shemalez.tube/
188.114.97.1301 Moved Permanently 0 B IP 188.114.97.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: shemalez.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 02 Feb 2023 06:28:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 02 Feb 2023 07:28:45 GMT
Location: https://shemalez.tube/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pQnuJvmdwPvFI%2Bu3qIWgZsy4be%2B9wi5jHyJgUn2LYxYtDMmn7hnVwJFW7LVKxPw3deB9GEJhMQEhzLlu7TayZKodgr9lFhss%2B1d3vWnseHujtgy40IJCLqHID9UsK3Tn"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7930de55e816b50f-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d4e95d0d8982bcd07804baf6fc88231c
5027abda0875bd2529dd4d6691784c74da71a9ee
373799b5749d2cb08b5721699a3e4c6b94b0d41604ac07d4ef7179e47dabc71f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14475
Expires: Thu, 02 Feb 2023 10:30:00 GMT
Date: Thu, 02 Feb 2023 06:28:45 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 62de35a6c8e4efd7633fc5236b5b086f
6a92912a86dfcd0330d040cef06bef36889c76ab
ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15448
Expires: Thu, 02 Feb 2023 10:46:13 GMT
Date: Thu, 02 Feb 2023 06:28:45 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 02 Feb 2023 05:36:03 GMT
content-type: application/json
age: 3162
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a8d45deaa7ebfcd996c2055dae592ab8
55befe074589fe7b39757c145968058162a8fc6b
50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9271
Expires: Thu, 02 Feb 2023 09:03:16 GMT
Date: Thu, 02 Feb 2023 06:28:45 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: hogy6L06YVwW7E8capQxjaCZPvsAg2+UTOkzADzt2q+YTd2Rdu186AUhN5tEi2VYK8wUT7OO34A=
x-amz-request-id: N36GBWJ46M2QDYZH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 02 Feb 2023 06:22:59 GMT
age: 346
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash ad84864a33428e8b7846e6fd9136afc2
ec16695c2dd0c7daddfe009d9ca2ab4a75dadaa4
348fb59f1dda66269066acdf1825d39e54f1b2fa10b9f4e6ffe95035675081c8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 600
Cache-Control: max-age=149057
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 06:28:45 GMT
Etag: "63daf906-116"
Expires: Fri, 03 Feb 2023 23:53:02 GMT
Last-Modified: Wed, 01 Feb 2023 23:43:02 GMT
Server: ECS (amb/6BBE)
X-Cache: HIT
Content-Length: 278
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 06:28:45 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash ad84864a33428e8b7846e6fd9136afc2
ec16695c2dd0c7daddfe009d9ca2ab4a75dadaa4
348fb59f1dda66269066acdf1825d39e54f1b2fa10b9f4e6ffe95035675081c8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 600
Cache-Control: max-age=149057
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 06:28:45 GMT
Etag: "63daf906-116"
Expires: Fri, 03 Feb 2023 23:53:02 GMT
Last-Modified: Wed, 01 Feb 2023 23:43:02 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 60 kB IP 142.250.74.3:0
Hash c7370482ca88c7cfd39970cf90b0ccf3
4ab1d9f7cc7b996291922d89cee05975b2824616
0f323b2a6225bceeb0dbb286ae8e4984a9313b8fbf05cca87de7ab6139dad4da
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 06:28:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
shemalez.tube/
188.114.97.1200 OK 21 kB IP 188.114.97.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (19573)
Hash f935fc6a164f71d58bef215e9227ec87
9d0d3e7858f92dc5e57736ecdfc8a74a5b317b18
dfd776b69c98376361086420c39fac613a79a4e49ddda4088551151ce3de2127
GET / HTTP/1.1
Host: shemalez.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:45 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.2.32
access-control-allow-origin: *
set-cookie: tccloak=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=shemalez.tube
kt_lang=en; expires=Sun, 28-Jan-2024 06:28:46 GMT; Max-Age=31104000; path=/; domain=.shemalez.tube
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UuwAvGyrx8GEh3f7u18RevCBL7dhXR5cKeFlFoyCMGDlZU00KNzrZpomx29bgYJ%2BWTNkb9lv3OVdJXkNTIa1QKwbacDsqVxmNqdqyIG1z2zn9xFoF1ZwahXOHwmgUxCc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7930de583f52b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Comfortaa:wght@300;400;700&display=swap
142.250.74.106200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css2?family=Comfortaa:wght@300;400;700&display=swap
IP 142.250.74.106:0
Hash b4aaaae0c7bc61a75004efc6a36b76be
6bdddfac444c5a758e34e70529b95a34c96c2ee8
87f72fbfa6dffbaea7f2dbbd4e8c44fcfaad981e5aef25cc678a0a0b4de67921
GET /css2?family=Comfortaa:wght@300;400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 02 Feb 2023 06:28:45 GMT
date: Thu, 02 Feb 2023 06:28:45 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-KRB4B5V
142.250.74.168200 OK 62 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-KRB4B5V
IP 142.250.74.168:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash fcf078037af16adef0178d7ebfb75b70
a6bfd4e2520107ee016e1e4e7a7b0198b13e0d34
9942c7beb5dc34fa4fe3bd39c72a8d7ac30cbba9f1f4da4732aeabcc325fcb8c
GET /gtm.js?id=GTM-KRB4B5V HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 02 Feb 2023 06:28:45 GMT
expires: Thu, 02 Feb 2023 06:28:45 GMT
cache-control: private, max-age=900
last-modified: Thu, 02 Feb 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 39550
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 2751084b42dd111d0a7f28241a77201b
680a9ac2f4cf451c9a8449c4df3587595ed9cc4c
1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 06:28:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 2751084b42dd111d0a7f28241a77201b
680a9ac2f4cf451c9a8449c4df3587595ed9cc4c
1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 06:28:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-MVMB4DG
142.250.74.168200 OK 43 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MVMB4DG
IP 142.250.74.168:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5373)
Hash 35d4998d5e3f051d515a1a003c00cc97
4cd42dee1756cab0b6562b2f7a3cc67d8b4129ff
f3e89645018c2fdd755018701582defe15b0f39e9e875a6fb944b08edd31e299
GET /gtm.js?id=GTM-MVMB4DG HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 02 Feb 2023 06:28:45 GMT
expires: Thu, 02 Feb 2023 06:28:45 GMT
cache-control: private, max-age=900
last-modified: Thu, 02 Feb 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 39854
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 42d54c8c12a2f90c448a11bf42800e86
bb66d35435411c825bfcd0a091f33b7d1708191e
3b67d91fbb38e5c47b6ebff53da366b87af3a308e5c588775ac66a808761dbb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 06:28:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/comfortaa/v40/1Ptsg8LJRfWJmhDAuUs4TYFq.woff2
142.250.74.163200 OK 29 kB URL HTTP/2 fonts.gstatic.com/s/comfortaa/v40/1Ptsg8LJRfWJmhDAuUs4TYFq.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 28712, version 1.0\012- data
Hash 1520051846f9dcefc38cdb90fc8b3456
057acb7bd46dfcf39244fb3582d560d98425e444
d3295fbcef086eb975b0fdcc4b929f0c59d4daf848dba6982a6aa915eb3011e0
GET /s/comfortaa/v40/1Ptsg8LJRfWJmhDAuUs4TYFq.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://shemalez.tube
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28712
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 22:00:14 GMT
expires: Mon, 29 Jan 2024 22:00:14 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 24 Jun 2022 19:20:35 GMT
content-type: font/woff2
age: 289711
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 02 Feb 2023 05:41:43 GMT
age: 2823
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 42d54c8c12a2f90c448a11bf42800e86
bb66d35435411c825bfcd0a091f33b7d1708191e
3b67d91fbb38e5c47b6ebff53da366b87af3a308e5c588775ac66a808761dbb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 06:28:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14614
Expires: Thu, 02 Feb 2023 10:32:20 GMT
Date: Thu, 02 Feb 2023 06:28:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d6669c28aca911ed162b731d32e14d4a
55ae6d877a71a42dc687e90caf8647021a087ada
19fdb0ab9bd934a578d4db89a86f1d6a5f31977b53c401df1059e7d84507a4a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "19FDB0AB9BD934A578D4DB89A86F1D6A5F31977B53C401DF1059E7D84507A4A9"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5168
Expires: Thu, 02 Feb 2023 07:54:54 GMT
Date: Thu, 02 Feb 2023 06:28:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d6669c28aca911ed162b731d32e14d4a
55ae6d877a71a42dc687e90caf8647021a087ada
19fdb0ab9bd934a578d4db89a86f1d6a5f31977b53c401df1059e7d84507a4a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "19FDB0AB9BD934A578D4DB89A86F1D6A5F31977B53C401DF1059E7D84507A4A9"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5168
Expires: Thu, 02 Feb 2023 07:54:54 GMT
Date: Thu, 02 Feb 2023 06:28:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d6669c28aca911ed162b731d32e14d4a
55ae6d877a71a42dc687e90caf8647021a087ada
19fdb0ab9bd934a578d4db89a86f1d6a5f31977b53c401df1059e7d84507a4a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "19FDB0AB9BD934A578D4DB89A86F1D6A5F31977B53C401DF1059E7D84507A4A9"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5168
Expires: Thu, 02 Feb 2023 07:54:54 GMT
Date: Thu, 02 Feb 2023 06:28:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d6669c28aca911ed162b731d32e14d4a
55ae6d877a71a42dc687e90caf8647021a087ada
19fdb0ab9bd934a578d4db89a86f1d6a5f31977b53c401df1059e7d84507a4a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "19FDB0AB9BD934A578D4DB89A86F1D6A5F31977B53C401DF1059E7D84507A4A9"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5168
Expires: Thu, 02 Feb 2023 07:54:54 GMT
Date: Thu, 02 Feb 2023 06:28:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d6669c28aca911ed162b731d32e14d4a
55ae6d877a71a42dc687e90caf8647021a087ada
19fdb0ab9bd934a578d4db89a86f1d6a5f31977b53c401df1059e7d84507a4a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "19FDB0AB9BD934A578D4DB89A86F1D6A5F31977B53C401DF1059E7D84507A4A9"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5168
Expires: Thu, 02 Feb 2023 07:54:54 GMT
Date: Thu, 02 Feb 2023 06:28:46 GMT
Connection: keep-alive
shztn1.nv7s.com/contents/videos_screenshots/644000/644685/300x200/1.jpg
45.133.44.25200 OK 26 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/644000/644685/300x200/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3\012- data
Hash d14def34a0f9f7583c9a720d6bcf18ed
ee069e13685bcbaad9327af76bcf71d3164ed8c2
3c7f3e1e76f9b9446c0f963cd9d1aa394db8cb91d3823fe016ad466108b0ef75
GET /contents/videos_screenshots/644000/644685/300x200/1.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 25916
server: nginx/1.16.1
last-modified: Sun, 15 Jan 2023 04:28:05 GMT
etag: "63c380d5-653c"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
shztn1.nv7s.com/contents/videos_screenshots/638000/638613/300x200/1.jpg
45.133.44.25200 OK 25 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/638000/638613/300x200/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3\012- data
Hash 7cc60f04a5f2717dc2b952e2b73e7e24
5bb318e3882d42ad523d5490cbc7911eaca0caa2
ff16bab202176a609e000f80017a67eafb5588950269c45625b0e5babad8b475
GET /contents/videos_screenshots/638000/638613/300x200/1.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 24930
server: nginx/1.16.1
last-modified: Sun, 01 Jan 2023 14:58:05 GMT
etag: "63b19f7d-6162"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
54.148.190.4101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.148.190.4:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: rOsRYWGU0wwpcmgUuctyTA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: F9YE+Ab82Zi6aDjnaXciiz0Qlb0=
shztn1.nv7s.com/contents/videos_screenshots/603000/603073/300x200/1.jpg
45.133.44.25200 OK 24 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/603000/603073/300x200/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3\012- data
Hash b6a09e9c62c1523b7237cabcd81bd506
3eeb1c91fb443ae08b216c8dc8aad9ac0207197d
a1588973bc8c89f48f3b521b2b3886313fc784ff168167c94d0372c8a5c3cd4f
GET /contents/videos_screenshots/603000/603073/300x200/1.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 23915
server: nginx/1.16.1
last-modified: Mon, 08 Aug 2022 14:05:05 GMT
etag: "62f11811-5d6b"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
shztn1.nv7s.com/contents/videos_screenshots/510000/510757/300x200/1.jpg
45.133.44.25200 OK 22 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/510000/510757/300x200/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3\012- data
Hash de7fb9402956c494be205f6a9086872b
0212eda3f4c4b34320a85de3f0dc30eb45f0718e
4d61f7917a28c15aaa16b916f5192844f60687e667d26ef88ed8541a8f11fb91
GET /contents/videos_screenshots/510000/510757/300x200/1.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 22302
server: nginx/1.16.1
last-modified: Mon, 11 Oct 2021 08:57:37 GMT
etag: "6163fc81-571e"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
shztn1.nv7s.com/contents/videos_screenshots/599000/599337/300x200/1.jpg
45.133.44.25200 OK 22 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/599000/599337/300x200/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3\012- data
Hash f149e00b40c898b3ff043ce8a15962f8
2f33e3eb83ad58b52c43beecea98c224e09adb16
13f8fe0a24c20a4da5438ad372cb4bdee37a457cce1fc0361a1f14d4caa507dd
GET /contents/videos_screenshots/599000/599337/300x200/1.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 21926
server: nginx/1.16.1
last-modified: Wed, 03 Aug 2022 13:24:09 GMT
etag: "62ea76f9-55a6"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
shztn1.nv7s.com/contents/videos_screenshots/477000/477195/300x200/1.jpg
45.133.44.25200 OK 21 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/477000/477195/300x200/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3\012- data
Hash 40a5ebc26dd48f6eeb2e58f0c073560a
a04c4bcc599ad1959d6475920f88b637bf9720c2
977a0f6f31255c4365c6ddec37f4c90bdbb53216708d55928df08d0a9f7cd694
GET /contents/videos_screenshots/477000/477195/300x200/1.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 20966
server: nginx/1.16.1
last-modified: Mon, 12 Apr 2021 21:40:04 GMT
etag: "6074be34-51e6"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
shztn1.nv7s.com/contents/videos_screenshots/574000/574719/300x200/1.jpg
45.133.44.25200 OK 21 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/574000/574719/300x200/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3\012- data
Hash 2bfc7417f48b7acf17e227d42c4a6b42
b02d8adfe15bdf362e5f71413af345337995d9d8
7a215afef043df8161c3a9f2a4a63482b5577ef7c307b644659fc72b7543d657
GET /contents/videos_screenshots/574000/574719/300x200/1.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 21215
server: nginx/1.16.1
last-modified: Sat, 25 Jun 2022 09:38:05 GMT
etag: "62b6d77d-52df"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
shztn1.nv7s.com/contents/videos_screenshots/633000/633215/300x200/1.jpg
45.133.44.25200 OK 24 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/633000/633215/300x200/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3\012- data
Hash fedbfba63e38c8e082af1947ac8970b9
6c44c91fb9a4778aacd54728ce92dc7afafd0bf3
672ab3441298f2bf02a85424c7ce68a8fdbd21a89bae58c9655e6f76fa16c8e8
GET /contents/videos_screenshots/633000/633215/300x200/1.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 23580
server: nginx/1.16.1
last-modified: Sat, 24 Dec 2022 12:22:20 GMT
etag: "63a6eefc-5c1c"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
shztn1.nv7s.com/contents/videos_screenshots/332000/332611/300x200/1.jpg
45.133.44.25200 OK 26 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/332000/332611/300x200/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3\012- data
Hash 2b6deb79029f11a74d33e4f613ce5641
9522b1b57ec8a27c47523fe46f658cdc0a1630b1
a1decd18ce37e65b3f4286f233303f835fcc74cffaef7a6c4d39020f5fc29bb2
GET /contents/videos_screenshots/332000/332611/300x200/1.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 25981
server: nginx/1.16.1
last-modified: Fri, 26 Apr 2019 03:01:05 GMT
etag: "5cc27471-657d"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
shztn1.nv7s.com/contents/videos_screenshots/627000/627531/300x200/1.jpg
45.133.44.25200 OK 36 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/627000/627531/300x200/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3\012- data
Hash d446fd485ca281c03cfc2dae5a59e530
0bb4b60262d2f028f944bfa059098503fe787d8c
ef5aaae172d005a41a3b0da00c4dafde58d3a5561ed89d27dacfbcdf266d2ee2
GET /contents/videos_screenshots/627000/627531/300x200/1.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 35808
server: nginx/1.16.1
last-modified: Thu, 08 Dec 2022 09:01:04 GMT
etag: "6391a7d0-8be0"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
shztn1.nv7s.com/contents/videos_screenshots/630000/630121/300x200/1.jpg
45.133.44.25200 OK 23 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/630000/630121/300x200/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3\012- data
Hash 24419c89df66bbaeb75195957434c6ce
e7121621df95898c09571572a891a9d773a84302
51b9b2ae271bbd4517149528e14b740e51e1ec3b12143b46bb3794ce2a6098ae
GET /contents/videos_screenshots/630000/630121/300x200/1.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 22796
server: nginx/1.16.1
last-modified: Wed, 14 Dec 2022 08:03:04 GMT
etag: "63998338-590c"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
shztn1.nv7s.com/contents/videos_screenshots/45000/45556/300x200/12.jpg
45.133.44.25200 OK 24 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/45000/45556/300x200/12.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, progressive, precision 8, 300x200, components 3\012- data
Hash b00c0be28ddb4eadb2fafaf792dc70db
12a084b36c3693d632b37c7e51560fc82eaec63a
6912226bb153d732fa5953fb067bb6a29d08b69ba5edbb2f5b06f01b51fb2ed2
GET /contents/videos_screenshots/45000/45556/300x200/12.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 23717
server: nginx/1.16.1
last-modified: Fri, 10 Nov 2017 13:50:14 GMT
etag: "5a05ae96-5ca5"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
shztn1.nv7s.com/contents/videos_screenshots/510000/510639/300x200/1.jpg
45.133.44.25200 OK 25 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/510000/510639/300x200/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3\012- data
Hash 6aa16763698251255111f9571350597e
3b51c57141416689e05f0b4d0d712ae2648e49d8
c8e867cceea75a4d16dd6cd1a35432a7ecb35f5ddf5591d42fc68526de4f1205
GET /contents/videos_screenshots/510000/510639/300x200/1.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 25317
server: nginx/1.16.1
last-modified: Mon, 11 Oct 2021 04:54:13 GMT
etag: "6163c375-62e5"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
shztn1.nv7s.com/contents/videos_screenshots/633000/633631/300x200/1.jpg
45.133.44.25200 OK 30 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/633000/633631/300x200/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3\012- data
Hash edf0e2ce1f740c63efc77b60cfa31c56
19b49f155d99c39f14f11f00001669587841ea76
a0140c2fa707bdd273fa8d4269eeeb5049b4f3a7443b7d79f4a265bb679f5d4d
GET /contents/videos_screenshots/633000/633631/300x200/1.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 29944
server: nginx/1.16.1
last-modified: Sat, 24 Dec 2022 22:05:19 GMT
etag: "63a7779f-74f8"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
shztn1.nv7s.com/contents/videos_screenshots/281000/281226/300x200/1.jpg
45.133.44.25200 OK 19 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/281000/281226/300x200/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3\012- data
Hash 326f35918ea5b9d50a6b9e453b310e10
da81fb0a77f76b88d426a100017f7b755324d8ca
5ea411fc4ec10b6bd832519d6f4c66137a9bf02691f0470f51274f2767c2cbcc
GET /contents/videos_screenshots/281000/281226/300x200/1.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 19442
server: nginx/1.16.1
last-modified: Tue, 19 Mar 2019 23:54:26 GMT
etag: "5c918132-4bf2"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1fec5e1f9ce16c8e3e488dacc788c484
5e47446242d5a377fb36bb43ea350aae7df7ea0a
f22f6a1e6bcda29b742fed35a26a72e5faa26d55773e24b90c204a5e9a4169b8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F22F6A1E6BCDA29B742FED35A26A72E5FAA26D55773E24B90C204A5E9A4169B8"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5849
Expires: Thu, 02 Feb 2023 08:06:15 GMT
Date: Thu, 02 Feb 2023 06:28:46 GMT
Connection: keep-alive
shztn1.nv7s.com/contents/videos_screenshots/642000/642663/300x200/1.jpg
45.133.44.25200 OK 28 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/642000/642663/300x200/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3\012- data
Hash e58f87177b60a08b8342d080214656ae
4932d7b5615d1e6262573823ad7893d326d712fd
cbeae511df38467a78d9a6df9cf45708fea1b644c9f72d2ea9fcc590a924af09
GET /contents/videos_screenshots/642000/642663/300x200/1.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 28045
server: nginx/1.16.1
last-modified: Tue, 10 Jan 2023 01:28:03 GMT
etag: "63bcbf23-6d8d"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
shztn1.nv7s.com/contents/videos_screenshots/513000/513071/300x200/1.jpg
45.133.44.25200 OK 29 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/513000/513071/300x200/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
Hash 5985b8c064f572333a05f6c107fba844
0bb20e6100b80ffb2efe79f4050749f48cc66d6d
ca24e51db9f750da5fcb229078b066a34c0df9223ead4f8bc4883e8b7d978868
GET /contents/videos_screenshots/513000/513071/300x200/1.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 25437
server: nginx/1.16.1
last-modified: Wed, 13 Oct 2021 11:52:04 GMT
etag: "6166c864-635d"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
shztn1.nv7s.com/contents/videos_screenshots/591000/591317/300x200/1.jpg
45.133.44.25200 OK 24 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/591000/591317/300x200/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3\012- data
Hash 338cff0ce6f9e3e06535b58c0df920d3
77011b365e1c028b5e9c8eb92e90376e81a465dc
67c429e4d5abf25f3ba3e95036998647d0684ee874ca1d76b9bcbbc1c4cb104b
GET /contents/videos_screenshots/591000/591317/300x200/1.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 23484
server: nginx/1.16.1
last-modified: Sun, 24 Jul 2022 03:05:03 GMT
etag: "62dcb6df-5bbc"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
shztn1.nv7s.com/contents/videos_screenshots/632000/632939/300x200/1.jpg
45.133.44.25200 OK 58 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/632000/632939/300x200/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
Hash 4c7e9f13695946a39e33011dcdd9945a
c0a30d4ed927eb1bd568c41c9aa495c83d18a688
67238410a567054f8f6694cc50734c3bee1de1eb99d8327da69ac630c0174bdc
GET /contents/videos_screenshots/632000/632939/300x200/1.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 21949
server: nginx/1.16.1
last-modified: Sat, 24 Dec 2022 05:04:06 GMT
etag: "63a68846-55bd"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
shztn1.nv7s.com/contents/videos_screenshots/452000/452867/300x200/1.jpg
45.133.44.25200 OK 96 kB URL HTTP/2 shztn1.nv7s.com/contents/videos_screenshots/452000/452867/300x200/1.jpg
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
Hash 31ca6d46c5ac14dbb6ec17d48ce2bea1
5e96ee42a33ea3ff6fe5be43fb030b360d5e6453
fdd69dc45b7192fc33c91efad23cf2a59632f96ed992b1e642e506070cf95492
GET /contents/videos_screenshots/452000/452867/300x200/1.jpg HTTP/1.1
Host: shztn1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/jpeg
content-length: 30693
server: nginx/1.16.1
last-modified: Mon, 03 Aug 2020 16:01:03 GMT
etag: "5f2834bf-77e5"
cache-control: max-age=7776000
expires: Wed, 03 May 2023 06:28:46 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
js.wpadmngr.com/npc/sdk/wp-banners.js
45.133.44.24200 OK 0 B URL HTTP/2 js.wpadmngr.com/npc/sdk/wp-banners.js
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/wp-banners.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 20 Aug 2021 15:14:31 GMT
etag: "611fc6d7-0"
expires: Thu, 02 Feb 2023 06:33:46 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
ads.exoclick.com/ads.js
205.185.216.10200 OK 974 B IP 205.185.216.10:0
File type ASCII text, with very long lines (2476), with no line terminators
Hash 92af51b4341a31ff621022c2a648c05e
3761459319128e7349981f338926abcd89ba58e0
6dd1f44f60b3c9584b3d9a54af5348c3fc36c7e13585f593f205ed42a0fa7e9f
GET /ads.js HTTP/1.1
Host: ads.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 06:28:46 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 974
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"8f3c7314efe500b41baba9f571b"
X-HW: 1675319326.dop016.sk1.t,1675319326.cds227.sk1.shn,1675319326.dop016.sk1.t,1675319326.cds003.sk1.c
Access-Control-Allow-Origin: *, *
ocsp.globalsign.com/gseccovsslca2018
104.18.20.226200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.20.226:0
Hash 86866a2f8fda1fe5742dd8aecb6421ce
a5c7d0ad5d067b6e8d6456284ead87350bb6e342
7ddbf8a24c9248f1d42ee0b2a136d3863364a32eaee666c134e888fb97474a91
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 06:28:46 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Mon, 06 Feb 2023 03:10:16 GMT
ETag: "a5c7d0ad5d067b6e8d6456284ead87350bb6e342"
Last-Modified: Thu, 02 Feb 2023 03:10:17 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1263
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7930de6019960b65-OSL
r3.o.lencr.org/
23.36.77.32200 OK 42 kB IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 52626fc6b4fd6ceb9ee1d5e879b85c97
3813c275017a767694b602e8e8ee6da4f73effee
e414860b56226624f123516da960e00d48e34ebfbb586f2c46fa40439ef3dd51
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C38AE250E4582584658D0218319C4E6392BAF31038C7D54126075B5B47D52A3E"
Last-Modified: Thu, 02 Feb 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17315
Expires: Thu, 02 Feb 2023 11:17:21 GMT
Date: Thu, 02 Feb 2023 06:28:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e892d14f1db247bebe641a098d9b97d3
c01865298d6365d9029fe5583dc8b8be1d5b54d1
c38ae250e4582584658d0218319c4e6392baf31038c7d54126075b5b47d52a3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C38AE250E4582584658D0218319C4E6392BAF31038C7D54126075B5B47D52A3E"
Last-Modified: Thu, 02 Feb 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17315
Expires: Thu, 02 Feb 2023 11:17:21 GMT
Date: Thu, 02 Feb 2023 06:28:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 64dd776eb931b3d9c10e6e45747e01e1
496762f974294c63800084bd8f14aea8407dcb14
5f26aa4d01c29bbff1bbffa660ca7536a312c3b89228a2e53494dea9ce1ccbc3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5F26AA4D01C29BBFF1BBFFA660CA7536A312C3B89228A2E53494DEA9CE1CCBC3"
Last-Modified: Wed, 01 Feb 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20362
Expires: Thu, 02 Feb 2023 12:08:08 GMT
Date: Thu, 02 Feb 2023 06:28:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 153 kB IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Size 153 kB (152781 bytes)
Hash 2244714fe92e992f9b77915940d1b2c9
a03e2dc5444d92b8359c3f7b45fd4b8534e82cbd
b99009601c155d7da1345bfb54ea2372f768c288f884148498ed38660c387c5c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CD98E7FDB5B549AD68794ECDC37772D070A42466DEC2501B66A37FDD19B457C2"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12390
Expires: Thu, 02 Feb 2023 09:55:16 GMT
Date: Thu, 02 Feb 2023 06:28:46 GMT
Connection: keep-alive
vast.yomeno.xyz/prepare
109.206.175.85204 No Content 0 B IP 109.206.175.85:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://shemalez.tube/
Origin: https://shemalez.tube
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.20.1
date: Thu, 02 Feb 2023 06:28:46 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://shemalez.tube
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
content-type: text/plain; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=827
157.90.84.242204 No Content 0 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=827
IP 157.90.84.242:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=827 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://shemalez.tube/
Origin: https://shemalez.tube
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Thu, 02 Feb 2023 06:28:46 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://shemalez.tube
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
mc.yandex.ru/metrika/watch.js
93.158.134.119200 OK 58 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP 93.158.134.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (554)
Hash 315a601116a9b3b0fbc85feb58375ba4
5d283ed923d0b3beb8a2ec4e80c2958d1d132fbf
251ba0fc04953e3615e7c19a9a10c5d6a4f25cc03bef190f8a5e7c6cd72a991a
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 58140
date: Thu, 02 Feb 2023 06:28:46 GMT
access-control-allow-origin: *
etag: "63c93a4b-e31c"
expires: Thu, 02 Feb 2023 07:28:46 GMT
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
vast.yomeno.xyz/prepare
109.206.175.85204 No Content 0 B IP 109.206.175.85:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 831
Origin: https://shemalez.tube
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.20.1
date: Thu, 02 Feb 2023 06:28:46 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://shemalez.tube
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
93.158.134.119200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP 93.158.134.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash a236c7014c1f1a1e52d356f59e5d665a
b66c638eb2346287364c37725819bbab1f409d66
ad2d57579e453af0eac49156840bcd1dcfbd802a82135af98f41f714d7e698f2
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73769
date: Thu, 02 Feb 2023 06:28:46 GMT
access-control-allow-origin: *
etag: "63c93a4b-12029"
expires: Thu, 02 Feb 2023 07:28:46 GMT
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 48237dc866d6f2387b67ad0ba335689d
766b9034cf7cb4d04ce8cb76107834772611cdfa
f7e4b65ebd6a99bcd51f95bd777025d00fe3947654a3c58ac06708ecf9f53f03
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7E4B65EBD6A99BCD51F95BD777025D00FE3947654A3C58AC06708ECF9F53F03"
Last-Modified: Mon, 30 Jan 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14075
Expires: Thu, 02 Feb 2023 10:23:21 GMT
Date: Thu, 02 Feb 2023 06:28:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7c73faa48aabfd559c302c50ee2ba214
45f1904066e223410dd838869c28682cd8b252c5
5d31e5f7e78db1aabfdd9b26ef686dd4120642975fe4b3fbfac4f2ac03205fca
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D31E5F7E78DB1AABFDD9B26EF686DD4120642975FE4B3FBFAC4F2AC03205FCA"
Last-Modified: Wed, 01 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3604
Expires: Thu, 02 Feb 2023 07:28:50 GMT
Date: Thu, 02 Feb 2023 06:28:46 GMT
Connection: keep-alive
js.wpshsdk.com/npc/sdk/wp-banners.js
45.133.44.25200 OK 0 B URL HTTP/2 js.wpshsdk.com/npc/sdk/wp-banners.js
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/wp-banners.js HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 20 Aug 2021 15:14:31 GMT
etag: "611fc6d7-0"
expires: Thu, 02 Feb 2023 06:33:46 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=827
157.90.84.242200 OK 28 B URL HTTP/1.1 fp.metricswpsh.com/fp?tag_id=827
IP 157.90.84.242:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text
Hash e3af49472d683a217237a6ebaf79bcb7
378db4d7e6171a2676ee15c80b4475d7f5ec9742
7714898d715fb8b1ce7a1de73e0e7c9f6394acc8a08cf1a3b342a7829d4de84a
POST /fp?tag_id=827 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 22287
Origin: https://shemalez.tube
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Thu, 02 Feb 2023 06:28:46 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 28
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://shemalez.tube
Set-Cookie: id=1225769061582809540; Expires=Fri, 02 Feb 2024 06:28:46 GMT; Secure; SameSite=None
Vary: Origin
12112336.pix-cdn.org/dli/whatshot.svg?fill=rgb(128%2C%20128%2C%20128)
45.133.44.24200 OK 1.1 kB URL HTTP/2 12112336.pix-cdn.org/dli/whatshot.svg?fill=rgb(128%2C%20128%2C%20128)
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (652), with CRLF line terminators
Hash 92d4b3c9db72fefd9d6d927ec40be29b
efb550da28d7b18d7e2beb7698577415fde2b24f
7ad9fcb297f4600edf827b026deca9e0ed695be37ab46ac2d9fee35040611130
GET /dli/whatshot.svg?fill=rgb(128%2C%20128%2C%20128) HTTP/1.1
Host: 12112336.pix-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: image/svg+xml
content-length: 1064
server: nginx/1.12.2
last-modified: Tue, 16 Jun 2020 16:25:10 GMT
etag: "5ee8f266-428"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/mRUDivl99po
142.250.74.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/mRUDivl99po
IP 142.250.74.3:0
Hash 571873363ef1c5c5fca1f02cc3620fe6
b64cbbf1c115ece810d002a19a4dbc227f82a32c
fb34e2f4b38f578d60950e3de00c3e5d9b8917cb40b86337c92a32650dbd46a2
POST /s/gts1p5/mRUDivl99po HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 06:28:46 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nereserv.com/in/dip?site=native-push&wl=1&event_id=aab18a64-c2c7-47a9-b9b6-9f08d6cc38e9&subid=138611283&sid=3266354044&spot_id=490&created_at=2023-02-02&timezone=0&ver=8.23.0&is_native=1
168.119.25.22200 OK 0 B URL HTTP/2 nereserv.com/in/dip?site=native-push&wl=1&event_id=aab18a64-c2c7-47a9-b9b6-9f08d6cc38e9&subid=138611283&sid=3266354044&spot_id=490&created_at=2023-02-02&timezone=0&ver=8.23.0&is_native=1
IP 168.119.25.22:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?site=native-push&wl=1&event_id=aab18a64-c2c7-47a9-b9b6-9f08d6cc38e9&subid=138611283&sid=3266354044&spot_id=490&created_at=2023-02-02&timezone=0&ver=8.23.0&is_native=1 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shemalez.tube
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 02 Feb 2023 06:28:47 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8530cc38daba3680ed982820d1a32cc1
fb7c1e566af773543a37e19444b7905fc5823784
8aaae91cd9a191d20206cfd021f4f8314baea8d6015c9c4b48fa9ae508fc1e7d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8AAAE91CD9A191D20206CFD021F4F8314BAEA8D6015C9C4B48FA9AE508FC1E7D"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8630
Expires: Thu, 02 Feb 2023 08:52:37 GMT
Date: Thu, 02 Feb 2023 06:28:47 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8530cc38daba3680ed982820d1a32cc1
fb7c1e566af773543a37e19444b7905fc5823784
8aaae91cd9a191d20206cfd021f4f8314baea8d6015c9c4b48fa9ae508fc1e7d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8AAAE91CD9A191D20206CFD021F4F8314BAEA8D6015C9C4B48FA9AE508FC1E7D"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8630
Expires: Thu, 02 Feb 2023 08:52:37 GMT
Date: Thu, 02 Feb 2023 06:28:47 GMT
Connection: keep-alive
btds.zog.link/in/dl/?spot_id=84717&screen_resolution=1280x1024&dt=1675319351635&ad_sub=0&mo=&ve=&katds_labels=&p=https%3A//shemalez.tube/&utm1=&utm2=&utm3=&utm4=&ad_tags=Shemalez%252CShemale%252Cand%252CTranny%252CPorn%252CTube%252CShemaleZ.com%252CShemalez%252CShemale%252Cxxx%252Cmovies%252Care%252Cavailable%252Cat%252Cour%252Cfree%252Ctranny%252Cporn%252Ctube%252CWe%252Cupdate%252Ctons%252Cof%252Cfree%252Cshemale%252Csex%252Cclips%252Cand%252Ctranny%252Cporn%252Cmovies.&title=Shemalez%20-%20Shemale%20and%20Tranny%20Porn%20Tube%20-%20ShemaleZ.com&katds_rcc=2
109.206.163.116200 OK 8.4 kB URL HTTP/2 btds.zog.link/in/dl/?spot_id=84717&screen_resolution=1280x1024&dt=1675319351635&ad_sub=0&mo=&ve=&katds_labels=&p=https%3A//shemalez.tube/&utm1=&utm2=&utm3=&utm4=&ad_tags=Shemalez%252CShemale%252Cand%252CTranny%252CPorn%252CTube%252CShemaleZ.com%252CShemalez%252CShemale%252Cxxx%252Cmovies%252Care%252Cavailable%252Cat%252Cour%252Cfree%252Ctranny%252Cporn%252Ctube%252CWe%252Cupdate%252Ctons%252Cof%252Cfree%252Cshemale%252Csex%252Cclips%252Cand%252Ctranny%252Cporn%252Cmovies.&title=Shemalez%20-%20Shemale%20and%20Tranny%20Porn%20Tube%20-%20ShemaleZ.com&katds_rcc=2
IP 109.206.163.116:0
Hash b2d6e18f3151e36860c64e7475cf0ffe
9cce7a2b7ab38a11b53096d9ecb9830dca3e5085
55a1cef18e52bafe48d32faa920c6663b2c49fe90a418b79abc1840904d36b79
GET /in/dl/?spot_id=84717&screen_resolution=1280x1024&dt=1675319351635&ad_sub=0&mo=&ve=&katds_labels=&p=https%3A//shemalez.tube/&utm1=&utm2=&utm3=&utm4=&ad_tags=Shemalez%252CShemale%252Cand%252CTranny%252CPorn%252CTube%252CShemaleZ.com%252CShemalez%252CShemale%252Cxxx%252Cmovies%252Care%252Cavailable%252Cat%252Cour%252Cfree%252Ctranny%252Cporn%252Ctube%252CWe%252Cupdate%252Ctons%252Cof%252Cfree%252Cshemale%252Csex%252Cclips%252Cand%252Ctranny%252Cporn%252Cmovies.&title=Shemalez%20-%20Shemale%20and%20Tranny%20Porn%20Tube%20-%20ShemaleZ.com&katds_rcc=2 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalez.tube/
Origin: https://shemalez.tube
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: 953.73385=1; expires=Fri, 03 Feb 2023 06:28:47 GMT; path=/; secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash cb83a482137db3d3528d20db0011b151
aaf27c26eceb3fc674c33520e4c0fb371b2b5380
7cf2e5ba8ae919e73bad83999ad3ff2124147498084155f5c32e06e22ff8112e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7CF2E5BA8AE919E73BAD83999AD3FF2124147498084155F5C32E06E22FF8112E"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7729
Expires: Thu, 02 Feb 2023 08:37:36 GMT
Date: Thu, 02 Feb 2023 06:28:47 GMT
Connection: keep-alive
bc63f84631.5e9d31c60e.com/in/multy
168.119.25.22204 No Content 0 B URL HTTP/2 bc63f84631.5e9d31c60e.com/in/multy
IP 168.119.25.22:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /in/multy HTTP/1.1
Host: bc63f84631.5e9d31c60e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://shemalez.tube/
Origin: https://shemalez.tube
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.18.0
date: Thu, 02 Feb 2023 06:28:47 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8fecb61d3534b169a5a9f1aa8562c42a
8e5c3ef4aa52fcc78c73d7987a791832a2bddace
6f9d98a79209878dc5f48aca2dfaa5c7b944229d24d9fef4d714f9644fac9ed1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6F9D98A79209878DC5F48ACA2DFAA5C7B944229D24D9FEF4D714F9644FAC9ED1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1409
Expires: Thu, 02 Feb 2023 06:52:16 GMT
Date: Thu, 02 Feb 2023 06:28:47 GMT
Connection: keep-alive
3fd1218257.aaacacaaaa.com/in/multy?spot_size=5&spot_id=54&subid=1677570894&label=1&session_id=e7073599-47d8-46ba-9957-aa09cca1be3c&cpa=2406a160-5aba-42a9-b9b5-a9f533f54498&ver=6.13.1&adblock=0&ad_type=native&iw=200&ih=200&iframe=0&mm=0&pr=&user_keywords=Shemalez%2CShemale%2Cand%2CTranny%2CPorn%2CTube%2CShemaleZ.com%2CShemalez%2CShemale%2Cxxx%2Cmovies%2Care%2Cavailable%2Cat%2Cour%2Cfree%2Ctranny%2Cporn%2Ctube%2CWe%2Cupdate%2Ctons%2Cof%2Cfree%2Cshemale%2Csex%2Cclips%2Cand%2Ctranny%2Cporn%2Cmovies.&tag_ab=b&user_fp=0&v2=0&utm_source=&utm_medium=&utm_campaign=&utm_content=&campaign=
172.64.175.23200 OK 19 kB URL HTTP/2 3fd1218257.aaacacaaaa.com/in/multy?spot_size=5&spot_id=54&subid=1677570894&label=1&session_id=e7073599-47d8-46ba-9957-aa09cca1be3c&cpa=2406a160-5aba-42a9-b9b5-a9f533f54498&ver=6.13.1&adblock=0&ad_type=native&iw=200&ih=200&iframe=0&mm=0&pr=&user_keywords=Shemalez%2CShemale%2Cand%2CTranny%2CPorn%2CTube%2CShemaleZ.com%2CShemalez%2CShemale%2Cxxx%2Cmovies%2Care%2Cavailable%2Cat%2Cour%2Cfree%2Ctranny%2Cporn%2Ctube%2CWe%2Cupdate%2Ctons%2Cof%2Cfree%2Cshemale%2Csex%2Cclips%2Cand%2Ctranny%2Cporn%2Cmovies.&tag_ab=b&user_fp=0&v2=0&utm_source=&utm_medium=&utm_campaign=&utm_content=&campaign=
IP 172.64.175.23:0
File type JSON data\012- , ASCII text, with very long lines (19284)
Hash 0b0d625e53201f0e4222daeb6e08da31
ce3c71f02bf00163c5fb5de5e0d5c03816215ea7
630cf0f1940015a9a227dd151b920a57bdf6f3b47a55fe13fe318e2359d23475
GET /in/multy?spot_size=5&spot_id=54&subid=1677570894&label=1&session_id=e7073599-47d8-46ba-9957-aa09cca1be3c&cpa=2406a160-5aba-42a9-b9b5-a9f533f54498&ver=6.13.1&adblock=0&ad_type=native&iw=200&ih=200&iframe=0&mm=0&pr=&user_keywords=Shemalez%2CShemale%2Cand%2CTranny%2CPorn%2CTube%2CShemaleZ.com%2CShemalez%2CShemale%2Cxxx%2Cmovies%2Care%2Cavailable%2Cat%2Cour%2Cfree%2Ctranny%2Cporn%2Ctube%2CWe%2Cupdate%2Ctons%2Cof%2Cfree%2Cshemale%2Csex%2Cclips%2Cand%2Ctranny%2Cporn%2Cmovies.&tag_ab=b&user_fp=0&v2=0&utm_source=&utm_medium=&utm_campaign=&utm_content=&campaign= HTTP/1.1
Host: 3fd1218257.aaacacaaaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shemalez.tube
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:47 GMT
content-type: application/json; charset=utf-8
content-length: 19285
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ldq0g9vV2W2DLybpUGOP36duo%2FQk6AV1UQhOWhRVYMu8UtXNxJcCwBwoPKtCojGnvJznUy9ZYqaEQANmWt%2Bp4jWhomAtQlCL7uzivwlHE4mW%2FprBWF5ycgyPeE9oiI471HMfXKfDwQ5vN4C3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7930de61dc8f72fc-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
btds.zog.link/in/dl_show/?spot_id=84717&out_name=73385|12302|cpm|0.0001|$%200.0001&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84717&p=https%3A%2F%2Fshemalez.tube%2F
109.206.163.116200 OK 2 B URL HTTP/2 btds.zog.link/in/dl_show/?spot_id=84717&out_name=73385|12302|cpm|0.0001|$%200.0001&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84717&p=https%3A%2F%2Fshemalez.tube%2F
IP 109.206.163.116:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /in/dl_show/?spot_id=84717&out_name=73385|12302|cpm|0.0001|$%200.0001&ad_sub=0&utm1=&utm2=&utm3=&utm4=&spot_id=84717&p=https%3A%2F%2Fshemalez.tube%2F HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Thu, 02 Feb 2023 06:28:47 GMT
content-type: application/json
content-length: 2
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: 952.0=1; expires=Fri, 03 Feb 2023 06:28:47 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
js.wpshsdk.com/npc/sdk/common/config.js
45.133.44.25200 OK 19 B URL HTTP/2 js.wpshsdk.com/npc/sdk/common/config.js
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash 67fc2c9421e21f4a3707c7fabc8e9f33
0d311fbfaea3d64122b4c5e575a5c3fbea11f718
b93ed3f9c6f2c27004ef57a9fa8f11248af5bd9848cc56a1c215db36d4ecc1bb
GET /npc/sdk/common/config.js HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalez.tube/
Origin: https://shemalez.tube
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:47 GMT
content-type: application/javascript; charset=utf-8
content-length: 19
server: nginx/1.18.0
last-modified: Thu, 26 Jan 2023 12:22:57 GMT
etag: "63d270a1-13"
expires: Thu, 02 Feb 2023 06:33:47 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
s.optnx.com//cimp.php?data=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--
95.211.229.246302 Found 0 B URL HTTP/1.1 s.optnx.com//cimp.php?data=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--
IP 95.211.229.246:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET //cimp.php?data=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-- HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 02 Feb 2023 06:28:47 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263db581f707cc2.431126314203339572%22%3B%7D; expires=Sat, 01 Feb 2025 06:28:47 GMT; path=; domain=.optnx.com; Secure; SameSite=none
Location: https://s3t3d2y8.afcdn.net/library/676799/cd5710823e62b921a06dc0045d7f2b1b663076c9.jpg
X-Robots-Tag: noindex, follow
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 81caa349ae2e0c3bac33835e150d8b19
12113e9a9731afa522af866a812ca6633bc2fd92
684116663030817b619c0d98b9db7ca560343593b30fee0c3fe6ced90a3a26e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "684116663030817B619C0D98B9DB7CA560343593B30FEE0C3FE6CED90A3A26E7"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2210
Expires: Thu, 02 Feb 2023 07:05:37 GMT
Date: Thu, 02 Feb 2023 06:28:47 GMT
Connection: keep-alive
3fd1218257.aaacacaaaa.com/in/show/?&cid=14402&session_id=e7073599-47d8-46ba-9957-aa09cca1be3c&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.eyJhY2NlcHRfbGFuZ3VhZ2UiOiJlbi1VUyxlbjtxPTAuNSIsImFkX3Bvc2l0aW9uIjo1LCJhZF90eXBlIjoibmF0aXZlIiwiYWRibG9jayI6MCwiYXVjdGlvbl9pZCI6NzcxNTAwMjIwLCJicm93c2VyX2ZhbWlseSI6IkZpcmVmb3giLCJicm93c2VyX25hbWUiOiJGaXJlZm94IDEwNSIsImNhbXBhaWduX2lkIjoxNDQwMiwiY2FycmllciI6Ii0iLCJjbGlja2FkaWxsYV9pZCI6MCwiY2xpY2thZGlsbGFfc3BhY2VfaWQiOjAsImNvdW50cnkiOiJOTyIsImNwYyI6MCwiY3BtIjowLCJjcmVhdGl2ZV9pZCI6ImQxMjM0NWNyZWF0aXZlaWZyYW1lIiwiY3JlYXRpdmVfdGl0bGUiOiIiLCJlY3BtIjowLCJleHRfY3JlYXRpdmVfaWQiOiIiLCJmcm9tX3N0b3JhZ2UiOjAsImlhdCI6MTY3NTMxOTMyNy4zMDUyODY0LCJpY29uIjoiIiwiaWZyYW1lIjp0cnVlLCJpZnJhbWVfcmVkaXJlY3RfdXJsIjoiaHR0cHM6Ly9idHMucmVkMTJmbHl3Mi5zaXRlL2luLzI2NDMvP3Nwb3RfaWQ9NTRcdTAwMjZzb3VyY2U9MTY3NzU3MDg5NCIsImloIjoyMDAsImlwIjoiOTEuOTAuNDIuMTU0IiwiaXB2NiI6IiIsImlzX2NwbSI6MCwiaXNfZGVmYXVsdCI6MSwiaXciOjIwMCwibGFiZWwiOjEsIm1tIjowLCJvc19mYW1pbHkiOiJ3aW5kb3dzIiwib3NfdHlwZSI6ImNvbXB1dGVyIiwicHJpbWFyeV9yZWZlcnJlciI6IiIsInJlZnJlc2giOjAsInJlc3BvbnNlX3NpemUiOjAsInJuIjowLCJzZXNzaW9uX2lkIjoiZTcwNzM1OTktNDdkOC00NmJhLTk5NTctYWEwOWNjYTFiZTNjIiwic2l0ZSI6InNoZW1hbGV6LnR1YmUiLCJzb3VyY2VfaWQiOjE2Nzc1NzA4OTQsInNwb3RfaWQiOjU0LCJzcG90X3NpemUiOjUsInN1YiI6ImF1Y3Rpb24tbmF0aXZlLXByb2QiLCJ0YWdfYWIiOiJiIiwidHJhY2tfaWQiOiJhdWN0aW9uLW5hdGl2ZS1wcm9kIiwidXJsIjoiIiwidXNhZ2VfdHlwZSI6IkRDSCIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsInVzZXJfZnAiOjAsInVzZXJfaWQiOjI0ODI3NjkyMzgsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9zb3VyY2UiOiIiLCJ2ZXIiOiI2LjEzLjEiLCJ2ZXJ0aWNhbF9pZCI6MH0.XkMIVy58A3vYmwRDe6Q2xg9i3oN_sndL72QhbGvgSQY
172.64.175.23302 Found 0 B URL HTTP/2 3fd1218257.aaacacaaaa.com/in/show/?&cid=14402&session_id=e7073599-47d8-46ba-9957-aa09cca1be3c&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.XkMIVy58A3vYmwRDe6Q2xg9i3oN_sndL72QhbGvgSQY
IP 172.64.175.23:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?&cid=14402&session_id=e7073599-47d8-46ba-9957-aa09cca1be3c&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.eyJhY2NlcHRfbGFuZ3VhZ2UiOiJlbi1VUyxlbjtxPTAuNSIsImFkX3Bvc2l0aW9uIjo1LCJhZF90eXBlIjoibmF0aXZlIiwiYWRibG9jayI6MCwiYXVjdGlvbl9pZCI6NzcxNTAwMjIwLCJicm93c2VyX2ZhbWlseSI6IkZpcmVmb3giLCJicm93c2VyX25hbWUiOiJGaXJlZm94IDEwNSIsImNhbXBhaWduX2lkIjoxNDQwMiwiY2FycmllciI6Ii0iLCJjbGlja2FkaWxsYV9pZCI6MCwiY2xpY2thZGlsbGFfc3BhY2VfaWQiOjAsImNvdW50cnkiOiJOTyIsImNwYyI6MCwiY3BtIjowLCJjcmVhdGl2ZV9pZCI6ImQxMjM0NWNyZWF0aXZlaWZyYW1lIiwiY3JlYXRpdmVfdGl0bGUiOiIiLCJlY3BtIjowLCJleHRfY3JlYXRpdmVfaWQiOiIiLCJmcm9tX3N0b3JhZ2UiOjAsImlhdCI6MTY3NTMxOTMyNy4zMDUyODY0LCJpY29uIjoiIiwiaWZyYW1lIjp0cnVlLCJpZnJhbWVfcmVkaXJlY3RfdXJsIjoiaHR0cHM6Ly9idHMucmVkMTJmbHl3Mi5zaXRlL2luLzI2NDMvP3Nwb3RfaWQ9NTRcdTAwMjZzb3VyY2U9MTY3NzU3MDg5NCIsImloIjoyMDAsImlwIjoiOTEuOTAuNDIuMTU0IiwiaXB2NiI6IiIsImlzX2NwbSI6MCwiaXNfZGVmYXVsdCI6MSwiaXciOjIwMCwibGFiZWwiOjEsIm1tIjowLCJvc19mYW1pbHkiOiJ3aW5kb3dzIiwib3NfdHlwZSI6ImNvbXB1dGVyIiwicHJpbWFyeV9yZWZlcnJlciI6IiIsInJlZnJlc2giOjAsInJlc3BvbnNlX3NpemUiOjAsInJuIjowLCJzZXNzaW9uX2lkIjoiZTcwNzM1OTktNDdkOC00NmJhLTk5NTctYWEwOWNjYTFiZTNjIiwic2l0ZSI6InNoZW1hbGV6LnR1YmUiLCJzb3VyY2VfaWQiOjE2Nzc1NzA4OTQsInNwb3RfaWQiOjU0LCJzcG90X3NpemUiOjUsInN1YiI6ImF1Y3Rpb24tbmF0aXZlLXByb2QiLCJ0YWdfYWIiOiJiIiwidHJhY2tfaWQiOiJhdWN0aW9uLW5hdGl2ZS1wcm9kIiwidXJsIjoiIiwidXNhZ2VfdHlwZSI6IkRDSCIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsInVzZXJfZnAiOjAsInVzZXJfaWQiOjI0ODI3NjkyMzgsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9zb3VyY2UiOiIiLCJ2ZXIiOiI2LjEzLjEiLCJ2ZXJ0aWNhbF9pZCI6MH0.XkMIVy58A3vYmwRDe6Q2xg9i3oN_sndL72QhbGvgSQY HTTP/1.1
Host: 3fd1218257.aaacacaaaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 02 Feb 2023 06:28:47 GMT
content-length: 0
location: https://bts.red12flyw2.site/in/2643/?spot_id=54&source=1677570894
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZUN%2FCJGEaf5lNYxxwEhlkIwoG%2BV4zdMM4DMGeSUueY5%2F7FEN0StZvz5gvQdzc9IMWYoiGZ9QsHHpStj44RvO4HljtX8a0fblRC4D9MKh00IoxncOLSToD9gfY3IUuafKC4XgOAL32XwtYap7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7930de648a1d23ef-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
3fd1218257.aaacacaaaa.com/in/show/?&cid=14402&session_id=e7073599-47d8-46ba-9957-aa09cca1be3c&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.NUwl8YvHohZDtUFlzuzA-BcFpLkHwnm0VVKebl5NP-g
172.64.175.23302 Found 0 B URL HTTP/2 3fd1218257.aaacacaaaa.com/in/show/?&cid=14402&session_id=e7073599-47d8-46ba-9957-aa09cca1be3c&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.NUwl8YvHohZDtUFlzuzA-BcFpLkHwnm0VVKebl5NP-g
IP 172.64.175.23:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?&cid=14402&session_id=e7073599-47d8-46ba-9957-aa09cca1be3c&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.NUwl8YvHohZDtUFlzuzA-BcFpLkHwnm0VVKebl5NP-g HTTP/1.1
Host: 3fd1218257.aaacacaaaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 02 Feb 2023 06:28:47 GMT
content-length: 0
location: https://bts.red12flyw2.site/in/2643/?spot_id=54&source=1677570894
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3NXo6s3wbpWj4vGeX1y7qwr%2BAiPQchgGrK2CUcTwvuWKH%2BZAa1Y0BoA4Hut0Da2MYzfAqTWmq%2FMFuR3xH4V8lbiLWVzWZkNV55i0vz4NHTZ%2FlUwb30aBnNDI2ihLyUo0YzIUtxwAkz5oAkVq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7930de649a2723ef-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
3fd1218257.aaacacaaaa.com/in/show/?&cid=14402&session_id=e7073599-47d8-46ba-9957-aa09cca1be3c&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.WDaec_I3sLox6Ypi0vLXrVzJlpiDxbPAJhqS_uOWVNk
172.64.175.23302 Found 0 B URL HTTP/2 3fd1218257.aaacacaaaa.com/in/show/?&cid=14402&session_id=e7073599-47d8-46ba-9957-aa09cca1be3c&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.WDaec_I3sLox6Ypi0vLXrVzJlpiDxbPAJhqS_uOWVNk
IP 172.64.175.23:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?&cid=14402&session_id=e7073599-47d8-46ba-9957-aa09cca1be3c&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.WDaec_I3sLox6Ypi0vLXrVzJlpiDxbPAJhqS_uOWVNk HTTP/1.1
Host: 3fd1218257.aaacacaaaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 02 Feb 2023 06:28:47 GMT
content-length: 0
location: https://bts.red12flyw2.site/in/2643/?spot_id=54&source=1677570894
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t0AuKw2DEaInkkzPnrtw0mBr3Jqu%2BUVp7gOehIdM2ZaC9Ch0eCPOxVL%2BWtMYdPpKrdmkln6pksqPq5Prd5y7uk65OfF4sOyXXuOcbMsu7YyvZkt3iZpeYHPHm7JiGnL4YybS531Tn9e87Tzm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7930de649a2d23ef-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
3fd1218257.aaacacaaaa.com/in/show/?&cid=1435&session_id=e7073599-47d8-46ba-9957-aa09cca1be3c&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.gSg4nReo-cg6t6dn652TkE6u4wUcL65-adkfYtpWTXI
172.64.175.23201 Created 0 B URL HTTP/2 3fd1218257.aaacacaaaa.com/in/show/?&cid=1435&session_id=e7073599-47d8-46ba-9957-aa09cca1be3c&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.gSg4nReo-cg6t6dn652TkE6u4wUcL65-adkfYtpWTXI
IP 172.64.175.23:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?&cid=1435&session_id=e7073599-47d8-46ba-9957-aa09cca1be3c&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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.gSg4nReo-cg6t6dn652TkE6u4wUcL65-adkfYtpWTXI HTTP/1.1
Host: 3fd1218257.aaacacaaaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 201 Created
date: Thu, 02 Feb 2023 06:28:47 GMT
content-length: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UGGVzCDQeZaaPojLgkW9vYvYUduz%2Fn1lhbX0jbNT13TPYLEcz0tcAQIIvQvS0KjpRd2J4l5U3OMzrdD8HgC%2FDtQWnq%2FYebMksRn6%2Bsuc2xkq4DMHhlcozHaBJXajpE%2Fp38ZS%2B4fJ57Grxkye"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7930de64aa3c23ef-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
3fd1218257.aaacacaaaa.com/in/show/?&cid=14054&session_id=e7073599-47d8-46ba-9957-aa09cca1be3c&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.eyJhY2NlcHRfbGFuZ3VhZ2UiOiJlbi1VUyxlbjtxPTAuNSIsImFkX3Bvc2l0aW9uIjoyLCJhZF90eXBlIjoibmF0aXZlIiwiYWRibG9jayI6MCwiYXVjdGlvbl9pZCI6NzcxNTAwMjIwLCJicm93c2VyX2ZhbWlseSI6IkZpcmVmb3giLCJicm93c2VyX25hbWUiOiJGaXJlZm94IDEwNSIsImNhbXBhaWduX2lkIjoxNDA1NCwiY2FycmllciI6Ii0iLCJjbGlja2FkaWxsYV9pZCI6MCwiY2xpY2thZGlsbGFfc3BhY2VfaWQiOjAsImNvdW50cnkiOiJOTyIsImNwYyI6MC4wMDIwNywiY3BtIjowLCJjcmVhdGl2ZV9pZCI6IjQ1OTI2NDUyZDhiYzJmYjM1NTM2MzMyNGQzYjhlZjlhIiwiY3JlYXRpdmVfdGl0bGUiOiJGcmVlIEZldGlzaCBWaWRlbyIsImVjcG0iOjAuMDAxMDgxNDM0ODQyNzc0MjcyNywiZXh0X2NyZWF0aXZlX2lkIjoiMjI2NzYiLCJmcm9tX3N0b3JhZ2UiOjAsImlhdCI6MTY3NTMxOTMyNy4zMDQ1ODE5LCJpY29uIjoiaHR0cHM6Ly9idHMucmVkMTJmbHl3Mi5zaXRlL2luL3RuYV9zaG93cy8_a2F0ZHNfZXA9Sk9aUkJpQVRNMmpva2xqdDdwNjVTcDJiV19Tamd4VlhkajE1YlBCTjBiUHk4Zkp2RVNrT3Z3TkV1eDBucExqeVJ1aXdpUHJ2OFRlcTkySVpJVXdqaHdVUFNtUFVNVDJSMGQtMkE4Y3pQZVlXVV9sZWhFZnV6UlZiUEVSakV0M3JGdUhGbktwWmMwSTlCWVlWOUppdl9JZ3JnY1gtQmxyZ3VOb2t5Y09lM1hYa2dhY2U5NG4xNUQ2MUt3TFJqNmRmSnlPZUpXSjdNTUk2ZER1V3Q5VVZBZ0ROdlVyU1E5clVSem5Sc3RwVmJiR1N2SVB1bzZQVEtDOEpuRWROamVuTGdTOWw2LWlGRFhfUDlSQk5hbHRuV3hhSFJCTDZ5SUNnd24zaHk3d2ZqbVR1SnE4dmVPWkt1SDlndHVWaThvczNsLUtqOFd1Uy0xMDBpdXJOZ05nUmVXSDBfbmV6dXdFaFZ1NWNHYURfRHBUNHc3elAxMjlHN2F1eFBoU0hrMjFnYlEyd0thQVRmREtmOEZ1V0VrWndIeU15MnBmNzU4dUFPSEkzMmdoLXAzaXVHc1k2blRSZThLLTJyWFFKWUgtaHo0WEZDZWd4TEQ4RFEtWC13MGROYVpFdHpRR05BUFhRVmtUMzVnVGV0UkdFLV9oOUxhZERTQjZjc0J4SnZkaUdkTlNjVWpOcGdMZHhSajFIemE5TG03cGNObEtCZDJRbXpXMU91V1c3TG0xU21oZUc3YnVOeW5NUEZXQ29MS3JvNTlDTi1ac3VCZ1JYdWVyNXdQT3puWENBbVFjLS0yV2x1NkQwWWRiZGctQ1JiNTI5MGVCRVQwTl9od3RPQzQtUXVvQ280eE9ZbFBwQWRuck9EVVFqTm9mUlQ5WlFvUVVZSkduTXpvMWF3MDJWbjVwVTQ3X2tCcjdGNFEya01COEU4b0h2SFNxdjBUM3JPQnV6RmdtNjBoTDdSSkd5SzltdmR0RVo1UFlLYTJNcC1kYU5yQVZ2X0VNVC1GUHUzSVEtY1prQTFPNnZhSFU0cm1wVFBvczBMblJnbzkyMXFfS19obDFWb19pTHdPTkQ2aXZCIiwiaWZyYW1lIjpmYWxzZSwiaWZyYW1lX3JlZGlyZWN0X3VybCI6IiIsImloIjoyMDAsImlwIjoiOTEuOTAuNDIuMTU0IiwiaXB2NiI6IiIsImlzX2NwbSI6MCwiaXNfZGVmYXVsdCI6MCwiaXciOjIwMCwibGFiZWwiOjEsIm1tIjowLCJvc19mYW1pbHkiOiJ3aW5kb3dzIiwib3NfdHlwZSI6ImNvbXB1dGVyIiwicHJpbWFyeV9yZWZlcnJlciI6IiIsInJlZnJlc2giOjAsInJlc3BvbnNlX3NpemUiOjAsInJuIjoxLCJzZXNzaW9uX2lkIjoiZTcwNzM1OTktNDdkOC00NmJhLTk5NTctYWEwOWNjYTFiZTNjIiwic2l0ZSI6InNoZW1hbGV6LnR1YmUiLCJzb3VyY2VfaWQiOjE2Nzc1NzA4OTQsInNwb3RfaWQiOjU0LCJzcG90X3NpemUiOjUsInN1YiI6ImF1Y3Rpb24tbmF0aXZlLXByb2QiLCJ0YWdfYWIiOiJiIiwidHJhY2tfaWQiOiJhdWN0aW9uLW5hdGl2ZS1wcm9kIiwidXJsIjoiIiwidXNhZ2VfdHlwZSI6IkRDSCIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMDUuMCIsInVzZXJfZnAiOjAsInVzZXJfaWQiOjI0ODI3NjkyMzgsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9zb3VyY2UiOiIiLCJ2ZXIiOiI2LjEzLjEiLCJ2ZXJ0aWNhbF9pZCI6MH0.WplOp4T1HGth9SZenb2pmUo6k4LU-2ru02JxEjoHcxY
172.64.175.23201 Created 0 B URL HTTP/2 3fd1218257.aaacacaaaa.com/in/show/?&cid=14054&session_id=e7073599-47d8-46ba-9957-aa09cca1be3c&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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_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.WplOp4T1HGth9SZenb2pmUo6k4LU-2ru02JxEjoHcxY
IP 172.64.175.23:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?&cid=14054&session_id=e7073599-47d8-46ba-9957-aa09cca1be3c&response_size=0&cryp=eyJhbGciOiJIUzI1NiJ9.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_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.WplOp4T1HGth9SZenb2pmUo6k4LU-2ru02JxEjoHcxY HTTP/1.1
Host: 3fd1218257.aaacacaaaa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 201 Created
date: Thu, 02 Feb 2023 06:28:47 GMT
content-length: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2%2FX8ndAGpG3MBgBFyxUAxrLv2t1BXRtdIlKpkI7F9%2BgurBZB9ubsB%2F9Q00Pa6f8F2xnsAsYMXQRyyV6JLhIHMkKfB2AvWk%2FX3ecsIfNoTRJ%2FKZxRvilu%2BdLpEVd94u1oifA2mUUmV7YaMw%2F8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7930de64ba4c23ef-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
sw.wpu.sh/npc/sdk/common/service-worker.js
45.133.44.24200 OK 1.8 kB URL HTTP/2 sw.wpu.sh/npc/sdk/common/service-worker.js
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (5516), with no line terminators
Hash b84c3df63522b5774e068693cff05b61
87c6d8ca6ee6d308faa8b5aa22793774660e7f29
67018bf78daadb61952675af92eb06ecc2c8728e27d992f5b0082b5ca1c5b52b
GET /npc/sdk/common/service-worker.js HTTP/1.1
Host: sw.wpu.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:47 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 26 Jan 2023 12:22:57 GMT
etag: W/"63d270a1-158c"
content-encoding: gzip
expires: Thu, 02 Feb 2023 06:33:47 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
bts.red12flyw2.site/in/2643/?spot_id=54&source=1677570894
109.206.191.198302 Found 0 B URL HTTP/2 bts.red12flyw2.site/in/2643/?spot_id=54&source=1677570894
IP 109.206.191.198:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/2643/?spot_id=54&source=1677570894 HTTP/1.1
Host: bts.red12flyw2.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalez.tube/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Thu, 02 Feb 2023 06:28:47 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://tsyndicate.com/iframes2/5448ab07c1bf49eaa9dbda8be6d24dd1.html?subid=1677570894
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 2643.0=1; expires=Fri, 03 Feb 2023 06:28:47 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/676799/cd5710823e62b921a06dc0045d7f2b1b663076c9.jpg
185.76.9.24200 OK 19 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/676799/cd5710823e62b921a06dc0045d7f2b1b663076c9.jpg
IP 185.76.9.24:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash e14b72a35908bf1d0aa5be9f877917e1
cd5710823e62b921a06dc0045d7f2b1b663076c9
ace2d7b48d4ce56f5df3d44e08dacb1ee3251c631af636a3ca793005309a31b3
GET /library/676799/cd5710823e62b921a06dc0045d7f2b1b663076c9.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalez.tube/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:47 GMT
content-type: image/jpeg
content-length: 18726
last-modified: Fri, 29 May 2020 12:09:23 GMT
etag: "5ed0fb73-4926"
expires: Fri, 30 Jun 2023 18:47:20 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195246
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCRRB/tz/8bocAQ
x-77-nzt-ray: af585630250e6d341f58db63ef86fa1e
x-cache: HIT
x-age: 18660081
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/mRUDivl99po
142.250.74.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/mRUDivl99po
IP 142.250.74.3:0
Hash 571873363ef1c5c5fca1f02cc3620fe6
b64cbbf1c115ece810d002a19a4dbc227f82a32c
fb34e2f4b38f578d60950e3de00c3e5d9b8917cb40b86337c92a32650dbd46a2
POST /s/gts1p5/mRUDivl99po HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 06:28:47 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bts.red12flyw2.site/in/2643/?spot_id=54&source=1677570894
109.206.191.198302 Found 0 B URL HTTP/2 bts.red12flyw2.site/in/2643/?spot_id=54&source=1677570894
IP 109.206.191.198:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/2643/?spot_id=54&source=1677570894 HTTP/1.1
Host: bts.red12flyw2.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalez.tube/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Thu, 02 Feb 2023 06:28:47 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://tsyndicate.com/iframes2/5448ab07c1bf49eaa9dbda8be6d24dd1.html?subid=1677570894
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 2643.0=1; expires=Fri, 03 Feb 2023 06:28:47 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
bts.red12flyw2.site/in/2643/?spot_id=54&source=1677570894
109.206.191.198302 Found 0 B URL HTTP/2 bts.red12flyw2.site/in/2643/?spot_id=54&source=1677570894
IP 109.206.191.198:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/2643/?spot_id=54&source=1677570894 HTTP/1.1
Host: bts.red12flyw2.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalez.tube/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Thu, 02 Feb 2023 06:28:47 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://tsyndicate.com/iframes2/5448ab07c1bf49eaa9dbda8be6d24dd1.html?subid=1677570894
pragma: no-cache
vary: *
cache-control: no-cache, no-store, must-revalidate
set-cookie: 2643.0=1; expires=Fri, 03 Feb 2023 06:28:47 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
99cd8cc2f6.2a48684d51.com/get/
94.130.197.134200 OK 39 kB URL HTTP/2 99cd8cc2f6.2a48684d51.com/get/
IP 94.130.197.134:0
ASN #24940 Hetzner Online GmbH
Hash c977f08fff72258b643a8cb6e7755089
ceb1de4399476b66be62eeb9ffdc85a39eec4b3c
a69e36e58e5f99a50e1f4501c1d63bb3b01cae9a64a810c9edbcfbf53f7dcf6b
POST /get/ HTTP/1.1
Host: 99cd8cc2f6.2a48684d51.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalez.tube/
Content-Type: text/plain;charset=UTF-8
Origin: https://shemalez.tube
Content-Length: 569
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.16.0
date: Thu, 02 Feb 2023 06:28:47 GMT
content-type: application/json
content-length: 2449
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 02 Feb 2023 06:28:47 GMT
access-control-allow-origin: *
etag: "63c93a4b-2b"
expires: Thu, 02 Feb 2023 07:28:47 GMT
accept-ranges: bytes
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/49315045/1?wmode=7&page-url=https%3A%2F%2Fshemalez.tube%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A939%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A819189765869%3Ahid%3A418872264%3Az%3A0%3Ai%3A20230202062912%3Aet%3A1675319352%3Ac%3A1%3Arn%3A343886438%3Arqn%3A1%3Au%3A1675319352938263845%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C74%2C92%2C0%2C315%2C0%2C%2C433%2C3%2C1127%2C1127%2C1%2C1027%3Aco%3A0%3Ans%3A1675319349975%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675319352%3At%3AShemalez%20-%20Shemale%20and%20Tranny%20Porn%20Tube%20-%20ShemaleZ.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
93.158.134.119200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/49315045/1?wmode=7&page-url=https%3A%2F%2Fshemalez.tube%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A939%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A819189765869%3Ahid%3A418872264%3Az%3A0%3Ai%3A20230202062912%3Aet%3A1675319352%3Ac%3A1%3Arn%3A343886438%3Arqn%3A1%3Au%3A1675319352938263845%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C74%2C92%2C0%2C315%2C0%2C%2C433%2C3%2C1127%2C1127%2C1%2C1027%3Aco%3A0%3Ans%3A1675319349975%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675319352%3At%3AShemalez%20-%20Shemale%20and%20Tranny%20Porn%20Tube%20-%20ShemaleZ.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP 93.158.134.119:0
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash 40a77e90322d3f1b62254c8771678dea
d6864b4e1dfab9f446c715df8323a5cb440510f9
2ce4b27f4ea60ff21610aeff0a53732b0b780c5db6fff725bc9ed59150af5def
GET /watch/49315045/1?wmode=7&page-url=https%3A%2F%2Fshemalez.tube%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A939%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A2%3Adp%3A0%3Als%3A819189765869%3Ahid%3A418872264%3Az%3A0%3Ai%3A20230202062912%3Aet%3A1675319352%3Ac%3A1%3Arn%3A343886438%3Arqn%3A1%3Au%3A1675319352938263845%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C74%2C92%2C0%2C315%2C0%2C%2C433%2C3%2C1127%2C1127%2C1%2C1027%3Aco%3A0%3Ans%3A1675319349975%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675319352%3At%3AShemalez%20-%20Shemale%20and%20Tranny%20Porn%20Tube%20-%20ShemaleZ.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shemalez.tube
Referer: https://shemalez.tube/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Thu, 02 Feb 2023 06:28:47 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://shemalez.tube
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 02-Feb-2023 06:28:47 GMT
last-modified: Thu, 02-Feb-2023 06:28:47 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15221
Expires: Thu, 02 Feb 2023 10:42:28 GMT
Date: Thu, 02 Feb 2023 06:28:47 GMT
Connection: keep-alive
mc.yandex.ru/watch/47200290/1?wmode=7&page-url=https%3A%2F%2Fshemalez.tube%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A939%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A293841356504%3Ahid%3A418872264%3Az%3A0%3Ai%3A20230202062911%3Aet%3A1675319352%3Ac%3A1%3Arn%3A752563312%3Arqn%3A1%3Au%3A1675319352938263845%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A1%2C74%2C92%2C0%2C315%2C0%2C%2C433%2C3%2C1127%2C1127%2C1%2C1027%3Aco%3A0%3Ans%3A1675319349975%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675319352%3At%3AShemalez%20-%20Shemale%20and%20Tranny%20Porn%20Tube%20-%20ShemaleZ.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
93.158.134.119200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/47200290/1?wmode=7&page-url=https%3A%2F%2Fshemalez.tube%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A939%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A293841356504%3Ahid%3A418872264%3Az%3A0%3Ai%3A20230202062911%3Aet%3A1675319352%3Ac%3A1%3Arn%3A752563312%3Arqn%3A1%3Au%3A1675319352938263845%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A1%2C74%2C92%2C0%2C315%2C0%2C%2C433%2C3%2C1127%2C1127%2C1%2C1027%3Aco%3A0%3Ans%3A1675319349975%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675319352%3At%3AShemalez%20-%20Shemale%20and%20Tranny%20Porn%20Tube%20-%20ShemaleZ.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP 93.158.134.119:0
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash cc00eb5f24ea849e6ac75b859d83c801
d943012ad42caa628b497eacb6bcac15d5ec056b
9e58311a5c732d6204f46151afbbe814ca1e095b123136a12e7a3b49f18c5e29
GET /watch/47200290/1?wmode=7&page-url=https%3A%2F%2Fshemalez.tube%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A939%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A293841356504%3Ahid%3A418872264%3Az%3A0%3Ai%3A20230202062911%3Aet%3A1675319352%3Ac%3A1%3Arn%3A752563312%3Arqn%3A1%3Au%3A1675319352938263845%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A1%2C74%2C92%2C0%2C315%2C0%2C%2C433%2C3%2C1127%2C1127%2C1%2C1027%3Aco%3A0%3Ans%3A1675319349975%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675319352%3At%3AShemalez%20-%20Shemale%20and%20Tranny%20Porn%20Tube%20-%20ShemaleZ.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shemalez.tube
Referer: https://shemalez.tube/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Thu, 02 Feb 2023 06:28:47 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://shemalez.tube
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 02-Feb-2023 06:28:47 GMT
last-modified: Thu, 02-Feb-2023 06:28:47 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15221
Expires: Thu, 02 Feb 2023 10:42:28 GMT
Date: Thu, 02 Feb 2023 06:28:47 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15221
Expires: Thu, 02 Feb 2023 10:42:28 GMT
Date: Thu, 02 Feb 2023 06:28:47 GMT
Connection: keep-alive
tsyndicate.com/iframes2/5448ab07c1bf49eaa9dbda8be6d24dd1.html?subid=1677570894
136.243.75.209200 OK 14 kB URL HTTP/2 tsyndicate.com/iframes2/5448ab07c1bf49eaa9dbda8be6d24dd1.html?subid=1677570894
IP 136.243.75.209:0
ASN #24940 Hetzner Online GmbH
Hash a238f2706c053220a0807a13ed692222
f00b03a727f0d93f522b372106c529f92197f163
56984b7784eba96eb399003f8bb3d269b45bf2a0efbf63259796821c6a7d04f6
GET /iframes2/5448ab07c1bf49eaa9dbda8be6d24dd1.html?subid=1677570894 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalez.tube/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 06:28:47 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script, <https://lcdn.tsyndicate.com/images/2/1/84420fbc671de2b2c4913d049b2a41ef47023f.gif>; rel=preload; as=image
x-request-id: 9e827c4cb6b4d7c2
set-cookie: ts_uid=52bc085d-be85-474c-ae57-e166c89b2330; expires=Wed, 02 Aug 2023 06:28:47 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCx5YZMmjYiBGjRhcWIsYU3BLjoYgyE2PYuFGDBowaN2Tc6NJH; expires=Fri, 03 Feb 2023 06:28:47 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdab614ba-4572-4b54-9079-a26b68b1ece7.jpeg
34.120.237.76200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdab614ba-4572-4b54-9079-a26b68b1ece7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6bb5b89e738516f4862491eec286bf6d
8fb46b9ca85f2c578eb2a56d0007859183e12209
7f164a37b675bf39f8473392b07a2a383397da003303965fb190fd4f455bb43b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdab614ba-4572-4b54-9079-a26b68b1ece7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15051
x-amzn-requestid: 72a3f2ae-538e-40dc-9496-86c28334ba0d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frc6jGTAIAMFy4A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadb76-72178ed13a2e70d462785b90;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:36:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CKTfQzCvXa4oL6Lm2n8Rw_9Uhj69YfgpDTP9s0zoaX5qW1vcqWIXDA==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 21:46:26 GMT
age: 31341
etag: "8fb46b9ca85f2c578eb2a56d0007859183e12209"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0d335250-c4ff-42af-b9c2-48711573ab39.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0d335250-c4ff-42af-b9c2-48711573ab39.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 86664b4d1fc27ba7b5bff8a245604326
b8c7ef73101a497b6c78ad59aafe66a391fdc3fa
e4596faadf14051299036a79632951d90183dd0635293687edef11985799a752
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0d335250-c4ff-42af-b9c2-48711573ab39.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4814
x-amzn-requestid: 90da23ab-2c54-40ec-8e26-bdf4eeb1e27b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdKWFpvoAMFyPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadbdb-70c4cb89413ed6bd44731d76;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:38:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: htcecPD3kYwCPwPPCqgVuXnCuKo6TTKntzaB2xFID5fvBXpZQe463A==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 21:59:38 GMT
age: 30549
etag: "b8c7ef73101a497b6c78ad59aafe66a391fdc3fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbaa9536b-a4e6-42f5-99dd-75298eecbbb1.jpeg
34.120.237.76200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbaa9536b-a4e6-42f5-99dd-75298eecbbb1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a4392f298c9e98515493f1235810838f
b89eebf2b8adac69487262100b07da8bc171ecf7
b368d87d3a0fe4e1a8ddc82bed704b3056ad2874b8d325111b399b18807c1e5e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbaa9536b-a4e6-42f5-99dd-75298eecbbb1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15656
x-amzn-requestid: 6723d22f-8b16-4fb2-af92-9b3257fc2a1d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3bIHpRoAMFRYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c47-03b1c6646f63ba716a6298e1;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:43 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: alMHzjwJbGegz4F76t9-EhIhCUHgQngtgiZgMo2_MxAIrXqsNxWxBg==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 08:16:33 GMT
age: 79934
etag: "b89eebf2b8adac69487262100b07da8bc171ecf7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc092e5e-3a14-4d43-9814-99fd9d49d6c8.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc092e5e-3a14-4d43-9814-99fd9d49d6c8.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 41c44051cc3b4c69924df66048e7566b
5c6a12595c3f6005fec4baa84b16575951e72178
72dff70bcb417c088aba013a486e1dbabe099b40fb718a283f1ba220b142b848
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc092e5e-3a14-4d43-9814-99fd9d49d6c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7450
x-amzn-requestid: 1b3ef150-9b12-4b8b-94e6-0d6debbd24ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdTDFmPoAMF-UQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadc13-0fea883b0ce1a1b933dc2be8;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:39:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: kJt9M6jkAc3_ouNRDkJ76Njz9yKNesoJjBK_ja3dTcz5oiowk6LKbQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:25:10 GMT
age: 29017
etag: "5c6a12595c3f6005fec4baa84b16575951e72178"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
tsyndicate.com/iframes2/5448ab07c1bf49eaa9dbda8be6d24dd1.html?subid=1677570894
136.243.75.209200 OK 10 kB URL HTTP/2 tsyndicate.com/iframes2/5448ab07c1bf49eaa9dbda8be6d24dd1.html?subid=1677570894
IP 136.243.75.209:0
ASN #24940 Hetzner Online GmbH
Hash 469bf5458f243e6d6744b1bf8d5bf427
29abf749cb82f5548cabe98fc914a6056fb26529
2c0bc9fd2570ca21ce85034d44d6d5d132d261c409f400ea539144327e9e9903
GET /iframes2/5448ab07c1bf49eaa9dbda8be6d24dd1.html?subid=1677570894 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalez.tube/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 06:28:47 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: c704bc422e45ea66
set-cookie: ts_uid=711f0f21-9130-4a7b-b0a7-1a15d2f1e2d7; expires=Wed, 02 Aug 2023 06:28:47 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCx5YZMmjYiBEjRxcWIsYU3BLjoYgyE2PYuFGDBowaN2Tc6NJH; expires=Fri, 03 Feb 2023 06:28:47 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/47200290/1?page-url=https%3A%2F%2Fshemalez.tube%2F&charset=utf-8&hittoken=1675319327_9960faec93550feb8e80fc19dba971172c60bb07fbf2da2f5e771002133bfe2f&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A293841356504%3Ahid%3A418872264%3Az%3A0%3Ai%3A20230202062912%3Aet%3A1675319353%3Ac%3A1%3Arn%3A824020855%3Arqn%3A2%3Au%3A1675319352938263845%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675319349975%3Aadb%3A2%3Ast%3A1675319353&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/47200290/1?page-url=https%3A%2F%2Fshemalez.tube%2F&charset=utf-8&hittoken=1675319327_9960faec93550feb8e80fc19dba971172c60bb07fbf2da2f5e771002133bfe2f&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A293841356504%3Ahid%3A418872264%3Az%3A0%3Ai%3A20230202062912%3Aet%3A1675319353%3Ac%3A1%3Arn%3A824020855%3Arqn%3A2%3Au%3A1675319352938263845%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675319349975%3Aadb%3A2%3Ast%3A1675319353&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/47200290/1?page-url=https%3A%2F%2Fshemalez.tube%2F&charset=utf-8&hittoken=1675319327_9960faec93550feb8e80fc19dba971172c60bb07fbf2da2f5e771002133bfe2f&browser-info=pa%3A1%3Aar%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A293841356504%3Ahid%3A418872264%3Az%3A0%3Ai%3A20230202062912%3Aet%3A1675319353%3Ac%3A1%3Arn%3A824020855%3Arqn%3A2%3Au%3A1675319352938263845%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aco%3A0%3Aeu%3A1%3Ans%3A1675319349975%3Aadb%3A2%3Ast%3A1675319353&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 35
Origin: https://shemalez.tube
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 02 Feb 2023 06:28:47 GMT
access-control-allow-origin: https://shemalez.tube
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 02-Feb-2023 06:28:47 GMT
last-modified: Thu, 02-Feb-2023 06:28:47 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 031be4d46456a983025a51dbafe041b8
028f4f0edcd725d7a87e785c595cb695defeb31f
668963244fb14a5bced5a013c2f8f7ff3aeec27695d402b3c1e07ae528f4e11f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 06:28:48 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 01 Feb 2023 03:56:20 GMT
Expires: Wed, 08 Feb 2023 03:56:19 GMT
Etag: "028f4f0edcd725d7a87e785c595cb695defeb31f"
Cache-Control: max-age=508650,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7930de67ead50b02-OSL
lcdn.tsyndicate.com/images/2/3/ea32f8cb893d5bf295824a48e280180608ed71.gif
8.254.252.214200 OK 42 kB URL HTTP/2 lcdn.tsyndicate.com/images/2/3/ea32f8cb893d5bf295824a48e280180608ed71.gif
IP 8.254.252.214:0
File type GIF image data, version 89a, 300 x 250\012- data
Hash 37e801ae75125593b2473d775e869e20
72eecc4e11b1ba354e67582ed958180ca714285b
70446a82218f92f524f647e3d84e063dbb2c24f7266dff8140f99c277c8949c1
GET /images/2/3/ea32f8cb893d5bf295824a48e280180608ed71.gif HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=8540c174-227b-4852-8358-19a2a5f0fe66; bfq=APeIECNCx5YZMmjYiBGDRhcWIsYU3BLjoYgyE2PYuFGDBowaN2Tc6NJH
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:48 GMT
content-type: image/gif
content-length: 42187
etag: "63da1c24-a4cb"
last-modified: Wed, 01 Feb 2023 08:00:36 GMT
server: nginx
x-robots-tag: noindex, nofollow
age: 80739
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 031be4d46456a983025a51dbafe041b8
028f4f0edcd725d7a87e785c595cb695defeb31f
668963244fb14a5bced5a013c2f8f7ff3aeec27695d402b3c1e07ae528f4e11f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 06:28:48 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 01 Feb 2023 03:56:20 GMT
Expires: Wed, 08 Feb 2023 03:56:19 GMT
Etag: "028f4f0edcd725d7a87e785c595cb695defeb31f"
Cache-Control: max-age=508650,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7930de67e9b0b50f-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 031be4d46456a983025a51dbafe041b8
028f4f0edcd725d7a87e785c595cb695defeb31f
668963244fb14a5bced5a013c2f8f7ff3aeec27695d402b3c1e07ae528f4e11f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 06:28:48 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 01 Feb 2023 03:56:20 GMT
Expires: Wed, 08 Feb 2023 03:56:19 GMT
Etag: "028f4f0edcd725d7a87e785c595cb695defeb31f"
Cache-Control: max-age=508650,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7930de67ea9eb50b-OSL
tsyndicate.com/iframes2/5448ab07c1bf49eaa9dbda8be6d24dd1.html?subid=1677570894
136.243.75.209200 OK 6.2 kB URL HTTP/2 tsyndicate.com/iframes2/5448ab07c1bf49eaa9dbda8be6d24dd1.html?subid=1677570894
IP 136.243.75.209:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4581)
Hash 64d84dabc9fd6f9aae4c6ad1776a6fb3
a281625c9fd1a5d6be23fb7d3bab8f6f34b7fbe3
bbfd3e3b7de3d18ed31d05e9211ec56a9e399485a06ae204f234f042bb471ee4
GET /iframes2/5448ab07c1bf49eaa9dbda8be6d24dd1.html?subid=1677570894 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalez.tube/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 06:28:47 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script, <https://lcdn.tsyndicate.com/images/2/3/ea32f8cb893d5bf295824a48e280180608ed71.gif>; rel=preload; as=image
x-request-id: 62ba0675e9bc8507
set-cookie: ts_uid=8540c174-227b-4852-8358-19a2a5f0fe66; expires=Wed, 02 Aug 2023 06:28:47 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCx5YZMmjYiBGDRhcWIsYU3BLjoYgyE2PYuFGDBowaN2Tc6NJH; expires=Fri, 03 Feb 2023 06:28:47 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 031be4d46456a983025a51dbafe041b8
028f4f0edcd725d7a87e785c595cb695defeb31f
668963244fb14a5bced5a013c2f8f7ff3aeec27695d402b3c1e07ae528f4e11f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 06:28:48 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 01 Feb 2023 03:56:20 GMT
Expires: Wed, 08 Feb 2023 03:56:19 GMT
Etag: "028f4f0edcd725d7a87e785c595cb695defeb31f"
Cache-Control: max-age=508650,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7930de67ede3fabc-OSL
lcdn.tsyndicate.com/images/f/2/f8af206a07a0298fa64ae25d702c783cb92c6a/main.jpg
8.254.252.214200 OK 14 kB URL HTTP/2 lcdn.tsyndicate.com/images/f/2/f8af206a07a0298fa64ae25d702c783cb92c6a/main.jpg
IP 8.254.252.214:0
File type JPEG image data, baseline, precision 8, 300x250, components 3\012- data
Hash 3158e51bc97d34cade07c8e2644c2feb
6a0ed7e4a4e6aba89fc57f8e38b805ef220ff381
2c0bb812d43d9567a07f8bc02694dca3f5c0852e029c6f0aec526f738f6f8d91
GET /images/f/2/f8af206a07a0298fa64ae25d702c783cb92c6a/main.jpg HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=52bc085d-be85-474c-ae57-e166c89b2330; bfq=APeIECNCx5YZMmjYiBGjRhcWIsYU3BLjoYgyE2PYuFGDBowaN2Tc6NJH
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:48 GMT
content-type: image/jpeg
content-length: 13686
last-modified: Wed, 01 Feb 2023 08:00:37 GMT
server: nginx
x-robots-tag: noindex, nofollow
content-encoding: gzip
vary: Accept-Encoding
etag: W/"63da1c25-37d0"
age: 80363
accept-ranges: bytes
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
8.254.252.214304 Not Modified 0 B URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP 8.254.252.214:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=52bc085d-be85-474c-ae57-e166c89b2330; bfq=APeIECNCx5YZMmjYiBGjRhcWIsYU3BLjoYgyE2PYuFGDBowaN2Tc6NJH
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
TE: trailers
HTTP/2 304 Not Modified
date: Thu, 02 Feb 2023 06:28:48 GMT
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 28585065
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/sdk/v1/b.b.js
8.254.252.214304 Not Modified 0 B URL HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP 8.254.252.214:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=52bc085d-be85-474c-ae57-e166c89b2330; bfq=APeIECNCx5YZMmjYiBGjRhcWIsYU3BLjoYgyE2PYuFGDBowaN2Tc6NJH
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
If-Modified-Since: Tue, 22 Feb 2022 13:07:15 GMT
If-None-Match: W/"6214e003-1eb1"
TE: trailers
HTTP/2 304 Not Modified
date: Thu, 02 Feb 2023 06:28:48 GMT
last-modified: Tue, 22 Feb 2022 13:07:15 GMT
server: nginx
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6214e003-1eb1"
age: 28585065
X-Firefox-Spdy: h2
bc63f84631.5e9d31c60e.com/in/multy
168.119.25.22200 OK 25 kB URL HTTP/2 bc63f84631.5e9d31c60e.com/in/multy
IP 168.119.25.22:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (24629), with no line terminators
Hash 8af6eef384a8ca7f2edcda53da6ee5ac
16929fb0800af0ef1fa13af30610a47d6b84ee6b
ac6db8b73baf72e8cd4cbec9597bb276d3d9f9f6f57210b4dbae7007690bc6af
POST /in/multy HTTP/1.1
Host: bc63f84631.5e9d31c60e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 973
Origin: https://shemalez.tube
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 02 Feb 2023 06:28:48 GMT
content-type: application/json
content-length: 24631
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
bc63f84631.5e9d31c60e.com/in/show/?mid=1566672257775041328&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=138611283&sid=3266354044&cid=12108&price=0&is_cpm=1&cpm=0.7327503106559999&ecpm=0.6634321312679423&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.23.0&ver_c=&refdom=shemalez.tube&hostname=auc-inpage-hz-3-b&site_id=31490&spot_id=490&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-02-02&is_native=3&auction_queue=0&burl=UO77B8Orwic5p6qenRaKetwgU64j9k6Qe8WQ5VI-f_5VlZziwesZVh9iRq6oe4lvsLsUTAdLfZ4Izb25vAilsGJJlCEbQLohdZbX7UOGYzlwB7BIgN5FrP4EbskBmfyhz-8VwHxDHKBAxAYppHO4P_KL7svTTyhG-Gr0KyCcwglq3PGQPa2AkPJTX7LqBfqoSK50wZnBCXA2p1vHHLJS1ZEqYU6ymGMZc68PW6ytVmSBWOy7_l4PnKoWDGBVS0XsGjLldFvFar_THhgMYPmHzI1YVNWOOqtxuPHkaPKxKb3d9ypQ7TH12tzu7vUSKmJfSzlIvnFE2jltQY7uusexIiwD4raZJtuWO8ueX_EF0ZrFWyNF5xEVlSl2P9NqJbSLaptly9N0WFKI8UeE1o63lLGMBOtE7sbyqm_Y6tYH6pSMUrfnhs3RmAgfOQSMYeKA9-Vj9aYg_bZgGrcjc_8umztbmS4rP5VEh8GMR6hzAVFbGpE4RdtTr9cBzScytuIDlbR_7gvsWpXTrOXTfz4swEf0Ww4iuaqWOB2UN53sZvvoAINMYcV9QHzWXVTO_bzelihnmYyVqMB0T_UBecren9lzrZcLr2mQONdVmQT8pl2HLMo0X2yuxGpggbYoI0d-hVgmIJpdp5AApx5N-ua6Pw5psPsuH4iWF-24TCXUtNdnCNx6TNqZ185nH9ZsGDZOAQ3G4ntYdkeh5VjZc0ojkhaAaPfiYqmV-ufMVa973S8eBToRUi67ddsxP9KctREVTGwLTxRQFsIvfg8KiTMzlxqho9JdEIU4PFXfxYo1kbCH7G86O_tT204guL43W5l6C3htKQ7X6Shjhj4Q_liywIa76FrRHpr_lqbHvtstEMm-yasgnv9Fk7g50EhNC4unjIDq1es&pop_winurl=&ip=91.90.42.154&testab=0&px_id=31490&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=lq-pop-ext&uniq=&exp=&resp_type=popunderAd&iabcat=IAB25-3&min_cpm=0.01267465292468129&placement_type_id=7&skin_test=0&verify_hash=1f438f43f0b9925c1f271dc0ad95b4e7&score=43.91204895856461&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D138611283%26spot_id%3D490%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fshemalez.tube%252F%26idzone%3D4438158%26sid%3D1886&ml=&tag_ab=b&original_bid=0.67261824&user_fp=0&v2=0&pop_type=1&space_id=1886&verify_hash=1f438f43f0b9925c1f271dc0ad95b4e7&real_bid=0.6634321312679423&skin_id=4&vertical_id=0&stratagem=&accel=&gyr=&iabcat=IAB25-3&ip_mismatch=false&ssp=&rc=&v2_track=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=jm11aIw6mpauaoAscZFiX5LrmVathQP2zavtOo7KZ-5hPiRUGk5XM3wmEuv1ieVqirLoaJy9em8_-tDFnwyMPoJ3lJp8-Ko7_o8e8XzvNl-rgrUi1pyO3CHMNbh7gyx0OVi5XtDoSvfUr-JtI__gAih7hZ9bfh3JWGseat9WhJshZwMBXA&pop_price=0.0006634321312679423&pop_real_bid=0.0006634321312679423&pop_ecpm=0.01654021748724047&auc_type=1&pr=&user_keywords=&device_theme=light&label_ids=4,0&conditions=dch_ip,tz_offset,all&need_redirect_show=0&mlf=1&cpa=083aa853-82df-461e-8e3f-cc035fb70e5a&mlc=1&format=social-scale-b_r-body
168.119.25.22200 OK 0 B URL HTTP/2 bc63f84631.5e9d31c60e.com/in/show/?mid=1566672257775041328&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=138611283&sid=3266354044&cid=12108&price=0&is_cpm=1&cpm=0.7327503106559999&ecpm=0.6634321312679423&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.23.0&ver_c=&refdom=shemalez.tube&hostname=auc-inpage-hz-3-b&site_id=31490&spot_id=490&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-02-02&is_native=3&auction_queue=0&burl=UO77B8Orwic5p6qenRaKetwgU64j9k6Qe8WQ5VI-f_5VlZziwesZVh9iRq6oe4lvsLsUTAdLfZ4Izb25vAilsGJJlCEbQLohdZbX7UOGYzlwB7BIgN5FrP4EbskBmfyhz-8VwHxDHKBAxAYppHO4P_KL7svTTyhG-Gr0KyCcwglq3PGQPa2AkPJTX7LqBfqoSK50wZnBCXA2p1vHHLJS1ZEqYU6ymGMZc68PW6ytVmSBWOy7_l4PnKoWDGBVS0XsGjLldFvFar_THhgMYPmHzI1YVNWOOqtxuPHkaPKxKb3d9ypQ7TH12tzu7vUSKmJfSzlIvnFE2jltQY7uusexIiwD4raZJtuWO8ueX_EF0ZrFWyNF5xEVlSl2P9NqJbSLaptly9N0WFKI8UeE1o63lLGMBOtE7sbyqm_Y6tYH6pSMUrfnhs3RmAgfOQSMYeKA9-Vj9aYg_bZgGrcjc_8umztbmS4rP5VEh8GMR6hzAVFbGpE4RdtTr9cBzScytuIDlbR_7gvsWpXTrOXTfz4swEf0Ww4iuaqWOB2UN53sZvvoAINMYcV9QHzWXVTO_bzelihnmYyVqMB0T_UBecren9lzrZcLr2mQONdVmQT8pl2HLMo0X2yuxGpggbYoI0d-hVgmIJpdp5AApx5N-ua6Pw5psPsuH4iWF-24TCXUtNdnCNx6TNqZ185nH9ZsGDZOAQ3G4ntYdkeh5VjZc0ojkhaAaPfiYqmV-ufMVa973S8eBToRUi67ddsxP9KctREVTGwLTxRQFsIvfg8KiTMzlxqho9JdEIU4PFXfxYo1kbCH7G86O_tT204guL43W5l6C3htKQ7X6Shjhj4Q_liywIa76FrRHpr_lqbHvtstEMm-yasgnv9Fk7g50EhNC4unjIDq1es&pop_winurl=&ip=91.90.42.154&testab=0&px_id=31490&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=lq-pop-ext&uniq=&exp=&resp_type=popunderAd&iabcat=IAB25-3&min_cpm=0.01267465292468129&placement_type_id=7&skin_test=0&verify_hash=1f438f43f0b9925c1f271dc0ad95b4e7&score=43.91204895856461&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D138611283%26spot_id%3D490%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fshemalez.tube%252F%26idzone%3D4438158%26sid%3D1886&ml=&tag_ab=b&original_bid=0.67261824&user_fp=0&v2=0&pop_type=1&space_id=1886&verify_hash=1f438f43f0b9925c1f271dc0ad95b4e7&real_bid=0.6634321312679423&skin_id=4&vertical_id=0&stratagem=&accel=&gyr=&iabcat=IAB25-3&ip_mismatch=false&ssp=&rc=&v2_track=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=jm11aIw6mpauaoAscZFiX5LrmVathQP2zavtOo7KZ-5hPiRUGk5XM3wmEuv1ieVqirLoaJy9em8_-tDFnwyMPoJ3lJp8-Ko7_o8e8XzvNl-rgrUi1pyO3CHMNbh7gyx0OVi5XtDoSvfUr-JtI__gAih7hZ9bfh3JWGseat9WhJshZwMBXA&pop_price=0.0006634321312679423&pop_real_bid=0.0006634321312679423&pop_ecpm=0.01654021748724047&auc_type=1&pr=&user_keywords=&device_theme=light&label_ids=4,0&conditions=dch_ip,tz_offset,all&need_redirect_show=0&mlf=1&cpa=083aa853-82df-461e-8e3f-cc035fb70e5a&mlc=1&format=social-scale-b_r-body
IP 168.119.25.22:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=1566672257775041328&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=138611283&sid=3266354044&cid=12108&price=0&is_cpm=1&cpm=0.7327503106559999&ecpm=0.6634321312679423&crid=&crtid=8fc5a3949d58ed66158a5da3a7b48b19&tcid=0&out_id=1&ver=8.23.0&ver_c=&refdom=shemalez.tube&hostname=auc-inpage-hz-3-b&site_id=31490&spot_id=490&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=2023-02-02&is_native=3&auction_queue=0&burl=UO77B8Orwic5p6qenRaKetwgU64j9k6Qe8WQ5VI-f_5VlZziwesZVh9iRq6oe4lvsLsUTAdLfZ4Izb25vAilsGJJlCEbQLohdZbX7UOGYzlwB7BIgN5FrP4EbskBmfyhz-8VwHxDHKBAxAYppHO4P_KL7svTTyhG-Gr0KyCcwglq3PGQPa2AkPJTX7LqBfqoSK50wZnBCXA2p1vHHLJS1ZEqYU6ymGMZc68PW6ytVmSBWOy7_l4PnKoWDGBVS0XsGjLldFvFar_THhgMYPmHzI1YVNWOOqtxuPHkaPKxKb3d9ypQ7TH12tzu7vUSKmJfSzlIvnFE2jltQY7uusexIiwD4raZJtuWO8ueX_EF0ZrFWyNF5xEVlSl2P9NqJbSLaptly9N0WFKI8UeE1o63lLGMBOtE7sbyqm_Y6tYH6pSMUrfnhs3RmAgfOQSMYeKA9-Vj9aYg_bZgGrcjc_8umztbmS4rP5VEh8GMR6hzAVFbGpE4RdtTr9cBzScytuIDlbR_7gvsWpXTrOXTfz4swEf0Ww4iuaqWOB2UN53sZvvoAINMYcV9QHzWXVTO_bzelihnmYyVqMB0T_UBecren9lzrZcLr2mQONdVmQT8pl2HLMo0X2yuxGpggbYoI0d-hVgmIJpdp5AApx5N-ua6Pw5psPsuH4iWF-24TCXUtNdnCNx6TNqZ185nH9ZsGDZOAQ3G4ntYdkeh5VjZc0ojkhaAaPfiYqmV-ufMVa973S8eBToRUi67ddsxP9KctREVTGwLTxRQFsIvfg8KiTMzlxqho9JdEIU4PFXfxYo1kbCH7G86O_tT204guL43W5l6C3htKQ7X6Shjhj4Q_liywIa76FrRHpr_lqbHvtstEMm-yasgnv9Fk7g50EhNC4unjIDq1es&pop_winurl=&ip=91.90.42.154&testab=0&px_id=31490&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=lq-pop-ext&uniq=&exp=&resp_type=popunderAd&iabcat=IAB25-3&min_cpm=0.01267465292468129&placement_type_id=7&skin_test=0&verify_hash=1f438f43f0b9925c1f271dc0ad95b4e7&score=43.91204895856461&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D138611283%26spot_id%3D490%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fshemalez.tube%252F%26idzone%3D4438158%26sid%3D1886&ml=&tag_ab=b&original_bid=0.67261824&user_fp=0&v2=0&pop_type=1&space_id=1886&verify_hash=1f438f43f0b9925c1f271dc0ad95b4e7&real_bid=0.6634321312679423&skin_id=4&vertical_id=0&stratagem=&accel=&gyr=&iabcat=IAB25-3&ip_mismatch=false&ssp=&rc=&v2_track=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=jm11aIw6mpauaoAscZFiX5LrmVathQP2zavtOo7KZ-5hPiRUGk5XM3wmEuv1ieVqirLoaJy9em8_-tDFnwyMPoJ3lJp8-Ko7_o8e8XzvNl-rgrUi1pyO3CHMNbh7gyx0OVi5XtDoSvfUr-JtI__gAih7hZ9bfh3JWGseat9WhJshZwMBXA&pop_price=0.0006634321312679423&pop_real_bid=0.0006634321312679423&pop_ecpm=0.01654021748724047&auc_type=1&pr=&user_keywords=&device_theme=light&label_ids=4,0&conditions=dch_ip,tz_offset,all&need_redirect_show=0&mlf=1&cpa=083aa853-82df-461e-8e3f-cc035fb70e5a&mlc=1&format=social-scale-b_r-body HTTP/1.1
Host: bc63f84631.5e9d31c60e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 02 Feb 2023 06:28:48 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
bc63f84631.5e9d31c60e.com/in/show/?mid=1566672257775041328&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=138611283&sid=3266354044&cid=12694&price=0&is_cpm=1&cpm=0.036&ecpm=0.036&crid=2240&crtid=f70aa6a0d437f901eea3e30be1aacaa8&tcid=0&out_id=0&ver=8.23.0&ver_c=&refdom=shemalez.tube&hostname=auc-inpage-hz-3-b&site_id=31490&spot_id=490&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1675492127&created_at=2023-02-02&is_native=1&auction_queue=0&burl=1dJNLUEumBcuE8sEZpu2RinNN2wpy6nMgn-G-d7o9v0y0sXSVTlAsw&pop_winurl=&ip=91.90.42.154&testab=0&px_id=73490&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.0029199427602824165&placement_type_id=&skin_test=0&verify_hash=936c233ca0d7e80de511f3b9057435d2&score=43.91204895856461&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D138611283%26spot_id%3D490%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fshemalez.tube%252F%26idzone%3D4438158%26sid%3D1886&ml=&tag_ab=b&original_bid=0.036&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=jFnEn1SreIGHV7cp4gTl7ENH54DOQcUFLh2aCyqExLEPwlHMtJLJvzpkUnSgl2UiwXAFkE5TcaZYRueShuimwTm9bUJKxVNF4HvxMqTliNy9DEL80rtJAn0mC83CCy2q3tOVgCKu98vCIp0-NwIeF3LO_b3cEk6v7Nks7C91XlUFTTUubv9vsWgd3WfmV5h-3ZdxH1SBdLtugKpnHMLQ1apsT-529xJqUXjakOszO2CUb5m7NdEQre56I0gZTjZ1q5uurZ6anfqIwJiuYX6DR2yerPHtJSwLSJnDoYgqEIWauD0-4MGAHOsCa91rB_rd3bse7YZJ8YncBgOHuxGjoMk2VI-wSNyIIDvWOLun97zoqkNCcYJzbJveUixQxTBgYe8A7ftpdvVsfGjv5gcqnYJHgrSnBVEeNo7rpJz8t3lLfGw5NPeAjgE6ScGBKqMGSWvGOYsxHeG_DLj-ELaAO4dXGy1kSOZff00OQjkwTseUuo7mWGglj8ERT5_0KDw03yf5LBX8xnP6Cm3RfEuyp-oBSw0S8rdraKnv7Ac6gyhhKx9E298fbEolVYgKI0-spQeMPDHcuqLyZmRazvkYb9IEeBjACGKbY4x5mkQvRA_EA_TZXEQYuz7xfWjC18iUdsXM4sIlymXL9K9Bsd7XtIIfYKIkXoDBTuZ5X5b2fn7tLLJZiA8GbhMzgH_gHzYxrrwgR6snbeHHPTIz80La3UmVvhD0TErjJTFTqq4cqt55-PtPHctJfnqzGKbQuMDQy9Hcgw6TjmvbFhOrI77f7hZfIhOYTtJgCAfVJHfzqVUbV5xYl8i7dNtHVP95umhI1w3lfobYTE0DH-jtq_b8fwief49T6PHulO_XTA5AA-R3jjP-t31VFKlQlnlNz_d9Ir3WeEUzuTD4Ws4a6BQxlDIffcnqwvRezRPbDkFDehTKNfc4p8eqX5lSSTGyHKKDPUXnUFlliL8X9ytHGVJMOXnLDD1BbNt-T0u_LpkeXzUQ8e5XHb2SYXwE_15c6fbNowAD-Ne4thR0Xs7OQzFeuUCmpYUwoXdL8CyhK0IPhYVV0H5J50-kBr3Be1SVpYMjpWPxBqqhLCnjO33y2wG2M9QhO60Y5v8_zSaYezOUxWdkBnbIjMjo5gQtX2HGlMYN1FVPTwmpZmxHUaaZsYjN0KiPULc_JhSVveY6XRClAXWQtjy5IiRUMdBMX-HKZ5ISyajUW5BVjejz2hwYlM4Ejzv3lYV-CJwmTXjVqWp-5Q&image_url=https%3A%2F%2F12112336.pix-cdn.org%2Fm%2Fp%2F0%2F374%2F374539%2Fconversions%2FuaDvnmZE-minify.jpg&skin_id=4&vertical_id=0&real_bid=0.036&pr=&user_keywords=&auc_type=1&aid=127&ext_cid=100266&device_theme=light&keywords=Adult,Shemale&label_ids=5,0,4,90&conditions=dch_ip,tz_offset,all&need_redirect_show=0&cpa=988ab8ce-e344-48e7-8b11-d8422ae749d0&format=social-scale-b_r-body
168.119.25.22200 OK 0 B URL HTTP/2 bc63f84631.5e9d31c60e.com/in/show/?mid=1566672257775041328&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=138611283&sid=3266354044&cid=12694&price=0&is_cpm=1&cpm=0.036&ecpm=0.036&crid=2240&crtid=f70aa6a0d437f901eea3e30be1aacaa8&tcid=0&out_id=0&ver=8.23.0&ver_c=&refdom=shemalez.tube&hostname=auc-inpage-hz-3-b&site_id=31490&spot_id=490&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1675492127&created_at=2023-02-02&is_native=1&auction_queue=0&burl=1dJNLUEumBcuE8sEZpu2RinNN2wpy6nMgn-G-d7o9v0y0sXSVTlAsw&pop_winurl=&ip=91.90.42.154&testab=0&px_id=73490&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.0029199427602824165&placement_type_id=&skin_test=0&verify_hash=936c233ca0d7e80de511f3b9057435d2&score=43.91204895856461&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D138611283%26spot_id%3D490%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fshemalez.tube%252F%26idzone%3D4438158%26sid%3D1886&ml=&tag_ab=b&original_bid=0.036&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=jFnEn1SreIGHV7cp4gTl7ENH54DOQcUFLh2aCyqExLEPwlHMtJLJvzpkUnSgl2UiwXAFkE5TcaZYRueShuimwTm9bUJKxVNF4HvxMqTliNy9DEL80rtJAn0mC83CCy2q3tOVgCKu98vCIp0-NwIeF3LO_b3cEk6v7Nks7C91XlUFTTUubv9vsWgd3WfmV5h-3ZdxH1SBdLtugKpnHMLQ1apsT-529xJqUXjakOszO2CUb5m7NdEQre56I0gZTjZ1q5uurZ6anfqIwJiuYX6DR2yerPHtJSwLSJnDoYgqEIWauD0-4MGAHOsCa91rB_rd3bse7YZJ8YncBgOHuxGjoMk2VI-wSNyIIDvWOLun97zoqkNCcYJzbJveUixQxTBgYe8A7ftpdvVsfGjv5gcqnYJHgrSnBVEeNo7rpJz8t3lLfGw5NPeAjgE6ScGBKqMGSWvGOYsxHeG_DLj-ELaAO4dXGy1kSOZff00OQjkwTseUuo7mWGglj8ERT5_0KDw03yf5LBX8xnP6Cm3RfEuyp-oBSw0S8rdraKnv7Ac6gyhhKx9E298fbEolVYgKI0-spQeMPDHcuqLyZmRazvkYb9IEeBjACGKbY4x5mkQvRA_EA_TZXEQYuz7xfWjC18iUdsXM4sIlymXL9K9Bsd7XtIIfYKIkXoDBTuZ5X5b2fn7tLLJZiA8GbhMzgH_gHzYxrrwgR6snbeHHPTIz80La3UmVvhD0TErjJTFTqq4cqt55-PtPHctJfnqzGKbQuMDQy9Hcgw6TjmvbFhOrI77f7hZfIhOYTtJgCAfVJHfzqVUbV5xYl8i7dNtHVP95umhI1w3lfobYTE0DH-jtq_b8fwief49T6PHulO_XTA5AA-R3jjP-t31VFKlQlnlNz_d9Ir3WeEUzuTD4Ws4a6BQxlDIffcnqwvRezRPbDkFDehTKNfc4p8eqX5lSSTGyHKKDPUXnUFlliL8X9ytHGVJMOXnLDD1BbNt-T0u_LpkeXzUQ8e5XHb2SYXwE_15c6fbNowAD-Ne4thR0Xs7OQzFeuUCmpYUwoXdL8CyhK0IPhYVV0H5J50-kBr3Be1SVpYMjpWPxBqqhLCnjO33y2wG2M9QhO60Y5v8_zSaYezOUxWdkBnbIjMjo5gQtX2HGlMYN1FVPTwmpZmxHUaaZsYjN0KiPULc_JhSVveY6XRClAXWQtjy5IiRUMdBMX-HKZ5ISyajUW5BVjejz2hwYlM4Ejzv3lYV-CJwmTXjVqWp-5Q&image_url=https%3A%2F%2F12112336.pix-cdn.org%2Fm%2Fp%2F0%2F374%2F374539%2Fconversions%2FuaDvnmZE-minify.jpg&skin_id=4&vertical_id=0&real_bid=0.036&pr=&user_keywords=&auc_type=1&aid=127&ext_cid=100266&device_theme=light&keywords=Adult,Shemale&label_ids=5,0,4,90&conditions=dch_ip,tz_offset,all&need_redirect_show=0&cpa=988ab8ce-e344-48e7-8b11-d8422ae749d0&format=social-scale-b_r-body
IP 168.119.25.22:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?mid=1566672257775041328&pid=0&site=native-push-adult&sc=NO&usage_type=DCH&subid=138611283&sid=3266354044&cid=12694&price=0&is_cpm=1&cpm=0.036&ecpm=0.036&crid=2240&crtid=f70aa6a0d437f901eea3e30be1aacaa8&tcid=0&out_id=0&ver=8.23.0&ver_c=&refdom=shemalez.tube&hostname=auc-inpage-hz-3-b&site_id=31490&spot_id=490&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1675492127&created_at=2023-02-02&is_native=1&auction_queue=0&burl=1dJNLUEumBcuE8sEZpu2RinNN2wpy6nMgn-G-d7o9v0y0sXSVTlAsw&pop_winurl=&ip=91.90.42.154&testab=0&px_id=73490&adblock=0&auction_host=apply&mm=0&yc=0&render_type=hq&campaign_type=hq&uniq=&exp=&resp_type=&iabcat=IAB25-3&min_cpm=0.0029199427602824165&placement_type_id=&skin_test=0&verify_hash=936c233ca0d7e80de511f3b9057435d2&score=43.91204895856461&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D138611283%26spot_id%3D490%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fshemalez.tube%252F%26idzone%3D4438158%26sid%3D1886&ml=&tag_ab=b&original_bid=0.036&user_fp=0&v2=0&v2_track=0&is_pop_cpc=0&applied_features=main-skins-settings&url=jFnEn1SreIGHV7cp4gTl7ENH54DOQcUFLh2aCyqExLEPwlHMtJLJvzpkUnSgl2UiwXAFkE5TcaZYRueShuimwTm9bUJKxVNF4HvxMqTliNy9DEL80rtJAn0mC83CCy2q3tOVgCKu98vCIp0-NwIeF3LO_b3cEk6v7Nks7C91XlUFTTUubv9vsWgd3WfmV5h-3ZdxH1SBdLtugKpnHMLQ1apsT-529xJqUXjakOszO2CUb5m7NdEQre56I0gZTjZ1q5uurZ6anfqIwJiuYX6DR2yerPHtJSwLSJnDoYgqEIWauD0-4MGAHOsCa91rB_rd3bse7YZJ8YncBgOHuxGjoMk2VI-wSNyIIDvWOLun97zoqkNCcYJzbJveUixQxTBgYe8A7ftpdvVsfGjv5gcqnYJHgrSnBVEeNo7rpJz8t3lLfGw5NPeAjgE6ScGBKqMGSWvGOYsxHeG_DLj-ELaAO4dXGy1kSOZff00OQjkwTseUuo7mWGglj8ERT5_0KDw03yf5LBX8xnP6Cm3RfEuyp-oBSw0S8rdraKnv7Ac6gyhhKx9E298fbEolVYgKI0-spQeMPDHcuqLyZmRazvkYb9IEeBjACGKbY4x5mkQvRA_EA_TZXEQYuz7xfWjC18iUdsXM4sIlymXL9K9Bsd7XtIIfYKIkXoDBTuZ5X5b2fn7tLLJZiA8GbhMzgH_gHzYxrrwgR6snbeHHPTIz80La3UmVvhD0TErjJTFTqq4cqt55-PtPHctJfnqzGKbQuMDQy9Hcgw6TjmvbFhOrI77f7hZfIhOYTtJgCAfVJHfzqVUbV5xYl8i7dNtHVP95umhI1w3lfobYTE0DH-jtq_b8fwief49T6PHulO_XTA5AA-R3jjP-t31VFKlQlnlNz_d9Ir3WeEUzuTD4Ws4a6BQxlDIffcnqwvRezRPbDkFDehTKNfc4p8eqX5lSSTGyHKKDPUXnUFlliL8X9ytHGVJMOXnLDD1BbNt-T0u_LpkeXzUQ8e5XHb2SYXwE_15c6fbNowAD-Ne4thR0Xs7OQzFeuUCmpYUwoXdL8CyhK0IPhYVV0H5J50-kBr3Be1SVpYMjpWPxBqqhLCnjO33y2wG2M9QhO60Y5v8_zSaYezOUxWdkBnbIjMjo5gQtX2HGlMYN1FVPTwmpZmxHUaaZsYjN0KiPULc_JhSVveY6XRClAXWQtjy5IiRUMdBMX-HKZ5ISyajUW5BVjejz2hwYlM4Ejzv3lYV-CJwmTXjVqWp-5Q&image_url=https%3A%2F%2F12112336.pix-cdn.org%2Fm%2Fp%2F0%2F374%2F374539%2Fconversions%2FuaDvnmZE-minify.jpg&skin_id=4&vertical_id=0&real_bid=0.036&pr=&user_keywords=&auc_type=1&aid=127&ext_cid=100266&device_theme=light&keywords=Adult,Shemale&label_ids=5,0,4,90&conditions=dch_ip,tz_offset,all&need_redirect_show=0&cpa=988ab8ce-e344-48e7-8b11-d8422ae749d0&format=social-scale-b_r-body HTTP/1.1
Host: bc63f84631.5e9d31c60e.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 02 Feb 2023 06:28:48 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash bf4085d706f8447fae3b237a0830f710
ba14cb047298a4b93c14048851404ef8c3e17e9d
56ddfd12c1b05702d96158ccd5a11998d04fd57aa4d709086fbb886eced1e5ee
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5431
Cache-Control: max-age=99169
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 06:28:48 GMT
Etag: "63da234a-117"
Expires: Fri, 03 Feb 2023 10:01:37 GMT
Last-Modified: Wed, 01 Feb 2023 08:31:06 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279
12112336.pix-cdn.org/m/p/0/374/374539/conversions/uaDvnmZE-minify.jpg
45.133.44.24200 OK 9.0 kB URL HTTP/2 12112336.pix-cdn.org/m/p/0/374/374539/conversions/uaDvnmZE-minify.jpg
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70", baseline, precision 8, 300x200, components 3\012- data
Hash ac4fce2099a6cbd7264384fba760fc66
d95ed9daf1b4e01d98b089f6688319cc5e377aad
0e5e7942344997c25d52522d74def5e71eb22337f2fecf13ac63fe940bcdb176
GET /m/p/0/374/374539/conversions/uaDvnmZE-minify.jpg HTTP/1.1
Host: 12112336.pix-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:48 GMT
content-type: image/jpeg
content-length: 9014
server: nginx/1.12.2
last-modified: Sat, 30 Jul 2022 08:18:07 GMT
etag: "62e4e93f-2336"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
pn.bquildna43.site/in/tip_shows/?katds_ep=poK0l6KEqb-HXI9eCfFPYXafmg3hZd8kKP9zr4D82kGA725zJDRvlaSCIO2G6PKixHGVYHqZ7cpzBAc6CHDkcPlB_9MvPdRi1XIHsy_vw11XhJLRS81dzHfMgLM1Tuy8I6BV3SohhlrxJ3S9sSnyWN-lhnc3RyKFzSm58815n_oIX1ptDkKtuwvPijxD69rXLh249vh8oSYHKKv5kP0Vl4JbMRzC7LAME2-lhk8yMjLMT0tv7B9YOUfMMDOzlFsbYTB4f3hzhkw-69NuUmVeP3E76JHK1jEqX7mIbRdQeFgmePOu8hoWkcf-3pBc7A7-ueoYNHcYGJRPx_KDvW2Ad-5r_Vi7x-l6RCfZuF7JgUYuhjuRIXDVBy4639r799vNmZX6PP8SSiOnXGWMXyqFEQlufv50_-1VzYkCVD0ZKr5heNXEi8gBhzafHnIx4g1ncU4uWTvMVdG5PrTuYkQWDjetmqpWT_IKnb5zn7ZRtx5iQZmMPIHHXgcwM_YQgXoLirxHf-sf18UpChwZi02zOfi_ftYEZRBf7-RvB3_yh_K_WvYs_BZmklVFyONtR1hZ74hc_PA0_oxGWeg2C5508pi7m156TACUiJOXU8A6gR1l5iXPWkW9dOfK9yrr8JOuo-Aii-kDVsiR4lH7BQfuKCT91O5-QQARMlv2BilobT0TU2ADJ5pY1E3zsfZXQH0G3AYTsIrrduOZnOTilnO1YrARTybBlj8_tp31wrkEYeVPPasfo_Lt06rf6_DXeTNEhYn4mM5d6gkZbrVaVN0SIUzky8vFUtLV3emSL3MLhCMdPfI1beVfkIJqqVRVw4U&sp=0.0244022079001874&cpa=37bac0b0-c2d1-4a52-8454-7b7993c19387&format=social-scale-b_r-body
104.21.84.94302 Found 0 B URL HTTP/2 pn.bquildna43.site/in/tip_shows/?katds_ep=poK0l6KEqb-HXI9eCfFPYXafmg3hZd8kKP9zr4D82kGA725zJDRvlaSCIO2G6PKixHGVYHqZ7cpzBAc6CHDkcPlB_9MvPdRi1XIHsy_vw11XhJLRS81dzHfMgLM1Tuy8I6BV3SohhlrxJ3S9sSnyWN-lhnc3RyKFzSm58815n_oIX1ptDkKtuwvPijxD69rXLh249vh8oSYHKKv5kP0Vl4JbMRzC7LAME2-lhk8yMjLMT0tv7B9YOUfMMDOzlFsbYTB4f3hzhkw-69NuUmVeP3E76JHK1jEqX7mIbRdQeFgmePOu8hoWkcf-3pBc7A7-ueoYNHcYGJRPx_KDvW2Ad-5r_Vi7x-l6RCfZuF7JgUYuhjuRIXDVBy4639r799vNmZX6PP8SSiOnXGWMXyqFEQlufv50_-1VzYkCVD0ZKr5heNXEi8gBhzafHnIx4g1ncU4uWTvMVdG5PrTuYkQWDjetmqpWT_IKnb5zn7ZRtx5iQZmMPIHHXgcwM_YQgXoLirxHf-sf18UpChwZi02zOfi_ftYEZRBf7-RvB3_yh_K_WvYs_BZmklVFyONtR1hZ74hc_PA0_oxGWeg2C5508pi7m156TACUiJOXU8A6gR1l5iXPWkW9dOfK9yrr8JOuo-Aii-kDVsiR4lH7BQfuKCT91O5-QQARMlv2BilobT0TU2ADJ5pY1E3zsfZXQH0G3AYTsIrrduOZnOTilnO1YrARTybBlj8_tp31wrkEYeVPPasfo_Lt06rf6_DXeTNEhYn4mM5d6gkZbrVaVN0SIUzky8vFUtLV3emSL3MLhCMdPfI1beVfkIJqqVRVw4U&sp=0.0244022079001874&cpa=37bac0b0-c2d1-4a52-8454-7b7993c19387&format=social-scale-b_r-body
IP 104.21.84.94:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/tip_shows/?katds_ep=poK0l6KEqb-HXI9eCfFPYXafmg3hZd8kKP9zr4D82kGA725zJDRvlaSCIO2G6PKixHGVYHqZ7cpzBAc6CHDkcPlB_9MvPdRi1XIHsy_vw11XhJLRS81dzHfMgLM1Tuy8I6BV3SohhlrxJ3S9sSnyWN-lhnc3RyKFzSm58815n_oIX1ptDkKtuwvPijxD69rXLh249vh8oSYHKKv5kP0Vl4JbMRzC7LAME2-lhk8yMjLMT0tv7B9YOUfMMDOzlFsbYTB4f3hzhkw-69NuUmVeP3E76JHK1jEqX7mIbRdQeFgmePOu8hoWkcf-3pBc7A7-ueoYNHcYGJRPx_KDvW2Ad-5r_Vi7x-l6RCfZuF7JgUYuhjuRIXDVBy4639r799vNmZX6PP8SSiOnXGWMXyqFEQlufv50_-1VzYkCVD0ZKr5heNXEi8gBhzafHnIx4g1ncU4uWTvMVdG5PrTuYkQWDjetmqpWT_IKnb5zn7ZRtx5iQZmMPIHHXgcwM_YQgXoLirxHf-sf18UpChwZi02zOfi_ftYEZRBf7-RvB3_yh_K_WvYs_BZmklVFyONtR1hZ74hc_PA0_oxGWeg2C5508pi7m156TACUiJOXU8A6gR1l5iXPWkW9dOfK9yrr8JOuo-Aii-kDVsiR4lH7BQfuKCT91O5-QQARMlv2BilobT0TU2ADJ5pY1E3zsfZXQH0G3AYTsIrrduOZnOTilnO1YrARTybBlj8_tp31wrkEYeVPPasfo_Lt06rf6_DXeTNEhYn4mM5d6gkZbrVaVN0SIUzky8vFUtLV3emSL3MLhCMdPfI1beVfkIJqqVRVw4U&sp=0.0244022079001874&cpa=37bac0b0-c2d1-4a52-8454-7b7993c19387&format=social-scale-b_r-body HTTP/1.1
Host: pn.bquildna43.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 02 Feb 2023 06:28:48 GMT
content-type: application/json
content-length: 0
location: https://12112336.pix-cdn.org/m/p/0/374/374538/conversions/6OTjphwd-minify.jpg
access-control-allow-origin: *
access-control-allow-credentials: true
set-cookie: 2357.0=1; expires=Fri, 03 Feb 2023 06:28:48 GMT; path=/; secure; SameSite=None
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IPsMKnvj6Ay8dldewrtE3GZ7yM%2BzTQGg1KMm4o3pWTEgolw3ZM3rWbNBe64nO2u9jhXcQVr%2BFLdv2SHY0imrLy4ufWStDT8ap1yWoVUG98CltLJwqx3Zk5BU0CzxcrJOFkjqs0g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7930de6a3a4db4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash bf4085d706f8447fae3b237a0830f710
ba14cb047298a4b93c14048851404ef8c3e17e9d
56ddfd12c1b05702d96158ccd5a11998d04fd57aa4d709086fbb886eced1e5ee
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5431
Cache-Control: max-age=99169
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 06:28:48 GMT
Etag: "63da234a-117"
Expires: Fri, 03 Feb 2023 10:01:37 GMT
Last-Modified: Wed, 01 Feb 2023 08:31:06 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XYkAFDhpgZY2a0CGMmx5gWNMaYgTHSBgyWM2LcKAMDBw4xG8vQEPFwjpg0ZBTq2CIiho0bN2rcqJljZ5eHYeqMyZhyDA4YJMu0qDEDK0oZZMi0wFGGa4sYYZCGqRnDjAwaYXhCJGOHog0aHB_CqSOGoowcN6DCgUMxRo4cM3rCmagDbwwZN2jAeDimDWEdNWLQ2Jx4rhmKD8W4cbNwxlsbMTQ_bOMGo46uOXDY0MvatebUOB7WkcOmdA0YNGLMmC2ijoyMaOjQgTNHx4sXcuCQESNnDR4XY960eVGlTZk3UNwkeXPEiowwd9o4qaKHSRMoRrDgoWGmCA45VPAsGUODiIwkZ8RhRxFpxBEHHDHQcUcPL6ThxkF4xOACHGjA8YMbZeDRQwxc1PGSDDbUQUcbX3hHRhp1tNFDZpvRMIMLptGAmmYdfmgDHXKQZEYaY3wxxxu7jVFGD3KQgeMaNXYU4ohf0FHGHHQAteFdOCyVJIgikmgQdW-sgVAPVORoxo5jTEFHGAl9IcOVS2pJhhlvyNFGGHT00BUMeMjwG5tZ-gikHEJuaBhibOrxBoY9OAaZZGyOwQaPa0g5hBA40HEEFk8A5wQTV4yhhhRK0BCHGDS8wQYRaNRxRAtRNHGGFm-c8UUNWggxxRhGEHFHDnfcQcQaZ6DRkFZL7EYHEVJ8QYUbM9hxURFl5eAGElRIYZMWX1ihRht5PFGEG1ewkccUbJARgxxTKHFDFWTkMEceeRxxhxRIMBEEDlesQcYXZ1SRBLJVpCEXGdplNAdBc7JRhh4u0MFXGXKNQedCW8T0lAhwALpQDVrBQJwYn-kAgwsvOSTCGHCQmPFUIpMMHAwmy2HHZYY9VAbKbSw0csm61SGwDiLgUINkY8hEQwsyQCYGSkLLMNYMNeBwVg5hnFfDSmaUYYMNcqVxmQg5SJjDyHi50NBOD8nxhdcZhe3C2C6UfbZcdcQFdBNv6JEGG2yE8UINJIOAwhUOEnzHHCA4QQUIMey8AwiEu3HX43hMDoLMDMFMcgogHHHzGm-8wFHjMDQeAwhGpCFHGXDi8ULjgMMQMcsiOPGEXHF-MQbttsvFBu1FODFwGXZ8sXpvDCl1Aw7DXTWZCHKcQZoOelb50EHFU7eQTdcTX-IbZCwkg2wViUCGHG-U9tAbQtGgF_p45LGQ-9CzjpxyzDn3wsFlJLxwww97gVzmILOMoO9MdIhTC-rghjTQ4Sw3cAEZinac69HuIF-Y4GPkMiK7JCUmiIGMRdpwHIYchSuGMc0NjtIZgxjvSXD4wsRM-MEUihAiYmCM-VgXFTZMRC-_0xllXAODPiggIA%3D%3D&s=4175e3019cd49b2af3f7a6067d5a2d9bbdcf161598e9740c56f475bf860a201e1675319327&w=t&r=1&d=10&priv=false
46.4.114.55200 OK 24 B URL HTTP/2 pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XYkAFDhpgZY2a0CGMmx5gWNMaYgTHSBgyWM2LcKAMDBw4xG8vQEPFwjpg0ZBTq2CIiho0bN2rcqJljZ5eHYeqMyZhyDA4YJMu0qDEDK0oZZMi0wFGGa4sYYZCGqRnDjAwaYXhCJGOHog0aHB_CqSOGoowcN6DCgUMxRo4cM3rCmagDbwwZN2jAeDimDWEdNWLQ2Jx4rhmKD8W4cbNwxlsbMTQ_bOMGo46uOXDY0MvatebUOB7WkcOmdA0YNGLMmC2ijoyMaOjQgTNHx4sXcuCQESNnDR4XY960eVGlTZk3UNwkeXPEiowwd9o4qaKHSRMoRrDgoWGmCA45VPAsGUODiIwkZ8RhRxFpxBEHHDHQcUcPL6ThxkF4xOACHGjA8YMbZeDRQwxc1PGSDDbUQUcbX3hHRhp1tNFDZpvRMIMLptGAmmYdfmgDHXKQZEYaY3wxxxu7jVFGD3KQgeMaNXYU4ohf0FHGHHQAteFdOCyVJIgikmgQdW-sgVAPVORoxo5jTEFHGAl9IcOVS2pJhhlvyNFGGHT00BUMeMjwG5tZ-gikHEJuaBhibOrxBoY9OAaZZGyOwQaPa0g5hBA40HEEFk8A5wQTV4yhhhRK0BCHGDS8wQYRaNRxRAtRNHGGFm-c8UUNWggxxRhGEHFHDnfcQcQaZ6DRkFZL7EYHEVJ8QYUbM9hxURFl5eAGElRIYZMWX1ihRht5PFGEG1ewkccUbJARgxxTKHFDFWTkMEceeRxxhxRIMBEEDlesQcYXZ1SRBLJVpCEXGdplNAdBc7JRhh4u0MFXGXKNQedCW8T0lAhwALpQDVrBQJwYn-kAgwsvOSTCGHCQmPFUIpMMHAwmy2HHZYY9VAbKbSw0csm61SGwDiLgUINkY8hEQwsyQCYGSkLLMNYMNeBwVg5hnFfDSmaUYYMNcqVxmQg5SJjDyHi50NBOD8nxhdcZhe3C2C6UfbZcdcQFdBNv6JEGG2yE8UINJIOAwhUOEnzHHCA4QQUIMey8AwiEu3HX43hMDoLMDMFMcgogHHHzGm-8wFHjMDQeAwhGpCFHGXDi8ULjgMMQMcsiOPGEXHF-MQbttsvFBu1FODFwGXZ8sXpvDCl1Aw7DXTWZCHKcQZoOelb50EHFU7eQTdcTX-IbZCwkg2wViUCGHG-U9tAbQtGgF_p45LGQ-9CzjpxyzDn3wsFlJLxwww97gVzmILOMoO9MdIhTC-rghjTQ4Sw3cAEZinac69HuIF-Y4GPkMiK7JCUmiIGMRdpwHIYchSuGMc0NjtIZgxjvSXD4wsRM-MEUihAiYmCM-VgXFTZMRC-_0xllXAODPiggIA%3D%3D&s=4175e3019cd49b2af3f7a6067d5a2d9bbdcf161598e9740c56f475bf860a201e1675319327&w=t&r=1&d=10&priv=false
IP 46.4.114.55:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XYkAFDhpgZY2a0CGMmx5gWNMaYgTHSBgyWM2LcKAMDBw4xG8vQEPFwjpg0ZBTq2CIiho0bN2rcqJljZ5eHYeqMyZhyDA4YJMu0qDEDK0oZZMi0wFGGa4sYYZCGqRnDjAwaYXhCJGOHog0aHB_CqSOGoowcN6DCgUMxRo4cM3rCmagDbwwZN2jAeDimDWEdNWLQ2Jx4rhmKD8W4cbNwxlsbMTQ_bOMGo46uOXDY0MvatebUOB7WkcOmdA0YNGLMmC2ijoyMaOjQgTNHx4sXcuCQESNnDR4XY960eVGlTZk3UNwkeXPEiowwd9o4qaKHSRMoRrDgoWGmCA45VPAsGUODiIwkZ8RhRxFpxBEHHDHQcUcPL6ThxkF4xOACHGjA8YMbZeDRQwxc1PGSDDbUQUcbX3hHRhp1tNFDZpvRMIMLptGAmmYdfmgDHXKQZEYaY3wxxxu7jVFGD3KQgeMaNXYU4ohf0FHGHHQAteFdOCyVJIgikmgQdW-sgVAPVORoxo5jTEFHGAl9IcOVS2pJhhlvyNFGGHT00BUMeMjwG5tZ-gikHEJuaBhibOrxBoY9OAaZZGyOwQaPa0g5hBA40HEEFk8A5wQTV4yhhhRK0BCHGDS8wQYRaNRxRAtRNHGGFm-c8UUNWggxxRhGEHFHDnfcQcQaZ6DRkFZL7EYHEVJ8QYUbM9hxURFl5eAGElRIYZMWX1ihRht5PFGEG1ewkccUbJARgxxTKHFDFWTkMEceeRxxhxRIMBEEDlesQcYXZ1SRBLJVpCEXGdplNAdBc7JRhh4u0MFXGXKNQedCW8T0lAhwALpQDVrBQJwYn-kAgwsvOSTCGHCQmPFUIpMMHAwmy2HHZYY9VAbKbSw0csm61SGwDiLgUINkY8hEQwsyQCYGSkLLMNYMNeBwVg5hnFfDSmaUYYMNcqVxmQg5SJjDyHi50NBOD8nxhdcZhe3C2C6UfbZcdcQFdBNv6JEGG2yE8UINJIOAwhUOEnzHHCA4QQUIMey8AwiEu3HX43hMDoLMDMFMcgogHHHzGm-8wFHjMDQeAwhGpCFHGXDi8ULjgMMQMcsiOPGEXHF-MQbttsvFBu1FODFwGXZ8sXpvDCl1Aw7DXTWZCHKcQZoOelb50EHFU7eQTdcTX-IbZCwkg2wViUCGHG-U9tAbQtGgF_p45LGQ-9CzjpxyzDn3wsFlJLxwww97gVzmILOMoO9MdIhTC-rghjTQ4Sw3cAEZinac69HuIF-Y4GPkMiK7JCUmiIGMRdpwHIYchSuGMc0NjtIZgxjvSXD4wsRM-MEUihAiYmCM-VgXFTZMRC-_0xllXAODPiggIA%3D%3D&s=4175e3019cd49b2af3f7a6067d5a2d9bbdcf161598e9740c56f475bf860a201e1675319327&w=t&r=1&d=10&priv=false HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=52bc085d-be85-474c-ae57-e166c89b2330; bfq=APeIECNCx5YZMmjYiBGjRhcWIsYU3BLjoYgyE2PYuFGDBowaN2Tc6NJH
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 06:28:48 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8fecb61d3534b169a5a9f1aa8562c42a
8e5c3ef4aa52fcc78c73d7987a791832a2bddace
6f9d98a79209878dc5f48aca2dfaa5c7b944229d24d9fef4d714f9644fac9ed1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6F9D98A79209878DC5F48ACA2DFAA5C7B944229D24D9FEF4D714F9644FAC9ED1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9302
Expires: Thu, 02 Feb 2023 09:03:50 GMT
Date: Thu, 02 Feb 2023 06:28:48 GMT
Connection: keep-alive
static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?mlf=1&cpa=a7bb5803-f40a-4161-a2a4-1682e8488797&mlc=1&format=social-scale-b_r-body
116.202.204.12200 OK 590 B URL HTTP/2 static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?mlf=1&cpa=a7bb5803-f40a-4161-a2a4-1682e8488797&mlc=1&format=social-scale-b_r-body
IP 116.202.204.12:0
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash debce753f1ce6652c1637491fd72b1b1
fd102eb3f058f7a43b0f9ec03541681699f5895e
c2443b0a74b25158756abb7aa12832e5442adab247aab6e24514f54396c72579
GET /creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp?mlf=1&cpa=a7bb5803-f40a-4161-a2a4-1682e8488797&mlc=1&format=social-scale-b_r-body HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 02 Feb 2023 06:28:48 GMT
content-type: image/webp
content-length: 590
last-modified: Tue, 24 Nov 2020 14:24:12 GMT
etag: "5fbd178c-24e"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WIgbExzA0YM1qEKYMjRgsaOHKUaZHDhpmVKHOEsZEjRpkbZczUEPFwjpg0ZBTq2CIiho0bN2p8TElDRJeHYeqMyWgDBpkbYSKuzCFjBo2TZMiMaYFjxtUWNmzEWFsDhpkwNXI0hUrGDkUbNGTAeAinjhiKMnLcgAoHDsUYOXLM6Alnoo68MWTcoLFXxJg2hnXUiEGj82KIZMxQfCjGjZuFM2TQUIv4YRs3GHXMgJEDhw2-r2NzXovjYR05bFC3pbHbt4yMaOjQgTNHx4sXcuCQESNnDR4XY960eVGlTZk3UNwkeXPEiowwd9o4qaKHSRMoRrDgoWGmCA45VPAsGUODiIwkZ8RhRxFpxBEHHDHQcUcPL6ThxkF4xOACHGjA8YMbZeDRQwxc1AEDDDLYUAcdbXzhHRlp1NFGD5t1RsMMLqS22lo5dPhhiHTIEYYZZqQxxhdzvPHbGGX0IAcZOa5hI4gikvgFHWXMQQdQG-KFw0dLhjhiiQZR98YaCPVAhY48-jgFHWEk9IUMWTbJZWhvyNFGGHT0MBsMeMjQVptbAimkHERuiJhiberxBoY9QCYZZW2OwYaPa1BZhRB35OHfEy0gIUMLMkBxxqNKVGGGDW2w4UYOSyxRExxW6IEFHGNAUUeK5qHhxh0x4GBFFHUoQQMZdwQhAxZFIIHGGHi8MQQSa9gwRhxFaGGFE2XEMYcScpiRAxlIqKWHFpM1MYYNZ0AxRwxzkDHDEWy0gMYQQ2gx5xFwvJFpHVV8cUYVSRAhRRVp8CQCGdplNAdBc7JRhh4u0OFXGQKPQedCW8wQw1MiwAHoQjWsBMNtGommAwwufOiQZXCUqPFUI5cMA2Uny2FHZq2JUMYYKS9Essm-zZrRDWuZ4ZYMJtU020keidFCRze0EEMYDZEhgxk2yXCVwGlkJkJNLuRAcl4uNDSXCHJ8kXVGXHvtAthiC1xHGBk18YYeabDBRhgv1FAyCChc4SDBd8wBghNUgBDDzjuA4LcbeCWOR-MgyMwQDHrDkAIIR9y8xhsv6HU4DIfHAIIRaciR0xt4vHB45RGzLIITTwgc5xdjuA67wGy4XoQTAh9kxxemB8eQUjeUZQMOHz4kxxmn6aDnlQ_5_gV1C-HQ28Bl_N7GG2QsJINtFQ0sxxuoPfSGUDTwNT4eeSyUPtk5Iaccc869cHAZCS_c8MMvCDyHzBkZH5roEKcW1MENaaDDSXLgArFEpneuO8gXHHgci7ThLkmxmGIkY8HjMOQoNdBgapCyGroAL0pw-MLEPphBxIwQKmJwDPbeUgc2TIQvudPZQ8YQGxj0QQEBAQ%3D%3D&s=b1700fd292851c7df7ad23527af04964c2897d72e92e031467f8e770fe05fc161675319327&w=t&r=1&d=30&priv=false
46.4.114.55200 OK 24 B URL HTTP/2 pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WIgbExzA0YM1qEKYMjRgsaOHKUaZHDhpmVKHOEsZEjRpkbZczUEPFwjpg0ZBTq2CIiho0bN2p8TElDRJeHYeqMyWgDBpkbYSKuzCFjBo2TZMiMaYFjxtUWNmzEWFsDhpkwNXI0hUrGDkUbNGTAeAinjhiKMnLcgAoHDsUYOXLM6Alnoo68MWTcoLFXxJg2hnXUiEGj82KIZMxQfCjGjZuFM2TQUIv4YRs3GHXMgJEDhw2-r2NzXovjYR05bFC3pbHbt4yMaOjQgTNHx4sXcuCQESNnDR4XY960eVGlTZk3UNwkeXPEiowwd9o4qaKHSRMoRrDgoWGmCA45VPAsGUODiIwkZ8RhRxFpxBEHHDHQcUcPL6ThxkF4xOACHGjA8YMbZeDRQwxc1AEDDDLYUAcdbXzhHRlp1NFGD5t1RsMMLqS22lo5dPhhiHTIEYYZZqQxxhdzvPHbGGX0IAcZOa5hI4gikvgFHWXMQQdQG-KFw0dLhjhiiQZR98YaCPVAhY48-jgFHWEk9IUMWTbJZWhvyNFGGHT0MBsMeMjQVptbAimkHERuiJhiberxBoY9QCYZZW2OwYaPa1BZhRB35OHfEy0gIUMLMkBxxqNKVGGGDW2w4UYOSyxRExxW6IEFHGNAUUeK5qHhxh0x4GBFFHUoQQMZdwQhAxZFIIHGGHi8MQQSa9gwRhxFaGGFE2XEMYcScpiRAxlIqKWHFpM1MYYNZ0AxRwxzkDHDEWy0gMYQQ2gx5xFwvJFpHVV8cUYVSRAhRRVp8CQCGdplNAdBc7JRhh4u0OFXGQKPQedCW8wQw1MiwAHoQjWsBMNtGommAwwufOiQZXCUqPFUI5cMA2Uny2FHZq2JUMYYKS9Essm-zZrRDWuZ4ZYMJtU020keidFCRze0EEMYDZEhgxk2yXCVwGlkJkJNLuRAcl4uNDSXCHJ8kXVGXHvtAthiC1xHGBk18YYeabDBRhgv1FAyCChc4SDBd8wBghNUgBDDzjuA4LcbeCWOR-MgyMwQDHrDkAIIR9y8xhsv6HU4DIfHAIIRaciR0xt4vHB45RGzLIITTwgc5xdjuA67wGy4XoQTAh9kxxemB8eQUjeUZQMOHz4kxxmn6aDnlQ_5_gV1C-HQ28Bl_N7GG2QsJINtFQ0sxxuoPfSGUDTwNT4eeSyUPtk5Iaccc869cHAZCS_c8MMvCDyHzBkZH5roEKcW1MENaaDDSXLgArFEpneuO8gXHHgci7ThLkmxmGIkY8HjMOQoNdBgapCyGroAL0pw-MLEPphBxIwQKmJwDPbeUgc2TIQvudPZQ8YQGxj0QQEBAQ%3D%3D&s=b1700fd292851c7df7ad23527af04964c2897d72e92e031467f8e770fe05fc161675319327&w=t&r=1&d=30&priv=false
IP 46.4.114.55:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WIgbExzA0YM1qEKYMjRgsaOHKUaZHDhpmVKHOEsZEjRpkbZczUEPFwjpg0ZBTq2CIiho0bN2p8TElDRJeHYeqMyWgDBpkbYSKuzCFjBo2TZMiMaYFjxtUWNmzEWFsDhpkwNXI0hUrGDkUbNGTAeAinjhiKMnLcgAoHDsUYOXLM6Alnoo68MWTcoLFXxJg2hnXUiEGj82KIZMxQfCjGjZuFM2TQUIv4YRs3GHXMgJEDhw2-r2NzXovjYR05bFC3pbHbt4yMaOjQgTNHx4sXcuCQESNnDR4XY960eVGlTZk3UNwkeXPEiowwd9o4qaKHSRMoRrDgoWGmCA45VPAsGUODiIwkZ8RhRxFpxBEHHDHQcUcPL6ThxkF4xOACHGjA8YMbZeDRQwxc1AEDDDLYUAcdbXzhHRlp1NFGD5t1RsMMLqS22lo5dPhhiHTIEYYZZqQxxhdzvPHbGGX0IAcZOa5hI4gikvgFHWXMQQdQG-KFw0dLhjhiiQZR98YaCPVAhY48-jgFHWEk9IUMWTbJZWhvyNFGGHT0MBsMeMjQVptbAimkHERuiJhiberxBoY9QCYZZW2OwYaPa1BZhRB35OHfEy0gIUMLMkBxxqNKVGGGDW2w4UYOSyxRExxW6IEFHGNAUUeK5qHhxh0x4GBFFHUoQQMZdwQhAxZFIIHGGHi8MQQSa9gwRhxFaGGFE2XEMYcScpiRAxlIqKWHFpM1MYYNZ0AxRwxzkDHDEWy0gMYQQ2gx5xFwvJFpHVV8cUYVSRAhRRVp8CQCGdplNAdBc7JRhh4u0OFXGQKPQedCW8wQw1MiwAHoQjWsBMNtGommAwwufOiQZXCUqPFUI5cMA2Uny2FHZq2JUMYYKS9Essm-zZrRDWuZ4ZYMJtU020keidFCRze0EEMYDZEhgxk2yXCVwGlkJkJNLuRAcl4uNDSXCHJ8kXVGXHvtAthiC1xHGBk18YYeabDBRhgv1FAyCChc4SDBd8wBghNUgBDDzjuA4LcbeCWOR-MgyMwQDHrDkAIIR9y8xhsv6HU4DIfHAIIRaciR0xt4vHB45RGzLIITTwgc5xdjuA67wGy4XoQTAh9kxxemB8eQUjeUZQMOHz4kxxmn6aDnlQ_5_gV1C-HQ28Bl_N7GG2QsJINtFQ0sxxuoPfSGUDTwNT4eeSyUPtk5Iaccc869cHAZCS_c8MMvCDyHzBkZH5roEKcW1MENaaDDSXLgArFEpneuO8gXHHgci7ThLkmxmGIkY8HjMOQoNdBgapCyGroAL0pw-MLEPphBxIwQKmJwDPbeUgc2TIQvudPZQ8YQGxj0QQEBAQ%3D%3D&s=b1700fd292851c7df7ad23527af04964c2897d72e92e031467f8e770fe05fc161675319327&w=t&r=1&d=30&priv=false HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=52bc085d-be85-474c-ae57-e166c89b2330; bfq=APeIECNCx5YZMmjYiBGjRhcWIsYU3BLjoYgyE2PYuFGDBowaN2Tc6NJH
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 06:28:48 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
12112336.pix-cdn.org/m/p/0/374/374538/conversions/6OTjphwd-minify.jpg
45.133.44.24200 OK 2.9 kB URL HTTP/2 12112336.pix-cdn.org/m/p/0/374/374538/conversions/6OTjphwd-minify.jpg
IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70", baseline, precision 8, 100x100, components 3\012- data
Hash 66098442dc8934e8c6f5351e39d40e71
6bdebd9a664636433febe19afd7a5b37bff07126
b264aead392358ee4523a21bdd6726c1ec24c6ff849dbdf07dfd15bc6dedff4e
GET /m/p/0/374/374538/conversions/6OTjphwd-minify.jpg HTTP/1.1
Host: 12112336.pix-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:48 GMT
content-type: image/jpeg
content-length: 2921
server: nginx/1.12.2
last-modified: Sat, 30 Jul 2022 08:17:53 GMT
etag: "62e4e931-b69"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp
116.202.204.12200 OK 590 B URL HTTP/2 static.bookmsg.com/creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp
IP 116.202.204.12:0
ASN #24940 Hetzner Online GmbH
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash debce753f1ce6652c1637491fd72b1b1
fd102eb3f058f7a43b0f9ec03541681699f5895e
c2443b0a74b25158756abb7aa12832e5442adab247aab6e24514f54396c72579
GET /creatives/US/US_34c3a6403004486b593fb6a3428d7a2748437f4f_icon.webp HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 02 Feb 2023 06:28:48 GMT
content-type: image/webp
content-length: 590
last-modified: Tue, 24 Nov 2020 14:24:12 GMT
etag: "5fbd178c-24e"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 031be4d46456a983025a51dbafe041b8
028f4f0edcd725d7a87e785c595cb695defeb31f
668963244fb14a5bced5a013c2f8f7ff3aeec27695d402b3c1e07ae528f4e11f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 06:28:48 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 01 Feb 2023 03:56:20 GMT
Expires: Wed, 08 Feb 2023 03:56:19 GMT
Etag: "028f4f0edcd725d7a87e785c595cb695defeb31f"
Cache-Control: max-age=508650,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7930de67ede2fabc-OSL
lcdn.tsyndicate.com/images/2/1/84420fbc671de2b2c4913d049b2a41ef47023f.gif
8.254.252.214200 OK 51 kB URL HTTP/2 lcdn.tsyndicate.com/images/2/1/84420fbc671de2b2c4913d049b2a41ef47023f.gif
IP 8.254.252.214:0
File type GIF image data, version 89a, 300 x 250\012- data
Hash 3bfbc93a4edb07fe2695c92fa8c16f00
0789ea93098ac66b9390fbfe374ae3b84c2d2ea3
b54315d372b70a40f13553498fcf2bc2a14eb5628c370c85c1618681e76199d6
GET /images/2/1/84420fbc671de2b2c4913d049b2a41ef47023f.gif HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=52bc085d-be85-474c-ae57-e166c89b2330; bfq=APeIECNCx5YZMmjYiBGjRhcWIsYU3BLjoYgyE2PYuFGDBowaN2Tc6NJH
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:48 GMT
content-type: image/gif
content-length: 51114
etag: "63da1c24-c7aa"
last-modified: Wed, 01 Feb 2023 08:00:36 GMT
server: nginx
x-robots-tag: noindex, nofollow
age: 80690
accept-ranges: bytes
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XYEFOwxhgcMlqUISMjRgsaZMaQaSHGTBkaLWKEMdOQTA4YZmi8FPFwjpg0ZBTq2CIiho0bN2rcgIEjBw0RXR6GqTMmIwwaNpiWcSqyzI0xJzniaIEDRsQWMGbQoHE1jNK0NXhCJGOHog0aMmA8hFNHDEUZOW5IhQOHYowcOWb0hDNRB94YMm6wfTimTWEdNWKspaF4rhmKD8W4cbNwhgysMRo-bOMGo44ZMHLgsLGXtWvNqXE8rCOHTekaV2PMECyijoyMaOjQgTNHx4sXcuCQESNnDR4XY960eVGlTZk3UNwkeXPEiowwd9o4qaKHSRMoRrDgoWGmCA45VPAsGUODiIwkZ8RhRxFpxBEHHDHQcUcPL6ThxkF4xOACHGjA8YMbZeDRQwxc1AEDDDLYUAcdbXzhHRlp1NFGD5ltNoMLpqHWUIcfhkiHHDOZkcYYX8zxBm9jlNGDHGTcuAaNIIpI4hd0lDEHHUBteBcOSyEZ4oglGkTdG2sg1AMVOJqh4xhT0BFGQl_IYKWSWZJhxhtytBEGHT3ABgMeMgC3JpY9_ihHkBseltiaeryBYQ-PRcbWmmOwseMaUR4hwxpzuGGDG1YMMZYNU-QghxZRzMHbEGGw8YYeWcSgBRxrvIEFFWWwQUcRb9wxRqp52HBFC09ggZIbWRyBhxw5iPHFGUOgClkVYRiBxhpQkNHEEmTUEUQURsAahB5o2NEEDkrgwQQaODB7RRQtpJHGEFrcgcUVWNQwxA12pIHsE8dWkQQRUlSRhlxkaJfRHATJyUYZerhAR19lyDXGnAttMUMMUYkAx58L1VAGWrSJ0NJCMLjwoUMijAFHiRdXpUPIH7JFshx2XHbYQ2WY3AbIIsNAch11_KuDCDXIIMYYTNWwklg1nCQZWGGUoZRIRtnwUbEyzACbXGlcJkIOEt7kAl4uNPTUQ3J8kXVGXLvgNdhiy1VHGBk1cWoabLARxgs1iAwCClc4GPAdc4DgBBUgxMDyDiD0bSkNiONxF-IwM6SzyCmAcETNrb6Ql-EwGB4DCEakIUcZb-LxguF5w-CwyiI48YRccH4xBuuuy8UG60U4AXAZdnwxum8MKXUDDjPYUJZeIshxBmk65EnlQwf1Tt1COOgmQvQmvkHGQjLMVtH1crxR2kNvCEXDXuHjkcdC5ydPOnLKMefcCwSXYTDCCjP8glxzwJxR-GaiA5xaUAc3pIEOLSiJC1ICGYCx7iBfYOBxLHIzhhylBhNLTGQoeBwLJiWDpkEKDaxnEN85CQ5fgJgHMXiYEEpFDI25HummIiu5wOF2IKOMa2DQBwUEBA%3D%3D&s=82cbb379dced4cdf68337dfe8ae10eabb9ea10c3ed7bd43dd90b9a44fb1d73ce1675319327&w=t&r=1&d=254&priv=false
46.4.114.55200 OK 24 B URL HTTP/2 pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XYEFOwxhgcMlqUISMjRgsaZMaQaSHGTBkaLWKEMdOQTA4YZmi8FPFwjpg0ZBTq2CIiho0bN2rcgIEjBw0RXR6GqTMmIwwaNpiWcSqyzI0xJzniaIEDRsQWMGbQoHE1jNK0NXhCJGOHog0aMmA8hFNHDEUZOW5IhQOHYowcOWb0hDNRB94YMm6wfTimTWEdNWKspaF4rhmKD8W4cbNwhgysMRo-bOMGo44ZMHLgsLGXtWvNqXE8rCOHTekaV2PMECyijoyMaOjQgTNHx4sXcuCQESNnDR4XY960eVGlTZk3UNwkeXPEiowwd9o4qaKHSRMoRrDgoWGmCA45VPAsGUODiIwkZ8RhRxFpxBEHHDHQcUcPL6ThxkF4xOACHGjA8YMbZeDRQwxc1AEDDDLYUAcdbXzhHRlp1NFGD5ltNoMLpqHWUIcfhkiHHDOZkcYYX8zxBm9jlNGDHGTcuAaNIIpI4hd0lDEHHUBteBcOSyEZ4oglGkTdG2sg1AMVOJqh4xhT0BFGQl_IYKWSWZJhxhtytBEGHT3ABgMeMgC3JpY9_ihHkBseltiaeryBYQ-PRcbWmmOwseMaUR4hwxpzuGGDG1YMMZYNU-QghxZRzMHbEGGw8YYeWcSgBRxrvIEFFWWwQUcRb9wxRqp52HBFC09ggZIbWRyBhxw5iPHFGUOgClkVYRiBxhpQkNHEEmTUEUQURsAahB5o2NEEDkrgwQQaODB7RRQtpJHGEFrcgcUVWNQwxA12pIHsE8dWkQQRUlSRhlxkaJfRHATJyUYZerhAR19lyDXGnAttMUMMUYkAx58L1VAGWrSJ0NJCMLjwoUMijAFHiRdXpUPIH7JFshx2XHbYQ2WY3AbIIsNAch11_KuDCDXIIMYYTNWwklg1nCQZWGGUoZRIRtnwUbEyzACbXGlcJkIOEt7kAl4uNPTUQ3J8kXVGXLvgNdhiy1VHGBk1cWoabLARxgs1iAwCClc4GPAdc4DgBBUgxMDyDiD0bSkNiONxF-IwM6SzyCmAcETNrb6Ql-EwGB4DCEakIUcZb-LxguF5w-CwyiI48YRccH4xBuuuy8UG60U4AXAZdnwxum8MKXUDDjPYUJZeIshxBmk65EnlQwf1Tt1COOgmQvQmvkHGQjLMVtH1crxR2kNvCEXDXuHjkcdC5ydPOnLKMefcCwSXYTDCCjP8glxzwJxR-GaiA5xaUAc3pIEOLSiJC1ICGYCx7iBfYOBxLHIzhhylBhNLTGQoeBwLJiWDpkEKDaxnEN85CQ5fgJgHMXiYEEpFDI25HummIiu5wOF2IKOMa2DQBwUEBA%3D%3D&s=82cbb379dced4cdf68337dfe8ae10eabb9ea10c3ed7bd43dd90b9a44fb1d73ce1675319327&w=t&r=1&d=254&priv=false
IP 46.4.114.55:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XYEFOwxhgcMlqUISMjRgsaZMaQaSHGTBkaLWKEMdOQTA4YZmi8FPFwjpg0ZBTq2CIiho0bN2rcgIEjBw0RXR6GqTMmIwwaNpiWcSqyzI0xJzniaIEDRsQWMGbQoHE1jNK0NXhCJGOHog0aMmA8hFNHDEUZOW5IhQOHYowcOWb0hDNRB94YMm6wfTimTWEdNWKspaF4rhmKD8W4cbNwhgysMRo-bOMGo44ZMHLgsLGXtWvNqXE8rCOHTekaV2PMECyijoyMaOjQgTNHx4sXcuCQESNnDR4XY960eVGlTZk3UNwkeXPEiowwd9o4qaKHSRMoRrDgoWGmCA45VPAsGUODiIwkZ8RhRxFpxBEHHDHQcUcPL6ThxkF4xOACHGjA8YMbZeDRQwxc1AEDDDLYUAcdbXzhHRlp1NFGD5ltNoMLpqHWUIcfhkiHHDOZkcYYX8zxBm9jlNGDHGTcuAaNIIpI4hd0lDEHHUBteBcOSyEZ4oglGkTdG2sg1AMVOJqh4xhT0BFGQl_IYKWSWZJhxhtytBEGHT3ABgMeMgC3JpY9_ihHkBseltiaeryBYQ-PRcbWmmOwseMaUR4hwxpzuGGDG1YMMZYNU-QghxZRzMHbEGGw8YYeWcSgBRxrvIEFFWWwQUcRb9wxRqp52HBFC09ggZIbWRyBhxw5iPHFGUOgClkVYRiBxhpQkNHEEmTUEUQURsAahB5o2NEEDkrgwQQaODB7RRQtpJHGEFrcgcUVWNQwxA12pIHsE8dWkQQRUlSRhlxkaJfRHATJyUYZerhAR19lyDXGnAttMUMMUYkAx58L1VAGWrSJ0NJCMLjwoUMijAFHiRdXpUPIH7JFshx2XHbYQ2WY3AbIIsNAch11_KuDCDXIIMYYTNWwklg1nCQZWGGUoZRIRtnwUbEyzACbXGlcJkIOEt7kAl4uNPTUQ3J8kXVGXLvgNdhiy1VHGBk1cWoabLARxgs1iAwCClc4GPAdc4DgBBUgxMDyDiD0bSkNiONxF-IwM6SzyCmAcETNrb6Ql-EwGB4DCEakIUcZb-LxguF5w-CwyiI48YRccH4xBuuuy8UG60U4AXAZdnwxum8MKXUDDjPYUJZeIshxBmk65EnlQwf1Tt1COOgmQvQmvkHGQjLMVtH1crxR2kNvCEXDXuHjkcdC5ydPOnLKMefcCwSXYTDCCjP8glxzwJxR-GaiA5xaUAc3pIEOLSiJC1ICGYCx7iBfYOBxLHIzhhylBhNLTGQoeBwLJiWDpkEKDaxnEN85CQ5fgJgHMXiYEEpFDI25HummIiu5wOF2IKOMa2DQBwUEBA%3D%3D&s=82cbb379dced4cdf68337dfe8ae10eabb9ea10c3ed7bd43dd90b9a44fb1d73ce1675319327&w=t&r=1&d=254&priv=false HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=52bc085d-be85-474c-ae57-e166c89b2330; bfq=APeIECNCx5YZMmjYiBGjRhcWIsYU3BLjoYgyE2PYuFGDBowaN2Tc6NJH
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 06:28:48 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
notification.tubecup.net/in/subscription-offers?href=https%3A%2F%2Fshemalez.tube%2F&tcid=0&spot_id=1027&site=shemalez&source_id=0
78.47.181.156200 OK 0 B URL HTTP/2 notification.tubecup.net/in/subscription-offers?href=https%3A%2F%2Fshemalez.tube%2F&tcid=0&spot_id=1027&site=shemalez&source_id=0
IP 78.47.181.156:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/subscription-offers?href=https%3A%2F%2Fshemalez.tube%2F&tcid=0&spot_id=1027&site=shemalez&source_id=0 HTTP/1.1
Host: notification.tubecup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 02 Feb 2023 06:28:48 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8dbfd5dea9d39a4333844e7a33a12187
75f50a5bd4e7360a0b015ddb4e7dba144cacd029
7ac7cbeaace1b00a29b3a9429494e53ddf0ebe5e9c028aba22f229550bf911c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7AC7CBEAACE1B00A29B3A9429494E53DDF0EBE5E9C028ABA22F229550BF911C3"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5632
Expires: Thu, 02 Feb 2023 08:02:41 GMT
Date: Thu, 02 Feb 2023 06:28:49 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 62dfdba7c58422c02c2e169d328468a9
7e6e969e061b7baeba48ebb83049430b0313698e
4dbc17d3b7b2e54357eb596a4037e9c799916038c12c4e6d155adc5a61305e86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4DBC17D3B7B2E54357EB596A4037E9C799916038C12C4E6D155ADC5A61305E86"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13123
Expires: Thu, 02 Feb 2023 10:07:32 GMT
Date: Thu, 02 Feb 2023 06:28:49 GMT
Connection: keep-alive
rtbrennab.com/get/?go=1&data=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
116.202.60.158302 Found 0 B URL HTTP/2 rtbrennab.com/get/?go=1&data=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
IP 116.202.60.158:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get/?go=1&data=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 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 02 Feb 2023 06:28:50 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://rtbrennab.com/banner/in/show/?mid=8542055414636849682&pid=0&site=24366&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=shemalez.tube&hostname=auc-banner-hz-9&site_id=0&spot_id=24366&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=27.424213655424523&ml=&tag_ab=b&v2=0&ttl=&space_id=24366&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D24366%26source%3D0%26idzone%3D1%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D24366%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DShemale%2C%26spot_id%3D24366%26p%3Dhttps%253A%252F%252Fshemalez.tube%252F%26katds_labels%3D%26btype%3D0%26score%3D27.424213655424523%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Shemale,&stratagem=nlabel-a&ssp=3972&refresh=1
X-Firefox-Spdy: h2
rtbrennab.com/banner/in/show/?mid=8542055414636849682&pid=0&site=24366&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=shemalez.tube&hostname=auc-banner-hz-9&site_id=0&spot_id=24366&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=27.424213655424523&ml=&tag_ab=b&v2=0&ttl=&space_id=24366&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D24366%26source%3D0%26idzone%3D1%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D24366%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DShemale%2C%26spot_id%3D24366%26p%3Dhttps%253A%252F%252Fshemalez.tube%252F%26katds_labels%3D%26btype%3D0%26score%3D27.424213655424523%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Shemale,&stratagem=nlabel-a&ssp=3972&refresh=1
116.202.60.158302 Found 0 B URL HTTP/2 rtbrennab.com/banner/in/show/?mid=8542055414636849682&pid=0&site=24366&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=shemalez.tube&hostname=auc-banner-hz-9&site_id=0&spot_id=24366&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=27.424213655424523&ml=&tag_ab=b&v2=0&ttl=&space_id=24366&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D24366%26source%3D0%26idzone%3D1%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D24366%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DShemale%2C%26spot_id%3D24366%26p%3Dhttps%253A%252F%252Fshemalez.tube%252F%26katds_labels%3D%26btype%3D0%26score%3D27.424213655424523%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Shemale,&stratagem=nlabel-a&ssp=3972&refresh=1
IP 116.202.60.158:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /banner/in/show/?mid=8542055414636849682&pid=0&site=24366&sc=NO&usage_type=DCH&subid=0&sid=0&cid=0&price=0&is_cpm=0&cpm=0&ecpm=0&crid=&crtid=&tcid=0&out_id=&ver=&ver_c=&refdom=shemalez.tube&hostname=auc-banner-hz-9&site_id=0&spot_id=24366&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=0&created_at=0000-00-00&is_native=0&auction_queue=0&pop_winurl=&ip=91.90.42.154&testab=&px_id=0&adblock=0&auction_host=&mm=&yc=&render_type=&campaign_type=&uniq=&exp=&resp_type=default&iabcat=IAB25-3&min_cpm=0.0001&placement_type_id=&skin_test=&verify_hash=&score=27.424213655424523&ml=&tag_ab=b&v2=0&ttl=&space_id=24366&banner_width=1&banner_height=1&accel=0&gyr=0&iabcat=IAB25-3&url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D24366%26source%3D0%26idzone%3D1%26w%3D1%26h%3D1%26mo%3D%26ve%3D%26site_id%3D24366%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DShemale%2C%26spot_id%3D24366%26p%3Dhttps%253A%252F%252Fshemalez.tube%252F%26katds_labels%3D%26btype%3D0%26score%3D27.424213655424523%26bf%3D0.0001&pr=&bid_crid=&bid_cid=&is_iframe=0&ad_tags=Shemale,&stratagem=nlabel-a&ssp=3972&refresh=1 HTTP/1.1
Host: rtbrennab.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalez.tube/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 02 Feb 2023 06:28:50 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://btds.zog.link/in/912/?sid=24366&source=0&idzone=1&w=1&h=1&mo=&ve=&site_id=24366&utm1=&utm2=&utm3=&utm4=&ad_tags=Shemale,&spot_id=24366&p=https%3A%2F%2Fshemalez.tube%2F&katds_labels=&btype=0&score=27.424213655424523&bf=0.0001
X-Firefox-Spdy: h2
btds.zog.link/in/912/?sid=24366&source=0&idzone=1&w=1&h=1&mo=&ve=&site_id=24366&utm1=&utm2=&utm3=&utm4=&ad_tags=Shemale,&spot_id=24366&p=https%3A%2F%2Fshemalez.tube%2F&katds_labels=&btype=0&score=27.424213655424523&bf=0.0001
109.206.163.116302 Found 0 B URL HTTP/2 btds.zog.link/in/912/?sid=24366&source=0&idzone=1&w=1&h=1&mo=&ve=&site_id=24366&utm1=&utm2=&utm3=&utm4=&ad_tags=Shemale,&spot_id=24366&p=https%3A%2F%2Fshemalez.tube%2F&katds_labels=&btype=0&score=27.424213655424523&bf=0.0001
IP 109.206.163.116:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/912/?sid=24366&source=0&idzone=1&w=1&h=1&mo=&ve=&site_id=24366&utm1=&utm2=&utm3=&utm4=&ad_tags=Shemale,&spot_id=24366&p=https%3A%2F%2Fshemalez.tube%2F&katds_labels=&btype=0&score=27.424213655424523&bf=0.0001 HTTP/1.1
Host: btds.zog.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalez.tube/
Connection: keep-alive
Cookie: 952.0=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.20.1
date: Thu, 02 Feb 2023 06:28:49 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://cdn.1vag.com/1x1.png
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: *
set-cookie: 912.0=1; expires=Fri, 03 Feb 2023 06:28:50 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 165e9be92f27627a25cc6b3cdd292b24
b146fef1913914f06f23636b6b921147025b99c3
b1b0f6835da2e76225580a21075f0b7bd9705718168736ad203e4f720ade9ac4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B1B0F6835DA2E76225580A21075F0B7BD9705718168736AD203E4F720ADE9AC4"
Last-Modified: Wed, 01 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6245
Expires: Thu, 02 Feb 2023 08:12:55 GMT
Date: Thu, 02 Feb 2023 06:28:50 GMT
Connection: keep-alive
cdn.1vag.com/1x1.png
45.133.44.24200 OK 68 B IP 45.133.44.24:0
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /1x1.png HTTP/1.1
Host: cdn.1vag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalez.tube/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:50 GMT
content-type: image/png
content-length: 68
server: nginx/1.20.1
last-modified: Wed, 15 Apr 2020 13:30:15 GMT
etag: "5e970c67-44"
cache-control: max-age=3600
x-request-id: 28eea0836f6cd5562d41ccabe8fa4a5b
expires: Thu, 02 Feb 2023 07:28:50 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
mc.yandex.ru/watch/47200290?wmode=7&page-url=https%3A%2F%2Fshemalez.tube%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A939%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A293841356504%3Ahid%3A418872264%3Az%3A0%3Ai%3A20230202062911%3Aet%3A1675319352%3Ac%3A1%3Arn%3A752563312%3Arqn%3A1%3Au%3A1675319352938263845%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A1%2C74%2C92%2C0%2C315%2C0%2C%2C433%2C3%2C1127%2C1127%2C1%2C1027%3Aco%3A0%3Ans%3A1675319349975%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675319352%3At%3AShemalez%20-%20Shemale%20and%20Tranny%20Porn%20Tube%20-%20ShemaleZ.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
93.158.134.119302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/47200290?wmode=7&page-url=https%3A%2F%2Fshemalez.tube%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A939%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A293841356504%3Ahid%3A418872264%3Az%3A0%3Ai%3A20230202062911%3Aet%3A1675319352%3Ac%3A1%3Arn%3A752563312%3Arqn%3A1%3Au%3A1675319352938263845%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A1%2C74%2C92%2C0%2C315%2C0%2C%2C433%2C3%2C1127%2C1127%2C1%2C1027%3Aco%3A0%3Ans%3A1675319349975%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675319352%3At%3AShemalez%20-%20Shemale%20and%20Tranny%20Porn%20Tube%20-%20ShemaleZ.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP 93.158.134.119:0
GET /watch/47200290?wmode=7&page-url=https%3A%2F%2Fshemalez.tube%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A939%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A293841356504%3Ahid%3A418872264%3Az%3A0%3Ai%3A20230202062911%3Aet%3A1675319352%3Ac%3A1%3Arn%3A752563312%3Arqn%3A1%3Au%3A1675319352938263845%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A1%2C74%2C92%2C0%2C315%2C0%2C%2C433%2C3%2C1127%2C1127%2C1%2C1027%3Aco%3A0%3Ans%3A1675319349975%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675319352%3At%3AShemalez%20-%20Shemale%20and%20Tranny%20Porn%20Tube%20-%20ShemaleZ.com&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shemalez.tube
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/47200290/1?wmode=7&page-url=https%3A%2F%2Fshemalez.tube%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A3kqlg6e9sjiwxr6f2njdv%3Afp%3A939%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A293841356504%3Ahid%3A418872264%3Az%3A0%3Ai%3A20230202062911%3Aet%3A1675319352%3Ac%3A1%3Arn%3A752563312%3Arqn%3A1%3Au%3A1675319352938263845%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A1%2C74%2C92%2C0%2C315%2C0%2C%2C433%2C3%2C1127%2C1127%2C1%2C1027%3Aco%3A0%3Ans%3A1675319349975%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675319352%3At%3AShemalez%20-%20Shemale%20and%20Tranny%20Porn%20Tube%20-%20ShemaleZ.com&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Thu, 02 Feb 2023 06:28:47 GMT
access-control-allow-origin: https://shemalez.tube
set-cookie: yabs-sid=2448808921675319327; Path=/; SameSite=None; Secure
i=rdBUDTkrQt42E3QeXJFOqsTr7/NTYfI8CaBj4FDk6XE+KWyHBf+MK6tkGe8E7NzMm0kNKEOEzO0GOtITWXfbHnKuTzY=; Expires=Sun, 30-Jan-2033 06:28:44 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=8127853361675319327; Expires=Fri, 02-Feb-2024 06:28:47 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8127853361675319327; Expires=Fri, 02-Feb-2024 06:28:47 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1706855327.yc.1675319327#1706855327.yrts.1675319327#1706855327.yrtsi.1675319327; Expires=Fri, 02-Feb-2024 06:28:47 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 02-Feb-2023 06:28:47 GMT
last-modified: Thu, 02-Feb-2023 06:28:47 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
a.exosrv.com/ads.js
185.76.9.16200 OK 0 B IP 185.76.9.16:0
ASN #60068 Datacamp Limited
GET /ads.js HTTP/1.1
Host: a.exosrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:46 GMT
content-type: application/javascript
etag: W/"b60fdcc211f42a1f246a8c80b56"
expires: Wed, 01 Feb 2023 17:13:27 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1675325810
server: CDN77-Turbo
x-77-nzt: AblMCQ2mpOb/3BAAAA
x-77-nzt-ray: c0a4cc289c42b53b1e58db63b7976409
x-cache: HIT
x-age: 4316
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
shzpv1.nv7s.com/c1/videos/632000/632939/632939_tr.mp4
45.133.44.25206 Partial Content 0 B URL HTTP/2 shzpv1.nv7s.com/c1/videos/632000/632939/632939_tr.mp4
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
GET /c1/videos/632000/632939/632939_tr.mp4 HTTP/1.1
Host: shzpv1.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 206 Partial Content
date: Thu, 02 Feb 2023 06:28:49 GMT
content-type: video/mp4
content-length: 196747
server: nginx/1.20.1
last-modified: Sat, 24 Dec 2022 05:02:02 GMT
etag: "63a687ca-3008b"
cache-control: max-age=7776000
x-request-id: e728d7bd7ed490feed199a2269dad59b
expires: Wed, 03 May 2023 06:28:49 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
content-range: bytes 0-196746/196747
X-Firefox-Spdy: h2
sw.wpu.sh/npc/sdk/common/service-worker.js
45.133.44.25200 OK 0 B URL HTTP/2 sw.wpu.sh/npc/sdk/common/service-worker.js
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
GET /npc/sdk/common/service-worker.js HTTP/1.1
Host: sw.wpu.sh
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:48 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 26 Jan 2023 12:22:57 GMT
etag: W/"63d270a1-158c"
content-encoding: gzip
expires: Thu, 02 Feb 2023 06:33:48 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
js.wpshsdk.com/npc/sdk/common/core.js
45.133.44.25200 OK 0 B URL HTTP/2 js.wpshsdk.com/npc/sdk/common/core.js
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
GET /npc/sdk/common/core.js HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shemalez.tube/
Origin: https://shemalez.tube
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:47 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 26 Jan 2023 12:22:57 GMT
etag: W/"63d270a1-1bf5c"
content-encoding: gzip
expires: Thu, 02 Feb 2023 06:33:47 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
js.wpshsdk.com/npc/sdk/push/styles.css
45.133.44.25200 OK 0 B URL HTTP/2 js.wpshsdk.com/npc/sdk/push/styles.css
IP 45.133.44.25:0
ASN #39572 DataWeb Global Group B.V.
GET /npc/sdk/push/styles.css HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shemalez.tube/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 06:28:48 GMT
content-type: text/css
server: nginx/1.18.0
last-modified: Tue, 30 Aug 2022 09:15:33 GMT
etag: W/"630dd535-10f4"
content-encoding: gzip
expires: Thu, 02 Feb 2023 06:33:48 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
104.18.20.226200 OK 0 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.20.226:0
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 06:28:46 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Mon, 06 Feb 2023 03:10:16 GMT
ETag: "a5c7d0ad5d067b6e8d6456284ead87350bb6e342"
Last-Modified: Thu, 02 Feb 2023 03:10:17 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1263
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7930de602a56b4e8-OSL