dratingmaject.com/300d8bd8-c549-4630-a2d5-f711322f0e22
302 Found 0 B URL User Request GET HTTP/2 dratingmaject.com/300d8bd8-c549-4630-a2d5-f711322f0e22
IP
Certificate IssuerLet's Encrypt
Subjectdratingmaject.com
FingerprintFD:D5:5B:A8:07:16:D0:B8:25:D7:A8:EE:3E:66:B4:A6:36:C4:84:26
ValidityTue, 18 Apr 2023 05:48:30 GMT - Mon, 17 Jul 2023 05:48:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /300d8bd8-c549-4630-a2d5-f711322f0e22 HTTP/1.1
Host: dratingmaject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Fri, 26 May 2023 18:04:53 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://babesroulette.com/landers/18sexy6/?clickid=w9dubngt4ue21a0p2go61se6&source=300d8bd8-c549-4630-a2d5-f711322f0e22&cep=lsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w&lptoken=16af85f91212601e9383
pragma: no-cache
set-cookie: 300d8bd8-c549-4630-a2d5-f711322f0e22-v4=QGBKMmhBg50VU8cFdb5QiG3jqLkTs2iDUitByEdx458; Max-Age=86400; Expires=Sat, 27-May-2023 18:04:53 GMT; Domain=dratingmaject.com; Path=/; Secure; HttpOnly;SameSite=None
cep-v4=V7xgmism4dOtJBVY0iQ-8ESSCU-jhtqXq5J8AzG3_1YvhirEszB262ljTE7I2Wnq346GL-FucZvoNGebVkd8BKDXGlK5-G4sSnpd1KpCtN4tFjW0eO32cltw8zdawfWHuohrp3YtXxBLLXFUFNYe0PZLAlsXrD6NxkR8FBpvfiYFmBRdoLpH81PGvv8bhiMotFYV1Fs3t0Z_dFqQIttu54YVMCMKBy1ngaTJLMFCYtDXfMagi4Ee3o0UArDciUXCZjUVPfQ_XkCJu1llaia4uTwUQFgg5oDpCbpLsAER1QvW1pKvihbsLC5Njtn1t_QcL3W4crZgiCvqfFxre5Fcfb6Tot29NXdIByAW7Xgep-1tq5FcZQcLpnAtVvbv9H--e6NxEJ_49l-iXNrRohUXIA; Max-Age=86400; Expires=Sat, 27-May-2023 18:04:53 GMT; Domain=dratingmaject.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
babesroulette.com/landers/18sexy6/img/18.png
200 OK 1.9 kB URL GET HTTP/3 babesroulette.com/landers/18sexy6/img/18.png
IP
Requested by https://babesroulette.com/landers/18sexy6/?clickid=w9dubngt4ue21a0p2go61se6&source=300d8bd8-c549-4630-a2d5-f711322f0e22&cep=lsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w&lptoken=16af85f91212601e9383
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD5:5A:A0:0B:41:04:8D:B9:79:6F:BA:0A:34:26:FB:AA:B7:18:30:EC
ValiditySun, 28 Aug 2022 00:00:00 GMT - Mon, 28 Aug 2023 23:59:59 GMT
File type PNG image data, 214 x 214, 8-bit colormap, non-interlaced\012- data
Hash 3067aae7c6d439721665640c796d0627
f16e50134fd77611c03445043fc2d2258b596e6b
a6aa34cf719d74da2951f38c12554418ed0c6d0a9d49218eec21c109aa88f20f
GET /landers/18sexy6/img/18.png HTTP/1.1
Host: babesroulette.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://babesroulette.com/landers/18sexy6/?clickid=w9dubngt4ue21a0p2go61se6&source=300d8bd8-c549-4630-a2d5-f711322f0e22&cep=lsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w&lptoken=16af85f91212601e9383
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 May 2023 18:04:54 GMT
content-type: image/png
content-length: 1927
last-modified: Mon, 06 Mar 2023 19:24:12 GMT
etag: "64063ddc-787"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: HIT
age: 4738
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pLzrUHP%2FQNkvemn0wg49AakLqbNrI69ZU0wp0hfcEwKpX3GcQggmJ7jZ61rdjL%2Blf0WKX0TN3LNISvSxIRXJmxb5x7dQkMSqoqVFG4pd%2B82cPEJGpSOUncHqlOyPRUNhEGdhxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cd7f1786a56b523-OSL
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
472 B IP
Hash eabef916764564262ad985fd27284a97
42a72e12642fe4249aa5bd8e1cc9e9db07fd7943
ffa5c8a67b8ebba1ce4e464bc7e831e998c830a78d78880f09702afae02a9d70
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 18:04:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash eabef916764564262ad985fd27284a97
42a72e12642fe4249aa5bd8e1cc9e9db07fd7943
ffa5c8a67b8ebba1ce4e464bc7e831e998c830a78d78880f09702afae02a9d70
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 18:04:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
babesroulette.com/landers/18sexy6/css/9.jpg
200 OK 93 kB URL GET HTTP/3 babesroulette.com/landers/18sexy6/css/9.jpg
IP
Requested by https://babesroulette.com/landers/18sexy6/?clickid=w9dubngt4ue21a0p2go61se6&source=300d8bd8-c549-4630-a2d5-f711322f0e22&cep=lsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w&lptoken=16af85f91212601e9383
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD5:5A:A0:0B:41:04:8D:B9:79:6F:BA:0A:34:26:FB:AA:B7:18:30:EC
ValiditySun, 28 Aug 2022 00:00:00 GMT - Mon, 28 Aug 2023 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.2 (Windows), datetime=2023:03:06 20:22:42], baseline, precision 8, 1080x1080, components 3\012- data
Hash c0c714130e6b3529529b640f2679e308
485d007de3f56abe62138bda187299732a4f1adb
c889403ca1d3f63cbace8e30a21cc93d6307371a17f15d4776c930452f406c40
GET /landers/18sexy6/css/9.jpg HTTP/1.1
Host: babesroulette.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://babesroulette.com/landers/18sexy6/css/badoinkvr9.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 May 2023 18:04:54 GMT
content-type: image/jpeg
content-length: 93151
last-modified: Mon, 06 Mar 2023 19:24:09 GMT
etag: "64063dd9-16bdf"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: HIT
age: 4623
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KKX1UlVlwItqj6wRBbBx6V2iu9SCvuKEOnlJdkmy22h%2FZFbRMm4o5vGlZVeh%2BzUOYMnLlqFXiLj%2FJSPWKcTZRaF%2BFryf1rUiN3ZyCFMbxX6x5dru6AwJXvhDKuq0H%2Ff7n0Bh0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cd7f17a0cc9b523-OSL
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
472 B IP
Hash fc757271ec057273ef886c129a7bffd0
2e6c8df3cbe82d4dde32cdf7f71a6668dd536287
72cd2bbd96698941fa58cb6a7dfa4340187c0eb2499bd5a0e6cf4d7240c3a225
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 18:04:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://babesroulette.com/landers/18sexy6/?clickid=w9dubngt4ue21a0p2go61se6&source=300d8bd8-c549-4630-a2d5-f711322f0e22&cep=lsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w&lptoken=16af85f91212601e9383
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://babesroulette.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 20 May 2023 07:44:41 GMT
expires: Sun, 19 May 2024 07:44:41 GMT
cache-control: public, max-age=31536000
age: 555613
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash fc757271ec057273ef886c129a7bffd0
2e6c8df3cbe82d4dde32cdf7f71a6668dd536287
72cd2bbd96698941fa58cb6a7dfa4340187c0eb2499bd5a0e6cf4d7240c3a225
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 18:04:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Requested by https://babesroulette.com/landers/18sexy6/?clickid=w9dubngt4ue21a0p2go61se6&source=300d8bd8-c549-4630-a2d5-f711322f0e22&cep=lsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w&lptoken=16af85f91212601e9383
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://babesroulette.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 20 May 2023 03:11:48 GMT
expires: Sun, 19 May 2024 03:11:48 GMT
cache-control: public, max-age=31536000
age: 571986
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dratingmaject.com/d/.js?lpref=&lpurl=https%3A%2F%2Fbabesroulette.com%2Flanders%2F18sexy6%2F%3Fclickid%3Dw9dubngt4ue21a0p2go61se6%26source%3D300d8bd8-c549-4630-a2d5-f711322f0e22%26cep%3DlsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w%26lptoken%3D16af85f91212601e9383&lpt=Title%20here&t=1685124294486
200 OK 3.0 kB URL GET HTTP/2 dratingmaject.com/d/.js?lpref=&lpurl=https%3A%2F%2Fbabesroulette.com%2Flanders%2F18sexy6%2F%3Fclickid%3Dw9dubngt4ue21a0p2go61se6%26source%3D300d8bd8-c549-4630-a2d5-f711322f0e22%26cep%3DlsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w%26lptoken%3D16af85f91212601e9383&lpt=Title%20here&t=1685124294486
IP
Requested by https://babesroulette.com/landers/18sexy6/?clickid=w9dubngt4ue21a0p2go61se6&source=300d8bd8-c549-4630-a2d5-f711322f0e22&cep=lsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w&lptoken=16af85f91212601e9383
Certificate IssuerLet's Encrypt
Subjectdratingmaject.com
FingerprintFD:D5:5B:A8:07:16:D0:B8:25:D7:A8:EE:3E:66:B4:A6:36:C4:84:26
ValidityTue, 18 Apr 2023 05:48:30 GMT - Mon, 17 Jul 2023 05:48:29 GMT
File type ASCII text, with very long lines (1005)
Hash 0ab00b45b0cfdfac956e539d90177135
efe2063ec3f2c8887e3f46430906b322f9f5712f
14cf1b5a4068f8b73af4b81e9f3574539e2c676de3bc23bdaab8975762e072af
GET /d/.js?lpref=&lpurl=https%3A%2F%2Fbabesroulette.com%2Flanders%2F18sexy6%2F%3Fclickid%3Dw9dubngt4ue21a0p2go61se6%26source%3D300d8bd8-c549-4630-a2d5-f711322f0e22%26cep%3DlsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w%26lptoken%3D16af85f91212601e9383&lpt=Title%20here&t=1685124294486 HTTP/1.1
Host: dratingmaject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://babesroulette.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 May 2023 18:04:54 GMT
content-type: application/javascript;charset=UTF-8
content-length: 3033
access-control-allow-origin: *
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash fc757271ec057273ef886c129a7bffd0
2e6c8df3cbe82d4dde32cdf7f71a6668dd536287
72cd2bbd96698941fa58cb6a7dfa4340187c0eb2499bd5a0e6cf4d7240c3a225
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 18:04:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
babesroulette.com/favicon.ico
200 OK 110 B URL GET HTTP/3 babesroulette.com/favicon.ico
IP
Requested by https://babesroulette.com/landers/18sexy6/?clickid=w9dubngt4ue21a0p2go61se6&source=300d8bd8-c549-4630-a2d5-f711322f0e22&cep=lsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w&lptoken=16af85f91212601e9383
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD5:5A:A0:0B:41:04:8D:B9:79:6F:BA:0A:34:26:FB:AA:B7:18:30:EC
ValiditySun, 28 Aug 2022 00:00:00 GMT - Mon, 28 Aug 2023 23:59:59 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash ec49973c1991bf39fcdb53260467f39f
7e47e857f6b5bb34dc8aea01d6f422e2d0ddbc65
3550474f9a466ace7857064d81db50a25ba7c81de043bc9df8289bd90e32e411
GET /favicon.ico HTTP/1.1
Host: babesroulette.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://babesroulette.com/landers/18sexy6/?clickid=w9dubngt4ue21a0p2go61se6&source=300d8bd8-c549-4630-a2d5-f711322f0e22&cep=lsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w&lptoken=16af85f91212601e9383
Cookie: vl-cep=cep=cZ1Q0j2-yd1qIoR6TqE07oruey-n-l2tiqT3XVQiv3jDphnGshS0LYVO6K6L8QlaQpwV3904cuxXApqZAiNuKWPWPgIainQhBp9HNhvXoaQtLEKdMF15l911h1I9hSBkEFZcbQuyJ_eFJTmg-Mm6dNBPms_fmNmEjVr0ct2gLi7iVAEt86Cm3QfdXRF8aDseSUcyOeAezoo5ACoCtc-ZVsggobv5-KWJPQnpyGYM_7na06em00vEuExqjTxlvKJ076k41EZGITx6RgnI4EffQieDsBoOYDGH6tCGS6_RyIOkaVKzHqaaCadGWnzLvjLGXzTJfjXDTmQqRsM7MCV6CbeoXAftWco2eUYW68H3keHb641-wp11UVaYR_OrAPd_H6GcOShWRoDsBN8gtc8Krw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 May 2023 18:04:54 GMT
content-type: image/vnd.microsoft.icon
last-modified: Tue, 28 Sep 2021 18:43:11 GMT
etag: W/"6153623f-47e"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: HIT
age: 1821
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Wj7TS9HttXNKeJJCfEZGSFtfAzWWsbQnbIFyr%2Bvdta5QIg%2BUG%2Bj%2BFjBdrTarbdX03g5ZMq9MKJbH%2FTbBcYCrlhu70gZsq0m4D6qZZYMsEgqqbc6Wx0tHSzK36ULqzsHYz2Bb1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cd7f17b6ec7b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
babesroulette.com/landers/18sexy6/css/badoinkvr9.min.css
200 OK 189 kB URL GET HTTP/3 babesroulette.com/landers/18sexy6/css/badoinkvr9.min.css
IP
Requested by https://babesroulette.com/landers/18sexy6/?clickid=w9dubngt4ue21a0p2go61se6&source=300d8bd8-c549-4630-a2d5-f711322f0e22&cep=lsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w&lptoken=16af85f91212601e9383
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD5:5A:A0:0B:41:04:8D:B9:79:6F:BA:0A:34:26:FB:AA:B7:18:30:EC
ValiditySun, 28 Aug 2022 00:00:00 GMT - Mon, 28 Aug 2023 23:59:59 GMT
Size 189 kB (188665 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /landers/18sexy6/css/badoinkvr9.min.css HTTP/1.1
Host: babesroulette.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://babesroulette.com/landers/18sexy6/?clickid=w9dubngt4ue21a0p2go61se6&source=300d8bd8-c549-4630-a2d5-f711322f0e22&cep=lsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w&lptoken=16af85f91212601e9383
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 May 2023 18:04:54 GMT
content-type: text/css
last-modified: Mon, 06 Mar 2023 19:24:08 GMT
etag: W/"64063dd8-2e0f9"
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: HIT
age: 4738
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w6n3g62zLvcgBZjZV7C7QNp9nirKgSxvN9t8trnpRB%2BHG68QfOMgk2u5B9Q0WuUbnfRbuVVKlf9grVOaTIhj4w3RP8jFd%2BNg1Dv6fON%2BrKq0PUV90TMIpIGL38XkmR6Bf0t4iA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cd7f1786a53b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
babesroulette.com/landers/18sexy6/?clickid=w9dubngt4ue21a0p2go61se6&source=300d8bd8-c549-4630-a2d5-f711322f0e22&cep=lsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w&lptoken=16af85f91212601e9383
200 OK 3.4 kB URL User Request GET HTTP/2 babesroulette.com/landers/18sexy6/?clickid=w9dubngt4ue21a0p2go61se6&source=300d8bd8-c549-4630-a2d5-f711322f0e22&cep=lsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w&lptoken=16af85f91212601e9383
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD5:5A:A0:0B:41:04:8D:B9:79:6F:BA:0A:34:26:FB:AA:B7:18:30:EC
ValiditySun, 28 Aug 2022 00:00:00 GMT - Mon, 28 Aug 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3605), with no line terminators
Hash e55cbd8f549a79855eaecaa465fc8f1e
2a0b1a5c7e0458d329866b1d4779b5382aafe3e7
9dcc4a027e92a551518685e53733eb9c0235e69eaaadce2a39758f3182fdabd3
GET /landers/18sexy6/?clickid=w9dubngt4ue21a0p2go61se6&source=300d8bd8-c549-4630-a2d5-f711322f0e22&cep=lsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w&lptoken=16af85f91212601e9383 HTTP/1.1
Host: babesroulette.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 May 2023 18:04:54 GMT
content-type: text/html
last-modified: Mon, 06 Mar 2023 19:24:14 GMT
x-powered-by: PleskLin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gynu9Fz2qRWbA9z8tVskZ1cJVpwGDvv8n32Lk4l4J0kraCjJB09rGAPkrwYvIGQbmuSbtedufHMihUMpe%2B6emQkh%2B6THTNiUidE3SSd3%2ByQbW7r8ukVvsE%2BJPkBcOHU%2FcaS3lA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cd7f1750dfa067b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
deefauph.com/zone?&pub=0&zone_id=4740019&is_mobile=false&domain=babesroulette.com&var=300d8bd8-c549-4630-a2d5-f711322f0e22&ymid=w9dubngt4ue21a0p2go61se6&var_3=&var_4=&dsig=&action=prerequest
200 OK 0 B URL POST HTTP/2 deefauph.com/zone?&pub=0&zone_id=4740019&is_mobile=false&domain=babesroulette.com&var=300d8bd8-c549-4630-a2d5-f711322f0e22&ymid=w9dubngt4ue21a0p2go61se6&var_3=&var_4=&dsig=&action=prerequest
IP
Requested by https://babesroulette.com/landers/18sexy6/?clickid=w9dubngt4ue21a0p2go61se6&source=300d8bd8-c549-4630-a2d5-f711322f0e22&cep=lsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w&lptoken=16af85f91212601e9383
Certificate IssuerLet's Encrypt
Subjectdeefauph.com
Fingerprint31:9A:4F:89:02:91:AE:2A:8F:3A:45:32:15:99:BC:91:72:5F:DC:02
ValiditySun, 21 May 2023 05:15:27 GMT - Sat, 19 Aug 2023 05:15:26 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=4740019&is_mobile=false&domain=babesroulette.com&var=300d8bd8-c549-4630-a2d5-f711322f0e22&ymid=w9dubngt4ue21a0p2go61se6&var_3=&var_4=&dsig=&action=prerequest HTTP/1.1
Host: deefauph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://babesroulette.com
DNT: 1
Connection: keep-alive
Referer: https://babesroulette.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Fri, 26 May 2023 18:04:54 GMT
content-length: 0
x-trace-id: 1bb439285b23e5c664c555fb8753bddc
access-control-allow-origin: https://babesroulette.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
babesroulette.com/sw-check-permissions-2e801.js?var=300d8bd8-c549-4630-a2d5-f711322f0e22&ymid=w9dubngt4ue21a0p2go61se6
200 OK 566 B URL GET HTTP/3 babesroulette.com/sw-check-permissions-2e801.js?var=300d8bd8-c549-4630-a2d5-f711322f0e22&ymid=w9dubngt4ue21a0p2go61se6
IP
Requested by https://babesroulette.com/landers/18sexy6/?clickid=w9dubngt4ue21a0p2go61se6&source=300d8bd8-c549-4630-a2d5-f711322f0e22&cep=lsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w&lptoken=16af85f91212601e9383
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintD5:5A:A0:0B:41:04:8D:B9:79:6F:BA:0A:34:26:FB:AA:B7:18:30:EC
ValiditySun, 28 Aug 2022 00:00:00 GMT - Mon, 28 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (605), with no line terminators
Hash cf8bf8a13d9095507fd8aed6a1228374
7a02740720bb7fba70e356c212e7149bd39eb5a4
8b75b00a163173cc8cf242eb7359c9fd373cab245467475df3cf799d32c10890
GET /sw-check-permissions-2e801.js?var=300d8bd8-c549-4630-a2d5-f711322f0e22&ymid=w9dubngt4ue21a0p2go61se6 HTTP/1.1
Host: babesroulette.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://babesroulette.com/landers/18sexy6/?clickid=w9dubngt4ue21a0p2go61se6&source=300d8bd8-c549-4630-a2d5-f711322f0e22&cep=lsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w&lptoken=16af85f91212601e9383
Cookie: vl-cep=cep=cZ1Q0j2-yd1qIoR6TqE07oruey-n-l2tiqT3XVQiv3jDphnGshS0LYVO6K6L8QlaQpwV3904cuxXApqZAiNuKWPWPgIainQhBp9HNhvXoaQtLEKdMF15l911h1I9hSBkEFZcbQuyJ_eFJTmg-Mm6dNBPms_fmNmEjVr0ct2gLi7iVAEt86Cm3QfdXRF8aDseSUcyOeAezoo5ACoCtc-ZVsggobv5-KWJPQnpyGYM_7na06em00vEuExqjTxlvKJ076k41EZGITx6RgnI4EffQieDsBoOYDGH6tCGS6_RyIOkaVKzHqaaCadGWnzLvjLGXzTJfjXDTmQqRsM7MCV6CbeoXAftWco2eUYW68H3keHb641-wp11UVaYR_OrAPd_H6GcOShWRoDsBN8gtc8Krw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 May 2023 18:04:55 GMT
content-type: application/javascript
x-accel-version: 0.01
last-modified: Mon, 20 Dec 2021 20:09:25 GMT
etag: W/"236-5d3997720a8d0-gzip"
vary: Accept-Encoding
x-powered-by: PleskLin
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WyWSI9xpMd%2B4WzzGDP1tapcrrC02CeXCbSELOZ7PmaN8ICoYO3hsxVSQuxeUhmaNbSA7PFPDosGChSVhOVBb%2B46Zds8z%2B7FDid0WpXusu6i8hAzat0oV1qthqFi9lNWBNhFmgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cd7f17b9f13b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
deefauph.com/pfe/current/micro.tag.min.js?z=4740019&ymid=w9dubngt4ue21a0p2go61se6&var=300d8bd8-c549-4630-a2d5-f711322f0e22&sw=/sw-check-permissions-2e801.js
200 OK 42 kB URL GET HTTP/2 deefauph.com/pfe/current/micro.tag.min.js?z=4740019&ymid=w9dubngt4ue21a0p2go61se6&var=300d8bd8-c549-4630-a2d5-f711322f0e22&sw=/sw-check-permissions-2e801.js
IP
Requested by https://babesroulette.com/landers/18sexy6/?clickid=w9dubngt4ue21a0p2go61se6&source=300d8bd8-c549-4630-a2d5-f711322f0e22&cep=lsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w&lptoken=16af85f91212601e9383
Certificate IssuerLet's Encrypt
Subjectdeefauph.com
Fingerprint31:9A:4F:89:02:91:AE:2A:8F:3A:45:32:15:99:BC:91:72:5F:DC:02
ValiditySun, 21 May 2023 05:15:27 GMT - Sat, 19 Aug 2023 05:15:26 GMT
File type C source, ASCII text, with very long lines (41979), with no line terminators
Hash d44fd7b96fceca8f81b472766025d0d2
237541097413baf5cd3e703413f8bc9ea538a4db
b6c7c1e7fb1a437f100bdcb253df8b0468f130835fbb82c5687505a099997d16
GET /pfe/current/micro.tag.min.js?z=4740019&ymid=w9dubngt4ue21a0p2go61se6&var=300d8bd8-c549-4630-a2d5-f711322f0e22&sw=/sw-check-permissions-2e801.js HTTP/1.1
Host: deefauph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://babesroulette.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 May 2023 18:04:54 GMT
content-type: application/javascript
last-modified: Thu, 11 May 2023 14:20:13 GMT
etag: W/"645cf99d-a3fb"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:100,100italic,300,400,400italic,300italic,500,500italic,700,700italic
200 OK 21 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:100,100italic,300,400,400italic,300italic,500,500italic,700,700italic
IP
Requested by https://babesroulette.com/landers/18sexy6/?clickid=w9dubngt4ue21a0p2go61se6&source=300d8bd8-c549-4630-a2d5-f711322f0e22&cep=lsqhxJmROpJjPto17AWsjJwVb5gCTKxVCOVUogk6nxSJLe0R-ICefC8HQpajM-buveqVP8hRsvHJFNUhyI6hhPsXenHcs4cYazG60reAx5jqLt7YXD8DqqrJrdQ9DmAZcuZzy5AHukYvKAJ5-tlKNkq-ZlgahstFtG1Z8YiDC48ZvZhLd-W3tYUcDFq_yWCYjYF5ERbk1PvFomLGPkZaCMIVJOoWJ0B8EvfaMAnvOLe4CiEYPimnrWznWd7sw-FSEsqU7JYhcDAk6wyQvZQu_0nhq16Ajt-bHGcZ8I5lDzAKlBkw8YaMaikrZ-zNlw2shZ_g_2U3FjVtX_zzATzG5lGJhyo28ZCxhSH0SwoBTPsAgdRwxtiucBelHD1a-Gj_IMjqK63KcD0mIYvZsJA_-w&lptoken=16af85f91212601e9383
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT
Hash 0b02fafdf9b523576d24073ba06a67bc
726d886dd454423774804f237b9d31d30d956f04
b28937f589309a907b871a63671e827fb30c10cc18b08dff218ef9ebe9ff3fe0
GET /css?family=Roboto:100,100italic,300,400,400italic,300italic,500,500italic,700,700italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://babesroulette.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 May 2023 18:04:54 GMT
date: Fri, 26 May 2023 18:04:54 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
18.195.149.11
216.58.207.227
139.45.197.251
188.114.96.1