: Wed, 24 Apr 2024 13:59:52 GMT
last-modified: Wed, 24 Apr 2024 13:59:51 GMT
etag: "66291057-4b856"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: obJAy_KrSzxgROWI8xa1GTK_cC8uL3FNCQnlHVycKyAkibYAF92SeA==
|
|
| meetbenjen.com/in/p/?spot_id=548226&cat=25&sub_id=1982928765 | 109.206.161.16 | | 322 kB |
URL meetbenjen.com/in/p/?spot_id=548226&cat=25&sub_id=1982928765 IP109.206.161.16:0
File typegzip compressed data, from Unix Size322 kB (321687 bytes) Hash45383aa2d2c0b65d0fe20333c400333a e123b195a3da08ced8c3e7ab8047394befc7ca06 84b25fde8f5bb054b8d41efa04ce565bc8af255be3c70e188d1e5edbb840e930
GET /in/p/?spot_id=548226&cat=25&sub_id=1982928765 HTTP/1.1
Host: meetbenjen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xml.popmansion.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Wed, 24 Apr 2024 13:59:57 GMT
content-type: text/html; charset=UTF-8
pragma: no-cache
vary: Accept-Encoding, *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 1095.0=1; expires=Thu, 25 Apr 2024 13:59:57 GMT; path=/; secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 | 54.230.111.45 | 200 OK | 320 kB |
URL GET HTTP/3b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 IP54.230.111.45:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size320 kB (319964 bytes) Hash70956d149a8c30f52109ef4af2c47363 4071b9322cfacb14d0376b8385906ebcc3b0254f 4849efaed892b4f931ef23614cc5454300c8176ee0bf4f260b435a118b928b6b
GET /hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319964
age: 2
server: nginx
date: Wed, 24 Apr 2024 13:59:56 GMT
last-modified: Wed, 24 Apr 2024 13:59:55 GMT
etag: "6629105b-4e1dc"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: WLyn-J5vCewGW3ObBPgywkxqtA-CMIFIzA2kPJBWZx07AQeGWItxsA==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 | 54.230.111.45 | | 319 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 IP54.230.111.45:0
Size319 kB (319201 bytes) Hash8bbe2ad3b23e4ed19d3b5ec13dcab9a5 8b9d6b323b17b5c65f36f4d8607458c7827815ff 08f1b255d0dd20e0ad09d6ba25530a7ad7282983af7dffc4b5e4537bd461290f
GET /hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319201
age: 4
server: nginx
date: Wed, 24 Apr 2024 13:59:54 GMT
last-modified: Wed, 24 Apr 2024 13:59:53 GMT
etag: "66291059-4dee1"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: kiM2q7u9cNmy2cpfQmx_V48bf2tYi7SDcYJS5WB11-fHOh7xXvBtSA==
|
|
| cde.dundie.click/aff_c?offer_id=6355&aff_id=1213&url_id=27029 |  52.16.67.239 | 302 Found | 516 B |
URL GET HTTP/1.1cde.dundie.click/aff_c?offer_id=6355&aff_id=1213&url_id=27029 IP52.16.67.239:443
Requested byhttps://hqq.ac/e/ODRmbUxMRjUzaW9LdG01TTNjSzQxQT09 CertificateIssuerAmazon Subjectcde.dundie.click Fingerprint9A:0B:BA:CE:74:94:E3:30:16:50:E3:DA:9E:9C:29:83:90:CE:D4:27 ValidityTue, 29 Aug 2023 00:00:00 GMT - Fri, 27 Sep 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (382) Hasha8c1815376be56700317f0623cdf2125 f85b4cb386c4f89bf7108de46ecf325f5c47b083 981ba2634ebfeb1ec438cf1b7301f468cdf72113d0b66c3369da0790a5b98323
GET /aff_c?offer_id=6355&aff_id=1213&url_id=27029 HTTP/1.1
Host: cde.dundie.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 24 Apr 2024 13:59:58 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 516
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: /aff_r?offer_id=6355&aff_id=1213&url=https%3A%2F%2Fad.doubleclick.net%2Fddm%2Ftrackclk%2FN1780537.3069332BEDIGITAL%2FB31338717.391832498%3Bdc_trk_aid%3D583290269%3Bdc_trk_cid%3D208079245%3Bdc_lat%3D%3Bdc_rdid%3D%3Btag_for_child_directed_treatment%3D%3Btfua%3D%3Bltd%3D%3Bdc_tdv%3D1&urlauth=560525735792487424409898331765
P3p: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Set-Cookie: aff_ran_url_6355=27029; expires=Thu, 25 Apr 2024 13:59:58 GMT; path=/; SameSite=None; Secure
enc_aff_session_6355=ENC032aaa0de846865cef5c011b043dca79c18b6ad50fa46fff792d3ae727059adb858fd035341eaf0ce361fd133c7dcd587317027980bf7d22b3c979a00ace0b5179bfaa835455f7099e63d4d511aa20db3df9dc33c8899484f0138a513fd6eead364a7ca5b8cd14e876b92466521f4bdf5dc25a4f90135b75318ffc937a92bdafe0151009b6; expires=Thu, 25 Apr 2024 13:59:58 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiI5Ni4wIiwibW9iaWxlX2NhcnJpZXIiOiI/IiwidXNlcl9hZ2VudCI6Ik1vemlsbGEvNS4wIChYMTE7IExpbnV4IFg4Nl82NDsgUnY6OTYuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC85Ni4wIiwiYWNjZXB0X2xhbmd1YWdlIjoiZW4tVVMsZW47cT0wLjUiLCJjb25uZWN0aW9uX3NwZWVkIjoiYnJvYWRiYW5kIn0=; expires=Sat, 20 Mar 2027 00:39:58 GMT; path=/; SameSite=None; Secure
Tracking_id: 102d8d3899395f94d5f7ef1310a83a
X-Robots-Tag: noindex, nofollow
Access-Control-Allow-Origin: *
X-Request-Id: 8c5579afc6d2f174404026805a19f767
Access-Control-Allow-Headers: Tune-SDK-Version
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 | 54.230.111.45 | 200 OK | 320 kB |
URL GET HTTP/3b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 IP54.230.111.45:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size320 kB (319964 bytes) Hash70956d149a8c30f52109ef4af2c47363 4071b9322cfacb14d0376b8385906ebcc3b0254f 4849efaed892b4f931ef23614cc5454300c8176ee0bf4f260b435a118b928b6b
GET /hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319964
age: 2
server: nginx
date: Wed, 24 Apr 2024 13:59:56 GMT
last-modified: Wed, 24 Apr 2024 13:59:55 GMT
etag: "6629105b-4e1dc"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: XxNjtdkNbKJ46vPOxCrg65VA7hDkbYMGlpYN8fT4-K6t9cyTFMoioA==
|
|
| cde.dundie.click/aff_r?offer_id=6355&aff_id=1213&url=https%3A%2F%2Fad.doubleclick.net%2Fddm%2Ftrackclk%2FN1780537.3069332BEDIGITAL%2FB31338717.391832498%3Bdc_trk_aid%3D583290269%3Bdc_trk_cid%3D208079245%3Bdc_lat%3D%3Bdc_rdid%3D%3Btag_for_child_directed_treatment%3D%3Btfua%3D%3Bltd%3D%3Bdc_tdv%3D1&urlauth=560525735792487424409898331765 | 52.16.67.239 | | 382 B |
URL cde.dundie.click/aff_r?offer_id=6355&aff_id=1213&url=https%3A%2F%2Fad.doubleclick.net%2Fddm%2Ftrackclk%2FN1780537.3069332BEDIGITAL%2FB31338717.391832498%3Bdc_trk_aid%3D583290269%3Bdc_trk_cid%3D208079245%3Bdc_lat%3D%3Bdc_rdid%3D%3Btag_for_child_directed_treatment%3D%3Btfua%3D%3Bltd%3D%3Bdc_tdv%3D1&urlauth=560525735792487424409898331765 IP52.16.67.239:0
CertificateIssuerAmazon Subjectcde.dundie.click Fingerprint9A:0B:BA:CE:74:94:E3:30:16:50:E3:DA:9E:9C:29:83:90:CE:D4:27 ValidityTue, 29 Aug 2023 00:00:00 GMT - Fri, 27 Sep 2024 23:59:59 GMT
File typeHTML document, ASCII text Hash8bacbd1bf687c1026ce44ec8a70aa109 7f5bf9fa2385874d9613b961e2719f1e05ba4697 f1c6a0ec22fa574193d765b865abc6e9827aac8d3d479796bf8df52412eb9b6e
GET /aff_r?offer_id=6355&aff_id=1213&url=https%3A%2F%2Fad.doubleclick.net%2Fddm%2Ftrackclk%2FN1780537.3069332BEDIGITAL%2FB31338717.391832498%3Bdc_trk_aid%3D583290269%3Bdc_trk_cid%3D208079245%3Bdc_lat%3D%3Bdc_rdid%3D%3Btag_for_child_directed_treatment%3D%3Btfua%3D%3Bltd%3D%3Bdc_tdv%3D1&urlauth=560525735792487424409898331765 HTTP/1.1
Host: cde.dundie.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: aff_ran_url_6355=27029; enc_aff_session_6355=ENC032aaa0de846865cef5c011b043dca79c18b6ad50fa46fff792d3ae727059adb858fd035341eaf0ce361fd133c7dcd587317027980bf7d22b3c979a00ace0b5179bfaa835455f7099e63d4d511aa20db3df9dc33c8899484f0138a513fd6eead364a7ca5b8cd14e876b92466521f4bdf5dc25a4f90135b75318ffc937a92bdafe0151009b6; ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiI5Ni4wIiwibW9iaWxlX2NhcnJpZXIiOiI/IiwidXNlcl9hZ2VudCI6Ik1vemlsbGEvNS4wIChYMTE7IExpbnV4IFg4Nl82NDsgUnY6OTYuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC85Ni4wIiwiYWNjZXB0X2xhbmd1YWdlIjoiZW4tVVMsZW47cT0wLjUiLCJjb25uZWN0aW9uX3NwZWVkIjoiYnJvYWRiYW5kIn0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 24 Apr 2024 13:59:58 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 382
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://ad.doubleclick.net/ddm/trackclk/N1780537.3069332BEDIGITAL/B31338717.391832498;dc_trk_aid=583290269;dc_trk_cid=208079245;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv=1
Pragma: no-cache
Access-Control-Allow-Origin: *
X-Request-Id: 6b0af6d6f6f2fac0e7c4ea6c5cd9317d
Access-Control-Allow-Headers: Tune-SDK-Version
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 | 54.230.111.45 | | 319 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 IP54.230.111.45:0
Size319 kB (319201 bytes) Hash8bbe2ad3b23e4ed19d3b5ec13dcab9a5 8b9d6b323b17b5c65f36f4d8607458c7827815ff 08f1b255d0dd20e0ad09d6ba25530a7ad7282983af7dffc4b5e4537bd461290f
GET /hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319201
age: 4
server: nginx
date: Wed, 24 Apr 2024 13:59:54 GMT
last-modified: Wed, 24 Apr 2024 13:59:53 GMT
etag: "66291059-4dee1"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: -eyT3iYBsHujTAlJnG7p4o9yxZ_Eegz-RJmzzzmgYdR3hjVnpmp8Kg==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 | 54.230.111.45 | 200 OK | 320 kB |
URL GET HTTP/3b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 IP54.230.111.45:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size320 kB (319964 bytes) Hash70956d149a8c30f52109ef4af2c47363 4071b9322cfacb14d0376b8385906ebcc3b0254f 4849efaed892b4f931ef23614cc5454300c8176ee0bf4f260b435a118b928b6b
GET /hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319964
age: 2
server: nginx
date: Wed, 24 Apr 2024 13:59:56 GMT
last-modified: Wed, 24 Apr 2024 13:59:55 GMT
etag: "6629105b-4e1dc"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: kP7iarRCaRm9f7pxe6926gSwP7ao6cklutyDO8dyHiXEzr8X93YT3Q==
|
|
| xml-v4.clickmeniaads.com/click2?i=AluHgwPYUZM_0&ci=-5730622920063948262&j=rv%3Db%26ss%3D1280x1024%26ws%3D1920x1080%26wp%3D0x0%26ce%3D0%26ck%3Djc%26cv%3D1571%26cs%3D0%26fr%3D1%26hc%3D0%26fl%3Dnull%26jv%3Dnull%26sc%3D24%26hr%3D4%26rf%3Dxml.popmansion.com%26lo%3Dfilter.clickmeniaads.com%26mb%3D0%26hb%3D1%26pl%3DLinux%2Bx86_64%26ua%3DMozilla%252F5.0%2B%28X11%253B%2BLinux%2Bx86_64%253B%2Brv%253A96.0%29%2BGecko%252F20100101%2BFirefox%252F96.0%26nd%3D2%26to%3Dnull%26wbd%3D1%26wbde%3D0%26sqm%3D0%26phj%3D0%26nmj%3D0%26sln%3D0%26es%3D0%26ln%3Den-US%252Cen%26lnl%3D2%26hsc%3D0%26frc%3D0%26dbt%3D0%26prb%3D20100101%26tz%3D0%26hid%3D0%26mq%3D1%26bch%3D%26blv%3D%26my%3D%26geo%3D%26thx%3D0%26the%3D0%26ths%3D0%26cpc%3D%26ocp%3DLinux%2Bx86_64%26hwc%3D48%26hrl%3D%26acd%3Dpmpmm%26vcd%3Dppp%26pal%3D5%26pai%3D1%26pli%3D1%26win%3D1920x1080%26wout%3D1280x1024%26wpof%3D0x0%26bcld%3D1904x19%26scrp%3D0x0%26scrad%3D1280x1024%26spd%3D24%26pxr%3D1%26sck%3D1%26ckl%3D0%26sls%3D1%26sss%3D1%26six%3D1%26sdb%3D0%26vvr%3Dnull%26vrd%3Dnull%26pnt%3Ddenied%26cnvs%3D7f7f7f80%26mmd_ao%3D0%26mmd_ai%3D0%26mmd_vi%3D0 | 174.137.133.17 | | 0 B |
URL xml-v4.clickmeniaads.com/click2?i=AluHgwPYUZM_0&ci=-5730622920063948262&j=rv%3Db%26ss%3D1280x1024%26ws%3D1920x1080%26wp%3D0x0%26ce%3D0%26ck%3Djc%26cv%3D1571%26cs%3D0%26fr%3D1%26hc%3D0%26fl%3Dnull%26jv%3Dnull%26sc%3D24%26hr%3D4%26rf%3Dxml.popmansion.com%26lo%3Dfilter.clickmeniaads.com%26mb%3D0%26hb%3D1%26pl%3DLinux%2Bx86_64%26ua%3DMozilla%252F5.0%2B%28X11%253B%2BLinux%2Bx86_64%253B%2Brv%253A96.0%29%2BGecko%252F20100101%2BFirefox%252F96.0%26nd%3D2%26to%3Dnull%26wbd%3D1%26wbde%3D0%26sqm%3D0%26phj%3D0%26nmj%3D0%26sln%3D0%26es%3D0%26ln%3Den-US%252Cen%26lnl%3D2%26hsc%3D0%26frc%3D0%26dbt%3D0%26prb%3D20100101%26tz%3D0%26hid%3D0%26mq%3D1%26bch%3D%26blv%3D%26my%3D%26geo%3D%26thx%3D0%26the%3D0%26ths%3D0%26cpc%3D%26ocp%3DLinux%2Bx86_64%26hwc%3D48%26hrl%3D%26acd%3Dpmpmm%26vcd%3Dppp%26pal%3D5%26pai%3D1%26pli%3D1%26win%3D1920x1080%26wout%3D1280x1024%26wpof%3D0x0%26bcld%3D1904x19%26scrp%3D0x0%26scrad%3D1280x1024%26spd%3D24%26pxr%3D1%26sck%3D1%26ckl%3D0%26sls%3D1%26sss%3D1%26six%3D1%26sdb%3D0%26vvr%3Dnull%26vrd%3Dnull%26pnt%3Ddenied%26cnvs%3D7f7f7f80%26mmd_ao%3D0%26mmd_ai%3D0%26mmd_vi%3D0 IP174.137.133.17:0 ASN#27257 WEBAIR-INTERNET
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click2?i=AluHgwPYUZM_0&ci=-5730622920063948262&j=rv%3Db%26ss%3D1280x1024%26ws%3D1920x1080%26wp%3D0x0%26ce%3D0%26ck%3Djc%26cv%3D1571%26cs%3D0%26fr%3D1%26hc%3D0%26fl%3Dnull%26jv%3Dnull%26sc%3D24%26hr%3D4%26rf%3Dxml.popmansion.com%26lo%3Dfilter.clickmeniaads.com%26mb%3D0%26hb%3D1%26pl%3DLinux%2Bx86_64%26ua%3DMozilla%252F5.0%2B%28X11%253B%2BLinux%2Bx86_64%253B%2Brv%253A96.0%29%2BGecko%252F20100101%2BFirefox%252F96.0%26nd%3D2%26to%3Dnull%26wbd%3D1%26wbde%3D0%26sqm%3D0%26phj%3D0%26nmj%3D0%26sln%3D0%26es%3D0%26ln%3Den-US%252Cen%26lnl%3D2%26hsc%3D0%26frc%3D0%26dbt%3D0%26prb%3D20100101%26tz%3D0%26hid%3D0%26mq%3D1%26bch%3D%26blv%3D%26my%3D%26geo%3D%26thx%3D0%26the%3D0%26ths%3D0%26cpc%3D%26ocp%3DLinux%2Bx86_64%26hwc%3D48%26hrl%3D%26acd%3Dpmpmm%26vcd%3Dppp%26pal%3D5%26pai%3D1%26pli%3D1%26win%3D1920x1080%26wout%3D1280x1024%26wpof%3D0x0%26bcld%3D1904x19%26scrp%3D0x0%26scrad%3D1280x1024%26spd%3D24%26pxr%3D1%26sck%3D1%26ckl%3D0%26sls%3D1%26sss%3D1%26six%3D1%26sdb%3D0%26vvr%3Dnull%26vrd%3Dnull%26pnt%3Ddenied%26cnvs%3D7f7f7f80%26mmd_ao%3D0%26mmd_ai%3D0%26mmd_vi%3D0 HTTP/1.1
Host: xml-v4.clickmeniaads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://filter.clickmeniaads.com/filter?q=&i=AluHgwPYUZM_0&ci=-5730622920063948262&t=1186656602&h=1
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 13:59:58 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
|
|
| boloptrex.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxMDk1LCJ0eXBlIjoicG9wIiwic3BhY2VpZCI6MTA5NSwic3ViaWQiOiIxOTgyOTI4NzY1Iiwic3NwIjozNzU4LCJzcG90X2lkIjo1NDgyMjYsInJjaGFuZ2UiOmZhbHNlfX1dLCJzaXRlIjp7ImlkIjoiNTQ4MjI2IiwicGFnZSI6Imh0dHBzOi8veG1sLnBvcG1hbnNpb24uY29tLyIsImNhdCI6WyJJQUIyNSJdfSwiZGV2aWNlIjp7InciOjEyODAsImgiOjEwMjR9LCJ1c2VyIjp7ImlkIjoic2YzOWJ3NDdpNjgzdXV0bjY2aGF0In0sImV4dCI6eyJkdCI6MTcxMzk2NzE5ODMyNn19 | 94.130.197.239 | | 0 B |
URL boloptrex.com/get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxMDk1LCJ0eXBlIjoicG9wIiwic3BhY2VpZCI6MTA5NSwic3ViaWQiOiIxOTgyOTI4NzY1Iiwic3NwIjozNzU4LCJzcG90X2lkIjo1NDgyMjYsInJjaGFuZ2UiOmZhbHNlfX1dLCJzaXRlIjp7ImlkIjoiNTQ4MjI2IiwicGFnZSI6Imh0dHBzOi8veG1sLnBvcG1hbnNpb24uY29tLyIsImNhdCI6WyJJQUIyNSJdfSwiZGV2aWNlIjp7InciOjEyODAsImgiOjEwMjR9LCJ1c2VyIjp7ImlkIjoic2YzOWJ3NDdpNjgzdXV0bjY2aGF0In0sImV4dCI6eyJkdCI6MTcxMzk2NzE5ODMyNn19 IP94.130.197.239:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get/?go=1&data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7ImlkIjoxMDk1LCJ0eXBlIjoicG9wIiwic3BhY2VpZCI6MTA5NSwic3ViaWQiOiIxOTgyOTI4NzY1Iiwic3NwIjozNzU4LCJzcG90X2lkIjo1NDgyMjYsInJjaGFuZ2UiOmZhbHNlfX1dLCJzaXRlIjp7ImlkIjoiNTQ4MjI2IiwicGFnZSI6Imh0dHBzOi8veG1sLnBvcG1hbnNpb24uY29tLyIsImNhdCI6WyJJQUIyNSJdfSwiZGV2aWNlIjp7InciOjEyODAsImgiOjEwMjR9LCJ1c2VyIjp7ImlkIjoic2YzOWJ3NDdpNjgzdXV0bjY2aGF0In0sImV4dCI6eyJkdCI6MTcxMzk2NzE5ODMyNn19 HTTP/1.1
Host: boloptrex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meetbenjen.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.16.0
date: Wed, 24 Apr 2024 13:59:58 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://boloptrex.com/popunder/in/click/?mid=9043764119290096089&pid=0&site=548226&sc=NO&usage_type=DCH&subid=1982928765&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=xml.popmansion.com&hostname=auc-popunder-hz-1&site_id=0&spot_id=548226&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&burl=&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=&iabcat=IAB25&min_cpm=0.1224&placement_type_id=7&skin_test=&verify_hash=1d0d2b896c7d37c7a5b3e329729f7bcf&score=1&durl=&ml=&tag_ab=&original_bid=0&user_fp=0&v2=0&pop_type=0&space_id=1095&real_bid=&skin_id=&vertical_id=&stratagem=&accel=0&gyr=0&iabcat=IAB25&ip_mismatch=false&ua_mismatch=false&ssp=3758&rc=0&v2_track=0&otype=0&mn=0&priority=0&bb=0.1224&url=https%3A%2F%2Fpopdemission.com%2Fin%2F849%2F%3Fsource%3D1982928765%26site_id%3D548226%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26idzone%3D0%26spot_id%3D548226%26mo%3D%26ve%3D%26ad_tags%3D%26p%3Dhttps%253A%252F%252Fxml.popmansion.com%252F%26sid%3D1095%26katds_labels%3D%26is_iframe%3D1%26btype%3D0%26score%3D1%26bf%3D0.1224%26iabcat%3DIAB25%26allowed_labels%3D&pr=&bid_crid=&bid_cid=&ad_tags=&is_interstitial=0&is_direct=1&label_ids=&site_id64=&sp_cl=0&act_sess=0&sp_scr=0&intes=&izb=&ang=0&act_su=0&interest_vertical_ids=&v_scroll_freq=&time_sess=&ext_campaign_id=&scroll_percent=0&empty_clicks=0&aid=0&high_freq_clicks=0&dev_console_activity=0&topics=&client_price=0&o_d=&is_webview=0&timezone_olson=&timezone_ip=Europe/Oslo&offer_label_ids=
X-Firefox-Spdy: h2
|
|
| boloptrex.com/popunder/in/click/?mid=9043764119290096089&pid=0&site=548226&sc=NO&usage_type=DCH&subid=1982928765&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=xml.popmansion.com&hostname=auc-popunder-hz-1&site_id=0&spot_id=548226&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&burl=&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=&iabcat=IAB25&min_cpm=0.1224&placement_type_id=7&skin_test=&verify_hash=1d0d2b896c7d37c7a5b3e329729f7bcf&score=1&durl=&ml=&tag_ab=&original_bid=0&user_fp=0&v2=0&pop_type=0&space_id=1095&real_bid=&skin_id=&vertical_id=&stratagem=&accel=0&gyr=0&iabcat=IAB25&ip_mismatch=false&ua_mismatch=false&ssp=3758&rc=0&v2_track=0&otype=0&mn=0&priority=0&bb=0.1224&url=https%3A%2F%2Fpopdemission.com%2Fin%2F849%2F%3Fsource%3D1982928765%26site_id%3D548226%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26idzone%3D0%26spot_id%3D548226%26mo%3D%26ve%3D%26ad_tags%3D%26p%3Dhttps%253A%252F%252Fxml.popmansion.com%252F%26sid%3D1095%26katds_labels%3D%26is_iframe%3D1%26btype%3D0%26score%3D1%26bf%3D0.1224%26iabcat%3DIAB25%26allowed_labels%3D&pr=&bid_crid=&bid_cid=&ad_tags=&is_interstitial=0&is_direct=1&label_ids=&site_id64=&sp_cl=0&act_sess=0&sp_scr=0&intes=&izb=&ang=0&act_su=0&interest_vertical_ids=&v_scroll_freq=&time_sess=&ext_campaign_id=&scroll_percent=0&empty_clicks=0&aid=0&high_freq_clicks=0&dev_console_activity=0&topics=&client_price=0&o_d=&is_webview=0&timezone_olson=&timezone_ip=Europe/Oslo&offer_label_ids= | 94.130.197.239 | | 0 B |
URL boloptrex.com/popunder/in/click/?mid=9043764119290096089&pid=0&site=548226&sc=NO&usage_type=DCH&subid=1982928765&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=xml.popmansion.com&hostname=auc-popunder-hz-1&site_id=0&spot_id=548226&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&burl=&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=&iabcat=IAB25&min_cpm=0.1224&placement_type_id=7&skin_test=&verify_hash=1d0d2b896c7d37c7a5b3e329729f7bcf&score=1&durl=&ml=&tag_ab=&original_bid=0&user_fp=0&v2=0&pop_type=0&space_id=1095&real_bid=&skin_id=&vertical_id=&stratagem=&accel=0&gyr=0&iabcat=IAB25&ip_mismatch=false&ua_mismatch=false&ssp=3758&rc=0&v2_track=0&otype=0&mn=0&priority=0&bb=0.1224&url=https%3A%2F%2Fpopdemission.com%2Fin%2F849%2F%3Fsource%3D1982928765%26site_id%3D548226%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26idzone%3D0%26spot_id%3D548226%26mo%3D%26ve%3D%26ad_tags%3D%26p%3Dhttps%253A%252F%252Fxml.popmansion.com%252F%26sid%3D1095%26katds_labels%3D%26is_iframe%3D1%26btype%3D0%26score%3D1%26bf%3D0.1224%26iabcat%3DIAB25%26allowed_labels%3D&pr=&bid_crid=&bid_cid=&ad_tags=&is_interstitial=0&is_direct=1&label_ids=&site_id64=&sp_cl=0&act_sess=0&sp_scr=0&intes=&izb=&ang=0&act_su=0&interest_vertical_ids=&v_scroll_freq=&time_sess=&ext_campaign_id=&scroll_percent=0&empty_clicks=0&aid=0&high_freq_clicks=0&dev_console_activity=0&topics=&client_price=0&o_d=&is_webview=0&timezone_olson=&timezone_ip=Europe/Oslo&offer_label_ids= IP94.130.197.239:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /popunder/in/click/?mid=9043764119290096089&pid=0&site=548226&sc=NO&usage_type=DCH&subid=1982928765&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=xml.popmansion.com&hostname=auc-popunder-hz-1&site_id=0&spot_id=548226&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&burl=&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=0&resp_type=&iabcat=IAB25&min_cpm=0.1224&placement_type_id=7&skin_test=&verify_hash=1d0d2b896c7d37c7a5b3e329729f7bcf&score=1&durl=&ml=&tag_ab=&original_bid=0&user_fp=0&v2=0&pop_type=0&space_id=1095&real_bid=&skin_id=&vertical_id=&stratagem=&accel=0&gyr=0&iabcat=IAB25&ip_mismatch=false&ua_mismatch=false&ssp=3758&rc=0&v2_track=0&otype=0&mn=0&priority=0&bb=0.1224&url=https%3A%2F%2Fpopdemission.com%2Fin%2F849%2F%3Fsource%3D1982928765%26site_id%3D548226%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26idzone%3D0%26spot_id%3D548226%26mo%3D%26ve%3D%26ad_tags%3D%26p%3Dhttps%253A%252F%252Fxml.popmansion.com%252F%26sid%3D1095%26katds_labels%3D%26is_iframe%3D1%26btype%3D0%26score%3D1%26bf%3D0.1224%26iabcat%3DIAB25%26allowed_labels%3D&pr=&bid_crid=&bid_cid=&ad_tags=&is_interstitial=0&is_direct=1&label_ids=&site_id64=&sp_cl=0&act_sess=0&sp_scr=0&intes=&izb=&ang=0&act_su=0&interest_vertical_ids=&v_scroll_freq=&time_sess=&ext_campaign_id=&scroll_percent=0&empty_clicks=0&aid=0&high_freq_clicks=0&dev_console_activity=0&topics=&client_price=0&o_d=&is_webview=0&timezone_olson=&timezone_ip=Europe/Oslo&offer_label_ids= HTTP/1.1
Host: boloptrex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://meetbenjen.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.16.0
date: Wed, 24 Apr 2024 13:59:58 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://popdemission.com/in/849/?source=1982928765&site_id=548226&utm1=&utm2=&utm3=&utm4=&idzone=0&spot_id=548226&mo=&ve=&ad_tags=&p=https%3A%2F%2Fxml.popmansion.com%2F&sid=1095&katds_labels=&is_iframe=1&btype=0&score=1&bf=0.1224&iabcat=IAB25&allowed_labels=
X-Firefox-Spdy: h2
|
|
| popdemission.com/in/849/?source=1982928765&site_id=548226&utm1=&utm2=&utm3=&utm4=&idzone=0&spot_id=548226&mo=&ve=&ad_tags=&p=https%3A%2F%2Fxml.popmansion.com%2F&sid=1095&katds_labels=&is_iframe=1&btype=0&score=1&bf=0.1224&iabcat=IAB25&allowed_labels= | 62.122.173.18 | | 0 B |
URL popdemission.com/in/849/?source=1982928765&site_id=548226&utm1=&utm2=&utm3=&utm4=&idzone=0&spot_id=548226&mo=&ve=&ad_tags=&p=https%3A%2F%2Fxml.popmansion.com%2F&sid=1095&katds_labels=&is_iframe=1&btype=0&score=1&bf=0.1224&iabcat=IAB25&allowed_labels= IP62.122.173.18:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/849/?source=1982928765&site_id=548226&utm1=&utm2=&utm3=&utm4=&idzone=0&spot_id=548226&mo=&ve=&ad_tags=&p=https%3A%2F%2Fxml.popmansion.com%2F&sid=1095&katds_labels=&is_iframe=1&btype=0&score=1&bf=0.1224&iabcat=IAB25&allowed_labels= HTTP/1.1
Host: popdemission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://meetbenjen.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.20.1
date: Wed, 24 Apr 2024 13:59:58 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://topsites.hadesex.com/?source=1982928765&site_id=548226&spot_id=548226
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 849.0=1; expires=Thu, 25 Apr 2024 13:59:58 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 | 54.230.111.45 | | 319 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 IP54.230.111.45:0
Size319 kB (319201 bytes) Hash8bbe2ad3b23e4ed19d3b5ec13dcab9a5 8b9d6b323b17b5c65f36f4d8607458c7827815ff 08f1b255d0dd20e0ad09d6ba25530a7ad7282983af7dffc4b5e4537bd461290f
GET /hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319201
age: 5
server: nginx
date: Wed, 24 Apr 2024 13:59:54 GMT
last-modified: Wed, 24 Apr 2024 13:59:53 GMT
etag: "66291059-4dee1"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: EbrEdPAJE4MXTaSFweetTy28xR8jNTpNMVjYFvWUipa5R99t_fE45Q==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 320 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size320 kB (320288 bytes) Hashb0fedff6a7a1171b4123b8238c683b2f e93e9bf61e730e96f57de1a1606e6933f11fb714 9858e4fe59ec399f8889481bdc7a598ac6b462f44702cd5159a0712dd9bc27af
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-P1
server: nginx
last-modified: Wed, 24 Apr 2024 13:59:57 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: HIT
content-encoding: gzip
date: Wed, 24 Apr 2024 13:59:59 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-id: 3gGDM9sI95rI_JH1Dj4S9gUKHVP4w0HyVAsVP_Mu_R0n2byH0cU9oQ==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 | 54.230.111.45 | | 319 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 IP54.230.111.45:0
Size319 kB (319201 bytes) Hash8bbe2ad3b23e4ed19d3b5ec13dcab9a5 8b9d6b323b17b5c65f36f4d8607458c7827815ff 08f1b255d0dd20e0ad09d6ba25530a7ad7282983af7dffc4b5e4537bd461290f
GET /hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319201
age: 5
server: nginx
date: Wed, 24 Apr 2024 13:59:54 GMT
last-modified: Wed, 24 Apr 2024 13:59:53 GMT
etag: "66291059-4dee1"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ZzolTH0xknZuOwOq6eEKRBEVx5LfDfABSyAAbeHo-oM-WHQsxEXg7A==
|
|
| porn13.com/thumbs/AA/JJ/g_.jpg | 188.114.97.1 | | 21 kB |
URL porn13.com/thumbs/AA/JJ/g_.jpg IP188.114.97.1:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 352x197, components 3 Hash95c67a790cb3b1f4730abfe613f0edf2 c8f0b51acadaded340dcffa935cc1454fbc5d2f4 2fba935dbd4ac2f18c89030dba5dae914bfd3dd4802a2b87576459ef6dbd7f3b
GET /thumbs/AA/JJ/g_.jpg HTTP/1.1
Host: porn13.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://topsites.hadesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:59 GMT
content-type: image/jpeg
content-length: 21285
last-modified: Sun, 21 Apr 2024 04:11:16 GMT
etag: "662491e4-5325"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 271932
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ozaj9IFT%2Ffrjw3re70FNbWFd0C6XqPxvCXDdYbm83v5TFF3DTvE7NRMGdA6qaH7UQhk0Kesz9hvm5CGsn6ZH%2FEvMZgbb181cIhEAfOAbGti1Qw1Z9EES3nNJ%2FQuT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969df4f8bf0b61-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| porn13.com/thumbs/AA/Do/g4.jpg | 188.114.97.1 | | 18 kB |
URL porn13.com/thumbs/AA/Do/g4.jpg IP188.114.97.1:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 352x198, components 3 Hash2e3a76e552b73eb352650cf6fabc1eda 9b89d8ad2511127ba533e7bd95296980853fae10 a3790214e3350c87aa73e6052872be9ef3cd4102fa6baead8ced673557cca4b9
GET /thumbs/AA/Do/g4.jpg HTTP/1.1
Host: porn13.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://topsites.hadesex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:59 GMT
content-type: image/jpeg
content-length: 17477
last-modified: Fri, 19 Aug 2022 16:09:25 GMT
etag: "62ffb5b5-4445"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 1660582
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hu6RXbgT8yNiFiTS5M7a0ANj9iyiR1qnJu%2BoF5pMoBSvEnlEA8YIZDJZtNRlrozTAuIkHzydMG3TcM%2FEPE%2BOQsiAdgEd3f4KsZJDTuuc9KKhxS04n5ECqRgvuVAA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969df4f8b10b61-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| topsites.hadesex.com/main.css?v=4.6 | 188.114.97.1 | | 42 kB |
URL topsites.hadesex.com/main.css?v=4.6 IP188.114.97.1:0
File typeassembler source, ASCII text, with very long lines (1663), with CRLF line terminators Hasha4ef7f0d6007f4cc5662fad2b7659b03 29632e93afb0c6c9e3ddbe09314db753f9005c27 d18e5826f21b3d4673dae7c9900bab0ced08c165ebfbcd1fd7d8f4d1955043e8
GET /main.css?v=4.6 HTTP/1.1
Host: topsites.hadesex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://topsites.hadesex.com/?source=1982928765&site_id=548226&spot_id=548226
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:59 GMT
content-type: text/css
last-modified: Wed, 10 Apr 2024 12:37:24 GMT
vary: Accept-Encoding
etag: W/"66168804-cec6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-request-id: dfb18ac1139805e7559bcd238156cda8
cf-cache-status: HIT
age: 1214502
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=85mRiLQaO9UuEoLAy4rW2ycDMMUdxboa6lkNjdaeelAME%2ByH42QbLXFX0miBwCNtOeT1Ol0sgQ9c0g5cIe9z%2F86G3LsCxjaeTBOB6j4y%2BtFH3QKIHv3FokLHHMjRkY4Dc7Riv95SvA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87969df44f0f7127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 | 54.230.111.45 | 200 OK | 320 kB |
URL GET HTTP/3b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 IP54.230.111.45:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size320 kB (319964 bytes) Hash70956d149a8c30f52109ef4af2c47363 4071b9322cfacb14d0376b8385906ebcc3b0254f 4849efaed892b4f931ef23614cc5454300c8176ee0bf4f260b435a118b928b6b
GET /hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319964
age: 3
server: nginx
date: Wed, 24 Apr 2024 13:59:56 GMT
last-modified: Wed, 24 Apr 2024 13:59:55 GMT
etag: "6629105b-4e1dc"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: SjvSWPCkxjXYpVin33pVUbXN3BT02RzdcFNAF1dB3NF0nSK4kbR0rg==
|
|
| losanalos.com/thumbs/AA/ZW/wI.jpg | 188.114.97.1 | | 107 kB |
URL losanalos.com/thumbs/AA/ZW/wI.jpg IP188.114.97.1:0
File typeJPEG image data, baseline, precision 8, 1196x672, components 3 Size107 kB (107254 bytes) Hash5917475cec57b3d7429ce73863c9e64a 38d0f4f1b4e371870cf818d4905a59a044eff34a f79b3bfda8baed6bce91d2a908afe05130089df1d8ed183523b6ab2839ddf95e
GET /thumbs/AA/ZW/wI.jpg HTTP/1.1
Host: losanalos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:59 GMT
content-type: image/jpeg
content-length: 107254
last-modified: Thu, 21 Mar 2024 18:31:19 GMT
etag: "65fc7cf7-1a2f6"
expires: Mon, 13 May 2024 20:45:42 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 926057
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=93fBfCCmOBOjO26c6X9l03uLTmgFDqQRIBmLp46Mlj6n9Yg8yee22lJ0ZJJ42sZke4RmWjqY%2FyLShKBUlYXKnp%2B3yF7zI9%2FgKelAr6Nr%2FZplYGDRkFzYwZPaZPFlQ2ii"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969df638495685-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Montserrat+Alternates:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap | 142.250.74.106 | | 132 kB |
URL fonts.googleapis.com/css2?family=Montserrat+Alternates:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap IP142.250.74.106:0
File typegzip compressed data, max compression Size132 kB (131551 bytes) Hash4262a50a55e5466e26e2e06dc302c3e6 16476c5ec64156fb31be4797557baa8c274233c0 8c7617c652dac0baca5322e9bf5b100492448c683790a4b3479d50fa582e0af6
GET /css2?family=Montserrat+Alternates:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://topsites.hadesex.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 13:59:59 GMT
date: Wed, 24 Apr 2024 13:59:59 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| losanalos.com/thumbs/AA/KR/PB.jpg | 188.114.97.1 | | 69 kB |
URL losanalos.com/thumbs/AA/KR/PB.jpg IP188.114.97.1:0
File typeJPEG image data, baseline, precision 8, 1280x720, components 3 Hash2ae5884821697f488afe20b5feb06980 7dda52fcb082ea2057857e0fd793983ecda29e9e 4e590207cf84534097d0684685bd07314f223168aba9f8134a1425b35d2be7aa
GET /thumbs/AA/KR/PB.jpg HTTP/1.1
Host: losanalos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:59 GMT
content-type: image/jpeg
content-length: 69005
last-modified: Sat, 27 Jan 2024 12:28:23 GMT
etag: "65b4f6e7-10d8d"
expires: Fri, 03 May 2024 17:34:37 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 1801522
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V4tK14NYoBm%2FF1JlykLq6NOy2U8cnd6D3%2Bt9ObbIaF6IU7OOgboiaJDa3XaVhVTYmuVato%2BqtgqOJlj3sSFUdUeHXgGDo2LTapnr0YhznQ7bCvhiV11t7TQlcExRcuvr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969df6384c5685-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| handjobxxx.com/thumbs/AA/BA/ld.jpg | 172.67.207.38 | | 99 kB |
URL handjobxxx.com/thumbs/AA/BA/ld.jpg IP172.67.207.38:0
File typeJPEG image data, baseline, precision 8, 892x668, components 3 Hashab5e165f1cfa26008e87466e41150b16 607333eece6a7f6911d0dde66f7d3b50442d5f02 e0d6b82db4d1186bb9ea11f73304404570530a6e29123615bba4ada98a374f69
GET /thumbs/AA/BA/ld.jpg HTTP/1.1
Host: handjobxxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 13:59:59 GMT
content-type: image/jpeg
content-length: 98767
last-modified: Thu, 21 Mar 2024 17:38:35 GMT
etag: "65fc709b-181cf"
expires: Fri, 24 May 2024 11:47:12 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 7967
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cgt0JboCo4N2rAza6iJ2Mt5Fu00ZZLcoBqi%2FYRi2LlkysFGOXqzorJGbTaFxl40L6FBa58XfkyHl7tY83b77omYzg4FQQB%2F6bvS%2FUGaRijzbLoN4JJauKsKh1Ghm1Bl%2Bog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969df6885656aa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| hadesex.com/thumbs/AA/js/b7.jpg | 188.114.97.1 | | 41 kB |
URL hadesex.com/thumbs/AA/js/b7.jpg IP188.114.97.1:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 280x210, components 3 Hash311b6d9c38ff9bba3d9d4f8e1481590b b490c276bfd1689e8e94e41ac710ce6411f18393 688fff1593ce059fa342c38bfd1fa7638520fc91227da683c4dec7ecede89d48
GET /thumbs/AA/js/b7.jpg HTTP/1.1
Host: hadesex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Referer: https://topsites.hadesex.com/?source=1982928765&site_id=548226&spot_id=548226
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:59 GMT
content-type: image/jpeg
content-length: 40687
last-modified: Wed, 24 Apr 2024 05:57:16 GMT
etag: "66289f3c-9eef"
expires: Fri, 24 May 2024 12:25:07 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 5692
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jz1kxnM58getPM4u%2BbcR%2BZa9PhKhZb1OhrBlO9uMZkeDdyThJWyvj1WOmUqnInbPxbmxd55JzJwrdXJocQUZdifj%2Furq1PeVhEoofKD4JNpT7VLYgwmuf%2Bg%2B6jmhoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969df6da177127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hadesex.com/thumbs/AA/5n/k1.jpg | 188.114.97.1 | | 33 kB |
URL hadesex.com/thumbs/AA/5n/k1.jpg IP188.114.97.1:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 280x210, components 3 Hash1cd11f9aa2bf866b40bd400ebd619d25 ff28b6c6de251812d9cfa4b5cc9a084613a23485 3953372a397118518dd31899c0f55b6bbba84ccd212e4bfe873ebde39d1ef956
GET /thumbs/AA/5n/k1.jpg HTTP/1.1
Host: hadesex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Referer: https://topsites.hadesex.com/?source=1982928765&site_id=548226&spot_id=548226
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:59 GMT
content-type: image/jpeg
content-length: 33355
last-modified: Fri, 29 Mar 2024 09:12:28 GMT
etag: "660685fc-824b"
expires: Mon, 29 Apr 2024 16:49:20 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 2149839
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iibNDxJCK0DQq1sGIJTWYYSjPq41KdIBAxH6G%2BopYWi%2FLDImlTOZ39TgUWVwFBHHcF4ZFnVGeINyw%2FPPDGstk8%2Bl3RclXR7mTtH0dZJgRKp3S9yO5S6C00wSGfEluQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969df6da197127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 | 54.230.111.45 | | 319 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 IP54.230.111.45:0
Size319 kB (319201 bytes) Hash8bbe2ad3b23e4ed19d3b5ec13dcab9a5 8b9d6b323b17b5c65f36f4d8607458c7827815ff 08f1b255d0dd20e0ad09d6ba25530a7ad7282983af7dffc4b5e4537bd461290f
GET /hls/19358621/19358621_480p_449_Aa79nF81uv8wYEI7_1713967191.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319201
age: 6
server: nginx
date: Wed, 24 Apr 2024 13:59:54 GMT
last-modified: Wed, 24 Apr 2024 13:59:53 GMT
etag: "66291059-4dee1"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ooewLn4T2SxynJaPBg9FGK435WuL45E43r8Yskgpchi0VMcc6drHsg==
|
|
| interracial69.com/thumbs/AA/st/nk.jpg | 188.114.96.1 | | 26 kB |
URL interracial69.com/thumbs/AA/st/nk.jpg IP188.114.96.1:0
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc57.107.100", baseline, precision 8, 600x450, components 3 Hash1b5b85f280d2684d505f0c144771b215 3c9f843b27d4503fd4d41833cd5fbf4704f4e822 32f77ba71cc72c21c710a01e52ed2b6540cd6a8b3e0f49273e997b8af80d0804
GET /thumbs/AA/st/nk.jpg HTTP/1.1
Host: interracial69.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 25721
last-modified: Sat, 30 Jun 2018 09:27:16 GMT
etag: "5b374cf4-6479"
expires: Thu, 16 May 2024 08:17:19 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 711761
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r0GoXfewK4WYdkKTIr6yyjsyo5Y%2B4tlom7TB04mwXoN6Xz1wCrYy1gpA%2F9pg40qWhLuVX4zOeAsZN9Ekn1BG4Q2nepoaWaYxl7%2FywDmP4SReNUVOD7dBXEMnMfJxCNtRtWRjhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969df89f00b512-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| lovefootjob.com/thumbs/AA/9X/4I.jpg | 188.114.97.1 | | 25 kB |
URL lovefootjob.com/thumbs/AA/9X/4I.jpg IP188.114.97.1:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 480x400, components 3 Hash73f71341cf4be9aa3dceddd02655661d 392820d89ed970a13af645612eb7404f27aa965f 1a865253447a81e92f47a7b26fcfab9162b9d7bfb50f5b4daf5ff16baa7f9840
GET /thumbs/AA/9X/4I.jpg HTTP/1.1
Host: lovefootjob.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 25296
last-modified: Wed, 28 Feb 2024 17:02:47 GMT
etag: "65df6737-62d0"
expires: Sun, 12 May 2024 00:25:18 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 1085682
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cddWsPojRRSlOujoRTtFHYpgsccTgLTWggDPeP9br8YYRc%2FduzpyQEVUkgwx1HBalG%2B1n92EG59LukSbsLkErqzIVGeKFeX0MCeDExDtbOMnqsPQc4qW2QzsdMosB1I1V3I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969df89cc856a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 15 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Hash6c05800ee8349a3afee194fa8b1c3739 c56a9cd0c1b6b565077e91e02bdcf64da00f3653 ccf5b039ddf2f5bc5311cc21f803bd01809c2d8a441fb3f2c1fb294867abc587
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Wed, 24 Apr 2024 13:59:57 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: HIT
content-encoding: gzip
date: Wed, 24 Apr 2024 13:59:59 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tpYxAMcliNFLun65Iy0KNHjDyLOZUjcBIvVos0N713mwyjMUX8qAcQ==
|
|
| topsites.hadesex.com/js/utm-datasource.js?v=1.90 | 188.114.97.1 | | 16 kB |
URL topsites.hadesex.com/js/utm-datasource.js?v=1.90 IP188.114.97.1:0
File typeGeneric INItialization configuration [] Hashf9eb7bacc6a92d4e5d1ae8299b53a3bb 3fef0ee46b983203be0c4dfb15a90a29526a391b 6fd474fdf1c98b145149e617ee1a24876332690123ff8c4cd43bbcce7c1b7bcf
GET /js/utm-datasource.js?v=1.90 HTTP/1.1
Host: topsites.hadesex.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://topsites.hadesex.com/?source=1982928765&site_id=548226&spot_id=548226
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:59 GMT
content-type: application/javascript
last-modified: Thu, 01 Feb 2024 14:46:51 GMT
vary: Accept-Encoding
etag: W/"65bbaedb-af5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-request-id: 330f697f33fd2a8384913017aef21b5c
cf-cache-status: HIT
age: 2608141
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gUNRYhtinI8hb0bimmen7JMPWkzaJgFVouQSePapRHTvnePyWaHgBQPF6uTpZ7LYr92NolU%2FVHoelHoOih76e85%2FiOO%2Bht7ncmg1y3C8DZFI2ATRZm7lBzG9q1Cr7eKJkaOgjPDPTw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87969df4bfaa7127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| milftop.com/thumbs/AA/Ug/Ar.jpg | 188.114.97.1 | | 12 kB |
URL milftop.com/thumbs/AA/Ug/Ar.jpg IP188.114.97.1:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 320x180, components 3 Hashaa4b8bc56a804c569bed2dce42b25db1 f0ce59568b79f42831efc8864cad8c59ab33053f d6df680135d28437ca98a0b63ad47bb18828c3aff2edd18ca2e85f701a079954
GET /thumbs/AA/Ug/Ar.jpg HTTP/1.1
Host: milftop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 12037
last-modified: Mon, 29 Jan 2024 15:32:24 GMT
etag: "65b7c508-2f05"
expires: Tue, 07 May 2024 13:41:51 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 1469889
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TALvJPj9HqVI7NWUqzciOgFuCr%2FaHSw6yCsf3rsTRD79Zhp6zl%2BNqRVaRXChg%2BCc%2BM%2FHO%2FQG1b9%2BaNVav5HM4XM3wKZS9QZrp8AmX%2F2g%2Bf%2Bog6QIrHZqenS6J78AmA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969df89fd156bb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| femdomqueen.com/thumbs/AA/hz/gk.jpg | 172.67.148.113 | | 57 kB |
URL femdomqueen.com/thumbs/AA/hz/gk.jpg IP172.67.148.113:0
File typeJPEG image data, baseline, precision 8, 596x448, components 3 Hash41a667e59c817109e3f505d4ee9733d4 6a3fd100121cb80a5e9c6cba53a113536c6f2cbb adcaa4c722763b9a6ed8b0cafbc203b6fc964f4c5a889f9ca5ed5990355fba3a
GET /thumbs/AA/hz/gk.jpg HTTP/1.1
Host: femdomqueen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 56752
last-modified: Sat, 02 Feb 2019 15:35:09 GMT
etag: "5c55b8ad-ddb0"
expires: Fri, 03 May 2024 13:48:36 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 1815084
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7ams0SukgvBSxa27zeBSglh53L%2Fsu%2B0x9%2BkvWzEw8inrOLDY2c%2B9ZMx7qdhcVtWZP%2FuSOTMuvprH22bdXsKi8riKs%2FRcS6gN9VNZcC7iPT5D8qlYCPNqybS1YJ6tbpXku88%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969df938b85690-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 69ebony.com/thumbs/AA/Ar/tR.jpg | 188.114.97.1 | | 94 kB |
URL 69ebony.com/thumbs/AA/Ar/tR.jpg IP188.114.97.1:0
File typeJPEG image data, baseline, precision 8, 1280x720, components 3 Hashcae8a97a867412a5d55f7f67b732bd80 28b84e2dcc964892e1bf3f591419ed9814b6b382 3305ebc505be119c037b4e3c7dd7d928d01ab5125068f66363d3de8683fe6125
GET /thumbs/AA/Ar/tR.jpg HTTP/1.1
Host: 69ebony.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 94022
last-modified: Tue, 19 Mar 2024 17:11:25 GMT
etag: "65f9c73d-16f46"
expires: Tue, 14 May 2024 15:21:31 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 859109
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=axe9PqSnPx%2BLrkTT%2B8ZPuPK6XZAzV8ZPCgPNiVJQ1k8pLMaj1OoUUYQ1VjhLJNF5LyEnNhmiZs6irZ1YOstbVKNZz52OHa3UBMx%2BEx%2B933XIRMwSwHagitiM2nlN9g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969df958c856a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| myretrocollection.com/thumbs/AA/rc/5Q.jpg | 188.114.97.1 | | 95 kB |
URL myretrocollection.com/thumbs/AA/rc/5Q.jpg IP188.114.97.1:0
File typeJPEG image data, baseline, precision 8, 960x720, components 3 Hashb39c315b9dd966a4ecf1e036d1074354 c2603211054c12e6d4097863c3386cc59ea55b65 30fb123175d97fcd3fedf093d8e46c5c236c966a20e2c530045c18304c38c8c8
GET /thumbs/AA/rc/5Q.jpg HTTP/1.1
Host: myretrocollection.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 95015
last-modified: Wed, 31 Jan 2024 16:02:30 GMT
etag: "65ba6f16-17327"
expires: Thu, 02 May 2024 19:16:42 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 1881798
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cWvCMQE7zEOV%2B5OHZgWr128xExpFYcIb%2BLgQq7C5SlzD03RQcmXIonqXbGdtmDDh9yHF2GgW2ef%2BpxXd3Ks6Goa31KIRsezCa7ahnaPyLZdTxPUl4BNagaVZGnF7ZEViSvDbZr3BFSc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969df95d4c568e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 69indian.com/thumbs/AA/gs/1S.jpg | 172.67.195.23 | | 11 kB |
URL 69indian.com/thumbs/AA/gs/1S.jpg IP172.67.195.23:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 320x180, components 3 Hash81c797b480d9effee608dffbc0644ffc 38b64fb9807ee15220da66a123ea5cc12b270bec 9b0f528e308fc9b92a02eaa8460d7c8bc516f31cae524663db5017d4c90fd98b
GET /thumbs/AA/gs/1S.jpg HTTP/1.1
Host: 69indian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 10620
last-modified: Thu, 18 Apr 2024 10:40:15 GMT
etag: "6620f88f-297c"
expires: Wed, 22 May 2024 12:40:25 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 177575
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ssyL%2FtExn%2FDYtUBqAqj1H6FS868M60ZLxWCGH2NQSHYqfdBtW1nrogyUK7EAZUA%2BARbr8c87HCVd01YYCOSRkOJw0z0T5952fkakiJ7ncSWhUt71%2F4%2FK0hw4KoCBlWY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969df95c7b56c9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| happy-granny.com/thumbs/AA/sb/DK.jpg | 188.114.97.1 | | 42 kB |
URL happy-granny.com/thumbs/AA/sb/DK.jpg IP188.114.97.1:0
File typeJPEG image data, baseline, precision 8, 892x668, components 3 Hash0746c11a8b5855a6bcae9f2c6feee53c 98221a768b5ef7efe475af6767e7e78b123d633a 943faea9324f3f89261da30ebebb2306b9123d0f27fd9020c3b38f6ed30e4878
GET /thumbs/AA/sb/DK.jpg HTTP/1.1
Host: happy-granny.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 42228
last-modified: Tue, 30 Jan 2024 14:35:32 GMT
etag: "65b90934-a4f4"
expires: Sun, 05 May 2024 13:42:40 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 1642640
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DAVFY0%2BYQr6NBGXHvb9oT38HwzJ7YGtpq1NoPYt%2B5SEZ3CN8tyJjHspcfDwiDExD7t2WjDXobYMAwk8DeaaCLCrVgLd8rmWhiO%2F0n3gEnJkdatrn%2B3ERSngrlgWtkM8RhBgD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969df95f4c5694-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| myretrocollection.com/thumbs/AA/il/2p.jpg | 188.114.97.1 | | 96 kB |
URL myretrocollection.com/thumbs/AA/il/2p.jpg IP188.114.97.1:0
File typeJPEG image data, baseline, precision 8, 1188x668, components 3 Hash49de7431373f2e5fc4f7e38840f39227 5b86c145d346ab3bc4a656249da6740c797c6d95 acb46389bdc8aea73e6a3e2e284fdc7bcdafa123a94ef365bd8e08da4e646f97
GET /thumbs/AA/il/2p.jpg HTTP/1.1
Host: myretrocollection.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 95956
last-modified: Thu, 21 Mar 2024 17:36:13 GMT
etag: "65fc700d-176d4"
expires: Wed, 22 May 2024 00:44:48 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 220512
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wo4RNCPqmR5Auw1AfdMIRsDEDAgS0SaMv%2FK%2FwGV%2FMb1Z4Ei250G%2BD81bR8CKPKk4yAJ1YTGH%2FIdZ9qUOPHSj6SJamNsKBXJPmZ5HA7nL4617VbQRFkfkIDPvPSlwWq6s8RU%2BKt20eXE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969df95d5b568e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 | 54.230.111.45 | 200 OK | 320 kB |
URL GET HTTP/3b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 IP54.230.111.45:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size320 kB (319964 bytes) Hash70956d149a8c30f52109ef4af2c47363 4071b9322cfacb14d0376b8385906ebcc3b0254f 4849efaed892b4f931ef23614cc5454300c8176ee0bf4f260b435a118b928b6b
GET /hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319964
age: 4
server: nginx
date: Wed, 24 Apr 2024 13:59:56 GMT
last-modified: Wed, 24 Apr 2024 13:59:55 GMT
etag: "6629105b-4e1dc"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 7NXzKV2tehUOBYQKm0sjDcFvf3D_GYBVYV9NTs0YMpSEBZ_91J44VA==
|
|
| 69indian.com/thumbs/AA/Mw/w_.jpg | 172.67.195.23 | | 16 kB |
URL 69indian.com/thumbs/AA/Mw/w_.jpg IP172.67.195.23:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 320x180, components 3 Hash570bbd19a1646e79b99e036ff2df9b5a c0acd1d63473a4f70d11d2b3d8e289d11e5c7c88 d494c87d6902cf47f0099fc17484118bd8935c259d15514a8c7af646eb1f2b44
GET /thumbs/AA/Mw/w_.jpg HTTP/1.1
Host: 69indian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 16361
last-modified: Thu, 18 Apr 2024 10:48:53 GMT
etag: "6620fa95-3fe9"
expires: Wed, 22 May 2024 12:40:49 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 177551
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QcgNKGAwbolP0QcBRRQ0i%2BchB8gyghnJ8BRxWsVeKLBNrx3JHqR9EjQ2l%2Bs9Shyxs3oWCOmsJGZpHkX8uXm%2FfGoUIiqQEVw78zwTjN7tXQRPZgyMw3rrrdXonvdXdS4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969df9bd5256c9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| femdomqueen.com/thumbs/AA/R1/ws.jpg | 172.67.148.113 | | 7.4 kB |
URL femdomqueen.com/thumbs/AA/R1/ws.jpg IP172.67.148.113:0
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 640x639, segment length 16, comment: "Lavc58.23.100", baseline, precision 8, 398x224, components 3 Hash1f9d39f0a022bcf4a3c6cf1b2b8b6715 cbde7d82eed002ddd07edfae97df5835bf2e853d 294e686a05b487eb90422dbc9c9838456b560af93cbe32452feddc1048ebfe9e
GET /thumbs/AA/R1/ws.jpg HTTP/1.1
Host: femdomqueen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 7440
last-modified: Sat, 22 Sep 2018 15:58:48 GMT
etag: "5ba666b8-1d10"
expires: Fri, 03 May 2024 09:30:12 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 1830588
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TB3u6IVAhlt4xCtHW5T3G1uxf2G7MUivixM3kut4wkBudoHNS3BT0PF726mVvNj3q6Ais%2BuhyQDcRq33YQ77kZgxDt0VBRwFYe7TzrNqVIhFDjMUm%2FzIOcMH19u%2Fv7hO9n0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfa0a445690-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| interracial69.com/thumbs/AA/df/F_.jpg | 188.114.96.1 | | 174 kB |
URL interracial69.com/thumbs/AA/df/F_.jpg IP188.114.96.1:0
File typeJPEG image data, baseline, precision 8, 1280x720, components 3 Size174 kB (174301 bytes) Hash0e2eb4904271c0975d1cc71512a8104c 700fa8b264bddfe438a79d023a7c0670d4a51fef caab98e273b5f0aa00c3b1e8b8ea5816fb5291b5f51dd5a8cc84dee8a1b48271
GET /thumbs/AA/df/F_.jpg HTTP/1.1
Host: interracial69.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 174301
last-modified: Fri, 01 Mar 2024 03:42:03 GMT
etag: "65e14e8b-2a8dd"
expires: Tue, 07 May 2024 05:50:37 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 1498163
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nVwlFAR6TrkQUOUjU0kHfbM4j4rKFTgP4Go6k9XvUuP4YTiUa8qwnSKFFLM4OO%2Bd0ZNpONLul34T00HzntFP878lIWDe6NG9aMd03pYFcDvubD9z8hbwuDZz2oXVBbD9g6XmUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfa294eb512-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| z-gay.com/thumbs/AA/ZH/bI.jpg | 172.67.184.218 | | 15 kB |
URL z-gay.com/thumbs/AA/ZH/bI.jpg IP172.67.184.218:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 320x180, components 3 Hash893a443dec2cb60f7cd5feb84fcf4298 69b5620469d87f86fbadae40d1d2bd4b79a589d8 b1253db1930af9c0d17f4877657306bbf7f818321440117fd1b036ed7d9e1110
GET /thumbs/AA/ZH/bI.jpg HTTP/1.1
Host: z-gay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 14946
last-modified: Mon, 05 Feb 2024 03:21:54 GMT
etag: "65c05452-3a62"
expires: Sat, 18 May 2024 00:25:32 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 567268
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pClNtKM%2BI7%2FrDkzij%2BeaCHAUv9hr%2BKZsvpgYlqVpTNFAEUfCfA3MzXi67UZpiHuJngflsUd7qVjuU0jWGxfEyk086HghbLi42AywLvGBs1bdRzf8N4ExVM1dJy8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfa0a9556b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 69lesbi.com/thumbs/AA/Ck/Eq.jpg | 104.21.69.189 | | 100 kB |
URL 69lesbi.com/thumbs/AA/Ck/Eq.jpg IP104.21.69.189:0
File typeJPEG image data, baseline, precision 8, 1280x720, components 3 Hash69d0525e6dd318fe570789cfa472f47a c1cfac11abd2323b55572976595a72eb1f04404a e8f24b71194ffc78fbc6af434afaaef305f23648485b8a6e07454c00f56ff60a
GET /thumbs/AA/Ck/Eq.jpg HTTP/1.1
Host: 69lesbi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 99920
last-modified: Wed, 01 Nov 2023 10:05:19 GMT
etag: "654222df-18650"
expires: Thu, 09 May 2024 03:09:26 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 1335034
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fY8s3s%2FcdMWuz%2FEO6xkieqAsmE9zuhNwROj5Gny8koZtV9U8e%2BXUPOsT8Kf1zhYBzNi5KmSQbltWrYPCPDMouiKraYpb7c%2F9PpJs97zf5nRZNl3lOr0dXko%2FtYEKbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfa8dde5684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| xcumwebcam.com/thumbs/AA/cA/Ik.jpg | 188.114.96.1 | | 18 kB |
URL xcumwebcam.com/thumbs/AA/cA/Ik.jpg IP188.114.96.1:0
File typeJPEG image data, baseline, precision 8, 320x240, components 3 Hash9516c8baadca75cf37433a33fc7c4f10 4e238a38158f0c7ccf23375d52d9a0dfacb98712 0d61b9b202de714d5207a882edc355fd29b73f52229c460a5fa7a96ef8d15b7b
GET /thumbs/AA/cA/Ik.jpg HTTP/1.1
Host: xcumwebcam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 18032
last-modified: Wed, 28 Feb 2024 19:30:31 GMT
etag: "65df89d7-4670"
expires: Fri, 24 May 2024 12:25:13 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 5687
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q4p%2FkZ216v0%2Fn7btLw73L7djhYUucen0%2FUpcXVP602MDZXCUWnf4tsMytVzHWzniTD7tzgL0Py6E2xt6u5KOnEneag2Zp0NPU3pkEuoi2QbYntk5dUjuR0EeA1K%2B%2B9s7bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfa8cbb56ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| jbdsm.com/thumbs/AA/zf/EI.jpg | 172.67.207.58 | | 20 kB |
URL jbdsm.com/thumbs/AA/zf/EI.jpg IP172.67.207.58:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 320x180, components 3 Hash030b2a0ed1cb488ba34a35155279e89c 9abcb52056e15b916c8906823854ea52185914b7 97d3b60e5e2a3aa11a522c84245adc747bd4dbf6e484deed65a7b21ac61c1743
GET /thumbs/AA/zf/EI.jpg HTTP/1.1
Host: jbdsm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 20018
last-modified: Tue, 13 Feb 2024 06:13:39 GMT
etag: "65cb0893-4e32"
expires: Tue, 14 May 2024 13:42:14 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 865066
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e5jdGduPyX0oi5F83Phccwhnyd8e45mLUAo4%2FyDb7viYA61IQBdCjg4OO0MDInByAxwyDqI6XaLvGOrHxQPEV1yZjydoxVncaCbpAW5tegmw4XXnf73a3gJy4cU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfab98e5699-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| groupsexxx.com/thumbs/AA/2V/xX.jpg | 172.67.188.32 | | 95 kB |
URL groupsexxx.com/thumbs/AA/2V/xX.jpg IP172.67.188.32:0
File typeJPEG image data, baseline, precision 8, 1280x720, components 3 Hashf28f795ee64834b5368139ad20c876fd 8ff22163ef5183111fad8db10f3b2cd69db974bd 3c9a145919f1939235b3e22146449eacaf2e0016b12277c67926ccf5bd7fa8c0
GET /thumbs/AA/2V/xX.jpg HTTP/1.1
Host: groupsexxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 94740
last-modified: Fri, 26 Jan 2024 12:57:31 GMT
etag: "65b3ac3b-17214"
expires: Sun, 05 May 2024 13:47:09 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 1642371
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fvZhgl0xZts6CMlibCF4yBTD6iYg97CDwg7zYNNx3ldvD6E57hN6%2B7jS87D4zJTC2Oe0wQKdklOtcOCss8DEc2hGpjAf306WTWZjisBlaJzqy0nWiUhvE1A6co8f7nkAWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfacc1f0b51-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| javsecrets.com/thumbs/AA/wC/jb.jpg | 104.21.63.231 | | 23 kB |
URL javsecrets.com/thumbs/AA/wC/jb.jpg IP104.21.63.231:0
File typeJPEG image data, baseline, precision 8, 568x320, components 3 Hash3e78ba8af22ec26cbf1bf02e09b7daa8 fcb6b2d566e34438020304ecdea119a5b598d745 4601e553163f315ee063d48674c0b6d81f33779c0f13f2d688245052d120e4e8
GET /thumbs/AA/wC/jb.jpg HTTP/1.1
Host: javsecrets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 23086
last-modified: Thu, 30 Nov 2023 11:15:04 GMT
etag: "65686eb8-5a2e"
expires: Tue, 21 May 2024 12:25:14 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 264886
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BYc%2FSr8XL4DrOHpNVPDU2TN6giV5Y%2BuGDfjBr2aOEJFqpNBitlfKW1bnwrxBmxY6gU0AXC8IoNRgU2otz7dQU8VUxsu8Za5s10Bnemhn9mpZfy74zt9k8EktxooSuFeY0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfaeba856a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| gftranny.com/thumbs/AA/0a/OW.jpg | 188.114.96.1 | | 17 kB |
URL gftranny.com/thumbs/AA/0a/OW.jpg IP188.114.96.1:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 320x180, components 3 Hash7af619c0aba65d6aa2bc617e8792a661 4688bcd7dc099209c2e17ec09a01b475881c4859 10ef14602e54cbad461c81bbd68080c0a614ca18f801954f5fc99fb16c7c9654
GET /thumbs/AA/0a/OW.jpg HTTP/1.1
Host: gftranny.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 17070
last-modified: Fri, 15 Mar 2024 14:12:12 GMT
etag: "65f4573c-42ae"
expires: Mon, 06 May 2024 03:32:36 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 1592844
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fzk%2FZfeYgzZ69H0XD7b2gR3YvwkThTCL3Up1thtHHyuRaIdR%2FEx5IHru9tl7%2FDQ5BCnonUWq7fCoQEmyzr0%2FvEPwkGGOA%2F5o15VNhbmdxihCRySokH2Y8kNt74VjCik%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfaeb505690-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 69ebony.com/thumbs/AA/46/0X.jpg | 188.114.97.1 | | 244 kB |
URL 69ebony.com/thumbs/AA/46/0X.jpg IP188.114.97.1:0
File typeJPEG image data, baseline, precision 8, 1920x1080, components 3 Size244 kB (244141 bytes) Hash76348bb6e7d9ea31041c134d0193d7a1 deee9d1d0599617cef397eddeaaa9ae8e7a056bb c5e1ee9463cd5d64415e36022e96fe1e5a11e217bd94c2c4d1cfe7c31deda058
GET /thumbs/AA/46/0X.jpg HTTP/1.1
Host: 69ebony.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 244141
last-modified: Wed, 28 Feb 2024 16:30:35 GMT
etag: "65df5fab-3b9ad"
expires: Mon, 29 Apr 2024 11:12:40 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 2170040
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CuktcoQzU9Dnsft65k2IV6KQ0%2BglxvH4AMKx6hPRG3KaecGps4IY15EX33Ql9RD1FccHLcdRrdPv3jCIynjd5wqbbeYpdjFGvaZnsVbS02kkMse9cnT9EV9x3oNO3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfafbcd56a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| lovefootjob.com/thumbs/AA/Yn/UM.jpg | 188.114.97.1 | | 123 kB |
URL lovefootjob.com/thumbs/AA/Yn/UM.jpg IP188.114.97.1:0
File typeJPEG image data, baseline, precision 8, 1920x1080, components 3 Size123 kB (123405 bytes) Hash4eb01c42fef2b5aebd30233d178400c3 9d2d51e35ae49ee7887310d29dee573bd9a9d969 2b8c44ee739a2ddc71a48e1c4877909a82520a7a63bf0ec767e9c2ee82861cfe
GET /thumbs/AA/Yn/UM.jpg HTTP/1.1
Host: lovefootjob.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 123405
last-modified: Thu, 29 Feb 2024 12:17:21 GMT
etag: "65e075d1-1e20d"
expires: Sat, 04 May 2024 12:25:25 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 1733675
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7rMHQ9werQKp7a7Rj%2FiNv41eXXOUxu%2BXGuVd91j6S8bFB2IlF3FEcy%2BOQY0OY36ybUcpuQ8HGy74gLyrZv6GhOq%2FINsUxG6HeX%2BYBA3kqQYlF2tcsOixznIlhmtNtRrSvDM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfb281a56a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| voyeurix.com/thumbs/AA/eg/ZQ.jpg | 104.21.17.65 | | 111 kB |
URL voyeurix.com/thumbs/AA/eg/ZQ.jpg IP104.21.17.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3 Size111 kB (111049 bytes) Hashe2fd5e2818c64e8657cd9f8bcc57e291 b71449ff020d0885443d60a6eafb4caeab94ab86 8e6e83aef1b8a5f035580bb4b3a651c708559bd575d2f73cc3a088fce95b997d
GET /thumbs/AA/eg/ZQ.jpg HTTP/1.1
Host: voyeurix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 111049
last-modified: Wed, 28 Feb 2024 15:48:32 GMT
etag: "65df55d0-1b1c9"
expires: Sat, 04 May 2024 04:16:02 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 1763038
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9aS2aOT%2BxpTsF9Un%2FbSviDHUhhMRihjBOWA0a9ywP3Sp5TF%2BeBEZnBJN1GcqUoXCzuHfCtP5JYaTyagvuXxqfLng64azaixjIn00Y4jJIGiUilNM%2FJa9OB09aeto4Ic%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfb7ace569c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 69lesbi.com/thumbs/AA/ae/jQ.jpg | 104.21.69.189 | | 62 kB |
URL 69lesbi.com/thumbs/AA/ae/jQ.jpg IP104.21.69.189:0
File typeJPEG image data, baseline, precision 8, 1136x640, components 3 Hash5cb64f236d6dd7868bb3f46119331582 8b9204ce57a7f32daae2a2bfceeb88ec88d4f535 66c82009818894983da3a339781d976ca831e45f3986028a48743ee1fc38fb4a
GET /thumbs/AA/ae/jQ.jpg HTTP/1.1
Host: 69lesbi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 61543
last-modified: Tue, 23 Apr 2024 18:13:32 GMT
etag: "6627fa4c-f067"
expires: Fri, 24 May 2024 12:01:23 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 7117
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rHgYW8yDPd026GMIxG3pml12bCN%2B76GzKEPCJFGHPtF9y%2F%2FDYwkWtMnuds60h47lBwNGOeckDxOFEf3ZAzVhVtSxWhyPiQK4jpP6oGYyF5oVD2ljAqXyozMXAaomCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfb98b75684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| groupsexxx.com/thumbs/AA/17/Iu.jpg | 172.67.188.32 | | 89 kB |
URL groupsexxx.com/thumbs/AA/17/Iu.jpg IP172.67.188.32:0
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc56.26.100", baseline, precision 8, 1280x720, components 3 Hashbd8bd08d73c81a141d6de394d7fa0481 dd4516afcdfa9c3f45f9d554a587523c790f0f6d b185952d445bf6252ca80a6511a571f78b29935f6dd9d67478c0a10f5367faee
GET /thumbs/AA/17/Iu.jpg HTTP/1.1
Host: groupsexxx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 89035
last-modified: Tue, 14 Nov 2023 08:13:52 GMT
etag: "65532c40-15bcb"
expires: Sat, 04 May 2024 18:45:55 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 1710845
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vA6M%2FlRsLo9gOJcYYYxS9wnNJKPf05eHJpiswB47zso4b2EiYmCtCH4OkmFzf5aoF%2BCfwvoh0LqpQ4edu81lnuGIHRVRcGroTr89PBLC2V3AztWakc02SMUAcfYVlC9wMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfb9d0a0b51-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| happy-granny.com/thumbs/AA/xC/wp.jpg | 188.114.97.1 | | 19 kB |
URL happy-granny.com/thumbs/AA/xC/wp.jpg IP188.114.97.1:0
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc59.37.100", baseline, precision 8, 600x450, components 3 Hash77236f13861b744218b8f6f72791d552 ccd227bd53434f100c271b1ef8f6ca6f328cfd45 8b5d38bc988040bc73926e0654717f187991123e827297cbd59c01d16a1b6bde
GET /thumbs/AA/xC/wp.jpg HTTP/1.1
Host: happy-granny.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 19430
last-modified: Tue, 30 Jan 2024 14:34:18 GMT
etag: "65b908ea-4be6"
expires: Sun, 05 May 2024 13:42:40 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 1642640
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kZPI45pxc6hN6%2Fav74EnXoZjKAjwsU%2BUWcljvTREa44saI1ZnNzhI1quZohRDySBvP6JecTULNof6E2bByi8Ld5S082QDiwKrgJlpLMg4NkIjmf0Xy2A7IXLOifmVg6gzBwj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfbba1e5694-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| z-gay.com/thumbs/AA/Ql/Tr.jpg | 172.67.184.218 | | 24 kB |
URL z-gay.com/thumbs/AA/Ql/Tr.jpg IP172.67.184.218:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 320x423, components 3 Hash5b911e346222ec2cb7bd4759901ef130 4d227bc22edf9515d4f912e884278006ef796977 4c87cd92f2be9969e6137cd8047042ab17260303f36670d4aef7973c2226046c
GET /thumbs/AA/Ql/Tr.jpg HTTP/1.1
Host: z-gay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 24259
last-modified: Thu, 08 Feb 2024 04:50:24 GMT
etag: "65c45d90-5ec3"
expires: Thu, 16 May 2024 00:26:13 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 740027
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NFTUTPpanBsVDSFS9saB1BytHn6xVNFd2pvSHmPMT9KjtAQ8ddC4fonAGLY%2Ba3YkFr5zXprOpmHBs7eLrOFZjawax6ZdMTdRxefpXeoIS6%2FagtZPXQKLY0xIWdc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfbed6e56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| voyeurix.com/thumbs/AA/ax/ge.jpg | 104.21.17.65 | | 170 kB |
URL voyeurix.com/thumbs/AA/ax/ge.jpg IP104.21.17.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3 Size170 kB (169814 bytes) Hash9e76c1a94e94b4c30a32c7781a159a7f 071b7c8123bc9f05653d750b7a2a69489a7b65ed b9a592ea6bd05a5b1bfaa8a6f034c34652081b147676c00c43dd7c1e311b017c
GET /thumbs/AA/ax/ge.jpg HTTP/1.1
Host: voyeurix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 169814
last-modified: Wed, 28 Feb 2024 16:00:58 GMT
etag: "65df58ba-29756"
expires: Fri, 03 May 2024 00:25:29 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 1863271
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y4cG1v1MUwqNViOsPOm1bihLE8SpzhsRFnAIHo%2FTc5Xwk%2FkHvzV72vQ0nVhmt2EdNdqarY1qeg5M4LxDF9CXy%2B2KoLKG0wn0BpKkWRw35jgTPc78JG8LR0KW7A%2BN1E0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfc2be1569c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| xcumwebcam.com/thumbs/AA/j1/7B.jpg | 188.114.96.1 | | 25 kB |
URL xcumwebcam.com/thumbs/AA/j1/7B.jpg IP188.114.96.1:0
File typeJPEG image data, baseline, precision 8, 556x416, components 3 Hash7a9745443e92e2c8921f02851512e636 88e93fea923647bcb7093708cd881ff70ef5cb87 38df46a26a1e898f11893257790cfb573b0ba0cf872b1225df823b71bb0c19a2
GET /thumbs/AA/j1/7B.jpg HTTP/1.1
Host: xcumwebcam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 25245
last-modified: Wed, 28 Feb 2024 17:11:33 GMT
etag: "65df6945-629d"
expires: Sun, 19 May 2024 01:18:08 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 477712
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0eSrxf1TpYl%2Ft6fZqCBQFeLxh7w8qKJXq36jxHaSYX%2Bl4NQSaKojqsModieohO8FYRiZ7DVirh5rFcsOXQaVEN9e8%2BYQQtY7uptK%2BW0HYIjUJl3wqgStc9seLk6%2B2UaKbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfc385156ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| gftranny.com/thumbs/AA/B2/AA.jpg | 188.114.96.1 | | 14 kB |
URL gftranny.com/thumbs/AA/B2/AA.jpg IP188.114.96.1:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 320x180, components 3 Hash55f66beab2081ca4aeca531ffde36034 3cbcaf15c4fef0aa691ffb35ac17e5b5994ee979 6b9d30c423709a54fc464740889c419dd18dff01b8c5f3c2464ccd6503cc170b
GET /thumbs/AA/B2/AA.jpg HTTP/1.1
Host: gftranny.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 13816
last-modified: Wed, 06 Mar 2024 19:39:18 GMT
etag: "65e8c666-35f8"
expires: Fri, 24 May 2024 12:25:11 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 5689
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mNNVTzCE04pMl1OqdXYMIFq%2BgXgQJ9rEKrNjP9UbwUPFaa8IylgQ6LyoRFozQuLWuVeoJgDMDxxX4gCA1zPnwrJfdKJZt1eqSrmS9eGbfeX57rN1%2Bp1IQvL7zc6%2BW48%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfc3cee5690-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| javsecrets.com/thumbs/AA/vR/aa.jpg | 104.21.63.231 | | 7.3 kB |
URL javsecrets.com/thumbs/AA/vR/aa.jpg IP104.21.63.231:0
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc55.18.102", baseline, precision 8, 180x240, components 3 Hashc8be4ed3db91af888b2303a393f0b4db ae3937ee36e6d0316c0a7b832e769f784269872f 80472e773770870e2bfdf01d50d7289ac692e065e60e45eb2043ab7ae81eeffc
GET /thumbs/AA/vR/aa.jpg HTTP/1.1
Host: javsecrets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 14:00:00 GMT
content-type: image/jpeg
content-length: 7324
last-modified: Sun, 03 Dec 2023 12:54:03 GMT
etag: "656c7a6b-1c9c"
expires: Wed, 01 May 2024 12:25:08 GMT
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 1992892
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fa2AUgleeQm2wOt2PrjMaWGNDMhtdshlUQx9RqoVum2lYe6EuwpSauInp7xiJraCCk9mAztY2YC3yWW8ZE5V%2Fu7UhPrm40g5ZoSKBCMQQEdk2SuC7YPd2KBKaVEZ4fRovg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dfc6ec256a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 | 54.230.111.45 | 200 OK | 320 kB |
URL GET HTTP/3b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 IP54.230.111.45:443
Requested byhttps://creative.bbrdbr.com/widgets/v4/Universal?tag=girls&thumbsMargin=0&gridRows=1&gridColumns=1&sourceId=300cps2girlwl&creativeId=300cps2girlwl&responsive=0&hideButton=1&hideTitle=1&userId=ebe1e2aa04642c4dc9f7e9a5dfdb455c9ef1b6825ab8b9414a96e56e40140e75&autoplay=all&autoplayForce=1&action=sbSignupWithModel&memberId={clickid} CertificateIssuerAmazon Subject*.doppiocdn.net Fingerprint3F:C9:5F:74:41:CE:6C:76:DD:E0:68:01:E9:2C:1A:92:54:8B:19:49 ValidityTue, 05 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
Size320 kB (319964 bytes) Hash70956d149a8c30f52109ef4af2c47363 4071b9322cfacb14d0376b8385906ebcc3b0254f 4849efaed892b4f931ef23614cc5454300c8176ee0bf4f260b435a118b928b6b
GET /hls/19358621/19358621_480p_450_xXtHLkdUH0cX65q7_1713967193.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 319964
age: 4
server: nginx
date: Wed, 24 Apr 2024 13:59:56 GMT
last-modified: Wed, 24 Apr 2024 13:59:55 GMT
etag: "6629105b-4e1dc"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ZkLlj11pyufF5qHFfme5rGZGKhBt_5B3zRw-L3sk9YVexvzumr8OLg==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_451_GAfguybL325zs23a_1713967195.mp4 | 54.230.111.45 | | 324 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_451_GAfguybL325zs23a_1713967195.mp4 IP54.230.111.45:0
Size324 kB (323921 bytes) Hashedeb1934f0979917fc60c390ed0f85c3 3d95d11fba7cea869f233a6a95710004e97acee6 12a06819c946b90aa1beafea77c3da889504e86ca24fe912e16521ef71157a44
GET /hls/19358621/19358621_480p_451_GAfguybL325zs23a_1713967195.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 323921
age: 2
server: nginx
date: Wed, 24 Apr 2024 13:59:58 GMT
last-modified: Wed, 24 Apr 2024 13:59:57 GMT
etag: "6629105d-4f151"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: qXzox9q3Ee935Z4l-MveYkbR4Tin3s4-Um7goKlodAqGtvsLhZ3N6A==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 | 54.230.111.45 | | 320 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 IP54.230.111.45:0
Size320 kB (320415 bytes) Hasha4b402884cc77bfbfe43fa7ce10d88fc 304607bac4ff6a5c8772f4c93ecfb830d612836f 91f2b8f6dbafe08d04591afacb90e3c3e12206905ee6e2037d34b78c588f6d5f
GET /hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 320415
alt-svc: h3=":443"; ma=86400
server: nginx
date: Wed, 24 Apr 2024 14:00:00 GMT
last-modified: Wed, 24 Apr 2024 13:59:59 GMT
etag: "6629105f-4e39f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qg4nwsWVEI-PUh71FuFR4K1imNlGpHhthtWCuHSVfgOdci9Y60Z6IA==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 | 54.230.111.45 | | 314 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 IP54.230.111.45:0
Size314 kB (314506 bytes) Hashd196a8331d9d277e341624a996b8d80f 986d656bddf369f3c12cc454294d1ace37958ee1 6c5675d71afbf9cbb9a084602af0c98347e69f10272c08b9099856d472652ee7
GET /hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 314506
alt-svc: h3=":443"; ma=86400
server: nginx
date: Wed, 24 Apr 2024 14:00:02 GMT
last-modified: Wed, 24 Apr 2024 14:00:01 GMT
etag: "66291061-4cc8a"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: R-IeuYilb4Bk0fg8Dzj_UyJ-0b-Z0Co-P9E2QuBobpgUBw1hgFrWyQ==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_451_GAfguybL325zs23a_1713967195.mp4 | 54.230.111.45 | | 324 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_451_GAfguybL325zs23a_1713967195.mp4 IP54.230.111.45:0
Size324 kB (323921 bytes) Hashedeb1934f0979917fc60c390ed0f85c3 3d95d11fba7cea869f233a6a95710004e97acee6 12a06819c946b90aa1beafea77c3da889504e86ca24fe912e16521ef71157a44
GET /hls/19358621/19358621_480p_451_GAfguybL325zs23a_1713967195.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 323921
age: 4
server: nginx
date: Wed, 24 Apr 2024 13:59:58 GMT
last-modified: Wed, 24 Apr 2024 13:59:57 GMT
etag: "6629105d-4f151"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 4JBOTriyAS_7G2jTlaYfGQ3Mvg6eQCeg1d75nnYSxoFbHvn44HI1XA==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 321 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size321 kB (320739 bytes) Hasha71f27e4c5335d2340c3c5568435accd 676574ac0f26799a50959abc4cb3c34070949c13 5d451aad985b2a0e32aeacb972df02c487cc22e2f01d1e9505c05cd279978b64
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Wed, 24 Apr 2024 14:00:02 GMT
last-modified: Wed, 24 Apr 2024 14:00:01 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8xOfrvDrF_qCVSDo4sRfLz1_56UVmn8az3WdC-CXGLUEMpv9agmo6w==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 324 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size324 kB (324245 bytes) Hash77a20b4d2cd837ceb73ef52148e7c35a 6b9ee3b2a399cad8968d95e91ea42fb0bc8aadd0 d9b6ed5ff63a3ee25a905e2ae96d7756fff20afa0d6bf78eaef6477beeb097c8
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Wed, 24 Apr 2024 14:00:02 GMT
last-modified: Wed, 24 Apr 2024 14:00:01 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: euoWHriUiM28E5fwMQzCSvcx-QdOJtYKQZfOCu6OdPmfzisKZOYzUg==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 | 54.230.111.45 | | 320 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 IP54.230.111.45:0
Size320 kB (320415 bytes) Hasha4b402884cc77bfbfe43fa7ce10d88fc 304607bac4ff6a5c8772f4c93ecfb830d612836f 91f2b8f6dbafe08d04591afacb90e3c3e12206905ee6e2037d34b78c588f6d5f
GET /hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 320415
age: 3
server: nginx
date: Wed, 24 Apr 2024 14:00:00 GMT
last-modified: Wed, 24 Apr 2024 13:59:59 GMT
etag: "6629105f-4e39f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 2q5Q0q9tRssshMSoM-MJrCaasmcNzambBK75_MLk9xfOGFQKyoj01Q==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_451_GAfguybL325zs23a_1713967195.mp4 | 54.230.111.45 | | 324 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_451_GAfguybL325zs23a_1713967195.mp4 IP54.230.111.45:0
Size324 kB (323921 bytes) Hashedeb1934f0979917fc60c390ed0f85c3 3d95d11fba7cea869f233a6a95710004e97acee6 12a06819c946b90aa1beafea77c3da889504e86ca24fe912e16521ef71157a44
GET /hls/19358621/19358621_480p_451_GAfguybL325zs23a_1713967195.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 323921
age: 5
server: nginx
date: Wed, 24 Apr 2024 13:59:58 GMT
last-modified: Wed, 24 Apr 2024 13:59:57 GMT
etag: "6629105d-4f151"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Fekk5MYijlSszuE44lk1Bm7iQUZlv22nh7wRb9t4G4VnK6xfBSWzPQ==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 | 54.230.111.45 | | 320 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 IP54.230.111.45:0
Size320 kB (320415 bytes) Hasha4b402884cc77bfbfe43fa7ce10d88fc 304607bac4ff6a5c8772f4c93ecfb830d612836f 91f2b8f6dbafe08d04591afacb90e3c3e12206905ee6e2037d34b78c588f6d5f
GET /hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 320415
age: 3
server: nginx
date: Wed, 24 Apr 2024 14:00:00 GMT
last-modified: Wed, 24 Apr 2024 13:59:59 GMT
etag: "6629105f-4e39f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Z9z96D6B6D_qOuwp4gazhTDCS95ngPOEJWhWHS3oMp252htMRRlldg==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_451_GAfguybL325zs23a_1713967195.mp4 | 54.230.111.45 | | 324 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_451_GAfguybL325zs23a_1713967195.mp4 IP54.230.111.45:0
Size324 kB (323921 bytes) Hashedeb1934f0979917fc60c390ed0f85c3 3d95d11fba7cea869f233a6a95710004e97acee6 12a06819c946b90aa1beafea77c3da889504e86ca24fe912e16521ef71157a44
GET /hls/19358621/19358621_480p_451_GAfguybL325zs23a_1713967195.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 323921
age: 5
server: nginx
date: Wed, 24 Apr 2024 13:59:58 GMT
last-modified: Wed, 24 Apr 2024 13:59:57 GMT
etag: "6629105d-4f151"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: IcGiwoOKv-ionuZtNHtgEpCCbDEmBkHQc5o_FB20G_3L3vbP2hrd9Q==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 321 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size321 kB (320739 bytes) Hasha71f27e4c5335d2340c3c5568435accd 676574ac0f26799a50959abc4cb3c34070949c13 5d451aad985b2a0e32aeacb972df02c487cc22e2f01d1e9505c05cd279978b64
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Wed, 24 Apr 2024 14:00:01 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Wed, 24 Apr 2024 14:00:03 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CAPo6ubJlSGbiVwkjRIGCT7G1MB05hDeHmvw1GCIvLeCmMfplBHFwg==
|
|
| go.bbrdbr.com/api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll&webp=1&sortBy=mlRank | 104.18.40.50 | | 325 kB |
URL go.bbrdbr.com/api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll&webp=1&sortBy=mlRank IP104.18.40.50:0
Size325 kB (324758 bytes) Hash8ad94686bf067cfc4464b47f2a3cec33 97483e85dcb03858975e6cc4e0ba98f41c9521f7 44ab7bc04b535abac146195ea9caf677ab923bfc230f0ee69f5e707bd214db8c
GET /api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll&webp=1&sortBy=mlRank HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Cookie: __cflb=02DiuDFRFiBZBvMSLtrsnD7QZBLqqpmg3qqzT5GqduFqE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 14:00:02 GMT
content-type: application/json
access-control-allow-origin: https://creative.bbrdbr.com
access-control-allow-credentials: true
vary: Origin, Accept-Encoding
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Wed, 24 Apr 2024 13:59:41 GMT
cf-cache-status: HIT
age: 9
server: cloudflare
cf-ray: 87969e084a1156ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 321 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size321 kB (320739 bytes) Hasha71f27e4c5335d2340c3c5568435accd 676574ac0f26799a50959abc4cb3c34070949c13 5d451aad985b2a0e32aeacb972df02c487cc22e2f01d1e9505c05cd279978b64
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Wed, 24 Apr 2024 14:00:01 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Wed, 24 Apr 2024 14:00:03 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HEPQI6BA-On9P5mtNrWHLXgkrJpGg-WqYH17lfpw6vxLLpuAazTPWw==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_451_GAfguybL325zs23a_1713967195.mp4 | 54.230.111.45 | | 324 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_451_GAfguybL325zs23a_1713967195.mp4 IP54.230.111.45:0
Size324 kB (323921 bytes) Hashedeb1934f0979917fc60c390ed0f85c3 3d95d11fba7cea869f233a6a95710004e97acee6 12a06819c946b90aa1beafea77c3da889504e86ca24fe912e16521ef71157a44
GET /hls/19358621/19358621_480p_451_GAfguybL325zs23a_1713967195.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 323921
age: 6
server: nginx
date: Wed, 24 Apr 2024 13:59:58 GMT
last-modified: Wed, 24 Apr 2024 13:59:57 GMT
etag: "6629105d-4f151"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: TLH97cU17kGuXA84BJTyDHGBejCP5dUSn5qdBD2_k7JL1UmXXI6WKg==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 | 54.230.111.45 | | 320 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 IP54.230.111.45:0
Size320 kB (320415 bytes) Hasha4b402884cc77bfbfe43fa7ce10d88fc 304607bac4ff6a5c8772f4c93ecfb830d612836f 91f2b8f6dbafe08d04591afacb90e3c3e12206905ee6e2037d34b78c588f6d5f
GET /hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 320415
age: 4
server: nginx
date: Wed, 24 Apr 2024 14:00:00 GMT
last-modified: Wed, 24 Apr 2024 13:59:59 GMT
etag: "6629105f-4e39f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 5J5rZC89kyrWWCyPoQ_o3eiJiudapzaxgn9GZRNeWuGwtX2Z4oCAWQ==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 | 54.230.111.45 | | 314 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 IP54.230.111.45:0
Size314 kB (314506 bytes) Hashd196a8331d9d277e341624a996b8d80f 986d656bddf369f3c12cc454294d1ace37958ee1 6c5675d71afbf9cbb9a084602af0c98347e69f10272c08b9099856d472652ee7
GET /hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 314506
age: 2
server: nginx
date: Wed, 24 Apr 2024 14:00:02 GMT
last-modified: Wed, 24 Apr 2024 14:00:01 GMT
etag: "66291061-4cc8a"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: mN82KA_ikPZeglpe_pmDsGExSBkvb6WuD8jbqmkWpt2MFsDURvVkfA==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 | 54.230.111.45 | | 320 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 IP54.230.111.45:0
Size320 kB (320415 bytes) Hasha4b402884cc77bfbfe43fa7ce10d88fc 304607bac4ff6a5c8772f4c93ecfb830d612836f 91f2b8f6dbafe08d04591afacb90e3c3e12206905ee6e2037d34b78c588f6d5f
GET /hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 320415
age: 4
server: nginx
date: Wed, 24 Apr 2024 14:00:00 GMT
last-modified: Wed, 24 Apr 2024 13:59:59 GMT
etag: "6629105f-4e39f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: -5ceZHib2vZqSBf3W91S7Ax9vT1ddhfWJsbBWf9_bGAJVwqdttnrAQ==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 | 54.230.111.45 | | 314 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 IP54.230.111.45:0
Size314 kB (314506 bytes) Hashd196a8331d9d277e341624a996b8d80f 986d656bddf369f3c12cc454294d1ace37958ee1 6c5675d71afbf9cbb9a084602af0c98347e69f10272c08b9099856d472652ee7
GET /hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 314506
age: 2
server: nginx
date: Wed, 24 Apr 2024 14:00:02 GMT
last-modified: Wed, 24 Apr 2024 14:00:01 GMT
etag: "66291061-4cc8a"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: MGrlg3eqkPm_3WPJBIK29UhD6miBVKXw60-sR-tO-7MNDXM_daX2iA==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 | 54.230.111.45 | | 320 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 IP54.230.111.45:0
Size320 kB (320415 bytes) Hasha4b402884cc77bfbfe43fa7ce10d88fc 304607bac4ff6a5c8772f4c93ecfb830d612836f 91f2b8f6dbafe08d04591afacb90e3c3e12206905ee6e2037d34b78c588f6d5f
GET /hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 320415
age: 4
server: nginx
date: Wed, 24 Apr 2024 14:00:00 GMT
last-modified: Wed, 24 Apr 2024 13:59:59 GMT
etag: "6629105f-4e39f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: aPbReyRXFSl8WyUv2dH0us3p-5t7aoJSTFZZpvqW5m-PQoCM3GS5Xg==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 315 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size315 kB (314837 bytes) Hash1dae7a19317aee2232e8bc3def53cf14 fe2c331629bdce05994e22815a17c3871ecafa76 357e16527263baf2cd14a08349b83ed001e28b6e6de42b2ce20d14346cc96018
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Wed, 24 Apr 2024 14:00:04 GMT
last-modified: Wed, 24 Apr 2024 14:00:03 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YVI_eJ1_MW9bYgSJ34JsvVl4v1JRK8d6X0dGO4Tmh-Fb5fXzUB7x0w==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 | 54.230.111.45 | | 320 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 IP54.230.111.45:0
Size320 kB (320415 bytes) Hasha4b402884cc77bfbfe43fa7ce10d88fc 304607bac4ff6a5c8772f4c93ecfb830d612836f 91f2b8f6dbafe08d04591afacb90e3c3e12206905ee6e2037d34b78c588f6d5f
GET /hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 320415
age: 5
server: nginx
date: Wed, 24 Apr 2024 14:00:00 GMT
last-modified: Wed, 24 Apr 2024 13:59:59 GMT
etag: "6629105f-4e39f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Vi-FxZQtnfMPttgTx8vVSHugHOq2d84TJ-W1PiSZ1UdSY6sUDItLzA==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 315 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size315 kB (314837 bytes) Hash1dae7a19317aee2232e8bc3def53cf14 fe2c331629bdce05994e22815a17c3871ecafa76 357e16527263baf2cd14a08349b83ed001e28b6e6de42b2ce20d14346cc96018
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Wed, 24 Apr 2024 14:00:03 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Wed, 24 Apr 2024 14:00:05 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: t2YAmMiriuvq-dVLj7rJsT47ICLQzO2qgq-yJ0jwI2-QnRzjPLOhRQ==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 | 54.230.111.45 | | 320 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 IP54.230.111.45:0
Size320 kB (320415 bytes) Hasha4b402884cc77bfbfe43fa7ce10d88fc 304607bac4ff6a5c8772f4c93ecfb830d612836f 91f2b8f6dbafe08d04591afacb90e3c3e12206905ee6e2037d34b78c588f6d5f
GET /hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 320415
age: 5
server: nginx
date: Wed, 24 Apr 2024 14:00:00 GMT
last-modified: Wed, 24 Apr 2024 13:59:59 GMT
etag: "6629105f-4e39f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Vxb66RaNkkcoANRNYKkUkdmEQiSFtFcYpHA7OPL3NrXREoalmPOUBQ==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 | 54.230.111.45 | | 314 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 IP54.230.111.45:0
Size314 kB (314506 bytes) Hashd196a8331d9d277e341624a996b8d80f 986d656bddf369f3c12cc454294d1ace37958ee1 6c5675d71afbf9cbb9a084602af0c98347e69f10272c08b9099856d472652ee7
GET /hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 314506
age: 3
server: nginx
date: Wed, 24 Apr 2024 14:00:02 GMT
last-modified: Wed, 24 Apr 2024 14:00:01 GMT
etag: "66291061-4cc8a"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: SKpQmxDB5gxiyQmtWx05zey5f1kWllb3gxXppFAwz6_zYXMMB3DcBw==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 | 54.230.111.45 | | 320 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 IP54.230.111.45:0
Size320 kB (320415 bytes) Hasha4b402884cc77bfbfe43fa7ce10d88fc 304607bac4ff6a5c8772f4c93ecfb830d612836f 91f2b8f6dbafe08d04591afacb90e3c3e12206905ee6e2037d34b78c588f6d5f
GET /hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 320415
age: 5
server: nginx
date: Wed, 24 Apr 2024 14:00:00 GMT
last-modified: Wed, 24 Apr 2024 13:59:59 GMT
etag: "6629105f-4e39f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: T8q951R7_v2n0IV0DUegNlvLznz3MjLJd0qs3A64MfCnv_3hum3SBA==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 | 54.230.111.45 | | 314 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 IP54.230.111.45:0
Size314 kB (314506 bytes) Hashd196a8331d9d277e341624a996b8d80f 986d656bddf369f3c12cc454294d1ace37958ee1 6c5675d71afbf9cbb9a084602af0c98347e69f10272c08b9099856d472652ee7
GET /hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 314506
age: 3
server: nginx
date: Wed, 24 Apr 2024 14:00:02 GMT
last-modified: Wed, 24 Apr 2024 14:00:01 GMT
etag: "66291061-4cc8a"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: V3jJXsDE-242uYHXvkBsJEvcP2_wgEUZu9Ok1J5eKEJpsyX5RR5xWw==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 | 54.230.111.45 | | 320 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 IP54.230.111.45:0
Size320 kB (320415 bytes) Hasha4b402884cc77bfbfe43fa7ce10d88fc 304607bac4ff6a5c8772f4c93ecfb830d612836f 91f2b8f6dbafe08d04591afacb90e3c3e12206905ee6e2037d34b78c588f6d5f
GET /hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 320415
age: 5
server: nginx
date: Wed, 24 Apr 2024 14:00:00 GMT
last-modified: Wed, 24 Apr 2024 13:59:59 GMT
etag: "6629105f-4e39f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 1LCAyBTxVu1VUykjQv83PGkeayZa_-ZqW8HK9ywTbfIOt5asJ-zieQ==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 315 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size315 kB (315168 bytes) Hash4ddd3b5d8d0e7217314758ed056e8b4f ee9bcf484a056285c89d912645ee198fa881392a 09135c5aeb0307aed0acbf7cbd8ec1bf7566de731a64d6dffcc6801425cc28d5
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Wed, 24 Apr 2024 14:00:03 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Wed, 24 Apr 2024 14:00:05 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LJC7SBLUWWDsiJeRU_AfOn8lBljDVuBUxbs9rqkbp5Q1X6jQcOpkuQ==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 | 54.230.111.45 | | 320 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 IP54.230.111.45:0
Size320 kB (320415 bytes) Hasha4b402884cc77bfbfe43fa7ce10d88fc 304607bac4ff6a5c8772f4c93ecfb830d612836f 91f2b8f6dbafe08d04591afacb90e3c3e12206905ee6e2037d34b78c588f6d5f
GET /hls/19358621/19358621_480p_452_eZPu7epjANbfCgQZ_1713967197.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 320415
age: 6
server: nginx
date: Wed, 24 Apr 2024 14:00:00 GMT
last-modified: Wed, 24 Apr 2024 13:59:59 GMT
etag: "6629105f-4e39f"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: EIVaDwN16atFO0-__0gUkMNiMQv4flOm2ySIdqTP2tnL6nAmIPEVZQ==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 | 54.230.111.45 | | 314 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 IP54.230.111.45:0
Size314 kB (314506 bytes) Hashd196a8331d9d277e341624a996b8d80f 986d656bddf369f3c12cc454294d1ace37958ee1 6c5675d71afbf9cbb9a084602af0c98347e69f10272c08b9099856d472652ee7
GET /hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 314506
age: 4
server: nginx
date: Wed, 24 Apr 2024 14:00:02 GMT
last-modified: Wed, 24 Apr 2024 14:00:01 GMT
etag: "66291061-4cc8a"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: R5JI598efMNwDBx2GPDnCV4L-HJeRNHuFFAMYILq_qDxqG651VREBQ==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 | 54.230.111.45 | | 314 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 IP54.230.111.45:0
Size314 kB (314506 bytes) Hashd196a8331d9d277e341624a996b8d80f 986d656bddf369f3c12cc454294d1ace37958ee1 6c5675d71afbf9cbb9a084602af0c98347e69f10272c08b9099856d472652ee7
GET /hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 314506
age: 4
server: nginx
date: Wed, 24 Apr 2024 14:00:02 GMT
last-modified: Wed, 24 Apr 2024 14:00:01 GMT
etag: "66291061-4cc8a"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: KEgLccu4zAUEPi94TwSmRaaROdEkKPbLzt_kGiQXBGBSjRvvIZf7TQ==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 | 54.230.111.45 | | 321 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 IP54.230.111.45:0
Size321 kB (321166 bytes) Hash1c51172c88c177fd68fa7c8da3593c15 6ba0207f922f844e9e8fe71e12337f3e34705c37 7ddc2565da66ae0e2f44618f52a124c6e275250a86c74ad3f50d72b39412bc01
GET /hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 321166
age: 2
server: nginx
date: Wed, 24 Apr 2024 14:00:04 GMT
last-modified: Wed, 24 Apr 2024 14:00:03 GMT
etag: "66291063-4e68e"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: uiBb0LATwXAkFg-D07nbllN1nO3CzvlKJYc4hDDNDDN1chQ6MGgnfg==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_455_m3qGbes9adp5bt1U_1713967203.mp4 | 54.230.111.45 | | 315 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_455_m3qGbes9adp5bt1U_1713967203.mp4 IP54.230.111.45:0
Size315 kB (314690 bytes) Hash45b52f3672f40ce17cce45436458acdd 2bd036068cee7cdb7db86940114bc5b838c97422 34c7122bf4b76a2e7d64329ea2573a13f7ab87b98d1ddcd6ae2f97778372e753
GET /hls/19358621/19358621_480p_455_m3qGbes9adp5bt1U_1713967203.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 314690
alt-svc: h3=":443"; ma=86400
server: nginx
date: Wed, 24 Apr 2024 14:00:06 GMT
last-modified: Wed, 24 Apr 2024 14:00:05 GMT
etag: "66291065-4cd42"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HkOuYH1tnGMfou2AFqpyxT9v0oahX_QP41EigMe29D0InWcS6brd1Q==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 | 54.230.111.45 | | 314 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 IP54.230.111.45:0
Size314 kB (314506 bytes) Hashd196a8331d9d277e341624a996b8d80f 986d656bddf369f3c12cc454294d1ace37958ee1 6c5675d71afbf9cbb9a084602af0c98347e69f10272c08b9099856d472652ee7
GET /hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 314506
age: 4
server: nginx
date: Wed, 24 Apr 2024 14:00:02 GMT
last-modified: Wed, 24 Apr 2024 14:00:01 GMT
etag: "66291061-4cc8a"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: yY8z7OMLLKJhlWp-CfPheRLMBcPtV7xnQXtmVQk4pPHtmgwEcbRhiA==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 322 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size322 kB (321496 bytes) Hashca658d65cdb42e7f5f0e15c87c303143 123e481fe38741a43e71a1f3ec7d3db2ee860d38 f972e922ca56a187ffc617628492d162ef453f8aa3a8e80573dce6dab8b7acc0
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Wed, 24 Apr 2024 14:00:06 GMT
last-modified: Wed, 24 Apr 2024 14:00:05 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hD5vqIeQrl9Dm_mrNv7QaejbfOqLeH8UEjGmTHYmoE0Q1kHrrjHnsQ==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 | 54.230.111.45 | | 314 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 IP54.230.111.45:0
Size314 kB (314506 bytes) Hashd196a8331d9d277e341624a996b8d80f 986d656bddf369f3c12cc454294d1ace37958ee1 6c5675d71afbf9cbb9a084602af0c98347e69f10272c08b9099856d472652ee7
GET /hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 314506
age: 5
server: nginx
date: Wed, 24 Apr 2024 14:00:02 GMT
last-modified: Wed, 24 Apr 2024 14:00:01 GMT
etag: "66291061-4cc8a"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: iUEI0_rmKZRNNUh_bxpL0DyZ6AB1wHauUytZVtoXqY4TtBmT6xv9PA==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 322 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size322 kB (321496 bytes) Hashca658d65cdb42e7f5f0e15c87c303143 123e481fe38741a43e71a1f3ec7d3db2ee860d38 f972e922ca56a187ffc617628492d162ef453f8aa3a8e80573dce6dab8b7acc0
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Wed, 24 Apr 2024 14:00:05 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Wed, 24 Apr 2024 14:00:07 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: s0ojhElHeFjj-1oJR9w6bcOfkFl50Qw_Yz2c6DlgYEg-SrBYOlELXA==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 | 54.230.111.45 | | 314 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 IP54.230.111.45:0
Size314 kB (314506 bytes) Hashd196a8331d9d277e341624a996b8d80f 986d656bddf369f3c12cc454294d1ace37958ee1 6c5675d71afbf9cbb9a084602af0c98347e69f10272c08b9099856d472652ee7
GET /hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 314506
age: 5
server: nginx
date: Wed, 24 Apr 2024 14:00:02 GMT
last-modified: Wed, 24 Apr 2024 14:00:01 GMT
etag: "66291061-4cc8a"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: x1YNAaLWR7UkhdZndWdqOu0GfRscqjIPXQf2rF59vOM6dsvzpyRQxw==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 322 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size322 kB (321496 bytes) Hashca658d65cdb42e7f5f0e15c87c303143 123e481fe38741a43e71a1f3ec7d3db2ee860d38 f972e922ca56a187ffc617628492d162ef453f8aa3a8e80573dce6dab8b7acc0
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Wed, 24 Apr 2024 14:00:05 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Wed, 24 Apr 2024 14:00:07 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: V3zShSvb2mYblbd4ZAZWKzurRiZTsOtxwOvDTNnnTk3Nq67uL0TPKg==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 | 54.230.111.45 | | 314 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 IP54.230.111.45:0
Size314 kB (314506 bytes) Hashd196a8331d9d277e341624a996b8d80f 986d656bddf369f3c12cc454294d1ace37958ee1 6c5675d71afbf9cbb9a084602af0c98347e69f10272c08b9099856d472652ee7
GET /hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 314506
age: 5
server: nginx
date: Wed, 24 Apr 2024 14:00:02 GMT
last-modified: Wed, 24 Apr 2024 14:00:01 GMT
etag: "66291061-4cc8a"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: B8KAy69wewiSgQweRa74YLV3EsHPt2Qcb0LUgP8yTzZNSZQP-wj5Kw==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 322 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size322 kB (321496 bytes) Hashca658d65cdb42e7f5f0e15c87c303143 123e481fe38741a43e71a1f3ec7d3db2ee860d38 f972e922ca56a187ffc617628492d162ef453f8aa3a8e80573dce6dab8b7acc0
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Wed, 24 Apr 2024 14:00:05 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Wed, 24 Apr 2024 14:00:07 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5odwsDmoMNB8rKCrptjsb_6ky74W6lBXyeoNxd_r_X33GyEMtTxNww==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 | 54.230.111.45 | | 314 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 IP54.230.111.45:0
Size314 kB (314506 bytes) Hashd196a8331d9d277e341624a996b8d80f 986d656bddf369f3c12cc454294d1ace37958ee1 6c5675d71afbf9cbb9a084602af0c98347e69f10272c08b9099856d472652ee7
GET /hls/19358621/19358621_480p_453_C9AmcDWRsY1ZPQQ5_1713967199.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 314506
age: 6
server: nginx
date: Wed, 24 Apr 2024 14:00:02 GMT
last-modified: Wed, 24 Apr 2024 14:00:01 GMT
etag: "66291061-4cc8a"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: rHJzQjza8D3YVLiO6Gg5DHm9wKMjuYzXNI3ZS_MAY0txqtl26lMDDg==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 322 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size322 kB (321496 bytes) Hashca658d65cdb42e7f5f0e15c87c303143 123e481fe38741a43e71a1f3ec7d3db2ee860d38 f972e922ca56a187ffc617628492d162ef453f8aa3a8e80573dce6dab8b7acc0
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-P1
server: nginx
last-modified: Wed, 24 Apr 2024 14:00:05 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Wed, 24 Apr 2024 14:00:08 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-id: t-Pjlcu-LLy5-tmXQMYa-We6aXS2Vu5Mey3F-F011OAP48tP_qVAWg==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 | 54.230.111.45 | | 321 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 IP54.230.111.45:0
Size321 kB (321166 bytes) Hash1c51172c88c177fd68fa7c8da3593c15 6ba0207f922f844e9e8fe71e12337f3e34705c37 7ddc2565da66ae0e2f44618f52a124c6e275250a86c74ad3f50d72b39412bc01
GET /hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 321166
age: 4
server: nginx
date: Wed, 24 Apr 2024 14:00:04 GMT
last-modified: Wed, 24 Apr 2024 14:00:03 GMT
etag: "66291063-4e68e"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: v6wBj6nTIOVvPf3h5GiIF-CbT99pfZUpIJU_JczoREbMGwSsvbO8iA==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 315 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size315 kB (315020 bytes) Hash7ca0e0309f5c1e7d016523485e9b0b55 15ccdfe1880b2aa4c89be483e1a06f3a4b6ecfef 4bb9993ff4ff65b50586daf3f61c9c424516a2a6bfc7561d9866fb6d78b2ba1d
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Wed, 24 Apr 2024 14:00:05 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Wed, 24 Apr 2024 14:00:08 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: p55YzZDOiQEPaK0ar9ugLvCkgTSSm4pC5YIen9XfkOi7wZe-3xkoKA==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 | 54.230.111.45 | | 321 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 IP54.230.111.45:0
Size321 kB (321166 bytes) Hash1c51172c88c177fd68fa7c8da3593c15 6ba0207f922f844e9e8fe71e12337f3e34705c37 7ddc2565da66ae0e2f44618f52a124c6e275250a86c74ad3f50d72b39412bc01
GET /hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 321166
age: 4
server: nginx
date: Wed, 24 Apr 2024 14:00:04 GMT
last-modified: Wed, 24 Apr 2024 14:00:03 GMT
etag: "66291063-4e68e"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ak19lOk8J-0qTCSTu9V2blhsFrJ3aTLf9Blr76HFcz-6Yq35goftHw==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 315 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size315 kB (315020 bytes) Hash7ca0e0309f5c1e7d016523485e9b0b55 15ccdfe1880b2aa4c89be483e1a06f3a4b6ecfef 4bb9993ff4ff65b50586daf3f61c9c424516a2a6bfc7561d9866fb6d78b2ba1d
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Wed, 24 Apr 2024 14:00:05 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Wed, 24 Apr 2024 14:00:08 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _bbmj0ptqFhr_yzhkwAdcT1fX9uKEDW5LKOo4IUvJ6yz4gKaH6flrA==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 | 54.230.111.45 | | 321 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 IP54.230.111.45:0
Size321 kB (321166 bytes) Hash1c51172c88c177fd68fa7c8da3593c15 6ba0207f922f844e9e8fe71e12337f3e34705c37 7ddc2565da66ae0e2f44618f52a124c6e275250a86c74ad3f50d72b39412bc01
GET /hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 321166
age: 4
server: nginx
date: Wed, 24 Apr 2024 14:00:04 GMT
last-modified: Wed, 24 Apr 2024 14:00:03 GMT
etag: "66291063-4e68e"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: NX6r_JGeaufN1C_i-YSeEWT9SszplmNt1J_fi-J_g-Wz7ReISbH5fw==
|
|
| go.bbrdbr.com/api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll&webp=1&sortBy=mlRank | 104.18.40.50 | | 316 kB |
URL go.bbrdbr.com/api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll&webp=1&sortBy=mlRank IP104.18.40.50:0
Size316 kB (315861 bytes) Hash793a50fac4e882130f7336e332abab22 56f11b57b293e4ebf4c36791c154339719382cbd 9abf1e374fed774ecac5a008c9e4462e40f091c26856a2572e0aff13437e9546
GET /api/models?landing=WidgetV4Universal&tag=girls&forceClient=1&stripcashR=0&limit=2&usePreroll&webp=1&sortBy=mlRank HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Cookie: __cflb=02DiuDFRFiBZBvMSLtrsnD7QZBLqqpmg3qqzT5GqduFqE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 14:00:08 GMT
content-type: application/json
access-control-allow-origin: https://creative.bbrdbr.com
access-control-allow-credentials: true
vary: Origin, Accept-Encoding
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Wed, 24 Apr 2024 13:59:53 GMT
cf-cache-status: HIT
age: 3
server: cloudflare
cf-ray: 87969e2edc3756ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 | 54.230.111.45 | | 321 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 IP54.230.111.45:0
Size321 kB (321166 bytes) Hash1c51172c88c177fd68fa7c8da3593c15 6ba0207f922f844e9e8fe71e12337f3e34705c37 7ddc2565da66ae0e2f44618f52a124c6e275250a86c74ad3f50d72b39412bc01
GET /hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 321166
age: 5
server: nginx
date: Wed, 24 Apr 2024 14:00:04 GMT
last-modified: Wed, 24 Apr 2024 14:00:03 GMT
etag: "66291063-4e68e"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: uly5DTTE0ke0d8kLiSnC9pthgxzsqB04eWbRdA4x4yVx_Ti26f7AkQ==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 315 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size315 kB (315020 bytes) Hash7ca0e0309f5c1e7d016523485e9b0b55 15ccdfe1880b2aa4c89be483e1a06f3a4b6ecfef 4bb9993ff4ff65b50586daf3f61c9c424516a2a6bfc7561d9866fb6d78b2ba1d
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-P1
server: nginx
last-modified: Wed, 24 Apr 2024 14:00:05 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Wed, 24 Apr 2024 14:00:09 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-id: A87f77F5Qw4Zz5buZd2_97u8RAGY_VtfSt9D8pe0LkOuaasKU_TCDA==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 | 54.230.111.45 | | 321 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 IP54.230.111.45:0
Size321 kB (321166 bytes) Hash1c51172c88c177fd68fa7c8da3593c15 6ba0207f922f844e9e8fe71e12337f3e34705c37 7ddc2565da66ae0e2f44618f52a124c6e275250a86c74ad3f50d72b39412bc01
GET /hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 321166
age: 5
server: nginx
date: Wed, 24 Apr 2024 14:00:04 GMT
last-modified: Wed, 24 Apr 2024 14:00:03 GMT
etag: "66291063-4e68e"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: KTIyQCZDa47mjKQxO38oQbfzjE7jEFnG3euHoZzVpRVnk_yXPxbqBw==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 315 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size315 kB (315020 bytes) Hash7ca0e0309f5c1e7d016523485e9b0b55 15ccdfe1880b2aa4c89be483e1a06f3a4b6ecfef 4bb9993ff4ff65b50586daf3f61c9c424516a2a6bfc7561d9866fb6d78b2ba1d
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Wed, 24 Apr 2024 14:00:05 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Wed, 24 Apr 2024 14:00:09 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: y9AicQk0CD_UoCvR9QOitmvtlnsTygyMfBA4Iy6wjT7Apmscyt2FLg==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 | 54.230.111.45 | | 321 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 IP54.230.111.45:0
Size321 kB (321166 bytes) Hash1c51172c88c177fd68fa7c8da3593c15 6ba0207f922f844e9e8fe71e12337f3e34705c37 7ddc2565da66ae0e2f44618f52a124c6e275250a86c74ad3f50d72b39412bc01
GET /hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 321166
age: 5
server: nginx
date: Wed, 24 Apr 2024 14:00:04 GMT
last-modified: Wed, 24 Apr 2024 14:00:03 GMT
etag: "66291063-4e68e"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: m0KbGCjruhkKmhahCunv6SsVBZ5FbfJ23s4Jejx6BFOFWmEn5dSySA==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 315 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size315 kB (315020 bytes) Hash7ca0e0309f5c1e7d016523485e9b0b55 15ccdfe1880b2aa4c89be483e1a06f3a4b6ecfef 4bb9993ff4ff65b50586daf3f61c9c424516a2a6bfc7561d9866fb6d78b2ba1d
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
last-modified: Wed, 24 Apr 2024 14:00:05 GMT
access-control-allow-origin: *
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
content-encoding: gzip
date: Wed, 24 Apr 2024 14:00:09 GMT
cache-control: public, max-age=1, s-maxage=1, no-transform
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VZKWJd0rv_uzF882Ee9_OGft9ETKWrtQLI_hTitqWm2C81CyxYFCCw==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 | 54.230.111.45 | | 321 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 IP54.230.111.45:0
Size321 kB (321166 bytes) Hash1c51172c88c177fd68fa7c8da3593c15 6ba0207f922f844e9e8fe71e12337f3e34705c37 7ddc2565da66ae0e2f44618f52a124c6e275250a86c74ad3f50d72b39412bc01
GET /hls/19358621/19358621_480p_454_zkaoqhXdjFYwjLQX_1713967201.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 321166
age: 6
server: nginx
date: Wed, 24 Apr 2024 14:00:04 GMT
last-modified: Wed, 24 Apr 2024 14:00:03 GMT
etag: "66291063-4e68e"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Av4y17B7_XKfeIqk9T0mQxPIGSanl2gq4hnhkRpXVNg8DIpsEt14Zg==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 315 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size315 kB (315010 bytes) Hash07508149c5a01d3068b9ec7aa5fb2ae0 86fc72df53e04eb659027191936d5e3101d3e3f6 abdb2d289097dd14941fd68a1fdf6f82fe918de3e4ca3ebac9fe2c6647650270
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Wed, 24 Apr 2024 14:00:10 GMT
last-modified: Wed, 24 Apr 2024 14:00:09 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: HIT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0Nx9C0kyCOTrJan1B-QpoHXYeRLHUXobbkKXBZwYM-w3pG_2dv370g==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 315 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size315 kB (315010 bytes) Hash07508149c5a01d3068b9ec7aa5fb2ae0 86fc72df53e04eb659027191936d5e3101d3e3f6 abdb2d289097dd14941fd68a1fdf6f82fe918de3e4ca3ebac9fe2c6647650270
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Wed, 24 Apr 2024 14:00:10 GMT
last-modified: Wed, 24 Apr 2024 14:00:09 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: HIT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QL4RpVKuqaRX4L2J-eYcmtdFe-b_rYNKbJisu6nukpJRrWQFKBnFCA==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_456_nqs12yE3R42V0VLa_1713967205.mp4 | 54.230.111.45 | | 310 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_456_nqs12yE3R42V0VLa_1713967205.mp4 IP54.230.111.45:0
Size310 kB (310280 bytes) Hashd49a92e605b81f99a56d1ccf33bcde0f 979a5bf3e5d658b4a695726e15be1b4cb8dfc877 addc9bec2946a38a562ef8674683cf71d129696cd2d542315327a053f3ba0a6a
GET /hls/19358621/19358621_480p_456_nqs12yE3R42V0VLa_1713967205.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 310280
age: 2
server: nginx
date: Wed, 24 Apr 2024 14:00:08 GMT
last-modified: Wed, 24 Apr 2024 14:00:07 GMT
etag: "66291067-4bc08"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: XvPFiLuX2iXOlB6IhrAIDT3UFkOF8YOgkk02B0SvRUej_gSLs9HOtQ==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_455_m3qGbes9adp5bt1U_1713967203.mp4 | 54.230.111.45 | | 315 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p_455_m3qGbes9adp5bt1U_1713967203.mp4 IP54.230.111.45:0
Size315 kB (314690 bytes) Hash45b52f3672f40ce17cce45436458acdd 2bd036068cee7cdb7db86940114bc5b838c97422 34c7122bf4b76a2e7d64329ea2573a13f7ab87b98d1ddcd6ae2f97778372e753
GET /hls/19358621/19358621_480p_455_m3qGbes9adp5bt1U_1713967203.mp4 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: video/mp4
content-length: 314690
age: 4
server: nginx
date: Wed, 24 Apr 2024 14:00:06 GMT
last-modified: Wed, 24 Apr 2024 14:00:05 GMT
etag: "66291065-4cd42"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60, no-transform
timing-allow-origin: *
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 3nusRXrBsPPHFz_M4r9MpXcMyPq6tYvYF7CAWEOV4kEeCnsyrbf7-Q==
|
|
| b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 | 54.230.111.45 | | 311 kB |
URL b-hls-08.doppiocdn.net/hls/19358621/19358621_480p.m3u8 IP54.230.111.45:0
File typegzip compressed data, from Unix Size311 kB (310600 bytes) Hashf6272d432c56b82e51bf614f1b745698 646b9b803473c111979d2de91859694f491a951b 43db3b1e3c834f97c07a428c80df5ffa35413a85419577ba72074d380f417e82
GET /hls/19358621/19358621_480p.m3u8 HTTP/1.1
Host: b-hls-08.doppiocdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/vnd.apple.mpegurl
alt-svc: h3=":443"; ma=86400
age: 0
server: nginx
date: Wed, 24 Apr 2024 14:00:10 GMT
last-modified: Wed, 24 Apr 2024 14:00:09 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1, no-transform
timing-allow-origin: *
x-proxy-cache-orig: HIT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: d_fgJCZtBFxCTl7jbTb1rGlcOLiDgjM9qieh121fSAZzu8pZA2ZRjw==
|
|
| www.famososenbolas.com/wp-content/plugins/content-views-query-and-display-post-page/public/assets/js/cv.js | 188.114.96.1 | 200 OK | 23 kB |
URL GET HTTP/3www.famososenbolas.com/wp-content/plugins/content-views-query-and-display-post-page/public/assets/js/cv.js IP188.114.96.1:443
Requested byhttps://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page CertificateIssuerGoogle Trust Services LLC Subjectfamososenbolas.com FingerprintD7:81:14:47:F4:7A:0F:84:F5:F7:C6:F6:16:D1:05:F8:35:16:99:25 ValidityThu, 11 Apr 2024 14:39:58 GMT - Wed, 10 Jul 2024 14:39:57 GMT
File typeJavaScript source, ASCII text, with very long lines (12200) Hashea0cc8453a2aa738f8d401041748a9ba 22ea4aaf800e6a725f229654a1824e6c590a440d 206cc6db984c4454adbd64e2553423fff45bd79e2ba249fc0b512121b6648948
GET /wp-content/plugins/content-views-query-and-display-post-page/public/assets/js/cv.js HTTP/1.1
Host: www.famososenbolas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 13:59:51 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=23419
etag: W/"66268580-5b7b"
last-modified: Mon, 22 Apr 2024 15:42:56 GMT
strict-transport-security: max-age=15552000
x-powered-by: PleskLin
cache-control: max-age=31536000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QfK66QJAQHSyaZ0KpaX5rtpDbdqcVAvNzn26Tf9GfDyPi6l8Au6VQ47HV7cRf1ui0YfKw0ZjUVpuE6pjH0L621%2BFAMMGncmFv%2BGGnUlmOe2%2FFyBk12dq0AeTSFH71AYz2P2vqFAlz3Ke"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87969dc1d9675690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| poweredby.jads.co/adshow.php?adzone=913188 | 185.94.236.246 | 200 OK | 4.7 kB |
URL GET HTTP/1.1poweredby.jads.co/adshow.php?adzone=913188 IP185.94.236.246:443
Requested byhttps://www.famososenbolas.com/deportistas-desnudos/paquete-andre-silva?page CertificateIssuerSectigo Limited Subject*.jads.co Fingerprint6C:79:49:F2:EA:3B:68:61:E1:57:17:4B:BA:C8:E9:7C:91:0C:AB:38 ValidityWed, 24 Jan 2024 00:00:00 GMT - Sun, 23 Feb 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4831), with no line terminators Hashc4e177fe6e2c1a0e29d03b55f316848c 75da452a2d9f0b5b93d8e71c33864f3dca0c2db0 2b8d2101cbaf5a906dd4d410b63d083b4a48c4c839e10c2cbb0041303cc9206a
GET /adshow.php?adzone=913188 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.famososenbolas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 13:59:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=99ff827dda13599cf32b431353149edc; expires=Thu, 24-Apr-2025 13:59:52 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
imps44080=1; expires=Thu, 25-Apr-2024 13:59:52 GMT; Max-Age=86400; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YToxOntpOjEyMTI0NzQ7aToxNzE0MjI2MzkyO30%3D; expires=Sat, 27-Apr-2024 13:59:52 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Sat, 27-Apr-2024 13:59:52 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
|
|
0.0.0.0