clip69.biz/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: clip69.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 05 Dec 2022 20:25:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 05 Dec 2022 21:25:31 GMT
Location: https://clip69.biz/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YA%2Bhw%2BIEHbDGmGIWRjAdRYEtTzjfqayq0D51%2F1wkF5cMWnhitUdquoMwQochSK0IRp02QPtYonLhoDG9jUbwo1t%2BtWEZitk3hr1KbVABIT3Sfso3UWWLb493VOHh"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 774f82f50bb7b515-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3820
Expires: Mon, 05 Dec 2022 21:29:11 GMT
Date: Mon, 05 Dec 2022 20:25:31 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash ee088fab9b287e174cfd1f2c735a909f
25c3335b514a36ad1a24d00413d60c3d394f5161
494e96358ff12366213d7cc0f9197648c6c62ec14fa0d2c78732a683fa26b192
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1413
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:31 GMT
Last-Modified: Mon, 05 Dec 2022 20:01:58 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4316
Expires: Mon, 05 Dec 2022 21:37:27 GMT
Date: Mon, 05 Dec 2022 20:25:31 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 05 Dec 2022 20:20:19 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 312
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: xr+JALK+yy7zwu1xRDxhCUr76y20PMUavGdOTL2S7qWdfPBND2HOcph9R3kPerxvdmjxR9xpitB7ZdI2aZPZDQ==
x-amz-request-id: C55EFEKQ201FSAHS
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 05 Dec 2022 19:48:38 GMT
age: 2213
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:31 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 3160dfbfc9b99ee6042561796b840ed8
6ce0e891c74c65d8750cf81942560c74190ee4f2
aff4110249ad33236ad12301209b0535a2824595146d27f638cc0f907c6a911b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=143592
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:32 GMT
Etag: "638de1a4-118"
Expires: Wed, 07 Dec 2022 12:18:44 GMT
Last-Modified: Mon, 05 Dec 2022 12:18:44 GMT
Server: nginx
Content-Length: 280
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 05 Dec 2022 20:11:19 GMT
cache-control: public,max-age=3600
age: 853
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 2b9d6a686aa3c4ea24568425e43a5221
d53bb4c9579bd1db78a0520619e888aec79f750f
c38734a8dbe51217d73896c0bf7f5c38c107fd79e0dee24b717f130377e9b5f7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1398
Cache-Control: max-age=133478
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:32 GMT
Etag: "638db4ac-1d7"
Expires: Wed, 07 Dec 2022 09:30:10 GMT
Last-Modified: Mon, 05 Dec 2022 09:06:52 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: jOHXvV2+OBc+rqsyfERntQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: iy501RKd+cz4I9GksuEOL1cJuAU=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4161
Expires: Mon, 05 Dec 2022 21:34:55 GMT
Date: Mon, 05 Dec 2022 20:25:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4161
Expires: Mon, 05 Dec 2022 21:34:55 GMT
Date: Mon, 05 Dec 2022 20:25:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4161
Expires: Mon, 05 Dec 2022 21:34:55 GMT
Date: Mon, 05 Dec 2022 20:25:34 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e81e29f-79a8-4af6-b0c7-7f49bfafb17e.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e81e29f-79a8-4af6-b0c7-7f49bfafb17e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f71032604eecccf0a81f323a5f96a400
f8866d4f3185bcf7871581d75339998b34d6cf6d
d053eedc717d7fd86e621ba948680be16538396d1ba9854b6816626d149b1c57
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e81e29f-79a8-4af6-b0c7-7f49bfafb17e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6886
x-amzn-requestid: d721caf6-2252-4ede-9533-3d3fcd6cce0d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cpsw-FfRoAMFtOQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d5b39-7644a195142f6c420ec7eac6;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 02:45:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Mn_L-TMV_ypQZFmolIRm4r5dyj5PpN12jrtafcP9HEkALUPfSzJ38w==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 02:45:54 GMT
age: 63580
etag: "f8866d4f3185bcf7871581d75339998b34d6cf6d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F461bc4a6-a90b-41a8-99ce-a502ba9ed21f.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F461bc4a6-a90b-41a8-99ce-a502ba9ed21f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dcb8fe0c4ba323ab2483fa290c291051
6706e02d6b95edc3a33c951f07d04b0fb7415b77
6be68deb3a330955027ec16eaca2cdf4e2776620ffb7cb995922664b24400f02
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F461bc4a6-a90b-41a8-99ce-a502ba9ed21f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8749
x-amzn-requestid: ee03c447-299b-45d5-b8c6-12d4d1dc436d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_spHdBIAMFywQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d131d-0c9805c6112ec9ec6b9d1544;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: joWP2kLWVD0lEy2rMV4Fjm3mJh3mzsPyTWiHDVZZNMy5s_WPViKtCw==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:48:29 GMT
etag: "6706e02d6b95edc3a33c951f07d04b0fb7415b77"
content-type: image/jpeg
age: 81425
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24c69d7ef356b352956d6dcbc9f5df1d
2cc31dc1c5d2d2a8b3a378dce8a1240a79acfec9
94d068620c34652cb2d24ca8b3cf962febe9606e6d3a33d937fc9d99f176edef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10396
x-amzn-requestid: b879fd2e-b6cf-4373-b780-2d97481c45f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cioNbH5KoAMFUsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a8722-6add7f8e225878473b20c015;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 23:15:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ir97GJKaFoW6BNXCcmMqp0JSUd5JhCACyUvLh5G-0BWCDVJsqs7XhQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 11:06:22 GMT
age: 33552
etag: "2cc31dc1c5d2d2a8b3a378dce8a1240a79acfec9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43309032a892c486f9985ef520df696e
36f4682ca6a33ff80ee02129c77e6f27e996ede0
24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5681
x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltXnEotIAMFqkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Uz-wJTZjej3sjP-O68BQ4hB_kkAecG0o7GkeZUan90ZgV87g0Cg_ZA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:49:44 GMT
age: 81350
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db1701b7b9d161a0c935bb6e10b17893
22a8c4bd58c729c1abcf794466e8f3231dfb034b
b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8315
x-amzn-requestid: f1bcc33b-aad9-4d3b-b1f9-49282f2d4fb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMGVboAMFfxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-13472a097177d4751c8f7a8c;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JuY0xcLDiERwrVhq33d4PP64liDqFfk9bc9xX1H62o0tOwrt1ek7Pg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:42:39 GMT
age: 81775
etag: "22a8c4bd58c729c1abcf794466e8f3231dfb034b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c01fe1cccdb3b672bbade6d98217ffe9
a9a529dc9894827f6243a1bf57f81caa4fe88fc2
c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4666
x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clr_-GiboAMFwww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kmki-SBINSx1kbiIkaSGebdCLrnDeHVhYeotAWzE__CevkNDdfzRGg==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:44:05 GMT
age: 81689
etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 3160dfbfc9b99ee6042561796b840ed8
6ce0e891c74c65d8750cf81942560c74190ee4f2
aff4110249ad33236ad12301209b0535a2824595146d27f638cc0f907c6a911b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3
Cache-Control: max-age=143592
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:34 GMT
Etag: "638de1a4-118"
Expires: Wed, 07 Dec 2022 12:18:46 GMT
Last-Modified: Mon, 05 Dec 2022 12:18:44 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 278 B IP
Hash 1d62c29dfe194e8ce5c6714b4b7e6f7f
8d880dba8572bcb24d9e9adf509c30d69901089c
42e8966abc268d93e1903d0a291af6da50a4ab86a8bae47dd84442177bf23c39
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5461
Cache-Control: max-age=153749
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:34 GMT
Etag: "638df3fe-116"
Expires: Wed, 07 Dec 2022 15:08:03 GMT
Last-Modified: Mon, 05 Dec 2022 13:37:02 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.10.0/jquery.min.js
200 OK 33 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.10.0/jquery.min.js
IP
File type ASCII text, with very long lines (32099)
Hash 3469579c43507b5024c3a02818a339ef
c0bfa243ac56b2bb5e2f2d89a18320d68bd87e33
1ae52784fa308e6c1cd71a7ae8f3b9a2ce27f3e0801a734a6b108ff38a717d56
GET /ajax/libs/jquery/1.10.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 32964
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 08:31:51 GMT
expires: Thu, 30 Nov 2023 08:31:51 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 474823
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d771caa7016325164c7e323a9ab45652
f8775515de69e7c979370a4e39680b83dc88e91a
676077f40199a1295c66acb49511c73ac7e5b064087ef2b792fbc23c84499348
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "676077F40199A1295C66ACB49511C73AC7E5B064087EF2B792FBC23C84499348"
Last-Modified: Sat, 03 Dec 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5303
Expires: Mon, 05 Dec 2022 21:53:57 GMT
Date: Mon, 05 Dec 2022 20:25:34 GMT
Connection: keep-alive
waust.at/d.js
200 OK 7.4 kB IP
File type ASCII text, with very long lines (14706), with no line terminators
Hash cc02f84ed256cc1ae2454c5e9312dbc9
c27b58371e12f13c6e985748e5657813aac69832
a6352611a20e47908ddb6263251637a1a098371081dea43aa5f1c089bc2af0bd
GET /d.js HTTP/1.1
Host: waust.at
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: application/x-javascript
last-modified: Thu, 01 Dec 2022 21:20:58 GMT
etag: W/"63891aba-3972"
expires: Tue, 06 Dec 2022 20:16:17 GMT
cache-control: max-age=86400
access-control-allow-origin: *
cf-cache-status: HIT
age: 557
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Uor9ihUwrxaSBlyw9Q1W3ptpdVvPJaaobJCdEm7TMG9nxYdnNvJ1yKDCaNY6US5zDTrvr7WUG1Hb30kQti4OQW4Wl8v63GNcTLAunmMY0qQdz%2BzCtUvUoGS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 774f8305f9d0b527-OSL
content-encoding: br
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 837e2eb2c81565e8a46eacbd5cdc3eb3
a55ef9f1eab8c3973d17919a906b562d2807d0c6
03995a177737723351522b411c74dc99da4147feaed8ce52049e3e0c1bf4542d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "03995A177737723351522B411C74DC99DA4147FEAED8CE52049E3E0C1BF4542D"
Last-Modified: Sat, 03 Dec 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8310
Expires: Mon, 05 Dec 2022 22:44:04 GMT
Date: Mon, 05 Dec 2022 20:25:34 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dfb548d8f8a99d32050803775fad5d6
8b47999a01db7c2217d76a1cec576809a229cf1b
68dd2a1e5a0002f4d25d3b5884ab55bc6b5a91e38f6dc464c4261b19c6e5887e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fappedia.com/wp-content/uploads/2022/12/81926536d2fd821af543f5eb65ecf5cadeee40f9.jpg
200 OK 24 kB URL HTTP/2 fappedia.com/wp-content/uploads/2022/12/81926536d2fd821af543f5eb65ecf5cadeee40f9.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "Lavc58.134.100", Exif Standard: [TIFF image data, little-endian, direntries=2, datetime=2022:12:04 09:43:16], baseline, precision 8, 200x200, components 3\012- data
Hash 49710d939273536a872e0dad39598890
4f9ff9f444f949a8cb2aa70ab5d0a27dbb6563ff
cd0f4ddda8af8aa34d2f2fc9ac2024234d26bb6eb88ce71ec32ae94fefa92d85
GET /wp-content/uploads/2022/12/81926536d2fd821af543f5eb65ecf5cadeee40f9.jpg HTTP/1.1
Host: fappedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: image/jpeg
content-length: 23694
last-modified: Sun, 04 Dec 2022 14:47:24 GMT
etag: "638cb2fc-5c8e"
expires: Tue, 03 Jan 2023 15:02:57 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
cf-cache-status: HIT
age: 105757
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4FodVpJVoVFEDzYw%2FK1F5KgX%2Bw%2BtAzgSh8SD9oXB5Q2ai3dv%2BHvA5PyrsqVWG7MUbJ%2FQgyIcu2WnJ95zLgSy2F6n37BPx%2B8fgbFW42AhkT%2Fd6K4DQDk3fA9kp2QEPyM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 774f83069adf0b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fappedia.com/wp-content/uploads/2022/12/b8c5679a28894adad7beb5c355371b922a6a2605.jpg
200 OK 32 kB URL HTTP/2 fappedia.com/wp-content/uploads/2022/12/b8c5679a28894adad7beb5c355371b922a6a2605.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash 02720ebe8d0a1d63aa4355034065cd02
45b0dea2efd926d1d465d745a1eb9cfbed7cd110
f61eb5edde2d5b69c5c3c12bc76e190ea331b4dc37fadd225d7b40e8914a29a5
GET /wp-content/uploads/2022/12/b8c5679a28894adad7beb5c355371b922a6a2605.jpg HTTP/1.1
Host: fappedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: image/jpeg
content-length: 31789
last-modified: Sun, 04 Dec 2022 14:47:28 GMT
etag: "638cb300-7c2d"
expires: Tue, 03 Jan 2023 15:02:57 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
cf-cache-status: HIT
age: 105757
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KOPEZCLa1ThpuZfoJ9u9aHBuZjnem%2FTkL656SPhrTUuah2pg4gbPj%2Bmb6gRRIcrc2WiNywxRcrul0gOP6%2FmHXs5PNzqj2OGhVTlT1RPX9%2BB7HT%2FX6H4%2F0%2BCdbivMDqw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 774f8306aae30b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fappedia.com/wp-content/uploads/2022/12/6cf85e592bc328419e05c536d35d4a61ca601fbb.jpg
200 OK 37 kB URL HTTP/2 fappedia.com/wp-content/uploads/2022/12/6cf85e592bc328419e05c536d35d4a61ca601fbb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 200x200, components 3\012- data
Hash 0affdb27ec0d1d0500aff5ca25e48d5f
86daf69165858f0fb16c2678ce1fd95fba29861d
824aa410e63302282ec889e04ae6c3536b1e15695263fa4442865afb321c6408
GET /wp-content/uploads/2022/12/6cf85e592bc328419e05c536d35d4a61ca601fbb.jpg HTTP/1.1
Host: fappedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: image/jpeg
content-length: 36911
last-modified: Sun, 04 Dec 2022 14:47:21 GMT
etag: "638cb2f9-902f"
expires: Tue, 03 Jan 2023 15:02:57 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
cf-cache-status: HIT
age: 105757
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nEYNa%2BYDmN93w%2FS3pAlNoolME%2BVbudFodlUOvdomWFKQu5Q3QRVhztv8HCxkOqmjB5ESVj6xYyxnbsiK5BcFVrYTZAVAtSnDs77%2BHSkogRQ2wqQVVM5rKMBzflQJrzE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 774f8306aae00b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fappedia.com/wp-content/uploads/2022/12/6233ce392bf4e51fd8fd08420616dc465da21435.png
200 OK 2.1 kB URL HTTP/2 fappedia.com/wp-content/uploads/2022/12/6233ce392bf4e51fd8fd08420616dc465da21435.png
IP
File type PNG image data, 200 x 200, 4-bit colormap, non-interlaced\012- data
Hash 49823fa7b62a1ca5a164352d3b503283
b57fcbe0305eaf4f40a7bb6b0fc0df13dbd374f6
91e6df446e05c380b9753cadffd13e4081617f4ef835491df94db4932ffe2024
GET /wp-content/uploads/2022/12/6233ce392bf4e51fd8fd08420616dc465da21435.png HTTP/1.1
Host: fappedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: image/png
content-length: 2052
last-modified: Sun, 04 Dec 2022 14:47:30 GMT
etag: "638cb302-804"
expires: Tue, 03 Jan 2023 15:02:57 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
cf-cache-status: HIT
age: 105757
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K4uYHBD9JE0Ut7UNZV6J9iuab8ONBDLvOGQBgVYWDsWe%2BiaeFVkMmcbS6r9z57QYc2jL8DySBpGptNLDnqNMctvN1St80twSGR4ZOF54nkVUELOvKA6G17zcL35rUxU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 774f8306aae40b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fappedia.com/wp-content/uploads/2022/12/5c6e79b9d13ea3881695d1cc6de69c5709a75f53.jpg
200 OK 26 kB URL HTTP/2 fappedia.com/wp-content/uploads/2022/12/5c6e79b9d13ea3881695d1cc6de69c5709a75f53.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash becd65fabdae3c28b3886f32d0a3a551
2ba26a2a1df7d9e285bae67a87712bc79a8b421c
aaea3ad0772cb958d03c9db19129c7b02cd1f15309a4af058323888b79861092
GET /wp-content/uploads/2022/12/5c6e79b9d13ea3881695d1cc6de69c5709a75f53.jpg HTTP/1.1
Host: fappedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: image/jpeg
content-length: 26432
last-modified: Sun, 04 Dec 2022 14:47:26 GMT
etag: "638cb2fe-6740"
expires: Tue, 03 Jan 2023 15:02:57 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
cf-cache-status: HIT
age: 105757
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3EOScGommMr2ySk0thNvw7nW1qZDZJCsSOSjnHZ3i%2BfywpY31iYAhwv0B2hc2sHBt9Zz%2BaiDqgprmiwoPPMjSJkZUpEw6HbBSv0NZtTOyXKJisvD0v1ToH1j8KcB7eI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 774f8306aae10b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fappedia.com/wp-content/uploads/2022/12/e4db293952cac09d58bd9da0d824fb8310342362.jpg
200 OK 26 kB URL HTTP/2 fappedia.com/wp-content/uploads/2022/12/e4db293952cac09d58bd9da0d824fb8310342362.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 220x220, components 3\012- data
Hash 37e0d9c29ff9189d58a1c60fe212f8e2
edc948a3fd699461884e090c546b2ed3cdebc8c6
af6503780fc1e9852aef69bb8607dec97e15c3d058317dac63e68dc71a68f2e2
GET /wp-content/uploads/2022/12/e4db293952cac09d58bd9da0d824fb8310342362.jpg HTTP/1.1
Host: fappedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: image/jpeg
content-length: 25467
last-modified: Mon, 05 Dec 2022 02:45:05 GMT
etag: "638d5b31-637b"
expires: Wed, 04 Jan 2023 05:52:22 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
cf-cache-status: HIT
age: 52392
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vfR40Gh%2FpJAVlFaZ3KxXW1RlDLj6bN%2BmniCHZ7WX7Sz%2FtngJFizk%2FehOgb1TDNTOjbagOeF1Z1s2IHJlr8sTdMo75PFJuwLSW0FkbnK%2BrnYQSx%2BxNJPk2QwDqTC6BCs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 774f8306aae70b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fappedia.com/wp-content/uploads/2022/12/2a75b9593075c40ba627ec58f1f298d60ed8df9c.jpg
200 OK 39 kB URL HTTP/2 fappedia.com/wp-content/uploads/2022/12/2a75b9593075c40ba627ec58f1f298d60ed8df9c.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 216x216, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 200x200, components 3\012- data
Hash c40a68b3b781b44d84a01472be7a09d1
36e86fc0e9922ed847f4a2ca01203eeef09ca62d
53a7cd591a83d1fc53f63427e818366f40aaa3ba25c466666adb0e1a59cb73a6
GET /wp-content/uploads/2022/12/2a75b9593075c40ba627ec58f1f298d60ed8df9c.jpg HTTP/1.1
Host: fappedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: image/jpeg
content-length: 39227
last-modified: Sun, 04 Dec 2022 14:47:19 GMT
etag: "638cb2f7-993b"
expires: Tue, 03 Jan 2023 15:02:57 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
cf-cache-status: HIT
age: 105757
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y2JYfKfjjb%2FdiQjjkqDbz9uBuWVSlsu6nW4Sb0oSKhace9iE8HCB4ws31Py8cM49nUl9Eo16lCEa4pUauGt%2BL6yDzyEN7sur4BvuWaczQFq7zwA15KK8FSQNC96YVvY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 774f8306aae50b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fappedia.com/wp-content/uploads/2022/12/d5349bdb7b79eb10feafe2ff90c9868c23042499.jpg
200 OK 30 kB URL HTTP/2 fappedia.com/wp-content/uploads/2022/12/d5349bdb7b79eb10feafe2ff90c9868c23042499.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash bec679e057d484ac3db4a6ee383a236d
e9379007e11705f4c2b851cb02bd025252cb7e80
900c6f73f97a2865e3fbf589948ae792ea89d131c946caf5f94a0a388bc2e94d
GET /wp-content/uploads/2022/12/d5349bdb7b79eb10feafe2ff90c9868c23042499.jpg HTTP/1.1
Host: fappedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: image/jpeg
content-length: 30386
last-modified: Sun, 04 Dec 2022 14:47:33 GMT
etag: "638cb305-76b2"
expires: Tue, 03 Jan 2023 15:02:57 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
cf-cache-status: HIT
age: 105757
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RaxixESDNejMAw4UKKaRfb39rno2yLtwjeZU3LeOVTUyr4mSBIpc%2FuC9fBEpwBWhGdh0Cy05W5loON4yQ9IQjzaBkLSUjv857uV3TkLF4uce%2FRdN7TRClnxWe%2FgcFJg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 774f8306cb1d0b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fappedia.com/wp-content/uploads/2022/12/ffa8dcee1d5c398d4f1ddb0576f7b1518360baea.jpg
200 OK 27 kB URL HTTP/2 fappedia.com/wp-content/uploads/2022/12/ffa8dcee1d5c398d4f1ddb0576f7b1518360baea.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash 59aa1cab35130bf25f68369043e54df4
00f639a08b2e359544e30610f69ccfee61f0a4a7
1f12c34f8cc89539f44f4dc378fd7ca65433bece7a98a76cba73fb8ca49d6e58
GET /wp-content/uploads/2022/12/ffa8dcee1d5c398d4f1ddb0576f7b1518360baea.jpg HTTP/1.1
Host: fappedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: image/jpeg
content-length: 26758
last-modified: Sun, 04 Dec 2022 14:47:35 GMT
etag: "638cb307-6886"
expires: Tue, 03 Jan 2023 15:02:57 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
cf-cache-status: HIT
age: 105757
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JHSTMc39Fg6bDe7uldz6ovTpulnTyo930Ws2Uu9%2BvK%2FpcVGgSzCd5kdigB%2BiVKOMvWqH1pCU4e32Ft5EpIVN2uzGBGpmVp%2B7ih0gew6MLX%2FI22cgz65FY0KuyRfKvXY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 774f8306cb1b0b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fappedia.com/wp-content/uploads/2022/12/c4071076bb43e02a0db81460dd0fade3c10a9957.jpg
200 OK 34 kB URL HTTP/2 fappedia.com/wp-content/uploads/2022/12/c4071076bb43e02a0db81460dd0fade3c10a9957.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 220x220, components 3\012- data
Hash 0a2b524207d26dd0093e6842a5cd822a
1b7d1ee69aa3869dc4c2c446b814ba26c41bedf0
29dc19dcdd481a78bb8c63dd5e2416d38dfe3bf54c605145244154a32cb8978d
GET /wp-content/uploads/2022/12/c4071076bb43e02a0db81460dd0fade3c10a9957.jpg HTTP/1.1
Host: fappedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: image/jpeg
content-length: 34080
last-modified: Mon, 05 Dec 2022 02:45:13 GMT
etag: "638d5b39-8520"
expires: Wed, 04 Jan 2023 05:52:22 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
cf-cache-status: HIT
age: 52392
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lB3XniRSJCy7Cb5jU37n4sCSsR%2BBxMYcOkxWFZiUmkX3io1c0xCJoZlsE7szneu%2FTBxgT%2BOh0mByLyCUbW4kjrgRCqqJgeZY8GySb0Ye%2F9HlC9JakvCDCY96N6Llmt8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 774f8306cb1c0b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 56e38cfcfa3b4d0ec69b478ff8befba3
2fa5d1179fa11d75ecfcfeb4fb73a1afaf075137
a3eaac4498a3ed4d3a7e98a7787aea2352c6b9116dc5fd67d1d4ec598ed2b3f1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5913
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:34 GMT
Etag: "638d1452-117"
Last-Modified: Mon, 05 Dec 2022 18:47:01 GMT
Server: ECS (amb/6B88)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 56e38cfcfa3b4d0ec69b478ff8befba3
2fa5d1179fa11d75ecfcfeb4fb73a1afaf075137
a3eaac4498a3ed4d3a7e98a7787aea2352c6b9116dc5fd67d1d4ec598ed2b3f1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2533
Cache-Control: max-age=93561
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:34 GMT
Etag: "638d1452-117"
Expires: Tue, 06 Dec 2022 22:24:55 GMT
Last-Modified: Sun, 04 Dec 2022 21:42:42 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 56e38cfcfa3b4d0ec69b478ff8befba3
2fa5d1179fa11d75ecfcfeb4fb73a1afaf075137
a3eaac4498a3ed4d3a7e98a7787aea2352c6b9116dc5fd67d1d4ec598ed2b3f1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5913
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:34 GMT
Last-Modified: Mon, 05 Dec 2022 18:47:01 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 837e2eb2c81565e8a46eacbd5cdc3eb3
a55ef9f1eab8c3973d17919a906b562d2807d0c6
03995a177737723351522b411c74dc99da4147feaed8ce52049e3e0c1bf4542d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "03995A177737723351522B411C74DC99DA4147FEAED8CE52049E3E0C1BF4542D"
Last-Modified: Sat, 03 Dec 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8310
Expires: Mon, 05 Dec 2022 22:44:04 GMT
Date: Mon, 05 Dec 2022 20:25:34 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 56e38cfcfa3b4d0ec69b478ff8befba3
2fa5d1179fa11d75ecfcfeb4fb73a1afaf075137
a3eaac4498a3ed4d3a7e98a7787aea2352c6b9116dc5fd67d1d4ec598ed2b3f1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2533
Cache-Control: max-age=93561
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:34 GMT
Etag: "638d1452-117"
Expires: Tue, 06 Dec 2022 22:24:55 GMT
Last-Modified: Sun, 04 Dec 2022 21:42:42 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 279
s7.addthis.com/js/300/addthis_widget.js
200 OK 116 kB URL HTTP/2 s7.addthis.com/js/300/addthis_widget.js
IP
File type ASCII text, with very long lines (54602)
Size 116 kB (116325 bytes)
Hash ff4671f71c958029bbf6d9694284da70
7535744f2dbaf99902a54fc529e760b08a73f265
123f781673b2e45e18df36b64984674f489a5f3541c69e295f01f554b8d3c738
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: "5f971164-5834c"
cache-control: public, max-age=600
strict-transport-security: max-age=15724800; includeSubDomains
content-type: application/javascript
content-encoding: gzip
content-length: 116325
date: Mon, 05 Dec 2022 20:25:34 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
adsxyz.com/sponsors/traffic/footer_300x250x1.html
200 OK 526 B URL HTTP/2 adsxyz.com/sponsors/traffic/footer_300x250x1.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 0d52fe8d43018d39a5444bd14d6e1e8d
4d3f3630e8c246ac970228e70c62905b63af94fe
4c72998a9cad812bafee9a6ed6bd1313c36ec2e5bef1f3e6f78cdeaa996a684d
GET /sponsors/traffic/footer_300x250x1.html HTTP/1.1
Host: adsxyz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: text/html
last-modified: Tue, 01 Nov 2022 15:04:17 GMT
strict-transport-security: max-age=31536000
x-frame-options: ALLOWALL
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=undz55IMJ8hkLGzENhIwqVufV1f%2B997em35vi1juvC7amNnS0GO64HChwLYPjlVkqvY0wm0V%2B3kCMjEjd8G%2BBlLMhY7eevGpeSGAURgalttnZjOxGDo6hYCzvEH3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774f83074b86b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
imgcloud.pw/images/2022/12/05/XxFram.md.jpg
200 OK 30 kB URL HTTP/2 imgcloud.pw/images/2022/12/05/XxFram.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 550x309, components 3\012- data
Hash 31a1dc4ec77a95288d7dd4aa9875d3b8
f0f99027d4d6f35975abfc6838e82f140ddb3284
8e6e97376f05bd5094887e8b22ceacbef251b6372ee027af8df638fea37b7b95
GET /images/2022/12/05/XxFram.md.jpg HTTP/1.1
Host: imgcloud.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: image/jpeg
content-length: 29914
last-modified: Mon, 05 Dec 2022 10:30:59 GMT
etag: "638dc863-74da"
accept-ranges: bytes
X-Firefox-Spdy: h2
imgcloud.pw/images/2022/12/05/XxFsQV.md.jpg
200 OK 48 kB URL HTTP/2 imgcloud.pw/images/2022/12/05/XxFsQV.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 550x367, components 3\012- data
Hash d0f3523ee7dc2ee5f1a929bcf9ee022a
de52e42ea9653dd11c18798969247fc68b5b38ad
91c562e6cd79c3d131e4a812de00b041fd4d5d6e54cf406a1c23fb1466e4752a
GET /images/2022/12/05/XxFsQV.md.jpg HTTP/1.1
Host: imgcloud.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: image/jpeg
content-length: 48300
last-modified: Mon, 05 Dec 2022 10:50:04 GMT
etag: "638dccdc-bcac"
accept-ranges: bytes
X-Firefox-Spdy: h2
imgcloud.pw/images/2022/12/05/XxFcUv.md.jpg
200 OK 42 kB URL HTTP/2 imgcloud.pw/images/2022/12/05/XxFcUv.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 550x309, components 3\012- data
Hash 0e7386981b39d1c2ce950d5eacd1c5f3
278f887b068138e8f58f660e803be00876124158
b8ea27667a7b19c84935916fd61b2d39aacb29ae03af113ab59fdc22262fe4ce
GET /images/2022/12/05/XxFcUv.md.jpg HTTP/1.1
Host: imgcloud.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: image/jpeg
content-length: 41483
last-modified: Mon, 05 Dec 2022 10:49:38 GMT
etag: "638dccc2-a20b"
accept-ranges: bytes
X-Firefox-Spdy: h2
imgcloud.pw/images/2022/12/05/XxGZsX.md.jpg
200 OK 38 kB URL HTTP/2 imgcloud.pw/images/2022/12/05/XxGZsX.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 550x309, components 3\012- data
Hash 3e17c26fe106328432b20c2df1a5fa37
950e8d3b95fa973eaa5733d6fc906bf908bf70b0
9d3427758599bbfe2bb96da601167d3323b68206e4e0e1cb5ba8a7cc37929fe0
GET /images/2022/12/05/XxGZsX.md.jpg HTTP/1.1
Host: imgcloud.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: image/jpeg
content-length: 38189
last-modified: Mon, 05 Dec 2022 11:15:22 GMT
etag: "638dd2ca-952d"
accept-ranges: bytes
X-Firefox-Spdy: h2
imgcloud.pw/images/2022/12/05/XxFPcO.md.jpg
200 OK 53 kB URL HTTP/2 imgcloud.pw/images/2022/12/05/XxFPcO.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 550x309, components 3\012- data
Hash 8c13e0b9912675d28acc21f1195e1a58
1d085af6e0c36f0801e7d834846a9d86629c36e2
42502ebdb09b84ac79ee731a80e899eb1398380a309177f4519002704f746143
GET /images/2022/12/05/XxFPcO.md.jpg HTTP/1.1
Host: imgcloud.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: image/jpeg
content-length: 53100
last-modified: Mon, 05 Dec 2022 10:30:19 GMT
etag: "638dc83b-cf6c"
accept-ranges: bytes
X-Firefox-Spdy: h2
imgcloud.pw/images/2022/12/05/XxF0D0.md.jpg
200 OK 52 kB URL HTTP/2 imgcloud.pw/images/2022/12/05/XxF0D0.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 550x309, components 3\012- data
Hash 63a54056f270425ad33ec817ec793ee4
4e33af9eb75f4ab442607969a5f427de3f624292
537963012b503d4cd7ad4b2c5487e5bbe0ea3f703c97a1c064ab293169ddfdc4
GET /images/2022/12/05/XxF0D0.md.jpg HTTP/1.1
Host: imgcloud.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: image/jpeg
content-length: 52434
last-modified: Mon, 05 Dec 2022 10:31:30 GMT
etag: "638dc882-ccd2"
accept-ranges: bytes
X-Firefox-Spdy: h2
imgcloud.pw/images/2022/12/05/XxF3Ut.md.jpg
200 OK 69 kB URL HTTP/2 imgcloud.pw/images/2022/12/05/XxF3Ut.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 550x367, components 3\012- data
Hash d82ffedf169b88711f3f54a5fb1db964
4b662a7a35755f536dd286ba1281462b50f91f49
37b76e651f05a7b28a0a2a976d5f857c53c531bb0abc39312fdb9395f1c3abbe
GET /images/2022/12/05/XxF3Ut.md.jpg HTTP/1.1
Host: imgcloud.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: image/jpeg
content-length: 69132
last-modified: Mon, 05 Dec 2022 10:29:32 GMT
etag: "638dc80c-10e0c"
accept-ranges: bytes
X-Firefox-Spdy: h2
imgcloud.pw/images/2022/12/05/XxFx8J.md.jpg
200 OK 100 kB URL HTTP/2 imgcloud.pw/images/2022/12/05/XxFx8J.md.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 550x825, components 3\012- data
Size 100 kB (100118 bytes)
Hash e8f1b803483a4dd7c4074dfc34d787a9
607d5f8545f015446922d283ab1b33fae363299a
64b2ce716a51b1ba328dc04df2cc5666e19499d230d5e7d39d0ae9f2ee2b9c93
GET /images/2022/12/05/XxFx8J.md.jpg HTTP/1.1
Host: imgcloud.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: image/jpeg
content-length: 100118
last-modified: Mon, 05 Dec 2022 10:48:46 GMT
etag: "638dcc8e-18716"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 277 B IP
Hash 7dfc763c29cf595c294544ab5feda79f
43b41049f4ea408668ad90db49d4a7520356591b
7400c9f9d384867321af3f1859f3ac2201bd0b3b578d75f7daa7cc511a0992e5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5912
Cache-Control: max-age=134061
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:34 GMT
Etag: "638da553-115"
Expires: Wed, 07 Dec 2022 09:39:55 GMT
Last-Modified: Mon, 05 Dec 2022 08:01:23 GMT
Server: ECS (amb/6B88)
X-Cache: HIT
Content-Length: 277
adsxyz.com/sponsors/traffic/left_300x250x2.html
200 OK 716 B URL HTTP/2 adsxyz.com/sponsors/traffic/left_300x250x2.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a7eabaea1ab1e81b11f3dcbe16a504c1
02c1f99d242bed3aec0d6e561b46ef35e4d21d28
c8f9927ffc9340205fda0c2df3155918fdcd89500991233756908881fc78d4f4
GET /sponsors/traffic/left_300x250x2.html HTTP/1.1
Host: adsxyz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: text/html
last-modified: Fri, 24 Jun 2022 08:10:36 GMT
strict-transport-security: max-age=31536000
x-frame-options: ALLOWALL
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tlkdbzpoyemBrXbczLOgR1ZqywMEq7TnHP93koNwoBBMLmP8RWj4q37CD7pA92wM892i6r6CzFX%2FQ1VFFfcIloLyPGh4KeTGAPeCUKhhODP984KfxBBqLgqIi0oC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774f83076b9fb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/IiqKV3SOT2Y
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/IiqKV3SOT2Y
IP
Hash 5531b33e6b26adb55d4f8578adf346b8
b38e5a4c49e993734b1c9146c60ff8fecf2fd5ca
a2cca8ec6f8148dbfe158a27b863cc8d340e36d032195d45260dd1b5588dc4ea
POST /s/gts1p5/IiqKV3SOT2Y HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:34 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 56e38cfcfa3b4d0ec69b478ff8befba3
2fa5d1179fa11d75ecfcfeb4fb73a1afaf075137
a3eaac4498a3ed4d3a7e98a7787aea2352c6b9116dc5fd67d1d4ec598ed2b3f1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:34 GMT
Etag: "638d1452-117"
Server: ECS (amb/6B8E)
Content-Length: 279
www.googletagmanager.com/gtag/js?id=G-D87R5XW8W4
200 OK 83 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-D87R5XW8W4
IP
File type ASCII text, with very long lines (861)
Hash e43212d689f40c38330f504388478b86
73d85a291a85a17de1c1dba0c017f94db6cd4d02
d9f4d26d26014c57ee2d659c124a73445f7266bc5551bf8413ea0b232b0c7767
GET /gtag/js?id=G-D87R5XW8W4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adsxyz.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Dec 2022 20:25:34 GMT
expires: Mon, 05 Dec 2022 20:25:34 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72804
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 32a8b71c2ae063af27a7bbee38a0705b
7219109299cfab01a1a99e65d7372b7e84bf0dd7
8df8eaba008aa39c9f684295d18c50d499fb2315e03fedb278d28dd87bf8a08d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 880
Cache-Control: max-age=124348
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:34 GMT
Etag: "638d930a-117"
Expires: Wed, 07 Dec 2022 06:58:02 GMT
Last-Modified: Mon, 05 Dec 2022 06:43:22 GMT
Server: ECS (amb/6B88)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5f16a534222e5749ef240d413826c2f6
11683d84d420dd6f919425094edb8961278f7fed
691ebf7feb1f7d6ae7e5e7efd678626c62042dda520506f262c7d9a67a48e3ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/IiqKV3SOT2Y
200 OK 21 kB URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/IiqKV3SOT2Y
IP
Hash 531c95b93fc68d326da3a2b505174de2
1c86b5c2625567ac32d934f7706c293c119bb8c0
0c7c8a6ac90fe883f50694e777f8dbdacaf068f200c12f9a66b8e459ba965474
POST /s/gts1p5/IiqKV3SOT2Y HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:34 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adsxyz.com/sponsors/traffic/index.html
200 OK 1.1 kB URL HTTP/2 adsxyz.com/sponsors/traffic/index.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 6f3ffd81835c5028ffa6765cb61eec93
0705ec03dd3979239b0cc777cc2eab287ccf03be
3a1c86d1bdfcd41d538650d607f1151c38e8ce6ed5b24e839983e51f12f42ee5
GET /sponsors/traffic/index.html HTTP/1.1
Host: adsxyz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: text/html
last-modified: Mon, 09 May 2022 16:36:23 GMT
strict-transport-security: max-age=31536000
x-frame-options: ALLOWALL
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yiOPXFiyfKyHjig6rWx0eJDJVeUfivBF3moQ%2B5VxPKOGXfXWCAqD29falvciNX1JET4EEh80B99a1Nq65Raos08ZhSKoAbRrhJFV5n0jMe%2FQ7Cc74ShaQrA9rmj7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774f83074b84b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
adsxyz.com/sponsors/traffic/right_200x200x3.html
200 OK 717 B URL HTTP/2 adsxyz.com/sponsors/traffic/right_200x200x3.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash de562e5b3a656a5b6b01b8d83859382f
76d5c54c8498beec27476b22f8dc6e315b22067e
b3027305eba27519e7a4502e807c49eb82332925262996c032fdd3d7c225c70d
GET /sponsors/traffic/right_200x200x3.html HTTP/1.1
Host: adsxyz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: text/html
last-modified: Sat, 04 Jun 2022 08:32:43 GMT
strict-transport-security: max-age=31536000
x-frame-options: ALLOWALL
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zkHfgacDVWSI%2BEuK6f5EPaSAH%2FmxN3M%2Bek0lUN%2FQ5AlQItimrfSf7ugrNEZIkbjrrS4lQHnxccoAHEHXtu1frqYXYD1lxLLK2OzloB0ORvlWVqFgKH%2FBZER%2FR3gm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774f83074b82b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
adsxyz.com/sponsors/traffic/left_300x250x3.html
200 OK 822 B URL HTTP/2 adsxyz.com/sponsors/traffic/left_300x250x3.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d24bf4489091bfc916da97f153d133cd
5dab5a5e905a077d0cfa4085ed148cda4579d092
2c622827069eec843b5e4627d6bb459132a9f9a26fb2b4c639ceb5c1ee637825
GET /sponsors/traffic/left_300x250x3.html HTTP/1.1
Host: adsxyz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: text/html
last-modified: Sat, 04 Jun 2022 08:32:01 GMT
strict-transport-security: max-age=31536000
x-frame-options: ALLOWALL
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ugZUAqfKDS%2F3rVWWb%2BqugRkrHHBT5TNksWDwVAQpM2FW%2FooF4QKZxoyPnNi6pzLbBaStgln7Z%2B7rMQJEuYcYFshmy2c3UsbY92eCutLRzeiDQxvF%2BisSKp%2Bx7NsC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774f83076ba1b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 4b21e8e65b1f7836ab5b17a4b289e7ed
0462304c8db73cd65f13c5c5875fe64e224a7e94
500778e0ae9f9c96b73a693354a3bd1c0c45f3dff3bfcb517fb4c902c1fe9919
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "500778E0AE9F9C96B73A693354A3BD1C0C45F3DFF3BFCB517FB4C902C1FE9919"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8382
Expires: Mon, 05 Dec 2022 22:45:17 GMT
Date: Mon, 05 Dec 2022 20:25:35 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 280 B IP
Hash fe81538e07b7c219a0618e8bc273b676
e81a88a41f02c8ed7e7ce9bae321be31c467509b
55ca09955297fe3f54eb5025f0818765fb440ccdbc6586bab872cf51f61f5e08
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 20:25:35 GMT
Content-Type: application/ocsp-response
Content-Length: 280
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 21:53:51 GMT
Expires: Fri, 09 Dec 2022 21:53:50 GMT
Etag: "e81a88a41f02c8ed7e7ce9bae321be31c467509b"
Cache-Control: max-age=350294,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 774f830a8864b4fd-OSL
ocsp.pki.goog/s/gts1p5/IiqKV3SOT2Y
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/IiqKV3SOT2Y
IP
Hash 5531b33e6b26adb55d4f8578adf346b8
b38e5a4c49e993734b1c9146c60ff8fecf2fd5ca
a2cca8ec6f8148dbfe158a27b863cc8d340e36d032195d45260dd1b5588dc4ea
POST /s/gts1p5/IiqKV3SOT2Y HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:35 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/JNJj-Xek6-M
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/JNJj-Xek6-M
IP
Hash 081fc8bdf55fc9645dc8ec60bba3f80d
f8018dabc8441da3f8909009fa507bd75c06726b
1d0ffea0c38a7fb13c9b64ba57bf212445beb12e8b7951676c608d724dabe8b9
POST /s/gts1p5/JNJj-Xek6-M HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:35 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
200 OK 26 kB URL HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Mon, 05 Dec 2022 20:25:35 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 280 B IP
Hash fe81538e07b7c219a0618e8bc273b676
e81a88a41f02c8ed7e7ce9bae321be31c467509b
55ca09955297fe3f54eb5025f0818765fb440ccdbc6586bab872cf51f61f5e08
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 20:25:35 GMT
Content-Type: application/ocsp-response
Content-Length: 280
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 21:53:51 GMT
Expires: Fri, 09 Dec 2022 21:53:50 GMT
Etag: "e81a88a41f02c8ed7e7ce9bae321be31c467509b"
Cache-Control: max-age=350294,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 774f830a8fc6b515-OSL
syndication.realsrv.com/splash.php?native-settings=1&idzone=4700104&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=1&loaded=0
200 OK 65 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?native-settings=1&idzone=4700104&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=1&loaded=0
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash 5f23ad3f8373626086f1128edf6d622a
82c5387c5d8a366b3fa705c2cfc7a1a8b407fc5d
f54107013d1de18678f5adc6c8fc06f5a7c25c50654b7a90d3c057b9b77a65fb
GET /splash.php?native-settings=1&idzone=4700104&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=1&loaded=0 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://banner.pornx2.com
Connection: keep-alive
Referer: https://banner.pornx2.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Dec 2022 20:25:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://banner.pornx2.com
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A31%3A%22638e53bf9156a6.7399170020356732%22%3B%7D; expires=Wed, 04 Dec 2024 20:25:35 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
impressions=cmmsxrbonxgxameexmllsgeicmmsxaeenxgxameesscrsgeimacslbecnxgxaaabssxamgeislsaroornxgxaallsbmomgeicxbmsbxcnxgxaallaccblgeioslmrxlrnxgxameoabeergeiccmmlmlcnxgxamexmlmxxgeialbsereanxgxaalrollmegeioslmrxbrnxgxamexlsmlrgeicxbmsbcenxgxaallsbmbbgeioslmrxlsnxgxameoceomcgeicxbmsbocnxgxaallcccaogeicxbmsboenxgxaalbaaamegeiclsmarcanxgxaaallsxlcgeiclsmrrmanxgxaaallsxlcgeirbabxabbnxgxameexmllsgeiccmmlleanxgxameexmerxgeimcrxsbcenxgxaameollsmgeimreaoboenxgxaameollsmgeimcclosscnxgxaalccxmexgeimacslbeenxgxaaboslelageioslmroemnxgxamexasxcrgeioslmrxbmnxgxameosaccrgeicaxsscmbnxgxamexrbcemgeicaormlxonxgxaamealeoegeicaormbmcnxgxaamealeoegeimcclsxscnxgxaamsmxlcageimccloscanxgxaallmalxmgeimreaomxenxgxaamelbbsbgeimreaobscnxgxaamelbbsbgeimcclosconxgxaallsbmbbgeimcclsoeonxgxaamxaacblgeimacslbeonxgxaaloesaslgeimcclsxsanxgxaamsmxlcageimcclsxlbnxgxaamssmcolgeimaecseaonxgxaamssmcolgeimaecsxeonxgxaamssmcolgeimaecseronxgxaamssmcolgeimrblelrenxgxaamssmcolgeiccmmllebnxgxameoxbrrrgeimcclsxlonxgxaamcsebsxgeimcclsoeenxgxaamcrclalgeimcclsxsbnxgxaamcrclalgeimcclossbnxgxaalbexcrageimcclsxlcnxgxaamrscxmxgeimaecseranxgxaabrlemaegeimcclosccnxgxaamrscxmxgeicaormlxcnxgxaalbxrlcegeicaormbmbnxgxaalrexasogeiclsmrbsenxgxaamaxcsxcgeialbserebnxgxamexsrmoogeimcclsxconxgxameoabeergeimcclsxmenxgxameoceomcgeialbserxonxgxaalbcxbsageimccloscenxgxaalmlsmmcgeimcclsxxonxgxameexxllrgeimcclsxbcnxgxameexmllsgeicaormlxanxgxaammacmrxgeimcclsxaonxgxameoabeergeimrblxxxbnxgxaambboecmgeimrblxelcnxgxaambboecmgeimrblxxrbnxgxaambboecmgeialbserxenxgxamexmlmxxgeimacslbeanxgxaablxaelxgeialbserecnxgxameoxbrrrgeiccmmllecnxgxamexsrmoogeisaeeasslnxgxaabrbeccogeimcclossanxgxaabrlemaegeimcclsxronxgxameoceomcgeimaecseabnxgxaabrlemaegeimrblelrcnxgxaabrlemaegeimrblxemonxgxaabrlemaegeimcclsxcanxgxaalrlccrxgeimaecsxoonxgxaabmalbxxgeircsxcxscnxgxaabbxeomsgeicaormbbenxgxaalexxbcxgeiabeocmconxgxaablxrcmmgeimcclsxxcnxgxaalesmxrsgeimrblxeeanxgxaablsaloageimaecsemanxgxaalmmeabageimaecselonxgxaaloaroaageimcclsxacnxgxameexmllsgeimcclselenxgxameexmllsgeimaecsxronxgxaalxmmoorgeimaecsxsenxgxaalxmmoorgeimaecsercnxgxaalxmmoorgeimaecsembnxgxaalxmmoorgeimaecselenxgxaalxmmoorgeimaecobobnxgxaalsmleergeimaecomoanxgxaalsbbboageimrblxxoenxgxaalsbmacmgeimaecobsbnxgxaalsbbboageimrblxosonxgxaalsbbboageimcclsxmanxgxameexxllcgeimaecsxccnxgxaalmeeamageimrblxeecnxgxaalmeeamageimrblelronxgxaalmeeamageimrblelmonxgxaalmeeamageimaecseacnxgxaalmmeabageimaecsxxcnxgxaalmmeabageicaormbmanxgxaalbxrlcegeimaecsxocnxgxaalbrxssogeicaormlobnxgxaallcccaogeimaecomrenxgxameexxllcgeimrblxxxanxgxameexxllrgeimrblxosbnxgxameexxllrgeimaecomlonxgxameexxllrgeimcclselanxgxameoesomcgeimrblxoxenxgxameexmllsgeimaecomconxgxameexmllsgeialbbebsbnogxamexbmreogxcceimrlxebeansgxamexbmreogxcceimaoolslanxgxamexbmbeagxcceialbbellcnxgxamexbbcrxgxcceimellboxbnxgxamexbbcrxgxcceimxxrecsanxgxamexlxebegxcceimmxsrbmensgxamexlxxalgxcceimeelaclcnomgxamexlxxalgxcceimmxsrbabnsgxamexlxxalgxcceimxeemlxcncgxamexlsoamgxcceimxxerrecnxgxamexlsmlrgxcceimxlbmoscnogxamexlsmlrgxcceimaoobrbanrgxamexlsmlagxcceimxlbmosenrgxamexlcxxogxcceimaoobrbcnsgxamexlcxxogxcceimmomloxonxgxamexlcxxogxcceimxlbmxbbnsgxamexlcxxogxcceiclsmrrrenxgxamexlcmeageiclsmarocnxgxamexlcmeageiclsmrbecnxgxamexlcmeageialbbblbanxgxamexlcmeagxcceiclsmarcbnxgxamexlcmeageicloaxxabnxgxamexlraacgxcceixaoossalnmgxamexlrllogxcceimmsxaolanxgxamexlrllogxcceimeembecencgxamexlrllogxcceialbbxeecnxgxamexlrllrgxcceicmarxbbonsgxamexlabaagxcceimrmbbracnxgxamexlbxbogxcceimrmbbraanxgxamexlbxbogxcceimrmbbrmbnxgxamexlbllbgxcceimrmbbrronxgxamexlbllbgxcceimxxerrxenxgxameoexlmegxcceimxcbrxscnxgxameoexlmegxcceialbbebrenxgxameoexlmegxcceiaaxcambbnxgxameoexlmxgxcceialbmmbmbnxgxameoexlmxgxcceialbmmbbonxgxameoexlmxgxcceialbmmblcnxgxameoexlmxgxcceicloaxxoonxgxameoexlmxgxcceimxcbrxlcnxgxameoexlmxgxcceimxxerreonxgxameoesomcgxcceimromobacnxgxameoeamacgxcceimxlbmoconogxameoeamacgxcceimxeoxsacnbgxameoemoxagxcceimrbasxrenagxameoebclogxcceimxeemlxenxgxameoelrxxgxcceimeembesonxgxameoelmocgxcceimemlxmcbnxgxameoxeexsgxcceimxcbrxaonogxameoxecsmgxcceimellboxanxgxameoxecsmgxcceimclxlloanxgxameoxecsbgxcceimeelaclanlgxameoxxroxgxcceimxcbrxabnxgxameoxoeecgxcceimxlbmxlencgxameoxosaagxcceimxcbrxocnxgxameoxselagxcceimmsxaolenxgxameoxsrsagxcceimxcbrxronxgxameoxclbbgxcceimeelaclbnxgxameoxrexlgxcceimellboocnxgxameoxrexlgxcceimeelarecnxgxameoxreaagxcceimrbbocsanxgxameoxabsogxcceimmossscensgxameoxabssgxcceimmoeeoecnxgxameoxabscgxcceimmoeexlcnxgxameoxabscgxcceimcssmlrensgxameoxabscgxcceimxlbmosanogxameoxbrragxcceimcoaxmxcnrgxameoooaolgxcceimcssmlrcnsgxameoooleogxcceirlrecalanxgxameooolecgxcceimellbosbnxgxameoormssgxcceialrexexbnxgxameoolscmgxcceimaoobbebnxgxameosococgxcceimsacexoonxgxameosorabgxcceimxlbalscnsgxameosorabgxcceimclsaoxbncgxameosrobrgxcceimrxccosensgxameosaxcxgxcceimxlbmosonsgxameosaccrgxcceimcssmlronsgxameosaccrgxcceimmosssconrgxameosllexgxcceimxlbmoobnsgxameoslleogxcceimraeelabnxgxameoslleogxcceimraeelaanxgxameoslleogxcceimxcbrxmbnxgxameoceomcgxcceimxxerreanxgxameoceomcgxcceimmomxxobnxgxameoccxrcgxcceimmxsrbaonsgxameoclcsbgxcceimmooobronxgxameoreeamgxcceimcoaxmxonrgxameoreeamgxcceimrxccoscnxgxameoreeabgxcceimmooobrcnxgxameoreeabgxcceimmxsrbaanogxameoreeabgxcceimxeemlebnxgxameoreeabgxcceimmsxrlabnxgxameoreombgxcceimmsoxrlenxgxameoreombgxcceicloaxxmonxgxameoreloogxcceialbmbrmanxgxameorxslsgxcceimemlxbocnxgxameorxslsgxcceimmsoxrlonxgxameoroesxgxcceimrmaobxansgxameoroamsgxcceiceecmorsnxgxameorcmbcgxcceicxmecmcanxgxameorcmbrgxcceimaoolcoonxgxameoaomlogxcceimrmbbolcnxgxameoasxbogxcceimxeoxsbensgxameoacambgxcceialaroxrcnxgxameoaaccbgxcceimxlbmxlcnogxameoabeergxcceixaoosscrnxgxameomexlogxcceimmsoxrlcnxgxameomexlogxcce; expires=Tue, 06 Dec 2022 20:25:35 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4700104%7C71021380%7C110382%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C09819452e62bdf538a58dd864debcc71%7C0%7Cadsxyz.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Dec 2022 20:25:35 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 277 B IP
Hash 7dfc763c29cf595c294544ab5feda79f
43b41049f4ea408668ad90db49d4a7520356591b
7400c9f9d384867321af3f1859f3ac2201bd0b3b578d75f7daa7cc511a0992e5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5913
Cache-Control: max-age=134061
Content-Type: application/ocsp-response
Date: Mon, 05 Dec 2022 20:25:35 GMT
Etag: "638da553-115"
Expires: Wed, 07 Dec 2022 09:39:56 GMT
Last-Modified: Mon, 05 Dec 2022 08:01:23 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 277
syndication.realsrv.com/splash.php?native-settings=1&idzone=4700100&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=1&loaded=0
200 OK 1.9 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?native-settings=1&idzone=4700100&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=1&loaded=0
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (3543), with no line terminators
Hash 2bf4b4c44dcceeabd33d9c944b7d5d2b
1f1b58e909ad8fe70f627f33b8fa93a5a33d1f2a
5c361a65189a7c6ae1f3a32a619e641d501e05a8092f4e795b508ac51ffbfbec
GET /splash.php?native-settings=1&idzone=4700100&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=1&loaded=0 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://banner.pornx2.com
Connection: keep-alive
Referer: https://banner.pornx2.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Dec 2022 20:25:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://banner.pornx2.com
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638e53bf980110.762356452307266018%22%3B%7D; expires=Wed, 04 Dec 2024 20:25:35 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4700100%7C23975185%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C09819452e62bdf538a58dd864debcc71%7C0%7Cadsxyz.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Dec 2022 20:25:35 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/splash.php?native-settings=1&idzone=4700104&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=3&loaded=1
200 OK 3.5 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?native-settings=1&idzone=4700104&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=3&loaded=1
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (6787), with no line terminators
Hash c2fa2c37756ea62ede5d291beb56f4a9
dd5bda9f6e5cae795d44832af288181c205304bd
d41f9956ec25c1cc51544f2c9556c7e6d1bfe300e7dad554fade0fb11f668a75
GET /splash.php?native-settings=1&idzone=4700104&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=3&loaded=1 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://banner.pornx2.com
Connection: keep-alive
Referer: https://banner.pornx2.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638e53bf980110.762356452307266018%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4700100%7C23975185%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C09819452e62bdf538a58dd864debcc71%7C0%7Cadsxyz.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Dec 2022 20:25:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://banner.pornx2.com
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638e53bf980110.762356452307266018%22%3B%7D; expires=Wed, 04 Dec 2024 20:25:35 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4700104%7C74493112%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C638e53bf980110.762356452307266018%7C09819452e62bdf538a58dd864debcc71%7C0%7Cadsxyz.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Dec 2022 20:25:35 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4700104%7C74493142%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C638e53bf980110.762356452307266018%7C09819452e62bdf538a58dd864debcc71%7C0%7Cadsxyz.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Dec 2022 20:25:35 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4700104%7C23975193%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C638e53bf980110.762356452307266018%7C09819452e62bdf538a58dd864debcc71%7C0%7Cadsxyz.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Dec 2022 20:25:35 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s3t3d2y8.afcdn.net/library/140058/e57cf07a049e49b51c156d752ea761aa0dcd4bda.webp
200 OK 9.2 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/140058/e57cf07a049e49b51c156d752ea761aa0dcd4bda.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 65c256aae6dc21765215f9a9b0792c23
e57cf07a049e49b51c156d752ea761aa0dcd4bda
de75f84d56e9a91f819ea220a66a911a37ea5cfb226d9c8576265fdcb281a62b
GET /library/140058/e57cf07a049e49b51c156d752ea761aa0dcd4bda.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://banner.pornx2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:35 GMT
content-type: image/webp
content-length: 9202
last-modified: Wed, 03 Nov 2021 11:53:07 GMT
etag: "61827823-23f2"
expires: Fri, 30 Jun 2023 11:10:34 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195216
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCRQRImD/r7bPAA
x-77-nzt-ray: af58563020907506bf538e635ef9dc33
x-cache: HIT
x-age: 13612719
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
syndication.realsrv.com/splash.php?native-settings=1&idzone=4700100&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=1&loaded=0
200 OK 2.0 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?native-settings=1&idzone=4700100&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=1&loaded=0
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (3635), with no line terminators
Hash dcf9a9601922fc03abb4732930e17b05
634a567f39d50e98d942ccd34c23a82c50e382d3
661d6c7ca3a757ff56596dec06b365736b2286c58e448dc99703c1a7c5f66f50
GET /splash.php?native-settings=1&idzone=4700100&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=1&loaded=0 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://banner.pornx2.com
Connection: keep-alive
Referer: https://banner.pornx2.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638e53bf980110.762356452307266018%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4700104%7C23975193%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C638e53bf980110.762356452307266018%7C09819452e62bdf538a58dd864debcc71%7C0%7Cadsxyz.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Dec 2022 20:25:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://banner.pornx2.com
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638e53bf980110.762356452307266018%22%3B%7D; expires=Wed, 04 Dec 2024 20:25:35 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4700100%7C23975195%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C638e53bf980110.762356452307266018%7C09819452e62bdf538a58dd864debcc71%7C0%7Cadsxyz.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Dec 2022 20:25:35 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/splash.php?native-settings=1&idzone=4700100&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=1&loaded=0
200 OK 2.0 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?native-settings=1&idzone=4700100&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=1&loaded=0
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (3635), with no line terminators
Hash aa4784e161913f653b907cead41fa6ae
7a4c6f5468f5b4a1fb15e00030ea669bef8e34ec
90d90605b5bff61b29c266516bd3719b38fd7b6b3997775f405d21255c1129af
GET /splash.php?native-settings=1&idzone=4700100&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=1&loaded=0 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://banner.pornx2.com
Connection: keep-alive
Referer: https://banner.pornx2.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638e53bf980110.762356452307266018%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4700104%7C23975193%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C638e53bf980110.762356452307266018%7C09819452e62bdf538a58dd864debcc71%7C0%7Cadsxyz.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Dec 2022 20:25:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://banner.pornx2.com
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638e53bf980110.762356452307266018%22%3B%7D; expires=Wed, 04 Dec 2024 20:25:35 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4700100%7C23975185%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C638e53bf980110.762356452307266018%7C09819452e62bdf538a58dd864debcc71%7C0%7Cadsxyz.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Dec 2022 20:25:35 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s3t3d2y8.afcdn.net/library/761560/aff16dc44b7afe6bc9c40ebc15af039a96c09055.webp
200 OK 10 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/761560/aff16dc44b7afe6bc9c40ebc15af039a96c09055.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0e4867359692ea09486c09307f5db054
aff16dc44b7afe6bc9c40ebc15af039a96c09055
c860932ff98f21366a4861ea670b31fd0a8383327cbfc09040647cefd7889970
GET /library/761560/aff16dc44b7afe6bc9c40ebc15af039a96c09055.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://banner.pornx2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:35 GMT
content-type: image/webp
content-length: 10414
last-modified: Thu, 03 Mar 2022 12:22:53 GMT
etag: "6220b31d-28ae"
expires: Sat, 09 Sep 2023 00:34:17 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1694770541
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCRSbK/X/0mFrAA
x-77-nzt-ray: af58563020907506bf538e6386801d39
x-cache: HIT
x-age: 7037394
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/802444/8d556f01a0a027fd5743a851458a0c2fa83388ba.webp
200 OK 6.3 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/802444/8d556f01a0a027fd5743a851458a0c2fa83388ba.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 08f0d637a8bece01677b78c56c3477b5
8d556f01a0a027fd5743a851458a0c2fa83388ba
07698e284ebdc9b08584215029b7bc35b2424b91f52e0a30c8e50bec44e59ad2
GET /library/802444/8d556f01a0a027fd5743a851458a0c2fa83388ba.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://banner.pornx2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:35 GMT
content-type: image/webp
content-length: 6324
last-modified: Fri, 15 Jul 2022 11:08:07 GMT
etag: "62d14a97-18b4"
expires: Sat, 15 Jul 2023 11:43:20 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1689568095
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCRQ//k3/4MO6AA
x-77-nzt-ray: af58563020907506bf538e63af102639
x-cache: HIT
x-age: 12239840
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/802444/829cd26ee8f73baca4dedfe762897593489bff22.webp
200 OK 6.8 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/802444/829cd26ee8f73baca4dedfe762897593489bff22.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f019913fa1bcdd5dfe98af59ac49bbb2
829cd26ee8f73baca4dedfe762897593489bff22
66d870e5558d185796bbfb5dd24d4a3ad46a4042933e49e98567659746c230cf
GET /library/802444/829cd26ee8f73baca4dedfe762897593489bff22.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://banner.pornx2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:35 GMT
content-type: image/webp
content-length: 6768
last-modified: Fri, 15 Jul 2022 11:08:07 GMT
etag: "62d14a97-1a70"
expires: Sat, 15 Jul 2023 11:44:54 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1689487730
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCRRf+LH/zf27AA
x-77-nzt-ray: af58563020907506bf538e6331ce2b39
x-cache: HIT
x-age: 12320205
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/140058/d35401b29d0c4fd1079651c0fde2f01f97ec11a4.webp
200 OK 10 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/140058/d35401b29d0c4fd1079651c0fde2f01f97ec11a4.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash dca61ca44b9a87b631eb5200c12f234c
d35401b29d0c4fd1079651c0fde2f01f97ec11a4
bc0c8c5a132af93ccc2cfbc1784f2e67119a9c72e289b8ab502561e16be71b03
GET /library/140058/d35401b29d0c4fd1079651c0fde2f01f97ec11a4.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://banner.pornx2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:35 GMT
content-type: image/webp
content-length: 10254
last-modified: Wed, 03 Nov 2021 11:53:34 GMT
etag: "6182783e-280e"
expires: Fri, 30 Jun 2023 11:13:36 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195271
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCRQiD5T/eLbPAA
x-77-nzt-ray: af58563020907506bf538e6364bb2f39
x-cache: HIT
x-age: 13612664
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
syndication.realsrv.com/splash.php?native-settings=1&idzone=4700102&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=1&loaded=0
200 OK 2.0 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?native-settings=1&idzone=4700102&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=1&loaded=0
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (3637), with no line terminators
Hash 1fa2c4ed217f413b8aaab1b649c22ee2
f67410b1a4738e400f46582f1d60bce6c389119c
e91c35eaf16dbb2771ef6808d64daf495ed344d5fd6bff177d3134be2d2b5c86
GET /splash.php?native-settings=1&idzone=4700102&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=1&loaded=0 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://banner.pornx2.com
Connection: keep-alive
Referer: https://banner.pornx2.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638e53bf980110.762356452307266018%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4700104%7C23975193%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C638e53bf980110.762356452307266018%7C09819452e62bdf538a58dd864debcc71%7C0%7Cadsxyz.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Dec 2022 20:25:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://banner.pornx2.com
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638e53bf980110.762356452307266018%22%3B%7D; expires=Wed, 04 Dec 2024 20:25:35 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4700102%7C23975187%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C638e53bf980110.762356452307266018%7C09819452e62bdf538a58dd864debcc71%7C0%7Cadsxyz.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Dec 2022 20:25:35 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
200 OK 78 kB URL HTTP/2 s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash ac1b5db6377f89a6d7f517c571b8ddba
87205f72f7338d717dd2966119ecb6aae22d5835
9164225c4ffa9eded3fd96fd8403249cf67e2047354fc245fb349216565d00a2
GET /static/layers.fa6cd1947ce26e890d3d.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-41cf5"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 77691
date: Mon, 05 Dec 2022 20:25:36 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
z.moatads.com/addthismoatframe568911941483/moatframe.js
200 OK 948 B URL HTTP/2 z.moatads.com/addthismoatframe568911941483/moatframe.js
IP
File type ASCII text, with very long lines (523)
Hash f14b4e1f799b14f798a195f43cf58376
b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: TYrAmp44ddThNKrHeBmfOrJOox8ItZdAJeP4Uj7Uut6T7Jvp1PpX/XFzXT0gU1oJH/SwK8Irisw=
x-amz-request-id: 598E0BAF9E725A50
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
unused62: 8096267
cache-control: max-age=57717
date: Mon, 05 Dec 2022 20:25:36 GMT
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 825a300d1eb0cc3ad3b7ac0c0499b946
5798cd7466b04d4ca41a415b31ea566fb5cd910d
94205b8ddbdc5fcbd36d52ebc36a56e14b7c0a207bb3db2ca1ea1a3bd25cebc1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Dec 2022 20:25:36 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 03 Dec 2022 05:29:15 GMT
Expires: Sat, 10 Dec 2022 05:29:14 GMT
Etag: "5798cd7466b04d4ca41a415b31ea566fb5cd910d"
Cache-Control: max-age=377617,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 774f83106903b4fd-OSL
ad.a-ads.com/2077818?size=300x250
200 OK 16 kB URL HTTP/2 ad.a-ads.com/2077818?size=300x250
IP
ASN #24940 Hetzner Online GmbH
Hash 9a21b25886cfb35ea61658e07e8c68ed
0e77a98122bd7e09684828f77068086fbb4dec94
b1ac02d5ee73eda6cd8970438f5cd87bccc311228cbaeb95c754efd778263bff
GET /2077818?size=300x250 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fappedia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:35 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://fappedia.com/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
adsxyz.com/sponsors/traffic/728x90.html
200 OK 11 kB URL HTTP/2 adsxyz.com/sponsors/traffic/728x90.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f2e64130acf9c1700736244783d30a2e
9bfef07c4114d105ce10b1da7828688707ee76da
586c62dac205a19824ac770581b87bbcda1c1dc632cf7c3c8b52f59ee60a3845
GET /sponsors/traffic/728x90.html HTTP/1.1
Host: adsxyz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: text/html
last-modified: Fri, 24 Jun 2022 08:11:14 GMT
strict-transport-security: max-age=31536000
x-frame-options: ALLOWALL
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kNequdjUV55tWn0vikn3hLSwfTS5zJTVW328cd%2BY4teR72%2BC8e7L6TU1CKibgKCuRMCKuriyoa2TnqPotYIevecplxTE7Rnjf1oNVQyQEXf7DVu6fudfhDC3QgLh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774f83075b93b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.addthis.com/live/red_lojson/300lo.json?si=638e53bcf779ab12&bkl=0&bl=1&pdt=2569&sid=638e53bcf779ab12&pub=&rev=v8.28.8-wp&ln=en&pc=men&cb=1&ab=-&dp=clip69.biz&fp=&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1670271932644&jsl=1&uvs=638e53bc3e4e38f0000&skipb=1&callback=addthis.cbs.jsonp__74499823483928420
200 OK 319 B URL HTTP/2 m.addthis.com/live/red_lojson/300lo.json?si=638e53bcf779ab12&bkl=0&bl=1&pdt=2569&sid=638e53bcf779ab12&pub=&rev=v8.28.8-wp&ln=en&pc=men&cb=1&ab=-&dp=clip69.biz&fp=&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1670271932644&jsl=1&uvs=638e53bc3e4e38f0000&skipb=1&callback=addthis.cbs.jsonp__74499823483928420
IP
Hash ee44add5438003069cdb98fd232ec904
36a0082d71da336236a1fdd461dc086300f61e94
d3cf997ca609745097c2fc8f5dd62e4e9ece71545af3d54bf2f2226ac0c20cdd
GET /live/red_lojson/300lo.json?si=638e53bcf779ab12&bkl=0&bl=1&pdt=2569&sid=638e53bcf779ab12&pub=&rev=v8.28.8-wp&ln=en&pc=men&cb=1&ab=-&dp=clip69.biz&fp=&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1670271932644&jsl=1&uvs=638e53bc3e4e38f0000&skipb=1&callback=addthis.cbs.jsonp__74499823483928420 HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 89
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Mon, 05 Dec 2022 20:25:36 GMT
X-Firefox-Spdy: h2
banner.pornx2.com/exoclick_300x250.html
200 OK 6.7 kB URL HTTP/2 banner.pornx2.com/exoclick_300x250.html
IP
Hash 9835c0933cd2ea14f1605dac5888e5e2
dcfe026c27781655d37620afbedfc8a695bb235e
c84f1877d07d92830c77f7d1e9fbf53227c5a0269e938632041fdc057ce8bec7
GET /exoclick_300x250.html HTTP/1.1
Host: banner.pornx2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adsxyz.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:35 GMT
content-type: text/html
last-modified: Tue, 31 May 2022 08:00:03 GMT
strict-transport-security: max-age=31536000
x-frame-options: ALLOWALL
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZTPAHzVjxQR2VkG0ZRryYvbcxy%2BwPTCka02pqD%2Fh8fKYG3RgO7%2F8qDTZNuU8Ur9cFmHCAlGKFgHNdjsuCpC%2BCwbzVt7e9fcvHsrp5oUIDqclnnLMpgAcGhSI6OIJBlR%2FRx3IPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774f8309ec4fb506-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.a-ads.com/a-ads-banners/426618/300x250?region=eu-central-1
200 OK 500 kB URL HTTP/2 static.a-ads.com/a-ads-banners/426618/300x250?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
Size 500 kB (499873 bytes)
Hash 565f115b5de023260d5b64338f5e0a9c
4d09f40a50f2f962fc36095a65b612106b99b13b
8add2013b772defb6e79a4d44f8d5f6715967f1b06093136b0e85d00d25a62b9
GET /a-ads-banners/426618/300x250?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:35 GMT
content-type: image/gif
content-length: 499628
x-amz-id-2: sh7sgnDgQzhJ9G/+MR61uYKSFNXF4f/QO+mH3+Mfjo0oXS+2O6xViXx5EiIyCz2MxIMzZT9tXAk=
x-amz-request-id: JN2YPSW9GYGY78ST
x-amz-replication-status: COMPLETED
last-modified: Sun, 20 Nov 2022 16:37:46 GMT
etag: "e4eb2c4ec1794d4e05b77ec20607b881"
cache-control: max-age=315360000
x-amz-version-id: aMmfct8jferkXctt.IjET.eVL2M61OoN
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
movieazza.com/banner/aads_250x250.html
200 OK 9.0 kB URL HTTP/2 movieazza.com/banner/aads_250x250.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a460d3034cecea89cdc622770eed353e
a68177c9d4e63160c4fa0ce1efcf2e23139b0c5b
51925b6c4efb51f8161434126308d76aa97f966f550381f618d12675ea519024
GET /banner/aads_250x250.html HTTP/1.1
Host: movieazza.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adsxyz.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:35 GMT
content-type: text/html
last-modified: Sun, 26 Sep 2021 10:48:17 GMT
strict-transport-security: max-age=31536000
x-frame-options: ALLOWALL
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ISs1BSpueU11N8uQvGpdO7mYdY%2BYEVDdrVLzucuIHbnYOIrtQz%2BLuKyAWYrkYPn9J%2BR53OlQz%2BgtedqgaTGRsfcheCCSZW%2F0FA7cEQdx7VxUjl2bG6HsjIb1XMVy3TwW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774f83091dd1b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!7akvmw8ny6&lm=0&ts=1670271934533&dn=TC&iso=0&t=Free%20Porn%20Videos%20CLIP69.BIZ%20-%20XXX%20Porno%20Tube%20-%20HD%20-%20Mobile%20Sex
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!7akvmw8ny6&lm=0&ts=1670271934533&dn=TC&iso=0&t=Free%20Porn%20Videos%20CLIP69.BIZ%20-%20XXX%20Porno%20Tube%20-%20HD%20-%20Mobile%20Sex
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!7akvmw8ny6&lm=0&ts=1670271934533&dn=TC&iso=0&t=Free%20Porn%20Videos%20CLIP69.BIZ%20-%20XXX%20Porno%20Tube%20-%20HD%20-%20Mobile%20Sex HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Mon, 05 Dec 2022 20:25:37 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!7akvmw8ny6&lm=0&ts=1670271934533&dn=TC&iso=0&t=Free%20Porn%20Videos%20CLIP69.BIZ%20-%20XXX%20Porno%20Tube%20-%20HD%20-%20Mobile%20Sex
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!7akvmw8ny6&lm=0&ts=1670271934533&dn=TC&iso=0&t=Free%20Porn%20Videos%20CLIP69.BIZ%20-%20XXX%20Porno%20Tube%20-%20HD%20-%20Mobile%20Sex
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!7akvmw8ny6&lm=0&ts=1670271934533&dn=TC&iso=0&t=Free%20Porn%20Videos%20CLIP69.BIZ%20-%20XXX%20Porno%20Tube%20-%20HD%20-%20Mobile%20Sex HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Mon, 05 Dec 2022 20:25:37 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
de.tynt.com/deb/v2?id=w!7akvmw8ny6&dn=TC&cc=1&r=
200 OK 4 B URL HTTP/2 de.tynt.com/deb/v2?id=w!7akvmw8ny6&dn=TC&cc=1&r=
IP
File type ASCII text, with no line terminators
Hash 350fd6ef6446635f7a8f608434a405ec
a4b6c275ac2c80ec925b5c0c5c6abb79ba897356
d21021784cda31eeae5c8295e047a14bda6ed5a9b5963fca9e7ceb398a9c9179
GET /deb/v2?id=w!7akvmw8ny6&dn=TC&cc=1&r= HTTP/1.1
Host: de.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=86400
expires: Tue, 06 Dec 2022 20:25:38 GMT
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-type: application/javascript
content-length: 4
date: Mon, 05 Dec 2022 20:25:37 GMT
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!7akvmw8ny6&lm=0&ts=1670271934533&dn=TC&iso=0
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!7akvmw8ny6&lm=0&ts=1670271934533&dn=TC&iso=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!7akvmw8ny6&lm=0&ts=1670271934533&dn=TC&iso=0 HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Mon, 05 Dec 2022 20:25:38 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!7akvmw8ny6&lm=0&ts=1670271934533&dn=TC&iso=0
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!7akvmw8ny6&lm=0&ts=1670271934533&dn=TC&iso=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!7akvmw8ny6&lm=0&ts=1670271934533&dn=TC&iso=0 HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Mon, 05 Dec 2022 20:25:38 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!7akvmw8ny6&lm=0&ts=1670271934533&dn=TC&iso=0
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!7akvmw8ny6&lm=0&ts=1670271934533&dn=TC&iso=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!7akvmw8ny6&lm=0&ts=1670271934533&dn=TC&iso=0 HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Mon, 05 Dec 2022 20:25:38 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
whos.amung.us/pingjs/?k=7akvmw8ny6&t=Free%20Porn%20Videos%20CLIP69.BIZ%20-%20XXX%20Porno%20Tube%20-%20HD%20-%20Mobile%20Sex&c=d&x=https%3A%2F%2Fclip69.biz%2F&y=&a=0&v=27&r=7379
200 OK 50 B URL HTTP/2 whos.amung.us/pingjs/?k=7akvmw8ny6&t=Free%20Porn%20Videos%20CLIP69.BIZ%20-%20XXX%20Porno%20Tube%20-%20HD%20-%20Mobile%20Sex&c=d&x=https%3A%2F%2Fclip69.biz%2F&y=&a=0&v=27&r=7379
IP
File type ASCII text, with no line terminators
Hash 68c5b1197588b42746a2d75f004d83a0
790dce5f136a80263e90c40fa55b477d4d074894
86c8f58229366d9db7bb65ba4ce1127b60a7b20475569b7350af9bdf52ccb992
GET /pingjs/?k=7akvmw8ny6&t=Free%20Porn%20Videos%20CLIP69.BIZ%20-%20XXX%20Porno%20Tube%20-%20HD%20-%20Mobile%20Sex&c=d&x=https%3A%2F%2Fclip69.biz%2F&y=&a=0&v=27&r=7379 HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:36 GMT
content-type: text/javascript;charset=UTF-8
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 774f8310ec000a30-ARN
X-Firefox-Spdy: h2
ad.a-ads.com/1794725?size=300x250
200 OK 116 kB URL HTTP/2 ad.a-ads.com/1794725?size=300x250
IP
ASN #24940 Hetzner Online GmbH
Size 116 kB (116445 bytes)
Hash bc86af8e3023b955990a14a98dc35fcb
347852ffe8da01b3167f1411d8bc1d1d11f0bf96
f0930125b5d0d35834ac2cdbdadc6d3dc57c4ba888fb388f27608b9b68d8486a
GET /1794725?size=300x250 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://movieazza.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:35 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://movieazza.com/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/140058/b69b0ad953e27d2318d3b7783f89b2f03cac130e.webp
200 OK 9.6 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/140058/b69b0ad953e27d2318d3b7783f89b2f03cac130e.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 070a232d0b0e025bfc65d90c1f5ece91
b69b0ad953e27d2318d3b7783f89b2f03cac130e
bd774d7c7edcc81fd3f49a59ed1ef48868b2531bba2ee9762213e2b023f4c5de
GET /library/140058/b69b0ad953e27d2318d3b7783f89b2f03cac130e.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://banner.pornx2.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:40 GMT
content-type: image/webp
content-length: 9562
last-modified: Wed, 03 Nov 2021 11:53:34 GMT
etag: "6182783e-255a"
expires: Fri, 30 Jun 2023 11:09:49 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195281
server: CDN77-Turbo
x-robots-tag: noindex, follow
x-77-nzt: AblMCRRr8GP/c7bPAA
x-77-nzt-ray: af58563020907506c4538e63156cfe0e
x-cache: HIT
x-age: 13612659
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
syndication.realsrv.com/splash.php?native-settings=1&idzone=4700102&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=1&loaded=1
200 OK 2.0 kB URL HTTP/1.1 syndication.realsrv.com/splash.php?native-settings=1&idzone=4700102&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=1&loaded=1
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (3592), with no line terminators
Hash 33164ec063fb059d0488c2c3c3478e69
1e8afa34459ecb85ee39ed6d2ed4ce73e4df4ced
aba3d609f2c2a8632b989dfc362747a5d8a5b462a429d64302599628b9da138e
GET /splash.php?native-settings=1&idzone=4700102&cookieconsent=true&&p=https%3A%2F%2Fadsxyz.com%2F&max=1&loaded=1 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://banner.pornx2.com
Connection: keep-alive
Referer: https://banner.pornx2.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638e53bf980110.762356452307266018%22%3B%7D; c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4700100%7C23975207%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C638e53bf980110.762356452307266018%7C09819452e62bdf538a58dd864debcc71%7C0%7Cadsxyz.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Dec 2022 20:25:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://banner.pornx2.com
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22638e53bf980110.762356452307266018%22%3B%7D; expires=Wed, 04 Dec 2024 20:25:40 GMT; path=; domain=.realsrv.com; Secure; SameSite=none
impressions=cmmsxrbonxgxameexmllsgeicmmsxaeenxgxameesscrsgeimacslbecnxgxaaabssxamgeislsaroornxgxaallsbmomgeicxbmsbxcnxgxaallaccblgeioslmrxlrnxgxameoabeergeiccmmlmlcnxgxamexmlmxxgeialbsereanxgxaalrollmegeioslmrxbrnxgxameomxlcegeicxbmsbcenxgxaallsbmbbgeioslmrxlsnxgxameoceomcgeicxbmsbocnxgxaallcccaogeicxbmsboenxgxaalbaaamegeiclsmarcanxgxaaallsxlcgeiclsmrrmanxgxaaallsxlcgeirbabxabbnxgxameexmllsgeiccmmlleanxgxameexmerxgeimcrxsbcenxgxaameollsmgeimreaoboenxgxaameollsmgeimcclosscnxgxaalccxmexgeimacslbeenxgxaaboslelageioslmroemnxgxamexasxcrgeioslmrxbmnxgxameosaccrgeicaxsscmbnxgxamexrbcemgeicaormlxonxgxaamealeoegeicaormbmcnxgxaamealeoegeimcclsxscnxgxaamsmxlcageimccloscanxgxaallmalxmgeimreaomxenxgxaamelbbsbgeimreaobscnxgxaamelbbsbgeimcclosconxgxaallsbmbbgeimcclsoeonxgxaamxaacblgeimacslbeonxgxaaloesaslgeimcclsxsanxgxaamsmxlcageimcclsxlbnxgxaamssmcolgeimaecseaonxgxaamssmcolgeimaecsxeonxgxaamssmcolgeimaecseronxgxaamssmcolgeimrblelrenxgxaamssmcolgeiccmmllebnxgxameoxbrrrgeimcclsxlonxgxaamcsebsxgeimcclsoeenxgxaamcrclalgeimcclsxsbnxgxaamcrclalgeimcclossbnxgxaalbexcrageimcclsxlcnxgxaamrscxmxgeimaecseranxgxaabrlemaegeimcclosccnxgxaamrscxmxgeicaormlxcnxgxaalbxrlcegeicaormbmbnxgxaalrexasogeiclsmrbsenxgxaamaxcsxcgeialbserebnxgxamexsrmoogeimcclsxconxgxameoabeergeimcclsxmenxgxameoceomcgeialbserxonxgxaalbcxbsageimccloscenxgxaalmlsmmcgeimcclsxxonxgxameexxllrgeimcclsxbcnxgxameexmllsgeicaormlxanxgxaammacmrxgeimcclsxaonxgxameoabeergeimrblxxxbnxgxaambboecmgeimrblxelcnxgxaambboecmgeimrblxxrbnxgxaambboecmgeialbserxenxgxamexmlmxxgeimacslbeanxgxaablxaelxgeialbserecnxgxameoxbrrrgeiccmmllecnxgxamexsrmoogeisaeeasslnxgxaabrbeccogeimcclossanxgxaabrlemaegeimcclsxronxgxameoceomcgeimaecseabnxgxaabrlemaegeimrblelrcnxgxaabrlemaegeimrblxemonxgxaabrlemaegeimcclsxcanxgxaalrlccrxgeimaecsxoonxgxaabmalbxxgeircsxcxscnxgxaabbxeomsgeicaormbbenxgxaalexxbcxgeiabeocmconxgxaablxrcmmgeimcclsxxcnxgxaalesmxrsgeimrblxeeanxgxaablsaloageimaecsemanxgxaalmmeabageimaecselonxgxaaloaroaageimcclsxacnxgxameexmllsgeimcclselenxgxameexmllsgeimaecsxronxgxaalxmmoorgeimaecsxsenxgxaalxmmoorgeimaecsercnxgxaalxmmoorgeimaecsembnxgxaalxmmoorgeimaecselenxgxaalxmmoorgeimaecobobnxgxaalsmleergeimaecomoanxgxaalsbbboageimrblxxoenxgxaalsbmacmgeimaecobsbnxgxaalsbbboageimrblxosonxgxaalsbbboageimcclsxmanxgxameexxllcgeimaecsxccnxgxaalmeeamageimrblxeecnxgxaalmeeamageimrblelronxgxaalmeeamageimrblelmonxgxaalmeeamageimaecseacnxgxaalmmeabageimaecsxxcnxgxaalmmeabageicaormbmanxgxaalbxrlcegeimaecsxocnxgxaalbrxssogeicaormlobnxgxaallcccaogeimaecomrenxgxameexxllcgeimrblxxxanxgxameexxllrgeimrblxosbnxgxameexxllrgeimaecomlonxgxameexxllrgeimcclselanxgxameoesomcgeimrblxoxenxgxameexmllsgeimaecomconxgxameexmllsgeialbbebsbnogxamexbmreogxcceimrlxebeansgxamexbmreogxcceimaoolslanxgxamexbmbeagxcceialbbellcnxgxamexbbcrxgxcceimellboxbnxgxamexbbcrxgxcceimxxrecsanxgxamexlxebegxcceimmxsrbmensgxamexlxxalgxcceimeelaclcnomgxamexlxxalgxcceimmxsrbabnsgxamexlxxalgxcceimxeemlxcncgxamexlsoamgxcceimxxerrecnxgxamexlsmlrgxcceimxlbmoscnogxamexlsmlrgxcceimaoobrbanrgxamexlsmlagxcceimxlbmosenrgxamexlcxxogxcceimaoobrbcnsgxamexlcxxogxcceimmomloxonxgxamexlcxxogxcceimxlbmxbbnsgxamexlcxxogxcceiclsmrrrenxgxamexlcmeageiclsmarocnxgxamexlcmeageiclsmrbecnxgxamexlcmeageialbbblbanxgxamexlcmeagxcceiclsmarcbnxgxamexlcmeageicloaxxabnxgxamexlraacgxcceixaoossalnmgxamexlrllogxcceimmsxaolanxgxamexlrllogxcceimeembecencgxamexlrllogxcceialbbxeecnxgxamexlrllrgxcceicmarxbbonsgxamexlabaagxcceimrmbbracnxgxamexlbxbogxcceimrmbbraanxgxamexlbxbogxcceimrmbbrmbnxgxamexlbllbgxcceimrmbbrronxgxamexlbllbgxcceimxxerrxenxgxameoexlmegxcceimxcbrxscnxgxameoexlmegxcceialbbebrenxgxameoexlmegxcceiaaxcambbnxgxameoexlmxgxcceialbmmbmbnxgxameoexlmxgxcceialbmmbbonxgxameoexlmxgxcceialbmmblcnxgxameoexlmxgxcceicloaxxoonxgxameoexlmxgxcceimxcbrxlcnxgxameoexlmxgxcceimxxerreonxgxameoesomcgxcceimromobacnxgxameoeamacgxcceimxlbmoconogxameoeamacgxcceimxeoxsacnbgxameoemoxagxcceimrbasxrenagxameoebclogxcceimxeemlxenxgxameoelrxxgxcceimeembesonxgxameoelmocgxcceimemlxmcbnxgxameoxeexsgxcceimxcbrxaonogxameoxecsmgxcceimellboxanxgxameoxecsmgxcceimclxlloanxgxameoxecsbgxcceimeelaclanlgxameoxxroxgxcceimxcbrxabnxgxameoxoeecgxcceimxlbmxlencgxameoxosaagxcceimxcbrxocnxgxameoxselagxcceimmsxaolenxgxameoxsrsagxcceimxcbrxronxgxameoxclbbgxcceimeelaclbnxgxameoxrexlgxcceimellboocnxgxameoxrexlgxcceimeelarecnxgxameoxreaagxcceimrbbocsanxgxameoxabsogxcceimmossscensgxameoxabssgxcceimmoeeoecnxgxameoxabscgxcceimmoeexlcnxgxameoxabscgxcceimcssmlrensgxameoxabscgxcceimxlbmosanogxameoxbrragxcceimcoaxmxcnrgxameoooaolgxcceimcssmlrcnsgxameoooleogxcceirlrecalanxgxameooolecgxcceimellbosbnxgxameoormssgxcceialrexexbnxgxameoolscmgxcceimaoobbebnxgxameosococgxcceimsacexoonxgxameosorabgxcceimxlbalscnsgxameosorabgxcceimclsaoxbncgxameosrobrgxcceimrxccosensgxameosaxcxgxcceimxlbmosonsgxameosaccrgxcceimcssmlronsgxameosaccrgxcceimmosssconrgxameosllexgxcceimxlbmoobnsgxameoslleogxcceimraeelabnxgxameoslleogxcceimraeelaanxgxameoslleogxcceimxcbrxmbnxgxameoceomcgxcceimxxerreanxgxameoceomcgxcceimmomxxobnxgxameoccxrcgxcceimmxsrbaonsgxameoclcsbgxcceimmooobronxgxameoreeamgxcceimcoaxmxonrgxameoreeamgxcceimrxccoscnxgxameoreeabgxcceimmooobrcnxgxameoreeabgxcceimmxsrbaanogxameoreeabgxcceimxeemlebnxgxameoreeabgxcceimmsxrlabnxgxameoreombgxcceimmsoxrlenxgxameoreombgxcceicloaxxmonxgxameoreloogxcceialbmbrmanxgxameorxslsgxcceimemlxbocnxgxameorxslsgxcceimmsoxrlonxgxameoroesxgxcceimrmaobxansgxameoroamsgxcceiceecmorsnxgxameorcmbcgxcceicxmecmcanxgxameorcmbrgxcceimaoolcoonxgxameoaomlogxcceimrmbbolcnxgxameoasxbogxcceimxeoxsbencgxameoacambgxcceialaroxrcnxgxameoaaccbgxcceimxlbmxlcnogxameoabeergxcceixaoosscrnxgxameomexlogxcceimmsoxrlcnxgxameomexlogxcce; expires=Tue, 06 Dec 2022 20:25:40 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
c-tag=%7B%22tag-banner%22%3A%22v3%7C%7CNOR%7C4700102%7C71021380%7C110382%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C638e53bf980110.762356452307266018%7C09819452e62bdf538a58dd864debcc71%7C0%7Cadsxyz.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7Cok%22%7D; expires=Tue, 06 Dec 2022 20:25:40 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3af2e495-85ff-410f-8418-e683c7f84bcd.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3af2e495-85ff-410f-8418-e683c7f84bcd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 027480c06cd67621f373c6765dafee4d
9f80bb7ca6f699d88eaec2248dec508c589fe994
f69a0d6bd6e79d8fa7f2f15df11237c0a8b04d45af3cd5870eeef86d18f553bf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3af2e495-85ff-410f-8418-e683c7f84bcd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7728
x-amzn-requestid: 9f37e7a6-1f00-4a81-9b14-962fd0b6cdf4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMEJxoAMFchQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-4a4cce217327b44525ea1e98;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ztC4S0WeA3ft_9JafrL6fInXo4jwkb0cTWUx4Z8L2uz3EWQS-d6F5A==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 22:09:54 GMT
age: 80146
etag: "9f80bb7ca6f699d88eaec2248dec508c589fe994"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
adsxyz.com/sponsors/traffic/footer_300x250x4.html
200 OK 0 B URL HTTP/2 adsxyz.com/sponsors/traffic/footer_300x250x4.html
IP
GET /sponsors/traffic/footer_300x250x4.html HTTP/1.1
Host: adsxyz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: text/html
last-modified: Tue, 01 Nov 2022 15:04:56 GMT
strict-transport-security: max-age=31536000
x-frame-options: ALLOWALL
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NBZo1HUGHgd5HCn5sYCrEo4doR2kucZzhEagJ3gRY85X99adGw1gUq6%2F1z7cfYNR24U3u%2BaUMqeE4uV1kzj9EGgY0vezbl7gUDjelxW5mfDXjs3NePqas9d3A8RB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774f83075b8db50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
a.realsrv.com/nativeads-v2.js
200 OK 0 B URL HTTP/2 a.realsrv.com/nativeads-v2.js
IP
ASN #60068 Datacamp Limited
GET /nativeads-v2.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://banner.pornx2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:35 GMT
content-type: application/javascript
etag: W/"3eb4c0066ecfc78c36ab17afea4"
expires: Fri, 02 Dec 2022 12:50:41 GMT
cache-control: max-age=10800
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1670277094
server: CDN77-Turbo
x-77-nzt: AblMCRR41tv/CRYAAA
x-77-nzt-ray: af5856302a905501bf538e632c6c8c1b
x-cache: HIT
x-age: 5641
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
adsxyz.com/sponsors/traffic/left_300x250x1.html
200 OK 0 B URL HTTP/2 adsxyz.com/sponsors/traffic/left_300x250x1.html
IP
GET /sponsors/traffic/left_300x250x1.html HTTP/1.1
Host: adsxyz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: text/html
last-modified: Fri, 24 Jun 2022 08:10:33 GMT
strict-transport-security: max-age=31536000
x-frame-options: ALLOWALL
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5g0yHLRHoZvoLWk1gWhbIXwcx%2F94m1CqOoaeepKwUcx2j%2B6NgzBFUJkMmBwap31J%2BQbnDVJkXoHyyhY3vvA83hnl1JytJNN3f%2BbnXUiPeJ6nQbtKchuG5BZoOY6I"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774f83075b91b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
movieazza.com/banner/aads_160x600.html
200 OK 0 B URL HTTP/2 movieazza.com/banner/aads_160x600.html
IP
GET /banner/aads_160x600.html HTTP/1.1
Host: movieazza.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adsxyz.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:36 GMT
content-type: text/html
last-modified: Sun, 26 Sep 2021 10:45:32 GMT
strict-transport-security: max-age=31536000
x-frame-options: ALLOWALL
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f6Fn1ZcssDGDjmUothBxrItpuDdCmSRYeC7M0QchcjnXm4fxA3uCHAvrFp0Oa%2Bn3D45HFpMqjxL3sIKCuPLk8pRJexVgNcLT%2Bqbl94Xvkv6X3WNQvbwvvfXF03stuPLn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774f830c9aa5b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
movieazza.com/banner/aads_300x250.html
200 OK 0 B URL HTTP/2 movieazza.com/banner/aads_300x250.html
IP
GET /banner/aads_300x250.html HTTP/1.1
Host: movieazza.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adsxyz.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:36 GMT
content-type: text/html
last-modified: Sun, 26 Sep 2021 10:49:01 GMT
strict-transport-security: max-age=31536000
x-frame-options: ALLOWALL
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N4GehrzGm7a796OK8d6RRWud5RP8m%2F7PpbJsgzq7dvSSXZnAnAw7oFFD0x5yf%2FPYKoSwM1PN3Pow31Nrnpw%2FHrrjr5cygHGvQZSlF00SIanycYeN1ApzaAfG3vs%2FNwNs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774f830ddc6eb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ad.a-ads.com/2128506?size=300x600
200 OK 0 B URL HTTP/2 ad.a-ads.com/2128506?size=300x600
IP
ASN #24940 Hetzner Online GmbH
GET /2128506?size=300x600 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://movieazza.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:36 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://movieazza.com/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
ad.a-ads.com/2077818?size=300x250
200 OK 0 B URL HTTP/2 ad.a-ads.com/2077818?size=300x250
IP
ASN #24940 Hetzner Online GmbH
GET /2077818?size=300x250 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fappedia.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:36 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://fappedia.com/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
ad.a-ads.com/1313462?size=300x250
200 OK 0 B URL HTTP/2 ad.a-ads.com/1313462?size=300x250
IP
ASN #24940 Hetzner Online GmbH
GET /1313462?size=300x250 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mrhacker.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:35 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://mrhacker.co/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
ad.a-ads.com/1794721?size=160x600
200 OK 0 B URL HTTP/2 ad.a-ads.com/1794721?size=160x600
IP
ASN #24940 Hetzner Online GmbH
GET /1794721?size=160x600 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://movieazza.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:36 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://movieazza.com/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
ad.a-ads.com/1794721?size=160x600
200 OK 0 B URL HTTP/2 ad.a-ads.com/1794721?size=160x600
IP
ASN #24940 Hetzner Online GmbH
GET /1794721?size=160x600 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://movieazza.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:37 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://movieazza.com/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
adsxyz.com/sponsors/traffic/footer_300x250x2.html
200 OK 0 B URL HTTP/2 adsxyz.com/sponsors/traffic/footer_300x250x2.html
IP
GET /sponsors/traffic/footer_300x250x2.html HTTP/1.1
Host: adsxyz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: text/html
last-modified: Tue, 01 Nov 2022 15:04:25 GMT
strict-transport-security: max-age=31536000
x-frame-options: ALLOWALL
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pr%2BZMvOY2%2FPBpm3j6WYRFCnw%2FyidYMQ1qk0vzn6Jvt0Gv%2FKWf70qtBmbanQdI9vKS4PJv41N%2ByBhW0e%2FuTgRfKxWmuItkWQUHTKZ8uT7DeDt5oitlmqoen3rA%2BRJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774f83074b87b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.a-ads.com/a-ads-banners/426615/160x600?region=eu-central-1
200 OK 0 B URL HTTP/2 static.a-ads.com/a-ads-banners/426615/160x600?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
GET /a-ads-banners/426615/160x600?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:37 GMT
content-type: image/gif
content-length: 398870
x-amz-id-2: jr9yAt1lNswVw50UMr6gT4hmfGQ04HCjaIHB2bJz0nPTt+CwzBhpCBIll7Qu1hWS7PMmHh5JkHo=
x-amz-request-id: TNJ39JPWYQ0YXXQQ
x-amz-replication-status: COMPLETED
last-modified: Sun, 20 Nov 2022 16:37:44 GMT
etag: "9d88a286a326be82ce36051bd80dc5ad"
cache-control: max-age=315360000
x-amz-version-id: VlmsntuO.ZjgGmZwhMdFTxtm1l43CkTo
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
movieazza.com/banner/aads_300x600.html
200 OK 0 B URL HTTP/2 movieazza.com/banner/aads_300x600.html
IP
GET /banner/aads_300x600.html HTTP/1.1
Host: movieazza.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adsxyz.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:36 GMT
content-type: text/html
last-modified: Sat, 03 Dec 2022 14:27:03 GMT
strict-transport-security: max-age=31536000
x-frame-options: ALLOWALL
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=idpNsn7qu2BVdA%2BoLVNob7LEFh7R7RcmX7CK2ohGgfF16RVFzDESTn8GHf%2BZMZfss10AFxtRe4scessX8gWhfgXWos3jtDduUI1xy0DRsgwYoimwXxJUd3yRROW%2FSU8l"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774f830b38e8b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.a-ads.com/a-ads-banners/407262/300x600?region=eu-central-1
200 OK 0 B URL HTTP/2 static.a-ads.com/a-ads-banners/407262/300x600?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
GET /a-ads-banners/407262/300x600?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:35 GMT
content-type: image/gif
content-length: 663309
x-amz-id-2: huZKxsVeTpVZJUM7Mo5WID5U6lnHOaRfxzcNt2cH+VwJR29U5sk0HRPZrFKYbs88zjC2trcwCUg=
x-amz-request-id: YRM6WNY6FWVACBTW
x-amz-replication-status: COMPLETED
last-modified: Fri, 05 Aug 2022 10:27:24 GMT
etag: "ffd16a4cc6a1a09fba1233adf0caa400"
cache-control: max-age=315360000
x-amz-version-id: pqTy1S3DPRTUOqkbKF3vh1uLPnTIUQ9n
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
ad.a-ads.com/1794723?size=250x250
200 OK 0 B URL HTTP/2 ad.a-ads.com/1794723?size=250x250
IP
ASN #24940 Hetzner Online GmbH
GET /1794723?size=250x250 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://movieazza.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:35 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://movieazza.com/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
clip69.biz/
200 OK 0 B IP
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: clip69.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: PHPSESSID=80a103826ac6e09e6cc0a40127189526; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FE%2FF0mDImyjpPqdgcxIeyi5025cwm1IXlxTKhnsZl9rgFw6jJv5mrE9YhyaDObA8%2FOd5%2BDh0yal%2Fgvr9PAoJgkaoW5nXpDPz6wB7X8BBb%2BvI%2FbaimGVjvFYmBK6D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774f82f7cc7bb4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
nudevietnam.com/banner/aads_300x250.html
200 OK 0 B URL HTTP/2 nudevietnam.com/banner/aads_300x250.html
IP
GET /banner/aads_300x250.html HTTP/1.1
Host: nudevietnam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adsxyz.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:35 GMT
content-type: text/html
last-modified: Tue, 07 Jun 2022 07:58:41 GMT
strict-transport-security: max-age=31536000
x-frame-options: ALLOWALL
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=2678400
cf-cache-status: HIT
age: 884995
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GAbt%2FA1nDujtFQaLiJJpZeh2tPHJBitjToPzhb17KfeirSgdw7XPqOI%2Bhbr%2BOZsDs2NqcJcGi7l8XL4y%2FqjJVdiQvnOtglPPHOQkZghAG1Wu716IYuOe9TOPdbg5KmoZ%2BLM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 774f8309de5db4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
adsxyz.com/sponsors/traffic/right_200x200x1.html
200 OK 0 B URL HTTP/2 adsxyz.com/sponsors/traffic/right_200x200x1.html
IP
GET /sponsors/traffic/right_200x200x1.html HTTP/1.1
Host: adsxyz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: text/html
last-modified: Fri, 24 Jun 2022 08:40:04 GMT
strict-transport-security: max-age=31536000
x-frame-options: ALLOWALL
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k%2BbGRG7EzHKcS0rC0GF%2FRMq2QO4ZMzaqLiz0vsA6lQezGd6hQufHDihy52e9PsncCGmCY%2BR%2Fd2%2Br41w%2B2v%2F33vrEAD8h%2Bc4rpk3vio0nT6Coc9f%2Bvk07cfTlIx1F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774f83074b7fb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
t.dtscout.com/pv/?_a=v&_h=clip69.biz&_ss=1tau930tfi&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=3flw&_cb=_dtspv.c
200 OK 0 B URL HTTP/2 t.dtscout.com/pv/?_a=v&_h=clip69.biz&_ss=1tau930tfi&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=3flw&_cb=_dtspv.c
IP
GET /pv/?_a=v&_h=clip69.biz&_ss=1tau930tfi&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=3flw&_cb=_dtspv.c HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Cookie: m=1; oa=1; df=1670271935
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:35 GMT
content-type: application/javascript
x-t: 0.135
x-c: 0
expires: Mon, 05 Dec 2022 20:25:34 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a4GqIL0bxKw0wKxdXjpo5oRouGOQYL%2BbK4MoAp93fzrp3fM0iCcnnYksJ8KdtE5z1nUvSWumpsrf2bZGUT42BJi1qhA0dziAYAePeLUG6SKTaUL%2BiA6oVFJPTS5boFo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774f830d99700a1c-ARN
content-encoding: br
X-Firefox-Spdy: h2
adsxyz.com/sponsors/traffic/footer_300x250x3.html
200 OK 0 B URL HTTP/2 adsxyz.com/sponsors/traffic/footer_300x250x3.html
IP
GET /sponsors/traffic/footer_300x250x3.html HTTP/1.1
Host: adsxyz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clip69.biz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Dec 2022 20:25:34 GMT
content-type: text/html
last-modified: Sat, 04 Jun 2022 08:30:45 GMT
strict-transport-security: max-age=31536000
x-frame-options: ALLOWALL
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hqY1qmNhVHx11h2hzUjBF2Xpx3zrqpclCMPxCLyiXwdvr8SRB39KK7zi8mTIrIGUBPwVFsT%2ByYHrNx0FLbgaI1XCcf9vUuDca8%2FWum9s7lN84w3T4p3n4TlGx89l"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774f83074b8bb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.a-ads.com/a-ads-banners/429359/300x250?region=eu-central-1
200 OK 0 B URL HTTP/2 static.a-ads.com/a-ads-banners/429359/300x250?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
GET /a-ads-banners/429359/300x250?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:35 GMT
content-type: image/gif
content-length: 349633
x-amz-id-2: 9GcIwz7m7SuPXwhvswE+eZETQA84hUa/CsQlI+eDAcZDR68SqbcNNmEOGMTr0NLziukkyXljJEI=
x-amz-request-id: H2GRT74ZHQY175XZ
x-amz-replication-status: COMPLETED
last-modified: Mon, 05 Dec 2022 12:34:37 GMT
etag: "535ba9e7e9e98fb0b945e862f289587a"
cache-control: max-age=315360000
x-amz-version-id: rtBsRGuMsFywXutcoGdca0i9FnYVWDS5
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
ad.a-ads.com/2022694?size=300x250&background_color=000000&text_color=e30e4b&title_color=0cc2ee&title_hover_color=fa0d0d&link_color=cee110&link_hover_color=ffffff
200 OK 0 B URL HTTP/2 ad.a-ads.com/2022694?size=300x250&background_color=000000&text_color=e30e4b&title_color=0cc2ee&title_hover_color=fa0d0d&link_color=cee110&link_hover_color=ffffff
IP
ASN #24940 Hetzner Online GmbH
GET /2022694?size=300x250&background_color=000000&text_color=e30e4b&title_color=0cc2ee&title_hover_color=fa0d0d&link_color=cee110&link_hover_color=ffffff HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nudevietnam.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:35 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://nudevietnam.com/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
ad.a-ads.com/2128508?size=300x600
200 OK 0 B URL HTTP/2 ad.a-ads.com/2128508?size=300x600
IP
ASN #24940 Hetzner Online GmbH
GET /2128508?size=300x600 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nudevietnam.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Dec 2022 20:25:35 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://nudevietnam.com/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
188.114.97.1
142.250.74.106
95.101.11.115
148.251.1.246
185.76.9.26
104.22.75.171
93.184.220.29
95.211.229.246
185.66.142.102