cdn.tapioni.com/asg-iframe.js
200 OK 37 kB URL GET HTTP/2 cdn.tapioni.com/asg-iframe.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint67:5F:F1:E0:0C:5E:00:4E:6A:BF:B1:5F:40:29:66:0E:3F:9C:24:5F
ValidityWed, 30 Aug 2023 00:00:00 GMT - Thu, 29 Aug 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65498), with no line terminators
Hash b5ded1aef67ec275d499d4da2ea6ef9b
f06ad7870ac3fd7c782ee5228141cb93f2c2d0ab
6b30ecd1b92a7461f3a981898e7737fa67108080bc05f8fe2a00b9ad818c2f3f
GET /asg-iframe.js HTTP/1.1
Host: cdn.tapioni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: application/javascript
content-length: 36845
last-modified: Wed, 22 Nov 2023 08:26:07 GMT
vary: Accept-Encoding
etag: "655dbb1f-8fed"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 217514
accept-ranges: bytes
server: cloudflare
cf-ray: 82c5ee9da8342e09-ARN
X-Firefox-Spdy: h2
new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
200 OK 91 kB URL User Request GET HTTP/2 new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (10432)
Hash 083c0bfb948d7536c25daf692ee4f235
9db399dc96b268e16145b38736c49365543b8d72
2c0a3b574333ac4c90faaa9eece1bec9b9dba46545c45f63f88b4cfa281018d3
GET /game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1 HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:40 GMT
content-type: text/html;charset=UTF-8
cf-ray: 82c5ee994c9fb4eb-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *, *
vary: Accept-Encoding
server-timing: -;dur=0;desc="Generate"
set-cookie: i18n_redirected=en; Path=/; Expires=Mon, 25 Nov 2024 23:32:40 GMT; SameSite=Lax
auth.strategy=local; Path=/
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
new.lewd.ninja/pug.js
200 OK 25 B IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash acb8501274106c8c5d25141dd0dc252a
86eeee52b9443b6df7caffbf9fd4a7031fff5ccc
615ee8ac2cde2b20b7ae8fbb6ef33a9128193f07590540b77e514627be7ae1cd
GET /pug.js HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: application/javascript
content-length: 25
vary: Accept-Encoding
etag: "19-hu7uUrlEO233yv+/n9SnAx//XMw"
last-modified: 2023-11-03T22:39:23.019Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82c5ee9ce8e25693-OSL
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/79762b8.js
200 OK 94 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/79762b8.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (65485)
Hash a8c3e5fa62fda322ba9eca823da10015
a555dcd76440e461266ee8eb574ac26ec35eba52
3ed86012470a49391a3dca49597ba97a8e6c0d3dd7057a5b833d7da23b79a7e1
GET /_nuxt/79762b8.js HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"457ce-pVXc12RA5GEmbujrV0rCbsNeulI"
last-modified: 2023-11-03T22:39:56.943Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 1989454
server: cloudflare
cf-ray: 82c5ee9cf8f05693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/css/53580c5.css
200 OK 49 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/css/53580c5.css
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (354), with no line terminators
Hash 0edda3d4d8ac571787e9e06d9d6176da
a85b590184fc6ccbe9e692329bca6e25088daf50
3b103c55ed03bb3e2089ccf3c721e07295d431bb21db511913652cff72f3789b
GET /_nuxt/css/53580c5.css HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
etag: W/"162-qFtZAYT8bMvp5pIym8puJQiNr1A"
last-modified: 2023-11-03T22:39:22.983Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 63417
server: cloudflare
cf-ray: 82c5ee9fca675693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.tapioni.com/adgpt.js
200 OK 817 B IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint67:5F:F1:E0:0C:5E:00:4E:6A:BF:B1:5F:40:29:66:0E:3F:9C:24:5F
ValidityWed, 30 Aug 2023 00:00:00 GMT - Thu, 29 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (2025), with no line terminators
Hash bee3975b140c8b47d6f768c03d2ab012
5e8eb0d332a3a6de12da04809ae7cd33d7d1c987
63577112b14ade224e8fa47feafb8da7fbbf272329a92e081993e8b544d39486
GET /adgpt.js HTTP/1.1
Host: cdn.tapioni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: application/javascript
content-length: 817
last-modified: Wed, 22 Nov 2023 08:26:07 GMT
vary: Accept-Encoding
etag: "655dbb1f-331"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 217512
accept-ranges: bytes
server: cloudflare
cf-ray: 82c5eea33b262e09-ARN
X-Firefox-Spdy: h2
slit.lewd.rip/api/settings/453988
200 OK 191 kB URL GET HTTP/2 slit.lewd.rip/api/settings/453988
IP
ASN #24940 Hetzner Online GmbH
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerLet's Encrypt
Subjecta.myprettyads.one
Fingerprint78:08:03:48:81:A1:3D:57:BA:39:BB:44:F0:A8:A2:4E:0F:68:85:81
ValidityTue, 31 Oct 2023 01:27:08 GMT - Mon, 29 Jan 2024 01:27:07 GMT
File type JSON data\012- , ASCII text, with very long lines (563)
Size 191 kB (190735 bytes)
Hash 8d5842ca971bafa445fc85916314e5e4
09168d098b8bdd79cd3e7ea697c970bfad48a178
d0a7743597ead31c21b3cd08929580854dd4f1f7eba696311700754e46a05710
GET /api/settings/453988 HTTP/1.1
Host: slit.lewd.rip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://new.lewd.ninja/
Origin: https://new.lewd.ninja
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
owo.lewd.ninja/images/games/87094_d69b247b9f1530a0eeaf0cdce1df14e3_thumb.png
200 OK 70 kB URL GET HTTP/3 owo.lewd.ninja/images/games/87094_d69b247b9f1530a0eeaf0cdce1df14e3_thumb.png
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0daea5b4bbe20928eb107e2b2e0b0e75
61bee5586d93432bb2c1023c9fc5ded5db5cf7e6
0661dfe429ca6d55ec7239c6522f4ac874661ef781b47bf1e51bab5920bdd1d5
GET /images/games/87094_d69b247b9f1530a0eeaf0cdce1df14e3_thumb.png HTTP/1.1
Host: owo.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Cookie: google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: image/webp
content-length: 69582
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=125224
content-disposition: inline; filename="87094_d69b247b9f1530a0eeaf0cdce1df14e3_thumb.webp"
etag: "650ffc90-1e928"
expires: Sun, 24 Dec 2023 11:56:35 GMT
last-modified: Sun, 24 Sep 2023 09:08:32 GMT
lewd: yes
vary: Accept
x-cache-status: MISS
cf-cache-status: HIT
age: 183995
accept-ranges: bytes
server: cloudflare
cf-ray: 82c5eea6cf6c5693-OSL
alt-svc: h3=":443"; ma=86400
owo.lewd.ninja/images/games/87094_c82951b482136d88d6d47680a6e975dd_thumb.png
200 OK 77 kB URL GET HTTP/3 owo.lewd.ninja/images/games/87094_c82951b482136d88d6d47680a6e975dd_thumb.png
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9109c67ed9406104b0dd513a058ccda7
ba019cf32ea5020b5690e56d57c158eabd2758d4
fb8b6dd4f2cf1cc6911fe7349e5b4344aeb86b1a3b88e90860c66facf54b4766
GET /images/games/87094_c82951b482136d88d6d47680a6e975dd_thumb.png HTTP/1.1
Host: owo.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Cookie: google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: image/webp
content-length: 77426
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=135162
content-disposition: inline; filename="87094_c82951b482136d88d6d47680a6e975dd_thumb.webp"
etag: "650ffc90-20ffa"
expires: Mon, 18 Dec 2023 02:28:48 GMT
last-modified: Sun, 24 Sep 2023 09:08:32 GMT
lewd: yes
vary: Accept
x-cache-status: MISS
cf-cache-status: HIT
age: 183995
accept-ranges: bytes
server: cloudflare
cf-ray: 82c5eea6cf6e5693-OSL
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/br/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
302 Found 17 kB URL User Request GET HTTP/2 new.lewd.ninja/br/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 8dbcf8fee09bc7a9bc5bc645e3e1ed10
3ac8bddcd2c64ad13efcc601fce05949b8e2d874
6ab19dfa8a0ceee46dcf4d5b6b107f4e31bf690b33361a13a2423397fc010271
GET /br/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1 HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 26 Nov 2023 23:32:40 GMT
location: /game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
cf-ray: 82c5ee987c1ab4eb-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *, *
vary: Accept-Encoding
set-cookie: i18n_redirected=en; Path=/; Expires=Mon, 25 Nov 2024 23:32:40 GMT; SameSite=Lax
auth.strategy=local; Path=/
__cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; SameSite=Lax; path=/; expires=Mon, 27-Nov-23 23:32:40 GMT; HttpOnly
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
owo.lewd.ninja/images/games/87094_084c1cd6a8924a73e1b30bf889acf28c_thumb.png
200 OK 66 kB URL GET HTTP/3 owo.lewd.ninja/images/games/87094_084c1cd6a8924a73e1b30bf889acf28c_thumb.png
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 988c5fe3c8fb0c34c5a7d442ced8e6a8
1894740028334e22e45eb4fad646b36ce5d5aeee
044b17c9e91e35548cc0010ac79d0a793b59ec141c89f8066efd358fd2bb503f
GET /images/games/87094_084c1cd6a8924a73e1b30bf889acf28c_thumb.png HTTP/1.1
Host: owo.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Cookie: google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: image/webp
content-length: 66360
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=130179
content-disposition: inline; filename="87094_084c1cd6a8924a73e1b30bf889acf28c_thumb.webp"
etag: "650ffc8a-1fc83"
expires: Sat, 23 Dec 2023 12:49:05 GMT
last-modified: Sun, 24 Sep 2023 09:08:26 GMT
lewd: yes
vary: Accept
x-cache-status: MISS
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 82c5eea6cf6b5693-OSL
alt-svc: h3=":443"; ma=86400
owo.lewd.ninja/images/games/87094_2caabd5fc045f5b515128755f322aac0_thumb.png
200 OK 62 kB URL GET HTTP/3 owo.lewd.ninja/images/games/87094_2caabd5fc045f5b515128755f322aac0_thumb.png
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4c24bc590d04b2aa2cf337d75f613805
7b4670f87ea4950f8cb1fdec43d7a8f7287e827a
fe9a5ea3bb95cdbbe992abf04b81476afbf72610da8a337fbe60a8168069f431
GET /images/games/87094_2caabd5fc045f5b515128755f322aac0_thumb.png HTTP/1.1
Host: owo.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Cookie: google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: image/webp
content-length: 62054
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=115624
content-disposition: inline; filename="87094_2caabd5fc045f5b515128755f322aac0_thumb.webp"
etag: "650ffc90-1c3a8"
expires: Fri, 22 Dec 2023 02:07:28 GMT
last-modified: Sun, 24 Sep 2023 09:08:32 GMT
lewd: yes
vary: Accept
x-cache-status: MISS
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 82c5eea6cf715693-OSL
alt-svc: h3=":443"; ma=86400
owo.lewd.ninja/images/games/87094_b152d367aa63649fed2d9f495580cbdd_thumb.png
200 OK 84 kB URL GET HTTP/3 owo.lewd.ninja/images/games/87094_b152d367aa63649fed2d9f495580cbdd_thumb.png
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1b5fa5871c0eaa70a53e8e0cb267a016
9f6378fc3ffcca820c738b66859ab20917002809
356d1bcda07e6136b266782fc8330d61956384762da0f74e15020f9eb12ab027
GET /images/games/87094_b152d367aa63649fed2d9f495580cbdd_thumb.png HTTP/1.1
Host: owo.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Cookie: google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: image/webp
content-length: 83562
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=137692
content-disposition: inline; filename="87094_b152d367aa63649fed2d9f495580cbdd_thumb.webp"
etag: "650ffc96-219dc"
expires: Thu, 21 Dec 2023 05:09:49 GMT
last-modified: Sun, 24 Sep 2023 09:08:38 GMT
lewd: yes
vary: Accept
x-cache-status: MISS
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 82c5eea6df7d5693-OSL
alt-svc: h3=":443"; ma=86400
owo.lewd.ninja/images/games/87094_12a62b95b0becb8322e710405947bb0e_thumb.png
200 OK 64 kB URL GET HTTP/3 owo.lewd.ninja/images/games/87094_12a62b95b0becb8322e710405947bb0e_thumb.png
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash beb099825024165d8c9b50d213138229
87230738e42d3fa169e35e1e28be70d8fb5f9278
2904600bbf880a08cd326d4fac320731f2431d4442e1e924bc5d85770e3a2ef3
GET /images/games/87094_12a62b95b0becb8322e710405947bb0e_thumb.png HTTP/1.1
Host: owo.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Cookie: google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: image/webp
content-length: 64452
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=116445
content-disposition: inline; filename="87094_12a62b95b0becb8322e710405947bb0e_thumb.webp"
etag: "650ffc96-1c6dd"
expires: Fri, 22 Dec 2023 08:07:57 GMT
last-modified: Sun, 24 Sep 2023 09:08:38 GMT
lewd: yes
vary: Accept
x-cache-status: MISS
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 82c5eea6df815693-OSL
alt-svc: h3=":443"; ma=86400
owo.lewd.ninja/images/games/87094_069559cf282cf97d1ca1640c995831d8_thumb.png
200 OK 62 kB URL GET HTTP/3 owo.lewd.ninja/images/games/87094_069559cf282cf97d1ca1640c995831d8_thumb.png
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash dca15972de6f163d435244b3260ae9f8
b4e6849e11aceb3fdf411f034d4d42ca200d7319
7ff46123b2348febe49c708251dd6565c507e89d806960c94c575d0c6461a9a8
GET /images/games/87094_069559cf282cf97d1ca1640c995831d8_thumb.png HTTP/1.1
Host: owo.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Cookie: google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: image/webp
content-length: 62452
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=122554
content-disposition: inline; filename="87094_069559cf282cf97d1ca1640c995831d8_thumb.webp"
etag: "650ffc96-1deba"
expires: Thu, 21 Dec 2023 19:20:41 GMT
last-modified: Sun, 24 Sep 2023 09:08:38 GMT
lewd: yes
vary: Accept
x-cache-status: MISS
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 82c5eea6ef8a5693-OSL
alt-svc: h3=":443"; ma=86400
owo.lewd.ninja/images/games/87094_c36d5b9f01ce3c9b4b04a73e5111746f_thumb.jpg
200 OK 4.5 kB URL GET HTTP/3 owo.lewd.ninja/images/games/87094_c36d5b9f01ce3c9b4b04a73e5111746f_thumb.jpg
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 311x175, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 278dba578cf6b1db80b2180ecac2494e
b17ff736888f427d7951640573a7a29e8acfebde
26a6e5c5c6d11fa45c7e61c973be380dc4ec31f4b64345e23f0a123c491de983
GET /images/games/87094_c36d5b9f01ce3c9b4b04a73e5111746f_thumb.jpg HTTP/1.1
Host: owo.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Cookie: google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: image/webp
content-length: 4534
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=4651
content-disposition: inline; filename="87094_c36d5b9f01ce3c9b4b04a73e5111746f_thumb.webp"
etag: "650ffc90-122b"
expires: Sat, 23 Dec 2023 05:49:30 GMT
last-modified: Sun, 24 Sep 2023 09:08:32 GMT
lewd: yes
vary: Accept
x-cache-status: HIT
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 82c5eea6cf745693-OSL
alt-svc: h3=":443"; ma=86400
owo.lewd.ninja/images/games/87094_4482f6ff2c50ef3ff344f45400720d7d_thumb.png
200 OK 41 kB URL GET HTTP/3 owo.lewd.ninja/images/games/87094_4482f6ff2c50ef3ff344f45400720d7d_thumb.png
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 70bea9a07bcb7be5386c866568e8b551
5dbe9ccb5521077cc1dedd12142b5062fc6ad3d0
bef836a09210b05632b968092730b6dd89798739a1842905e5a9d7ea680ba8b2
GET /images/games/87094_4482f6ff2c50ef3ff344f45400720d7d_thumb.png HTTP/1.1
Host: owo.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Cookie: google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: image/webp
content-length: 41148
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=67922
content-disposition: inline; filename="87094_4482f6ff2c50ef3ff344f45400720d7d_thumb.webp"
etag: "650ffc8a-10952"
expires: Thu, 21 Dec 2023 22:35:58 GMT
last-modified: Sun, 24 Sep 2023 09:08:26 GMT
lewd: yes
vary: Accept
x-cache-status: MISS
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 82c5eea6bf645693-OSL
alt-svc: h3=":443"; ma=86400
owo.lewd.ninja/images/games/87094_0e9c030842cc66666a6b9eb82a37fad6_thumb.jpg
200 OK 10 kB URL GET HTTP/3 owo.lewd.ninja/images/games/87094_0e9c030842cc66666a6b9eb82a37fad6_thumb.jpg
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 311x175, components 3\012- data
Hash c729d6bb7df92ace3e98150bd30d1b76
1156f69a16c30a7148b51f4d2958cc1c75df1cb1
fb9bb9f777b97afe7d848783999c6e8465e5aebc33d2c893277d8454ed46cdc4
GET /images/games/87094_0e9c030842cc66666a6b9eb82a37fad6_thumb.jpg HTTP/1.1
Host: owo.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Cookie: google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: image/jpeg
content-length: 10064
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origSize=10217, status=webp_bigger
etag: "650ffc8b-27e9"
expires: Mon, 25 Dec 2023 03:21:52 GMT
last-modified: Sun, 24 Sep 2023 09:08:27 GMT
lewd: yes
x-cache-status: MISS
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eea6bf5b5693-OSL
alt-svc: h3=":443"; ma=86400
owo.lewd.ninja/images/games/87094_8054899071199f247794923d77ff5677_thumb.png
200 OK 77 kB URL GET HTTP/3 owo.lewd.ninja/images/games/87094_8054899071199f247794923d77ff5677_thumb.png
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 88551c333d91469bace302a56d17ebd5
0644cd6eb2c1fb34f030b334712f661814129ec1
dea1e5d6122e4ac093073e6815f416753abc76b390d8295f9cce23fcf643db60
GET /images/games/87094_8054899071199f247794923d77ff5677_thumb.png HTTP/1.1
Host: owo.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Cookie: google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: image/webp
content-length: 76652
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=121260
content-disposition: inline; filename="87094_8054899071199f247794923d77ff5677_thumb.webp"
etag: "650ffc90-1d9ac"
expires: Sun, 24 Dec 2023 20:14:58 GMT
last-modified: Sun, 24 Sep 2023 09:08:32 GMT
lewd: yes
vary: Accept
x-cache-status: MISS
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 82c5eea6cf6f5693-OSL
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
200 OK 7.8 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://new.lewd.ninja
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Nov 2023 21:53:17 GMT
expires: Thu, 21 Nov 2024 21:53:17 GMT
cache-control: public, max-age=31536000
age: 351565
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://new.lewd.ninja
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 05:00:07 GMT
expires: Fri, 22 Nov 2024 05:00:07 GMT
cache-control: public, max-age=31536000
age: 325955
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
xxx.lewd.ninja/game/87094/versions
204 No Content 0 B URL OPTIONS HTTP/2 xxx.lewd.ninja/game/87094/versions
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /game/87094/versions HTTP/1.1
Host: xxx.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Referer: https://new.lewd.ninja/
Origin: https://new.lewd.ninja
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 26 Nov 2023 23:32:42 GMT
content-length: 0
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
x-easter: L1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=TJyix52xBQ8x.3pmFa3zxJCtmUoTiRKIV13VxJCf0lc-1701041562-0-AUZHEZSV_XloWwoRB_2JETQl1OH_6wd7obJxYQOaQ2lhURq4bWusjVkgbTlrUodRYruWqqW2xMRxWUs5Fmeh3twLYolAMLTmPHCVzag51VSF23b1TRypEHee0V97t6ugd7On5_wADkmD2BNUN6ar4ow"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=TJyix52xBQ8x.3pmFa3zxJCtmUoTiRKIV13VxJCf0lc-1701041562-0-AUZHEZSV_XloWwoRB_2JETQl1OH_6wd7obJxYQOaQ2lhURq4bWusjVkgbTlrUodRYruWqqW2xMRxWUs5Fmeh3twLYolAMLTmPHCVzag51VSF23b1TRypEHee0V97t6ugd7On5_wADkmD2BNUN6ar4ow; report-to cf-csp-endpoint
server: cloudflare
cf-ray: 82c5eea7b869569b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
xxx.lewd.ninja/changelog
204 No Content 0 B IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /changelog HTTP/1.1
Host: xxx.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Referer: https://new.lewd.ninja/
Origin: https://new.lewd.ninja
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 26 Nov 2023 23:32:42 GMT
content-length: 0
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
x-easter: L1
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82c5eea7b86c569b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
xxx.lewd.ninja/game/87094/versions
204 No Content 15 B URL OPTIONS HTTP/2 xxx.lewd.ninja/game/87094/versions
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 704cc0f1812c62bbb0f8bb30cf52d013
a262b3fda87d7240706dd51536d21fec62ebd9ad
e64db0fde59206a0cf85c783e644f5e2ffd6a519dbf7d720cc9e5b0ace3d46a4
GET /game/87094/versions HTTP/1.1
Host: xxx.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://new.lewd.ninja
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: application/json; charset=utf-8
content-length: 15
x-powered-by: Express
access-control-allow-origin: *
cache-control: public, max-age=300, stale-while-revalidate=300, no-transform
etag: W/"f-omKz/ah9ckBwbdUVNtIf7GLr2a0"
x-easter: L1
cf-cache-status: EXPIRED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eea838d8569b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
new.lewd.ninja/_nuxt/img/logo-ua.7e20ab7.jpg
200 OK 1.1 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/img/logo-ua.7e20ab7.jpg
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 52x52, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 403e7442c3c2839afa6095cda1cdbb9a
c12e8b590d3175cf9fc7e5a701cf92591a1426ae
27d1831d37effaf126fe1b39d331066dbfec7d170382748388e173b7182e7fa3
GET /_nuxt/img/logo-ua.7e20ab7.jpg HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:43 GMT
content-type: image/webp
content-length: 1104
access-control-allow-origin: *, *
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=15392
content-disposition: inline; filename="logo-ua.webp"
etag: "3c20-dHSo1DWAvkOyrIz36Z/bk71G2qI"
last-modified: 2023-11-03T22:39:56.891Z
server-timing: -;dur=0;desc="Generate"
vary: Accept
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: max-age=2678400
cf-cache-status: HIT
age: 1672528
accept-ranges: bytes
server: cloudflare
cf-ray: 82c5eea8e92f5693-OSL
alt-svc: h3=":443"; ma=86400
owo.lewd.ninja/images/games/87094_fe1fc1cbfb776d761f4c1897ed9ceaad_thumb.png
200 OK 73 kB URL GET HTTP/3 owo.lewd.ninja/images/games/87094_fe1fc1cbfb776d761f4c1897ed9ceaad_thumb.png
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash f4085b86fff90ca3e0ae131fc8fdb7cd
153dcce21c1a2c1759d6b5e721e02bf0e7609cb5
d2367b1202b4de4cec4d5744bdb5c17b4e1fc97683b1f661165fabb4b2ec1f54
GET /images/games/87094_fe1fc1cbfb776d761f4c1897ed9ceaad_thumb.png HTTP/1.1
Host: owo.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Cookie: google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: image/webp
content-length: 73132
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=147240
content-disposition: inline; filename="87094_fe1fc1cbfb776d761f4c1897ed9ceaad_thumb.webp"
etag: "650ffc8a-23f28"
expires: Sun, 24 Dec 2023 20:14:58 GMT
last-modified: Sun, 24 Sep 2023 09:08:26 GMT
lewd: yes
vary: Accept
x-cache-status: MISS
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 82c5eea6cf685693-OSL
alt-svc: h3=":443"; ma=86400
owo.lewd.ninja/images/games/b_88059_cd87cd5c879eea87b8859f001f5cb16f.jpg
200 OK 69 kB URL GET HTTP/3 owo.lewd.ninja/images/games/b_88059_cd87cd5c879eea87b8859f001f5cb16f.jpg
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1597x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cdfb842aa6e2e5887105e0d451965cfc
7f9f4919ebed3c15a6fa16a5b106bfb038a39440
f87eb66ee325fbf9be4cf4df1b1bca5fb3df6006a4ce4759945bcdc205a70979
GET /images/games/b_88059_cd87cd5c879eea87b8859f001f5cb16f.jpg HTTP/1.1
Host: owo.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Cookie: google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:43 GMT
content-type: image/webp
content-length: 68784
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=79007
content-disposition: inline; filename="b_88059_cd87cd5c879eea87b8859f001f5cb16f.webp"
etag: "61ee75d3-1349f"
expires: Thu, 21 Dec 2023 21:14:00 GMT
last-modified: Mon, 24 Jan 2022 09:48:03 GMT
lewd: yes
vary: Accept
x-cache-status: MISS
cf-cache-status: HIT
age: 10734
accept-ranges: bytes
server: cloudflare
cf-ray: 82c5eea969995693-OSL
alt-svc: h3=":443"; ma=86400
owo.lewd.ninja/images/games/b_68980_14fba4ea6943b2d59b31b07a71370a47.jpg
200 OK 37 kB URL GET HTTP/3 owo.lewd.ninja/images/games/b_68980_14fba4ea6943b2d59b31b07a71370a47.jpg
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 533x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 79d793da1688bddcd3063a1fac529355
ce7e1dbc02fcb72e017c5674c0c1756fcb32ccad
cff8f04d6c9d589f08f829d5ac6d91e41cccfbee3adf37b0b402819c6d0e3079
GET /images/games/b_68980_14fba4ea6943b2d59b31b07a71370a47.jpg HTTP/1.1
Host: owo.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Cookie: google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:43 GMT
content-type: image/webp
content-length: 36806
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=37474
content-disposition: inline; filename="b_68980_14fba4ea6943b2d59b31b07a71370a47.webp"
etag: "61b88fea-9262"
expires: Thu, 21 Dec 2023 18:17:47 GMT
last-modified: Tue, 14 Dec 2021 12:36:58 GMT
lewd: yes
vary: Accept
x-cache-status: MISS
cf-cache-status: HIT
age: 86930
accept-ranges: bytes
server: cloudflare
cf-ray: 82c5eea9699b5693-OSL
alt-svc: h3=":443"; ma=86400
owo.lewd.ninja/images/games/b_51632_0751ea984cebb220f5a376c2ae11b149.jpg
200 OK 20 kB URL GET HTTP/3 owo.lewd.ninja/images/games/b_51632_0751ea984cebb220f5a376c2ae11b149.jpg
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 533x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash abd1ca3be62c1225ece8476cb212c557
55a4d5a6c32282f9cdfb0681c67b50f61a26af9c
92307976f9320eec7e047905289ca0471f0cce2617cf1cd0263ea68473c1cf65
GET /images/games/b_51632_0751ea984cebb220f5a376c2ae11b149.jpg HTTP/1.1
Host: owo.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Cookie: google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:43 GMT
content-type: image/webp
content-length: 19926
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=23695
content-disposition: inline; filename="b_51632_0751ea984cebb220f5a376c2ae11b149.webp"
etag: "647de700-5c8f"
expires: Thu, 21 Dec 2023 21:50:47 GMT
last-modified: Mon, 05 Jun 2023 13:45:36 GMT
lewd: yes
vary: Accept
x-cache-status: MISS
cf-cache-status: HIT
age: 219762
accept-ranges: bytes
server: cloudflare
cf-ray: 82c5eea9699e5693-OSL
alt-svc: h3=":443"; ma=86400
owo.lewd.ninja/images/games/87094_7ed7f82e1d4c2258a50f3ed647d01cf8_thumb.png
200 OK 60 kB URL GET HTTP/3 owo.lewd.ninja/images/games/87094_7ed7f82e1d4c2258a50f3ed647d01cf8_thumb.png
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 58c4eb547c613a50e9e8461d62c5db54
74f0d9b3556e53d0543ad6286f23bfb3e76acabf
aab178977c93d632e122844c25bb94bd55b2c2394fcc647d9e49984252e72263
GET /images/games/87094_7ed7f82e1d4c2258a50f3ed647d01cf8_thumb.png HTTP/1.1
Host: owo.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Cookie: google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:43 GMT
content-type: image/webp
content-length: 60486
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=117020
content-disposition: inline; filename="87094_7ed7f82e1d4c2258a50f3ed647d01cf8_thumb.webp"
etag: "650ffc96-1c91c"
expires: Fri, 22 Dec 2023 14:03:27 GMT
last-modified: Sun, 24 Sep 2023 09:08:38 GMT
lewd: yes
vary: Accept
x-cache-status: MISS
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 82c5eea6ef895693-OSL
alt-svc: h3=":443"; ma=86400
cdn.tsyndicate.com/sdk/v1/bi.js
200 OK 3.1 kB URL GET HTTP/2 cdn.tsyndicate.com/sdk/v1/bi.js
IP
Requested by https://a.labadena.com/api/spots/454245?p=1&s1=%subid1%&kw=
Certificate IssuerSectigo Limited
Subjectcdn.tsyndicate.com
FingerprintB6:87:8F:D6:E3:48:CF:61:4E:55:B9:6B:66:FC:B2:13:7F:A0:0D:BA
ValidityWed, 14 Jun 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type C source, ASCII text, with very long lines (7708)
Hash 132db549c9f97232cccb62af9f2156b9
27a33f324e81bb08d48875a20ef18d1f22d90af9
566f0492535dba4934209ea2b08a9ee357f4c7febf4defc717e0cb1d789bb0e5
GET /sdk/v1/bi.js HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:43 GMT
content-type: application/javascript
content-length: 3084
server: nginx
last-modified: Mon, 02 Oct 2023 10:01:05 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"651a94e1-1e65"
content-encoding: gzip
age: 4531926
accept-ranges: bytes
X-Firefox-Spdy: h2
a.labadena.com/api/click/14814787236555063095?c=90
200 OK 0 B URL GET HTTP/2 a.labadena.com/api/click/14814787236555063095?c=90
IP
ASN #24940 Hetzner Online GmbH
Requested by https://a.labadena.com/api/spots/454102?p=1&s1=%subid1%&kw=
Certificate IssuerLet's Encrypt
Subjecta.labadena.com
FingerprintD1:B7:B1:28:3A:1E:A1:04:6C:C3:7F:01:5F:80:CD:37:98:B7:BA:61
ValiditySat, 07 Oct 2023 23:27:10 GMT - Fri, 05 Jan 2024 23:27:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/14814787236555063095?c=90 HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/api/spots/454102?p=1&s1=%subid1%&kw=
Cookie: nauid=JIr0PjWN9l3khCm4TF8l
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 23:32:43 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
a.orbsrv.com/ad-provider.js
200 OK 33 kB URL GET HTTP/2 a.orbsrv.com/ad-provider.js
IP
ASN #60068 Datacamp Limited
Requested by https://a.labadena.com/api/spots/454102?p=1&s1=%subid1%&kw=
Certificate IssuerLet's Encrypt
Subjectorbsrv.com
FingerprintC1:06:45:A2:28:F1:95:0E:76:B9:25:AE:56:75:E5:60:63:2E:D3:34
ValidityThu, 05 Oct 2023 15:32:45 GMT - Wed, 03 Jan 2024 15:32:44 GMT
File type ASCII text, with very long lines (32959)
Hash 37a51e5a3e81c06a86896833341c1ecf
075f126ac630e1b7e6c942013891821fe7d5628b
cfc14ad92298562dd4fbd2a033e4eec2d280f988fc4f161cb70deecebe473352
GET /ad-provider.js HTTP/1.1
Host: a.orbsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:43 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"075f126ac630e1b7e6c94201389"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
expires: Thu, 23 Nov 2023 15:29:07 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: A7lMCRQ3Nzf/khwAALlMCgk3Nzf/CAAAANRmOAk3Nzf/PAAAAA
x-77-nzt-ray: af5856303e47f56d9bd56365b2dfaa1c
x-accel-expires: @1701045049
x-accel-date: 1701034249
x-77-cache: HIT
x-77-age: 7382
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 8, 7314
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
poweredby.jads.co/adshow.php?adzone=643057
200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/adshow.php?adzone=643057
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1332), with CRLF, LF line terminators
Hash 2ae30c544ccc356f49f5557becf38768
e89d672dee3aea5fab519feb93523092c54a3704
cea8ed1aa06d8904e55fd390f630cd57b73de8fca502ea8abcb3c4ebb6a112ed
GET /adshow.php?adzone=643057 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Nov 2023 23:32:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=77798c02839f398f5a1f0b549248c8f6; expires=Mon, 25-Nov-2024 23:32:43 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YTowOnt9; expires=Wed, 29-Nov-2023 23:32:43 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Wed, 29-Nov-2023 23:32:43 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
s.orbsrv.com/v1/api.php
200 OK 2.8 kB IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://a.labadena.com/api/spots/454102?p=1&s1=%subid1%&kw=
Certificate IssuerLet's Encrypt
Subjectorbsrv.com
FingerprintC1:06:45:A2:28:F1:95:0E:76:B9:25:AE:56:75:E5:60:63:2E:D3:34
ValidityThu, 05 Oct 2023 15:32:45 GMT - Wed, 03 Jan 2024 15:32:44 GMT
File type JSON data\012- , ASCII text, with very long lines (6085), with no line terminators
Hash 5261d591565338b8364c0db5548b44d4
26da5138a4602c28c5e6a262c5678b4747884e03
57005145d945a77ef915a2265bfac6e263eb8a6d73b86b88f7e952dfb3bf7ef8
POST /v1/api.php HTTP/1.1
Host: s.orbsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 323
Origin: https://a.labadena.com
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Nov 2023 23:32:43 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://a.labadena.com
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226563d59b974b39.242707762770251755%22%3B%7D; expires=Tue, 25-Nov-2025 23:32:43 GMT; Max-Age=63072000; path=/; domain=orbsrv.com; secure; SameSite=None
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.orbsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAAz1OS04DMRS7Chdo9H75vK5hC1JRD5BOphKoDAsWgOTD8zIIYimxLDu2kOiB+SDljttR5WgK5+SUTBJnw+PTCca4rZ8jbS/ba0cRLcyw6iaOyrm4ITNlsXipQZ2zlxaxVrUJwQgKCkjW8ARLRCSohIfzCefn+1Ccq4MR9rhn66QSnL5mtLbBKtVyIV2rUb1elAdT687elacRPd36pY9162l5f9sr9zLTOr/+EwKHaVc2naPjEHa5f3xvC/Bv+12LvGdFIL73TDAwhjBfTDWWLUJjMVde+6i59DXT9Qd6Um8jXQEAAA==
200 OK 20 B URL GET HTTP/1.1 s.orbsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAAz1OS04DMRS7Chdo9H75vK5hC1JRD5BOphKoDAsWgOTD8zIIYimxLDu2kOiB+SDljttR5WgK5+SUTBJnw+PTCca4rZ8jbS/ba0cRLcyw6iaOyrm4ITNlsXipQZ2zlxaxVrUJwQgKCkjW8ARLRCSohIfzCefn+1Ccq4MR9rhn66QSnL5mtLbBKtVyIV2rUb1elAdT687elacRPd36pY9162l5f9sr9zLTOr/+EwKHaVc2naPjEHa5f3xvC/Bv+12LvGdFIL73TDAwhjBfTDWWLUJjMVde+6i59DXT9Qd6Um8jXQEAAA==
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://a.labadena.com/api/spots/454102?p=1&s1=%subid1%&kw=
Certificate IssuerLet's Encrypt
Subjectorbsrv.com
FingerprintC1:06:45:A2:28:F1:95:0E:76:B9:25:AE:56:75:E5:60:63:2E:D3:34
ValidityThu, 05 Oct 2023 15:32:45 GMT - Wed, 03 Jan 2024 15:32:44 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAAz1OS04DMRS7Chdo9H75vK5hC1JRD5BOphKoDAsWgOTD8zIIYimxLDu2kOiB+SDljttR5WgK5+SUTBJnw+PTCca4rZ8jbS/ba0cRLcyw6iaOyrm4ITNlsXipQZ2zlxaxVrUJwQgKCkjW8ARLRCSohIfzCefn+1Ccq4MR9rhn66QSnL5mtLbBKtVyIV2rUb1elAdT687elacRPd36pY9162l5f9sr9zLTOr/+EwKHaVc2naPjEHa5f3xvC/Bv+12LvGdFIL73TDAwhjBfTDWWLUJjMVde+6i59DXT9Qd6Um8jXQEAAA== HTTP/1.1
Host: s.orbsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://a.labadena.com
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226563d59b974b39.242707762770251755%22%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Nov 2023 23:32:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://a.labadena.com
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D; expires=Tue, 25 Nov 2025 23:32:43 GMT; path=/; domain=.orbsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s3t3d2y8.afcdn.net/library/623611/08383e72ee30f54920b69f036aa7050b9906cf65.webp
200 OK 10 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/623611/08383e72ee30f54920b69f036aa7050b9906cf65.webp
IP
ASN #60068 Datacamp Limited
Requested by https://a.labadena.com/api/spots/454102?p=1&s1=%subid1%&kw=
Certificate IssuerLet's Encrypt
Subjectafcdn.net
Fingerprint23:5D:B4:21:E2:4A:BC:A2:81:F9:7D:F8:B1:5C:6C:1D:7D:F3:FC:C8
ValidityThu, 05 Oct 2023 14:56:57 GMT - Wed, 03 Jan 2024 14:56:56 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e456e1fcd5b9782e95a8a4beafdaa6f7
08383e72ee30f54920b69f036aa7050b9906cf65
652ef2a4170f9f3331fa3efbbf4f76a170be4d96c0b22a8ad23b490ccab9b534
GET /library/623611/08383e72ee30f54920b69f036aa7050b9906cf65.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:43 GMT
content-type: image/webp
content-length: 10274
last-modified: Wed, 03 Nov 2021 19:29:43 GMT
etag: "6182e327-2822"
expires: Tue, 24 Oct 2023 13:33:05 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: EQwBuUwJFAH3FUeHAA
x-77-nzt-ray: af5856303d38ec709bd563651d66d930
x-accel-expires: @1723712006
x-accel-date: 1692176006
x-cache-lb: HIT
x-age-lb: 8865557
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 8865557
accept-ranges: bytes
X-Firefox-Spdy: h2
i.jads.co/1x1.gif
200 OK 28 kB IP
Requested by https://poweredby.jads.co/adshow.php?adzone=643057
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 250x250, components 3\012- data
Hash 2acfb73fd2df022a7dad5595adef5bda
939b803ea641bd427b7599f92a816262e7a5bf48
3d4610a2ab69d08e54685d0d3cfcf03ec663bacff8cc89a1e0a2904a7769e641
GET /1x1.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=77798c02839f398f5a1f0b549248c8f6; juicy_data_1=YTowOnt9; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 23:32:43 GMT
Connection: Keep-Alive
ETag: "1478208967"
Cache-Control: max-age=19236133
Content-Length: 27460
Content-Type: image/jpeg
Last-Modified: Thu, 03 Nov 2016 21:36:07 GMT
Accept-Ranges: bytes
X-HW: 1701041563.dop226.sk1.t,1701041563.cds017.sk1.shn,1701041563.cds017.sk1.c
lcdn.tsyndicate.com/sdk/v1/b.b.js
200 OK 2.6 kB URL GET HTTP/2 lcdn.tsyndicate.com/sdk/v1/b.b.js
IP
Requested by https://tsyndicate.com/iframes2/1c560c90460d4d9e893d58fe5b4a8f53.html?&adb=0&clientjs=1&w=1280&h=1024&tz=0
Certificate IssuerSectigo Limited
Subjectlcdn.tsyndicate.com
FingerprintAA:DB:E6:65:05:5A:83:46:D1:77:83:25:84:3D:B2:B5:F5:99:97:00
ValidityWed, 08 Mar 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (2590)
Hash b0a8eae036a72f605538b002e33f7023
5916ea9eeb0b676d6f44637601c40d0dc69542d1
7b9affd37cf01ac1a4c5f4a4ccb1936f0412ff771fb24e36a55682d2bf0ac554
GET /sdk/v1/b.b.js HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=9b717316-db41-4994-8b0e-07bfffe98eaf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:43 GMT
content-type: application/javascript
content-length: 2640
server: nginx
last-modified: Tue, 25 Jul 2023 12:28:26 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"64bfbfea-1f37"
content-encoding: gzip
age: 10030151
accept-ranges: bytes
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XQCCNDDBkYZci0uHFjhpgWNGqMKdMCBw4zOFqEUTkGR5kYLsWUuSHi4Rg2aRbOkAHjYZg6YzLesEFGBg4aYm60gJHDjA2UZMbkkClmBoypZWjkCGOmJo4xYnL0FCEmDZmMNmrYmEGmRg4xMsLEsDE3pRkzMWTUsGpmrUE7C4nKiDHjIZw6YhbiqAFjhg2jcOAspIEjcEURc-BM1EHDcowcNC5DJFNYh4zGItq4wcjwBg4ZNBzLph2Xxuc6MTKioUMHzhwdL16MQROGTh05YpqXcTHmTZsXady8-EHnzfMeeGJIIcOlDgwYMmyMCdMGTpg0Z9z0oBPmyRwh5c-npyMn4poeBuFh0EhO4ZHDV3fc0YIYb7xBRx4EyfHGHPmhp14PMVSYHhw9wKChDWeU4cZBcoD3IX1nAOhGGm2UsRYZ1mUUhgtshBHdQW7MWF0ba6032hYzxNCFY3IkRZoLNk2l2hhwtPEFHEUuBIML51n2kBx2aOaaQyKUwSSPOkx5HmcP1VFHUDqIcNcNMZS0VwtkiOEbSjmg1pIYIE11gxh_mVFGDjaRtVYaWqoZgwsHukCDDC40RMNacnxBaEY5HJrooo3W8GiZYWTUxBt6pMFGjS_UQCUIKFyRHYx3zAGCE1SAEIOYO4Cgqhs20FArHrnWiiVDMJgKQwogHOHlGm-8QNSsMMwaAwhGpCFHGWa8gccLswrbo5EiOPHEWm9EOga33q7FBrdFOPFiGXZ8MS0bFNVAEg6W4XDelfElVgMONzx0ULtiyCEZDv6y-0Ubb7zlGg42fEaGhEI9NOFmRFqbx0JcTtvaQMQZh9wLM9Z4o4g6WvfCWndkFJi9a6GhMnqbgoZlRhLS150cLdSxIh0oMZpVYODOMbMOt91AFA45WClCVhkd9MXPMqxFB5htNguDb3LBNnXUtVmN9VxxEbyau2WE9kVzFN3gdUNzPWRwGGwgRIdCOgBJw5AQiTHa0tQexcZEjp0rpU-0wdCHAgEB&s=b736d0b4e586c21ba322a38ff57a60da3b2761a6eb9528e10adcb97f0d589fee1701041563&w=t&r=1&d=10&priv=true
200 OK 24 B URL GET HTTP/2 pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XQCCNDDBkYZci0uHFjhpgWNGqMKdMCBw4zOFqEUTkGR5kYLsWUuSHi4Rg2aRbOkAHjYZg6YzLesEFGBg4aYm60gJHDjA2UZMbkkClmBoypZWjkCGOmJo4xYnL0FCEmDZmMNmrYmEGmRg4xMsLEsDE3pRkzMWTUsGpmrUE7C4nKiDHjIZw6YhbiqAFjhg2jcOAspIEjcEURc-BM1EHDcowcNC5DJFNYh4zGItq4wcjwBg4ZNBzLph2Xxuc6MTKioUMHzhwdL16MQROGTh05YpqXcTHmTZsXady8-EHnzfMeeGJIIcOlDgwYMmyMCdMGTpg0Z9z0oBPmyRwh5c-npyMn4poeBuFh0EhO4ZHDV3fc0YIYb7xBRx4EyfHGHPmhp14PMVSYHhw9wKChDWeU4cZBcoD3IX1nAOhGGm2UsRYZ1mUUhgtshBHdQW7MWF0ba6032hYzxNCFY3IkRZoLNk2l2hhwtPEFHEUuBIML51n2kBx2aOaaQyKUwSSPOkx5HmcP1VFHUDqIcNcNMZS0VwtkiOEbSjmg1pIYIE11gxh_mVFGDjaRtVYaWqoZgwsHukCDDC40RMNacnxBaEY5HJrooo3W8GiZYWTUxBt6pMFGjS_UQCUIKFyRHYx3zAGCE1SAEIOYO4Cgqhs20FArHrnWiiVDMJgKQwogHOHlGm-8QNSsMMwaAwhGpCFHGWa8gccLswrbo5EiOPHEWm9EOga33q7FBrdFOPFiGXZ8MS0bFNVAEg6W4XDelfElVgMONzx0ULtiyCEZDv6y-0Ubb7zlGg42fEaGhEI9NOFmRFqbx0JcTtvaQMQZh9wLM9Z4o4g6WvfCWndkFJi9a6GhMnqbgoZlRhLS150cLdSxIh0oMZpVYODOMbMOt91AFA45WClCVhkd9MXPMqxFB5htNguDb3LBNnXUtVmN9VxxEbyau2WE9kVzFN3gdUNzPWRwGGwgRIdCOgBJw5AQiTHa0tQexcZEjp0rpU-0wdCHAgEB&s=b736d0b4e586c21ba322a38ff57a60da3b2761a6eb9528e10adcb97f0d589fee1701041563&w=t&r=1&d=10&priv=true
IP
ASN #24940 Hetzner Online GmbH
Requested by https://tsyndicate.com/iframes2/1c560c90460d4d9e893d58fe5b4a8f53.html?&adb=0&clientjs=1&w=1280&h=1024&tz=0
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type ASCII text, with no line terminators
Hash 0959ba36d476b6dc1994ba3c678b07c4
d30b94da72daa02766965206a85b7e0356375f5e
897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XQCCNDDBkYZci0uHFjhpgWNGqMKdMCBw4zOFqEUTkGR5kYLsWUuSHi4Rg2aRbOkAHjYZg6YzLesEFGBg4aYm60gJHDjA2UZMbkkClmBoypZWjkCGOmJo4xYnL0FCEmDZmMNmrYmEGmRg4xMsLEsDE3pRkzMWTUsGpmrUE7C4nKiDHjIZw6YhbiqAFjhg2jcOAspIEjcEURc-BM1EHDcowcNC5DJFNYh4zGItq4wcjwBg4ZNBzLph2Xxuc6MTKioUMHzhwdL16MQROGTh05YpqXcTHmTZsXady8-EHnzfMeeGJIIcOlDgwYMmyMCdMGTpg0Z9z0oBPmyRwh5c-npyMn4poeBuFh0EhO4ZHDV3fc0YIYb7xBRx4EyfHGHPmhp14PMVSYHhw9wKChDWeU4cZBcoD3IX1nAOhGGm2UsRYZ1mUUhgtshBHdQW7MWF0ba6032hYzxNCFY3IkRZoLNk2l2hhwtPEFHEUuBIML51n2kBx2aOaaQyKUwSSPOkx5HmcP1VFHUDqIcNcNMZS0VwtkiOEbSjmg1pIYIE11gxh_mVFGDjaRtVYaWqoZgwsHukCDDC40RMNacnxBaEY5HJrooo3W8GiZYWTUxBt6pMFGjS_UQCUIKFyRHYx3zAGCE1SAEIOYO4Cgqhs20FArHrnWiiVDMJgKQwogHOHlGm-8QNSsMMwaAwhGpCFHGWa8gccLswrbo5EiOPHEWm9EOga33q7FBrdFOPFiGXZ8MS0bFNVAEg6W4XDelfElVgMONzx0ULtiyCEZDv6y-0Ubb7zlGg42fEaGhEI9NOFmRFqbx0JcTtvaQMQZh9wLM9Z4o4g6WvfCWndkFJi9a6GhMnqbgoZlRhLS150cLdSxIh0oMZpVYODOMbMOt91AFA45WClCVhkd9MXPMqxFB5htNguDb3LBNnXUtVmN9VxxEbyau2WE9kVzFN3gdUNzPWRwGGwgRIdCOgBJw5AQiTHa0tQexcZEjp0rpU-0wdCHAgEB&s=b736d0b4e586c21ba322a38ff57a60da3b2761a6eb9528e10adcb97f0d589fee1701041563&w=t&r=1&d=10&priv=true HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=9b717316-db41-4994-8b0e-07bfffe98eaf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 23:32:44 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
tsyndicate.com/api/v1/retargeting/set/cd5a54e9-d886-4c75-af65-8b819a80f59e
200 OK 43 B URL GET HTTP/2 tsyndicate.com/api/v1/retargeting/set/cd5a54e9-d886-4c75-af65-8b819a80f59e
IP
ASN #24940 Hetzner Online GmbH
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ba036c43037cfe89320d1ef7b64cd43f
88c72d3e26047eb1e45e5564a76427734f120efe
42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb
GET /api/v1/retargeting/set/cd5a54e9-d886-4c75-af65-8b819a80f59e HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Cookie: ts_uid=9b717316-db41-4994-8b0e-07bfffe98eaf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 23:32:44 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
x-request-id: ca6551d28a193873
set-cookie: ts_rt_cd5a54e9-d886-4c75-af65-8b819a80f59e=AAMC; expires=Mon, 25 Nov 2024 23:32:44 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
freecamsfan.com/bootyhero.jpg
200 OK 12 kB URL GET HTTP/2 freecamsfan.com/bootyhero.jpg
IP
Requested by https://tsyndicate.com/iframes2/1c560c90460d4d9e893d58fe5b4a8f53.html?&adb=0&clientjs=1&w=1280&h=1024&tz=0
Certificate IssuerZeroSSL
Subjectfreecamsfan.com
Fingerprint1F:9D:61:0D:06:95:40:C2:A7:2A:6D:EC:EA:4B:7C:2F:71:44:AA:96
ValidityThu, 09 Nov 2023 00:00:00 GMT - Wed, 07 Feb 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 430x90, components 3\012- data
Hash 34470fe2d2ec640ce0e0dd2cf786e465
dcea5aaa88918ae24c05fe0891cd944cdb90f6ae
0e8a49482c4e6a1006d8b7e0495228fbadf2da7264d9c8f0e099877d48996b29
GET /bootyhero.jpg HTTP/1.1
Host: freecamsfan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 23:32:44 GMT
content-type: image/jpeg
content-length: 12154
last-modified: Wed, 25 Oct 2023 18:11:23 GMT
cache-control: max-age=31536000
expires: Mon, 25 Nov 2024 23:32:44 GMT
etag: "65395a4b-2f7a"
accept-ranges: bytes
X-Firefox-Spdy: h2
iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
200 OK 1.2 kB URL GET HTTP/2 iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
IP
Requested by https://poweredby.jads.co/adshow.php?adzone=643057
Certificate IssuerGoogle Trust Services LLC
Subjectiliketomakingpics.com
Fingerprint3E:04:82:06:FC:8C:C5:FE:97:FC:4D:36:52:EE:A8:E4:62:BA:46:2F
ValidityThu, 16 Nov 2023 06:27:45 GMT - Wed, 14 Feb 2024 06:27:44 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2344)
Hash 032455e02267e1c251bfc68dc3501b8f
6846d1ff69eddea986f4cb00022a56448ac4d8da
c110e6b3758d604213a8ebced95b11c9af9d1fe5fdc87165e14a8b11a29bf85c
GET /iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja HTTP/1.1
Host: iliketomakingpics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:43 GMT
content-type: text/html
set-cookie: showed_15254_8458=[2497863]; Expires=Mon, 27-Nov-23 23:32:43 GMT; Domain=iliketomakingpics.com; Path=/; Secure; SameSite=None
c_dea9910f3bb237a6e245949b7edd7b07=1; Expires=Mon, 27-Nov-23 23:32:43 GMT; Domain=iliketomakingpics.com; Path=/; Secure; SameSite=None
z_6e0cffb843ce9d85770efabbab18d64c=1; Expires=Mon, 27-Nov-23 23:32:43 GMT; Domain=iliketomakingpics.com; Path=/; Secure; SameSite=None
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WViK78f6iir04oIIF664quvtswtj248y7D3AMlpwLZ7wN8TwmznLCDn12RRP6MNSEyrLeBojoDGGe1BA7bpn5yvXrXqp8GOYpdD8pULIzqFHydrYm3LLbFKg17t276eD8yIvoMQS7Yk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c5eeae1b2d56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
runative-syndicate.com/api/v1/retargeting/set/dedc7df9-c920-4b4b-a9e4-2a904ca2f8ef
200 OK 43 B URL GET HTTP/2 runative-syndicate.com/api/v1/retargeting/set/dedc7df9-c920-4b4b-a9e4-2a904ca2f8ef
IP
ASN #24940 Hetzner Online GmbH
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerLet's Encrypt
Subjectrunative-syndicate.com
Fingerprint40:48:1E:FA:0A:68:1D:6A:57:EF:9A:ED:17:C8:F2:69:41:23:C6:1A
ValidityTue, 31 Oct 2023 23:07:48 GMT - Mon, 29 Jan 2024 23:07:47 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ba036c43037cfe89320d1ef7b64cd43f
88c72d3e26047eb1e45e5564a76427734f120efe
42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb
GET /api/v1/retargeting/set/dedc7df9-c920-4b4b-a9e4-2a904ca2f8ef HTTP/1.1
Host: runative-syndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 23:32:44 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
x-request-id: a0b879e8b76f848d
set-cookie: ts_rt_dedc7df9-c920-4b4b-a9e4-2a904ca2f8ef=AAMC; expires=Mon, 25 Nov 2024 23:32:44 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.runative-syndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
twistconcept.com/index.min.js?pk=068f30d41a2c432d6c8a96d5a7fc6706
200 OK 674 kB URL GET HTTP/2 twistconcept.com/index.min.js?pk=068f30d41a2c432d6c8a96d5a7fc6706
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerGoogle Trust Services LLC
Subjecttwistconcept.com
FingerprintAC:00:FA:3B:64:00:62:B9:E2:D5:CB:AA:6F:55:27:D6:0F:56:72:92
ValiditySun, 26 Nov 2023 01:36:29 GMT - Sat, 24 Feb 2024 01:36:28 GMT
File type ASCII text, with very long lines (652)
Size 674 kB (673941 bytes)
Hash 2058d53d084116ff3d36c8a630556710
8bcd226cf5ddb64be846ad645360638e82269097
6af3e3bd3016f5762e3dc3dbd8fc7bbf00f4ec9349bee71a23bbe5547dcffd1e
GET /index.min.js?pk=068f30d41a2c432d6c8a96d5a7fc6706 HTTP/1.1
Host: twistconcept.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:44 GMT
content-type: application/javascript
last-modified: Thu, 23 Nov 2023 13:06:26 GMT
etag: W/"655f4e52-28d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5589
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A2YY%2FmOPkkfGLtpz%2FHQOvaGPLl7g%2B1IaC4iFSYWobz6wfkgIkTe%2FZAS1xeFo5Ipfz9Ik2WIkJrHf4nBGIQsdyOahWe9L6q8n17eQGWrOwnrlynb59FtIMtb9kAsbA9X%2F7tp6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eeb13a51b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
proftrafficcounter.com/px.gif?akey=068f30d41a2c432d6c8a96d5a7fc6706
307 Temporary Redirect 0 B URL GET HTTP/2 proftrafficcounter.com/px.gif?akey=068f30d41a2c432d6c8a96d5a7fc6706
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px.gif?akey=068f30d41a2c432d6c8a96d5a7fc6706 HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Sun, 26 Nov 2023 23:32:45 GMT
content-type: image/gif
content-length: 0
location: https://experttrafficmonitor.com/dbs?uuid=9f26a405-a796-4804-bf9d-79dea411074d&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjozLCJhY3VzIjoxLCJhY2kiOnsiMjkiOjE3MDEwNDE1NjR9LCJhY2NsIjp7IjIwLDEiOjE3MDEwNDE1NjR9fQ.n8q8YQgpDx2UYhOLftQz-Cd5PcxjgAAdv3rttW71KXE
server: nginx/1.21.6
set-cookie: uid_id2=9f26a405-a796-4804-bf9d-79dea411074d:3:1; expires=Wed, 23 Nov 2033 23:32:44 GMT; secure; SameSite=None
ak=29,1701041564; expires=Sat, 24 Feb 2024 23:32:44 GMT; secure; SameSite=None
acl=20,1,1701041564; expires=Sat, 24 Feb 2024 23:32:44 GMT; secure; SameSite=None
expires: Sun, 26 Nov 2023 23:32:45 GMT
cache-control: max-age=0, : no-cache
X-Firefox-Spdy: h2
new.lewd.ninja/_nuxt/bfc8f28.js
200 OK 2.0 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/bfc8f28.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (6678), with no line terminators
Hash 0c4605a33f704bb8ca9c040c86b6a633
87e7a46f2f86f777fb82595ab680ef204241da95
b3a38ec442505cf883e7bacee0ce9c2fb9a8fc37da44188c944adb67fafd97c4
GET /_nuxt/bfc8f28.js HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:44 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"1a16-h+ekby+G93f7gllatoDvIEJB2pU"
last-modified: 2023-11-03T22:39:56.935Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 1989456
server: cloudflare
cf-ray: 82c5eeb24fe85693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/f1146cd.js
200 OK 3.9 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/f1146cd.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (15769), with no line terminators
Hash 55e9fdcdca82975ae0615d735db7e604
e106cbd8446a76a3bda470e66b9536727f73f87b
a08ad6e6db84218f7d5fff3ee870c85745a8c5b8d37395ba1763f309b4161884
GET /_nuxt/f1146cd.js HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:44 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"3d99-4QbL2ERqdqO9pHDma5U2cn9z+Hs"
last-modified: 2023-11-03T22:39:22.963Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 236866
server: cloudflare
cf-ray: 82c5eeb12ef75693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
impactslam.com/beh.engine?b=53&o=1
200 OK 0 B URL GET HTTP/2 impactslam.com/beh.engine?b=53&o=1
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint8A:EB:22:3C:5F:B3:C2:80:B1:D7:08:0C:82:B9:37:BB:A1:2E:65:5E
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beh.engine?b=53&o=1 HTTP/1.1
Host: impactslam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-length: 0
cache-control: no-cache, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: INF_DFL8=false; path=/; SameSite=None; secure
IUID=89d4893a-1667-43a9-9bbf-68c2139d0c48; expires=Sat, 26-Nov-2033 23:32:44 GMT; path=/; SameSite=None; secure
ISSH=6F91C4; path=/; SameSite=None; secure
ILMPF=#False; expires=Mon, 27-Nov-2023 03:32:44 GMT; path=/; SameSite=None; secure; HttpOnly
IBL=#["53"]; expires=Sat, 26-Nov-2033 23:32:44 GMT; path=/; SameSite=None; secure; HttpOnly
p3p: CP="CAO PSA OUR IND"
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82c5eeb45c95b4f4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ductquest.com/beh.engine?b=53&o=1
200 OK 0 B URL GET HTTP/2 ductquest.com/beh.engine?b=53&o=1
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerLet's Encrypt
Subjectductquest.com
Fingerprint02:ED:96:CC:4F:37:0B:F1:DE:64:75:51:C8:FC:FB:67:E1:D9:FF:8C
ValiditySun, 29 Oct 2023 13:37:54 GMT - Sat, 27 Jan 2024 13:37:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beh.engine?b=53&o=1 HTTP/1.1
Host: ductquest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-length: 0
cache-control: no-cache, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: INF_DFL8=false; path=/; SameSite=None; secure
IUID=34f10eed-ab8e-4e52-a82b-bbf26b402152; expires=Sat, 26-Nov-2033 23:32:44 GMT; path=/; SameSite=None; secure
ISSH=6F91C4; path=/; SameSite=None; secure
ILMPF=#False; expires=Mon, 27-Nov-2023 03:32:44 GMT; path=/; SameSite=None; secure; HttpOnly
IBL=#["53"]; expires=Sat, 26-Nov-2033 23:32:44 GMT; path=/; SameSite=None; secure; HttpOnly
p3p: CP="CAO PSA OUR IND"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kXV%2BMPApDtohJDHXW8KVk07c8e6QvI2f6ZN4We147KdwMIg%2Fxy%2BvsLv%2FQNevMJvkafenI0lug9CeR9p1nszKM0Zp8eG1ae0fjaF5v3IeRP1P3yrd95vR4t%2Fd8jET5Jk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c5eeb45dec56c7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.ktkjmp.com/adsbygoogle.js
200 OK 16 B URL GET HTTP/2 video.ktkjmp.com/adsbygoogle.js
IP
Requested by https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Certificate IssuerCloudflare, Inc.
Subjectvideo.ktkjmp.com
Fingerprint02:C1:75:9D:DD:6A:66:20:9E:A3:46:1B:5E:A4:87:83:5A:09:92:93
ValiditySun, 02 Jul 2023 00:00:00 GMT - Mon, 01 Jul 2024 23:59:59 GMT
Hash 3d7f7a60216d40dea48e495fef6903c9
fecdb5184f55cf012563d78940eb97b10b9cc99b
96d83ac9f20fc0b88404f307f135e212642e02d6ea295c96b28aed0d771a224f
GET /adsbygoogle.js HTTP/1.1
Host: video.ktkjmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-type: application/javascript
content-length: 16
x-amz-id-2: s16HA2Lh3OCmnYrozKjgXhrUhI+2jxcS7qsMSzPhy16d6+QGRC5rKXOE2y2mw4w6yWsehFkrrnuOw5tEmfYbsg==
x-amz-request-id: DEN4Z6SBX1JYRDDA
last-modified: Thu, 10 Mar 2022 13:52:07 GMT
etag: "3d7f7a60216d40dea48e495fef6903c9"
x-amz-meta-s3cmd-attrs: atime:1646920284/ctime:1646920283/gid:20/gname:staff/md5:3d7f7a60216d40dea48e495fef6903c9/mode:33188/mtime:1646920283/uid:501/uname:mikhailchubar
x-amz-version-id: eIgLIBoMMcsEXtxOH6UDjWyfAquRpkIG
access-control-allow-origin: https://creative.bbrdbr.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: HIT
age: 2008
expires: Mon, 27 Nov 2023 03:32:45 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eeb598b9b51e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-GX0FLQH21P
200 OK 83 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-GX0FLQH21P
IP
Requested by https://chaturbate.com/tours/3/?tour=x1Rd&campaign=taOsB&c=1&p=0&gender=x&tag=anime&disable_sound=0
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (7711)
Hash 223e6f9ba4265af788d789f63c08d8fc
64623b34148d31a81b7416c910c2c059984377c2
e0f01101b9f45020c61257b98bb188abbca0dbaae8fe2e0dc742d6bfc361129b
GET /gtag/js?id=G-GX0FLQH21P HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 26 Nov 2023 23:32:45 GMT
expires: Sun, 26 Nov 2023 23:32:45 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 83258
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
creative.bbrdbr.com/widgets/v4/Universal/main.672e6e87c69b0c60653e.js
200 OK 80 kB URL GET HTTP/3 creative.bbrdbr.com/widgets/v4/Universal/main.672e6e87c69b0c60653e.js
IP
Requested by https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint2A:9F:63:77:CB:A5:1C:FD:6E:10:F5:29:D2:FB:51:F4:7C:EC:36:A2
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (32011), with LF, NEL line terminators
Hash 149fd3a87101adfb731800f02f11e73b
9a9a0f6f14028d913e63fc012a80378a5c4d5896
420332e58487b55b58db2c2edbe69162c5d23170061d16addce87762ef224f4b
GET /widgets/v4/Universal/main.672e6e87c69b0c60653e.js HTTP/1.1
Host: creative.bbrdbr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:44 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 23 Nov 2023 14:38:50 GMT
etag: W/"655f63fa-44bd4"
expires: Sun, 26 Nov 2023 23:32:45 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 2
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eeb239920b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
twinfill.com/beh.engine?b=53&o=1
200 OK 0 B URL GET HTTP/2 twinfill.com/beh.engine?b=53&o=1
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerGoogle Trust Services LLC
Subjecttwinfill.com
Fingerprint53:02:57:31:56:94:6F:DA:8D:0C:0B:A5:CE:EB:6E:A3:FD:F3:F0:2D
ValidityFri, 06 Oct 2023 21:50:45 GMT - Thu, 04 Jan 2024 21:50:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beh.engine?b=53&o=1 HTTP/1.1
Host: twinfill.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-length: 0
cache-control: no-cache, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: INF_DFL8=false; path=/; SameSite=None; secure
IUID=907dd86c-a228-4bc8-b8d5-22f2aeda4ca2; expires=Sat, 26-Nov-2033 23:32:45 GMT; path=/; SameSite=None; secure
ISSH=6F91C4; path=/; SameSite=None; secure
ILMPF=#False; expires=Mon, 27-Nov-2023 03:32:45 GMT; path=/; SameSite=None; secure; HttpOnly
IBL=#["53"]; expires=Sat, 26-Nov-2033 23:32:45 GMT; path=/; SameSite=None; secure; HttpOnly
p3p: CP="CAO PSA OUR IND"
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82c5eeb53a43b50b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
twinsrv.com/beh.engine?b=53&o=1
200 OK 0 B URL GET HTTP/2 twinsrv.com/beh.engine?b=53&o=1
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerGoogle Trust Services LLC
Subjecttwinsrv.com
FingerprintB7:EA:D4:91:F0:BC:3C:E8:25:57:C7:CC:AA:CC:14:CD:C8:A9:DF:78
ValidityMon, 09 Oct 2023 01:58:56 GMT - Sun, 07 Jan 2024 01:58:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beh.engine?b=53&o=1 HTTP/1.1
Host: twinsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-length: 0
cache-control: no-cache, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: INF_DFL8=false; path=/; SameSite=None; secure
IUID=cf7b97e6-d6f1-46f7-810d-b7fcad6376fb; expires=Sat, 26-Nov-2033 23:32:45 GMT; path=/; SameSite=None; secure
ISSH=6F91C4; path=/; SameSite=None; secure
ILMPF=#False; expires=Mon, 27-Nov-2023 03:32:45 GMT; path=/; SameSite=None; secure; HttpOnly
IBL=#["53"]; expires=Sat, 26-Nov-2033 23:32:45 GMT; path=/; SameSite=None; secure; HttpOnly
p3p: CP="CAO PSA OUR IND"
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82c5eeb54fd7b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
impactserving.com/beh.engine?b=53&o=1
200 OK 0 B URL GET HTTP/2 impactserving.com/beh.engine?b=53&o=1
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:EF:03:68:AB:CD:BB:90:99:2A:BF:4D:9A:11:21:FA:AD:DB:5A:D3
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beh.engine?b=53&o=1 HTTP/1.1
Host: impactserving.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-length: 0
cache-control: no-cache, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: INF_DFL8=false; path=/; SameSite=None; secure
IUID=36cb50ad-c12b-407c-a626-bd61988685ae; expires=Sat, 26-Nov-2033 23:32:45 GMT; path=/; SameSite=None; secure
ISSH=6F91C4; path=/; SameSite=None; secure
ILMPF=#False; expires=Mon, 27-Nov-2023 03:32:45 GMT; path=/; SameSite=None; secure; HttpOnly
IBL=#["53"]; expires=Sat, 26-Nov-2033 23:32:45 GMT; path=/; SameSite=None; secure; HttpOnly
p3p: CP="CAO PSA OUR IND"
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82c5eeb538431c02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
onegamepics.com/bnr/4/67b/4e64a9/67b4e64a93077e42432298ed16fee9a4.jpg
18 kB URL GET onegamepics.com/bnr/4/67b/4e64a9/67b4e64a93077e42432298ed16fee9a4.jpg
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerGoogle Trust Services LLC
Subjectonegamepics.com
FingerprintBF:CE:7F:C4:DA:85:1B:86:29:04:5A:90:5E:E7:6F:D3:C4:3C:9D:1A
ValidityThu, 16 Nov 2023 05:16:41 GMT - Wed, 14 Feb 2024 05:16:40 GMT
File type JPEG image data, baseline, precision 8, 728x90, components 3\012- data
Hash fb05994ab6ff1a8d3739a21f596815ad
a33b5f3e1b4a41a4330dd9c808165174a1278de8
2b52028afcc8739113be58548193853b5aa7376a809719963c36dd13927068e0
GET /bnr/4/67b/4e64a9/67b4e64a93077e42432298ed16fee9a4.jpg HTTP/1.1
Host: onegamepics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:44 GMT
content-type: text/plain; charset=utf-8
vary: Accept-Encoding
cache-control: max-age=31536000
x-cache-status: HIT
cf-cache-status: HIT
age: 52318
last-modified: Sun, 26 Nov 2023 09:00:46 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pxLYCpB6BKiOV%2B9IcCz4ybkOJgJs48Q69LjOQtImqQscmYe8o3U9BJvt%2B7grXHGDxaXDX6X1nEvQhcK3GlWNAqC8E%2B0kMUUlW%2Ffwg8fuQ52HKo%2BMYdwiC4gCuW2%2BnQjpObg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c5eeb099fcb4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
oakbustrp.com/beh.engine?b=53&o=1
200 OK 0 B URL GET HTTP/2 oakbustrp.com/beh.engine?b=53&o=1
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint88:E6:07:3C:77:84:17:B3:9D:A1:3E:3E:7B:51:98:15:AD:89:08:40
ValidityMon, 15 May 2023 00:00:00 GMT - Tue, 14 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beh.engine?b=53&o=1 HTTP/1.1
Host: oakbustrp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-length: 0
cache-control: no-cache, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: INF_DFL8=false; path=/; SameSite=None; secure
IUID=b1722781-b40a-4b6a-8d2d-412bbd482224; expires=Sat, 26-Nov-2033 23:32:45 GMT; path=/; SameSite=None; secure
ISSH=6F91C4; path=/; SameSite=None; secure
ILMPF=#False; expires=Mon, 27-Nov-2023 03:32:45 GMT; path=/; SameSite=None; secure; HttpOnly
IBL=#["53"]; expires=Sat, 26-Nov-2033 23:32:45 GMT; path=/; SameSite=None; secure; HttpOnly
p3p: CP="CAO PSA OUR IND"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EE0QErNAoEVVdMug8%2FafCls68bTV7uv2o%2BUI%2B6S1u17wQo2DCn5ihluAIVFUTDcewiM3DLJspLJNotDgtTwJkob%2BAqgO4gVhM02Iat1vBdIk2r%2ByT73%2Fc0GYf4A6icg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c5eeb53c4a5695-OSL
X-Firefox-Spdy: h2
twinrtb.com/beh.engine?b=53&o=1
200 OK 0 B URL GET HTTP/2 twinrtb.com/beh.engine?b=53&o=1
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerGoogle Trust Services LLC
Subjecttwinrtb.com
Fingerprint7E:8E:1A:94:85:4C:C7:AC:99:9E:40:A9:40:E1:22:9E:95:C9:95:9A
ValiditySun, 01 Oct 2023 00:43:06 GMT - Sat, 30 Dec 2023 00:43:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beh.engine?b=53&o=1 HTTP/1.1
Host: twinrtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-length: 0
cache-control: no-cache, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: INF_DFL8=false; path=/; SameSite=None; secure
IUID=a75e6fec-38dd-44b4-b7c5-05bdbf99f607; expires=Sat, 26-Nov-2033 23:32:45 GMT; path=/; SameSite=None; secure
ISSH=6F91C4; path=/; SameSite=None; secure
ILMPF=#False; expires=Mon, 27-Nov-2023 03:32:45 GMT; path=/; SameSite=None; secure; HttpOnly
IBL=#["53"]; expires=Sat, 26-Nov-2033 23:32:45 GMT; path=/; SameSite=None; secure; HttpOnly
p3p: CP="CAO PSA OUR IND"
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82c5eeb54b6a0b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
twinrdsrv.com/beh.engine?b=53&o=1
200 OK 0 B URL GET HTTP/2 twinrdsrv.com/beh.engine?b=53&o=1
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint44:DC:AB:AD:02:68:C6:90:3B:A8:AF:E2:FD:7E:D7:F2:0E:5D:AC:2E
ValidityTue, 18 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beh.engine?b=53&o=1 HTTP/1.1
Host: twinrdsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-length: 0
cache-control: no-cache, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: INF_DFL8=false; path=/; SameSite=None; secure
IUID=f1af7ff6-ecdd-495d-a347-10a5d3d32769; expires=Sat, 26-Nov-2033 23:32:45 GMT; path=/; SameSite=None; secure
ISSH=6F91C4; path=/; SameSite=None; secure
ILMPF=#False; expires=Mon, 27-Nov-2023 03:32:45 GMT; path=/; SameSite=None; secure; HttpOnly
IBL=#["53"]; expires=Sat, 26-Nov-2033 23:32:45 GMT; path=/; SameSite=None; secure; HttpOnly
p3p: CP="CAO PSA OUR IND"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xeZ8nHZhqUKjYZFv3NSEAoKTlmSclO8E9bCVc%2BlMYNui%2FBtEV4fYFJPBSzKeinFozPOdCKHJvjKG6LkxMYuduKfj1xUCEN7TOyWvems3VjNKuMAV2RfA0XJ%2BDAM8Hbw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c5eeb47fedb51e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
experttrafficmonitor.com/dbs?uuid=9f26a405-a796-4804-bf9d-79dea411074d&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjozLCJhY3VzIjoxLCJhY2kiOnsiMjkiOjE3MDEwNDE1NjR9LCJhY2NsIjp7IjIwLDEiOjE3MDEwNDE1NjR9fQ.n8q8YQgpDx2UYhOLftQz-Cd5PcxjgAAdv3rttW71KXE
200 OK 7 B URL GET HTTP/2 experttrafficmonitor.com/dbs?uuid=9f26a405-a796-4804-bf9d-79dea411074d&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjozLCJhY3VzIjoxLCJhY2kiOnsiMjkiOjE3MDEwNDE1NjR9LCJhY2NsIjp7IjIwLDEiOjE3MDEwNDE1NjR9fQ.n8q8YQgpDx2UYhOLftQz-Cd5PcxjgAAdv3rttW71KXE
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /dbs?uuid=9f26a405-a796-4804-bf9d-79dea411074d&j=eyJhbGciOiJIUzI1NiJ9.eyJhY2FuIjozLCJhY3VzIjoxLCJhY2kiOnsiMjkiOjE3MDEwNDE1NjR9LCJhY2NsIjp7IjIwLDEiOjE3MDEwNDE1NjR9fQ.n8q8YQgpDx2UYhOLftQz-Cd5PcxjgAAdv3rttW71KXE HTTP/1.1
Host: experttrafficmonitor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iliketomakingpics.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-type: image/gif
content-length: 7
server: nginx/1.21.6
set-cookie: uid_id2=9f26a405-a796-4804-bf9d-79dea411074d:3:1; expires=Wed, 23 Nov 2033 23:32:45 GMT; secure; SameSite=None
ak=29,1701041564; expires=Sat, 24 Feb 2024 23:32:45 GMT; secure; SameSite=None
acl=20,1,1701041564; expires=Sat, 24 Feb 2024 23:32:45 GMT; secure; SameSite=None
expires: Sun, 26 Nov 2023 23:32:45 GMT
cache-control: max-age=0, : no-cache
X-Firefox-Spdy: h2
pentalime.com/beh.engine?b=53&o=1
200 OK 0 B URL GET HTTP/2 pentalime.com/beh.engine?b=53&o=1
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerGoogle Trust Services LLC
Subjectpentalime.com
FingerprintC5:49:14:A0:ED:5C:80:61:91:CE:64:EC:9A:30:F0:A2:8C:1D:23:E1
ValidityFri, 17 Nov 2023 20:10:48 GMT - Thu, 15 Feb 2024 20:10:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beh.engine?b=53&o=1 HTTP/1.1
Host: pentalime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-length: 0
cache-control: no-cache, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: INF_DFL8=false; path=/; SameSite=None; secure
IUID=ffdc28ff-4908-40fc-8b02-3b83358de9be; expires=Sat, 26-Nov-2033 23:32:45 GMT; path=/; SameSite=None; secure
ISSH=6F91C4; path=/; SameSite=None; secure
ILMPF=#False; expires=Mon, 27-Nov-2023 03:32:45 GMT; path=/; SameSite=None; secure; HttpOnly
IBL=#["53"]; expires=Sat, 26-Nov-2033 23:32:45 GMT; path=/; SameSite=None; secure; HttpOnly
p3p: CP="CAO PSA OUR IND"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=prHp2HPZuWreM7jiCCOV%2FVYfi6eQ4wCnet%2Bq6%2BiYhL9wN4RSvItNbmFJedYwJcOg4DapN2IZ1IN1%2FtV1PzCurOVPrehkOiSwfr1UWfdqG%2FEpbxpBgZtIFu2jxtGydts%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c5eeb548c556c4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static-assets.highwebmedia.com/images/ico-cams.png?829027f88094
200 OK 549 B URL GET HTTP/3 static-assets.highwebmedia.com/images/ico-cams.png?829027f88094
IP
Requested by https://chaturbate.com/tours/3/?tour=x1Rd&campaign=taOsB&c=1&p=0&gender=x&tag=anime&disable_sound=0
Certificate IssuerDigiCert Inc
Subject*.highwebmedia.com
FingerprintE8:AA:DE:C2:5D:9E:54:E7:4E:14:3F:F4:80:9B:A4:9F:97:F3:8C:69
ValiditySat, 30 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File type PNG image data, 13 x 15, 8-bit colormap, non-interlaced\012- data
Hash 4437b02e2efeaa0eb69858a7eb957af6
2dfa9c3fa2fc56c7504c043876eaad9526abed62
52dc5730b7afd3f35531dcca2bd7b9984f0271d15c8b449c4b1d425dddf12a33
GET /images/ico-cams.png?829027f88094 HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static-assets.highwebmedia.com/CACHE/css/output.fe3e9fec3a8e.css
Cookie: _cfuvid=u0rvA0JFN_Rt3ugkQEzOv90ZQ2DKalfQV9mTGdGC.Zs-1701041565090-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-type: image/png
content-length: 549
cache-control: public, max-age=2592000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=1457
etag: "58ecd9d7af4908cce84eccd4cbd6f0d0"
last-modified: Tue, 19 Jan 2021 22:03:22 GMT
x-amz-id-2: bgL3I5ejMm22r1llQ3wWdypbmecAbN18XgHvdfjI8T7lHemswPLMmWxEYvhYmSnm16+T6li07os=
x-amz-meta-s3cmd-attrs: md5:58ecd9d7af4908cce84eccd4cbd6f0d0
x-amz-request-id: C3Q9N570YMG5X0HX
cf-cache-status: HIT
age: 1680428
expires: Tue, 26 Dec 2023 23:32:45 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wskC4Y0IeHzqopYocCNA%2F1wCcQDRHMBM6dXWl7HBIyvMKpGhOX5I%2Borm8UKzP4TzYBXoyGhsZXWfYoeugHpBxW7rByNuHK9og5ZTCcLjq1bkfyTF2OyAoGzJVvY0GAK%2FyWMMgZDBFwgfdZ%2BNu5vUtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eeb93c877129-OSL
alt-svc: h3=":443"; ma=86400
static-assets.highwebmedia.com/fonts/ubuntur-webfont.woff?896a82003cd1
200 OK 33 kB URL GET HTTP/3 static-assets.highwebmedia.com/fonts/ubuntur-webfont.woff?896a82003cd1
IP
Requested by https://chaturbate.com/tours/3/?tour=x1Rd&campaign=taOsB&c=1&p=0&gender=x&tag=anime&disable_sound=0
Certificate IssuerDigiCert Inc
Subject*.highwebmedia.com
FingerprintE8:AA:DE:C2:5D:9E:54:E7:4E:14:3F:F4:80:9B:A4:9F:97:F3:8C:69
ValiditySat, 30 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 32960, version 1.0\012- data
Hash 30556905d926944a6ada140546bcf5ce
b9346ce355c8259d71707ab65c13e0629d01a48e
896a82003cd1a9134b0404c129bb7b8292e1d8a91298e275141b21086baa8a9d
GET /fonts/ubuntur-webfont.woff?896a82003cd1 HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://chaturbate.com
DNT: 1
Connection: keep-alive
Referer: https://static-assets.highwebmedia.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-type: application/font-woff
content-length: 32960
x-amz-id-2: N2Tc9KlR4exGQ/wbfS3DdRMdxKvz2DmjiYERmVN/2wWJed7bqXclBM+LjExk3CzXoOd3QwCV8pM=
x-amz-request-id: A7XFZJYC9BFHRCSF
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Tue, 19 Jan 2021 22:07:55 GMT
etag: "30556905d926944a6ada140546bcf5ce"
x-amz-meta-s3cmd-attrs: md5:30556905d926944a6ada140546bcf5ce
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 422305
expires: Tue, 26 Dec 2023 23:32:45 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BmvNJNXfAG4IwhKlnMUrpIleuDjLo%2B7cOodW1rNpP8ojNvckQmEOZcntN3CyLK1u6rPVkQ7LRNf6qvZHVdnyblgdl9b0RsRLMkLnqSxTuvnQSvurCqx709fIb8GmNWZoL9vPIFGLPej5X1BlJ4qPfg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _cfuvid=kZQAOkkgSgQbgq0hf32QsoSxMXhqkY6fbyBBoOfevIw-1701041565647-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 82c5eeb94c8a7129-OSL
alt-svc: h3=":443"; ma=86400
static-assets.highwebmedia.com/fonts/ubuntum-webfont.woff?a7fc63c36394
200 OK 32 kB URL GET HTTP/3 static-assets.highwebmedia.com/fonts/ubuntum-webfont.woff?a7fc63c36394
IP
Requested by https://chaturbate.com/tours/3/?tour=x1Rd&campaign=taOsB&c=1&p=0&gender=x&tag=anime&disable_sound=0
Certificate IssuerDigiCert Inc
Subject*.highwebmedia.com
FingerprintE8:AA:DE:C2:5D:9E:54:E7:4E:14:3F:F4:80:9B:A4:9F:97:F3:8C:69
ValiditySat, 30 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31680, version 1.0\012- data
Hash 9968f3d2a16c9ae20a54d0e44ee83d3a
dfd651a49017147b8e8078d530f0930020bfb846
a7fc63c363948d7add8e1dade66045376e2bad22da6697f84d175e5f9a76166e
GET /fonts/ubuntum-webfont.woff?a7fc63c36394 HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://chaturbate.com
DNT: 1
Connection: keep-alive
Referer: https://static-assets.highwebmedia.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-type: application/font-woff
content-length: 31680
x-amz-id-2: rB+skB7GGaEe4sHzju90a7GUu09inj9G6SEsrVWcyBsQvNNiUBFP3F81Mruihj9xrVoypFp3KmnnBPja/3dA4g==
x-amz-request-id: FJTVJ55Q937J5HAA
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Tue, 19 Jan 2021 22:07:54 GMT
etag: "9968f3d2a16c9ae20a54d0e44ee83d3a"
x-amz-meta-s3cmd-attrs: md5:9968f3d2a16c9ae20a54d0e44ee83d3a
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 67965
expires: Tue, 26 Dec 2023 23:32:45 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ebBGmVH95nnWGckYnjvDdW196sb4LnguNCRal%2Bg7tgXfGeIP9pLPl%2BvV3%2BGcME1pHQQELrbCF54QahsPCGl%2F9K2M6gah6WwuTEVwenL04P4Vo6pqS0ycW%2Bs%2BwcQ5NreyFSd750gmjqiTDBJdDIsJSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _cfuvid=e.1jCqb18ZqChpzr_wJtcopTS0LWQUvjB7PjPQ9bMjk-1701041565649-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 82c5eeb94c8b7129-OSL
alt-svc: h3=":443"; ma=86400
roomimg.stream.highwebmedia.com/riw/elfielovevt.jpg?1701041550
200 OK 12 kB URL GET HTTP/2 roomimg.stream.highwebmedia.com/riw/elfielovevt.jpg?1701041550
IP
Requested by https://chaturbate.com/tours/3/?tour=x1Rd&campaign=taOsB&c=1&p=0&gender=x&tag=anime&disable_sound=0
Certificate IssuerDigiCert Inc
Subject*.live.mmcdn.com
Fingerprint34:DF:74:AE:F3:BE:BA:96:2E:BE:92:8E:90:D4:92:67:9F:6B:98:AD
ValiditySat, 04 Mar 2023 00:00:00 GMT - Fri, 08 Mar 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 548x549, segment length 16, progressive, precision 8, 480x270, components 3\012- data
Hash cb5124e42bef8a818f585ea99c17d4ad
4f823a5379b564878558d3247758f29b94f794a3
f5e36a022d01f17f2a1d387d6fba5b615526b44864da2099964a22c41871ad9d
GET /riw/elfielovevt.jpg?1701041550 HTTP/1.1
Host: roomimg.stream.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
DNT: 1
Connection: keep-alive
Cookie: _cfuvid=u0rvA0JFN_Rt3ugkQEzOv90ZQ2DKalfQV9mTGdGC.Zs-1701041565090-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-type: image/jpeg
content-length: 12100
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
cache-control: public, max-age=30
cf-bgj: imgq:100,h2pri
cf-polished: origSize=12133
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-frame-options: DENY
x-server-name: CB Jpeg Server
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 28
last-modified: Sun, 26 Nov 2023 23:32:17 GMT
expires: Sun, 26 Nov 2023 23:33:15 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1VS9EIfXfunJ4bMixaR1VHMjedLvqK2v0RsrrrRXxASUBnPcG%2Bor89Smp5nVJY%2B5f499WAP0JRdu4XJH88GsRGLbZSte9pgNu0Tcn9MiEx7fawpF1bbNs2X6oe3WRmS54lN8eEKTzilYTWQJiIqMsmg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eeb9ddea56ab-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
go.sexfortokens.com/abc.gif?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&liveBadgeColor=%23bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&quality=optimal&kbLimit=2000&modelsLimit=1&actionButtonPlacement=bottom&thumbSizeKey=big&hideButtonOnSmallSpots=1&hideTitleOnSmallSpots=1&hideModelNameOnSmallSpots=1&buttonColor=%23DC0C2C&language=en&thumbFit=cover&stripcashR=0&thumbType=default&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=1&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Ftsyndicate.com%2F&i=0&ib=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A745%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A470%2C%22duration%22%3A129%2C%22transferSize%22%3A4625%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A471%2C%22duration%22%3A141%2C%22transferSize%22%3A80725%7D%5D&mh=883309371
200 OK 103 B URL GET HTTP/3 go.sexfortokens.com/abc.gif?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&liveBadgeColor=%23bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&quality=optimal&kbLimit=2000&modelsLimit=1&actionButtonPlacement=bottom&thumbSizeKey=big&hideButtonOnSmallSpots=1&hideTitleOnSmallSpots=1&hideModelNameOnSmallSpots=1&buttonColor=%23DC0C2C&language=en&thumbFit=cover&stripcashR=0&thumbType=default&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=1&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Ftsyndicate.com%2F&i=0&ib=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A745%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A470%2C%22duration%22%3A129%2C%22transferSize%22%3A4625%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A471%2C%22duration%22%3A141%2C%22transferSize%22%3A80725%7D%5D&mh=883309371
IP
Requested by https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Certificate IssuerCloudflare, Inc.
Subjectsexfortokens.com
Fingerprint14:74:83:B8:1B:D5:4F:1D:A3:FD:1B:C0:F1:C8:9F:C4:71:56:16:CA
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT
Hash 8c99886486b9a004383cb4df29011c43
d79ca4754481fc59598bc08fcdf354900918bffe
bda00b0f6892b1c6991e793b42654ad1807694e2ffabcbc4eb1399379737ef6c
GET /abc.gif?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&liveBadgeColor=%23bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&quality=optimal&kbLimit=2000&modelsLimit=1&actionButtonPlacement=bottom&thumbSizeKey=big&hideButtonOnSmallSpots=1&hideTitleOnSmallSpots=1&hideModelNameOnSmallSpots=1&buttonColor=%23DC0C2C&language=en&thumbFit=cover&stripcashR=0&thumbType=default&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=1&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Ftsyndicate.com%2F&i=0&ib=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A745%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A470%2C%22duration%22%3A129%2C%22transferSize%22%3A4625%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A471%2C%22duration%22%3A141%2C%22transferSize%22%3A80725%7D%5D&mh=883309371 HTTP/1.1
Host: go.sexfortokens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-type: image/gif
content-length: 103
strict-transport-security: max-age=15768000
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuGyDLPvii6XBe56JkFLbbmn2HToucSwrt9ATmZ8bN; SameSite=None; Secure; path=/; expires=Mon, 27-Nov-23 23:32:45 GMT; HttpOnly
server: cloudflare
cf-ray: 82c5eebb3fbcb515-OSL
alt-svc: h3=":443"; ma=86400
go.sexfortokens.com/app/domain-checker/get-check
200 OK 5.5 kB URL GET HTTP/2 go.sexfortokens.com/app/domain-checker/get-check
IP
Requested by https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Certificate IssuerCloudflare, Inc.
Subjectsexfortokens.com
Fingerprint14:74:83:B8:1B:D5:4F:1D:A3:FD:1B:C0:F1:C8:9F:C4:71:56:16:CA
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 379246873830d02357ec476b87d6a49b
7a021412a43b17458e10c53efaf854b2cec3a0b4
63e6d1c1d633339ca2d2453382c253ad11715c9acd57028f4c6b574880d25442
GET /app/domain-checker/get-check HTTP/1.1
Host: go.sexfortokens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-type: application/json
strict-transport-security: max-age=15768000
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
access-control-allow-origin: https://creative.bbrdbr.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuGyDLPvii6XBe55W4fmxo2EJByXpbU9rRKPMg9jsS; SameSite=None; Secure; path=/; expires=Mon, 27-Nov-23 23:32:45 GMT; HttpOnly
server: cloudflare
cf-ray: 82c5eeba7a9ab4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/elapsedtime?f=banner%20728x90&sc=1c560c90460d4d9e893d58fe5b4a8f53&hn=a.labadena.com&et=195
200 OK 0 B URL GET HTTP/2 pxl.tsyndicate.com/api/v1/elapsedtime?f=banner%20728x90&sc=1c560c90460d4d9e893d58fe5b4a8f53&hn=a.labadena.com&et=195
IP
ASN #24940 Hetzner Online GmbH
Requested by https://a.labadena.com/api/spots/454245?p=1&s1=%subid1%&kw=
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/elapsedtime?f=banner%20728x90&sc=1c560c90460d4d9e893d58fe5b4a8f53&hn=a.labadena.com&et=195 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Cookie: ts_uid=9b717316-db41-4994-8b0e-07bfffe98eaf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 23:32:46 GMT
content-length: 0
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
xlivesex.com/checkUrl
200 OK 15 B IP
Requested by https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Certificate IssuerCloudflare, Inc.
Subjectxlivesex.com
Fingerprint41:AE:80:0B:F2:EF:54:C7:BA:5D:B6:E0:3C:30:C3:E8:32:2A:4F:26
ValidityMon, 06 Mar 2023 00:00:00 GMT - Mon, 04 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7fb97eb7c8636552ad068f6d56b5ea34
b69679936779fb02503bc0fe1374a737cc762ecb
e78008828abaa93c4462e326ef384dcda1443352a0f24bdeedada6a6fdbfd1d5
GET /checkUrl HTTP/1.1
Host: xlivesex.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:46 GMT
content-type: application/json
content-length: 15
access-control-allow-origin: https://creative.bbrdbr.com
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuFLvK1H1SdXppSyXvQEdLERgLpLuCSEAH45rPdsSt; SameSite=None; Secure; path=/; expires=Mon, 27-Nov-23 22:32:46 GMT; HttpOnly
_cfuvid=rjYQHMAzJmpauD3AgaN2wIynTanJcbxEVDnHGm9O6Tk-1701041566153-0-604800000; path=/; domain=.xlivesex.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 82c5eebc4e637129-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
nr.static.mmcdn.com/nr-spa-1.248.0.min.js
200 OK 30 kB URL GET HTTP/2 nr.static.mmcdn.com/nr-spa-1.248.0.min.js
IP
Requested by https://chaturbate.com/tours/3/?tour=x1Rd&campaign=taOsB&c=1&p=0&gender=x&tag=anime&disable_sound=0
Certificate IssuerDigiCert Inc
Subject*.mmcdn.com
Fingerprint56:66:86:E9:41:03:24:7E:1E:95:3F:2C:72:1D:B4:AF:6C:E1:4E:DC
ValidityThu, 09 Nov 2023 00:00:00 GMT - Wed, 04 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65460)
Hash 9aea0ff91a800a354637269e96e31dac
ceb0cc8b702e80d4569b15c7c1d65b45a698b38f
8e4147148517b1b092a5bf8fb1fb4e78b568bdc40a127ec16732de62ddbb472a
GET /nr-spa-1.248.0.min.js HTTP/1.1
Host: nr.static.mmcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
Origin: https://chaturbate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:46 GMT
content-type: application/javascript
cf-ray: 82c5eebc5c62712a-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 65463
cache-control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400
etag: W/"9aea0ff91a800a354637269e96e31dac"
last-modified: Thu, 16 Nov 2023 17:54:54 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Accept-Encoding
via: 1.1 varnish
cross-origin-resource-policy: cross-origin
x-amz-id-2: VB2MtRC/mw1/DdKZFe2SaAEbdF0y9hHbj3EECqH/m/Z0BSDX6WijbZYdUoYy4fea13jDClTG1nI=
x-amz-request-id: GKSEA1BWXW3X5PCH
x-amz-server-side-encryption: AES256
x-amz-version-id: WdicPIzDGJD8og5dR8sXZo1iUf3RkEzi
x-cache: MISS
x-cache-hits: 0
x-content-type-options: nosniff
x-served-by: cache-bma1671-BMA
x-timer: S1700159363.671653,VS0,VE473
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
b-hls-05.doppiocdn.com/hls/79793927/79793927_init_CmQScWld49fryUZf.mp4
200 OK 1.2 kB URL GET HTTP/2 b-hls-05.doppiocdn.com/hls/79793927/79793927_init_CmQScWld49fryUZf.mp4
IP
Requested by https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type ISO Media, MP4 Base Media v5 \012- data
Hash 6541eca7317d6f071df28b1a0542bb68
fcb569adaba13de3e61f15a4cd3f08c61a9e91fe
b963c89f0fb5fd940fa6c1a371e8be8e9b3f48fa1506b6fa0c02c351df9c2c92
GET /hls/79793927/79793927_init_CmQScWld49fryUZf.mp4 HTTP/1.1
Host: b-hls-05.doppiocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:46 GMT
content-type: video/mp4
content-length: 1215
last-modified: Sun, 26 Nov 2023 23:18:25 GMT
etag: "6563d241-4bf"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eebe283ab4fa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
new.lewd.ninja/cdn-cgi/rum?
204 No Content 0 B URL POST HTTP/3 new.lewd.ninja/cdn-cgi/rum?
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 20350
Origin: https://new.lewd.ninja
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Sun, 26 Nov 2023 23:32:46 GMT
access-control-allow-origin: https://new.lewd.ninja
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 82c5eebe58045693-OSL
x-frame-options: DENY
x-content-type-options: nosniff
slit.lewd.rip/api/users/453988?host=new.lewd.ninja&ev=210&wh=1024&ww=1280&uuid=&i=1&kw=free%20porn%20games%2Cadult%20games%2Cxxx%20games%20pc%2Cxxx%20games%20android%2Cporn%20game%20apk%2Cincest%20games%2Crule%2034%20comics%2Cincest%20comics%2Crule%2034%20webm%2Crule%2034%20animations%2Cr34%20incest%2Cr34%20comics%2C3dcg%2C2dcg%2C3dcg%20games%2C2dcg%20games%2Clewd%20games%2Cxxx%20manga%2Csexy%20games&s1=%25subid1%25&s2=%25subid2%25
200 OK 384 kB URL GET HTTP/2 slit.lewd.rip/api/users/453988?host=new.lewd.ninja&ev=210&wh=1024&ww=1280&uuid=&i=1&kw=free%20porn%20games%2Cadult%20games%2Cxxx%20games%20pc%2Cxxx%20games%20android%2Cporn%20game%20apk%2Cincest%20games%2Crule%2034%20comics%2Cincest%20comics%2Crule%2034%20webm%2Crule%2034%20animations%2Cr34%20incest%2Cr34%20comics%2C3dcg%2C2dcg%2C3dcg%20games%2C2dcg%20games%2Clewd%20games%2Cxxx%20manga%2Csexy%20games&s1=%25subid1%25&s2=%25subid2%25
IP
ASN #24940 Hetzner Online GmbH
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerLet's Encrypt
Subjecta.myprettyads.one
Fingerprint78:08:03:48:81:A1:3D:57:BA:39:BB:44:F0:A8:A2:4E:0F:68:85:81
ValidityTue, 31 Oct 2023 01:27:08 GMT - Mon, 29 Jan 2024 01:27:07 GMT
File type gzip compressed data, from Unix\012- data
Size 384 kB (384404 bytes)
Hash 0a437b84d4b55291f28e26a93c8873a8
0c3ebfcc06d91577b1805e490d61651bed507fd3
b7cf15d6377ce8889637d677eded4bf09e48dea61c31ffa4a069c952fc736026
GET /api/users/453988?host=new.lewd.ninja&ev=210&wh=1024&ww=1280&uuid=&i=1&kw=free%20porn%20games%2Cadult%20games%2Cxxx%20games%20pc%2Cxxx%20games%20android%2Cporn%20game%20apk%2Cincest%20games%2Crule%2034%20comics%2Cincest%20comics%2Crule%2034%20webm%2Crule%2034%20animations%2Cr34%20incest%2Cr34%20comics%2C3dcg%2C2dcg%2C3dcg%20games%2C2dcg%20games%2Clewd%20games%2Cxxx%20manga%2Csexy%20games&s1=%25subid1%25&s2=%25subid2%25 HTTP/1.1
Host: slit.lewd.rip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 23:32:46 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
set-cookie: nauid=PEPEQMXEDchY5yaj0hKZ; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
b-hls-05.doppiocdn.com/hls/79793927/79793927_420_YHxXNiugiDRtbM31_1701041558.mp4
200 OK 392 kB URL GET HTTP/3 b-hls-05.doppiocdn.com/hls/79793927/79793927_420_YHxXNiugiDRtbM31_1701041558.mp4
IP
Requested by https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
Size 392 kB (392440 bytes)
Hash 7efb529cf498dc6de1df6c54096d9a95
0d772192a0a95f07861290f55d3fea2755dad88c
6d4348931526e5ea96018907e265dadce8e2d4dfed5e5e64a8e88f54770698d3
GET /hls/79793927/79793927_420_YHxXNiugiDRtbM31_1701041558.mp4 HTTP/1.1
Host: b-hls-05.doppiocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:46 GMT
content-type: video/mp4
content-length: 392440
last-modified: Sun, 26 Nov 2023 23:32:40 GMT
etag: "6563d598-5fcf8"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 3
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eebf1f8a0b31-OSL
alt-svc: h3=":443"; ma=86400
b-hls-05.doppiocdn.com/hls/79793927/79793927.m3u8
200 OK 318 B URL GET HTTP/3 b-hls-05.doppiocdn.com/hls/79793927/79793927.m3u8
IP
Requested by https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
Hash e6430866af5cc41900a674efa8f8aa51
5a57ae9923bae06ea93175ae5afa7b60e7e49128
9b936355c94ee42f6b90d89c8edd9a38aff13020e88ba520f8a9215957b624b2
GET /hls/79793927/79793927.m3u8 HTTP/1.1
Host: b-hls-05.doppiocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:46 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Sun, 26 Nov 2023 23:32:44 GMT
x-proxy-cache: MISS
cache-control: public, max-age=1, s-maxage=1
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 82c5eebe0821b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
new.lewd.ninja/cdn-cgi/zaraz/s.js?z=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
200 OK 5.2 kB URL GET HTTP/3 new.lewd.ninja/cdn-cgi/zaraz/s.js?z=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
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (5326), with no line terminators
Hash f7f26cb95f71b6b490f907b7761d8a83
6cf64a31d7048b0abcac479750aac833006eefc3
c9a54c724fce91fb0682df78897519df1f4c558b9101041117204c498254a95a
GET /cdn-cgi/zaraz/s.js?z=JTdCJTIyZXhlY3V0ZWQlMjIlM0ElNUIlNUQlMkMlMjJ0JTIyJTNBJTIyRG93bmxvYWQlMjBTYXBwaGlyZSUyMFNhZmFyaSUyMC0lMjBWZXJzaW9uJTIwMC4xNyUyMC0lMjBMZXdkLm5pbmphJTIyJTJDJTIyeCUyMiUzQTAuMDAzOTUzODE5ODk4NDA5ODE2JTJDJTIydyUyMiUzQTEyODAlMkMlMjJoJTIyJTNBMTAyNCUyQyUyMmolMjIlM0ExMDI0JTJDJTIyZSUyMiUzQTEyODAlMkMlMjJsJTIyJTNBJTIyaHR0cHMlM0ElMkYlMkZuZXcubGV3ZC5uaW5qYSUyRmdhbWUlMkY4NzA5NC1zYXBwaGlyZS1zYWZhcmktdjAwNy1raW5reS1mcmlkYXlzJTNGYXNndGJuZHIlM0QxJTIyJTJDJTIyciUyMiUzQSUyMiUyMiUyQyUyMmslMjIlM0EyNCUyQyUyMm4lMjIlM0ElMjJVVEYtOCUyMiUyQyUyMm8lMjIlM0EwJTJDJTIycSUyMiUzQSU1QiU1RCU3RA== HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://new.lewd.ninja/
DNT: 1
Connection: keep-alive
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: https://new.lewd.ninja
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Set-Cookie, Cache-Control
access-control-allow-methods: GET, HEAD, POST, OPTIONS
access-control-max-age: 600
set-cookie: google-analytics_v4_fizD__engagementStart=1701041562178; Domain=lewd.ninja; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_fizD__counter=1; Domain=lewd.ninja; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_fizD__ga4sid=816440751; Domain=lewd.ninja; Path=/; Max-Age=1800; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_fizD__session_counter=1; Domain=lewd.ninja; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; Domain=lewd.ninja; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax
google-analytics_v4_fizD__let=1701041562178; Domain=lewd.ninja; Path=/; Max-Age=31536000000; HttpOnly; Secure; SameSite=Lax
server: cloudflare
cf-ray: 82c5eea39d1d5693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
creative.bbrdbr.com/widgets/v4/Universal/lang/en.json
200 OK 172 B URL GET HTTP/3 creative.bbrdbr.com/widgets/v4/Universal/lang/en.json
IP
Requested by https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint2A:9F:63:77:CB:A5:1C:FD:6E:10:F5:29:D2:FB:51:F4:7C:EC:36:A2
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 402f4a06b5dcf96d25dd4ff1f840784b
edebb253af01ef1882f424ee6278368485898d62
bd570b38d9d687c593545a7b250570605c601381f3d3d5263346b295e12a55ba
GET /widgets/v4/Universal/lang/en.json HTTP/1.1
Host: creative.bbrdbr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:44 GMT
content-type: application/json
last-modified: Thu, 23 Nov 2023 14:37:17 GMT
etag: W/"655f639d-ac"
expires: Sun, 26 Nov 2023 23:32:40 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 9
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eeb52a910b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/css/8b6543b.css
200 OK 236 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/css/8b6543b.css
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
Size 236 kB (235724 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/css/8b6543b.css HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
etag: W/"398cc-rxSZDSZAE8BCpxc8VUHwxZdOzaY"
last-modified: 2023-11-03T22:39:22.979Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 143466
server: cloudflare
cf-ray: 82c5ee9cf8eb5693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/css/e14266d.css
200 OK 36 B URL GET HTTP/3 new.lewd.ninja/_nuxt/css/e14266d.css
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 16ad4c4ff969c4d1192df9c3858d47f6
52321d0b0cc26acd5c8950684160706e3808c599
3c330828890a6a8691e6806af10f14459b4e17314f8be60c605240b50f79dcff
GET /_nuxt/css/e14266d.css HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/css; charset=utf-8
content-length: 36
vary: Accept-Encoding
etag: "24-UjIdCwzCas1ciVBoQWBwbjgIxZk"
last-modified: 2023-11-03T22:39:56.915Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 313135
accept-ranges: bytes
server: cloudflare
cf-ray: 82c5ee9fea7f5693-OSL
alt-svc: h3=":443"; ma=86400
a.labadena.com/api/click/16963919297885108095?c=90
200 OK 0 B URL GET HTTP/2 a.labadena.com/api/click/16963919297885108095?c=90
IP
ASN #24940 Hetzner Online GmbH
Requested by https://a.labadena.com/api/spots/454245?p=1&s1=%subid1%&kw=
Certificate IssuerLet's Encrypt
Subjecta.labadena.com
FingerprintD1:B7:B1:28:3A:1E:A1:04:6C:C3:7F:01:5F:80:CD:37:98:B7:BA:61
ValiditySat, 07 Oct 2023 23:27:10 GMT - Fri, 05 Jan 2024 23:27:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/16963919297885108095?c=90 HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/api/spots/454245?p=1&s1=%subid1%&kw=
Cookie: nauid=JIr0PjWN9l3khCm4TF8l
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 23:32:43 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
creative.bbrdbr.com/widgets/v4/Universal/hls.4cfa5b780bfed20a8b26.js
200 OK 61 B URL GET HTTP/3 creative.bbrdbr.com/widgets/v4/Universal/hls.4cfa5b780bfed20a8b26.js
IP
Requested by https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint2A:9F:63:77:CB:A5:1C:FD:6E:10:F5:29:D2:FB:51:F4:7C:EC:36:A2
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 22f22b49cc901aa95826401f7ce0930c
6471abdd35ab6d511b67d73ad1375f1ee0f255de
0fae8b03858a764bad3e9af19bfc924ead5b9e25c760432c19e91cba3dff1cf3
GET /widgets/v4/Universal/hls.4cfa5b780bfed20a8b26.js HTTP/1.1
Host: creative.bbrdbr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 23 Nov 2023 14:38:50 GMT
etag: W/"655f63fa-3d"
expires: Sun, 26 Nov 2023 23:32:53 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 1
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eebd0d8d0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/e3139c5.js
200 OK 4.9 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/e3139c5.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (5192), with no line terminators
Hash 470148ea42a9e75f849b647e6f706976
ef10f68262607f586fc17dc2f62b5d305f546d95
e5a3597f29dc26de6f31b3242128f7d480fcde2f4902080f476025a53323dc3f
GET /_nuxt/e3139c5.js HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"1316-0fwBvLCG+GYaK75mxOJd2TUyrCs"
last-modified: 2023-11-03T22:39:22.963Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 1672049
server: cloudflare
cf-ray: 82c5ee9cf8f55693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
chaturbate.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
302 Found 7.3 kB URL GET HTTP/3 chaturbate.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
Requested by https://chaturbate.com/tours/3/?tour=x1Rd&campaign=taOsB&c=1&p=0&gender=x&tag=anime&disable_sound=0
Certificate IssuerDigiCert Inc
Subject*.highwebmedia.com
FingerprintE8:AA:DE:C2:5D:9E:54:E7:4E:14:3F:F4:80:9B:A4:9F:97:F3:8C:69
ValiditySat, 30 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: chaturbate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=2987vKUG5Of08dvuboioTW7myXG7Mw6fHYIIPb6HXAc-1701041564-0-Aau68zBVKpURhXUrd+j8LM9PkJ33uFdxyq4SeeYuJGSlXsL9SaHNc63fNvekEIV9mzF/ZxExEKLZprOaC2usbD8=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sun, 26 Nov 2023 23:32:45 GMT
access-control-allow-origin: *
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
vary: accept-encoding
cache-control: max-age=300, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t45HnD5IATdG52%2FI1IAR%2FhQj1hduijiJrKjrmsDkBZqLhg2jrHoF%2F4BFbpALZcbx1KO9wsF4vkh0KYwsENjLLMFE7qZcnBgN5h0tYO3iJwjbTXfWEjU90fosezODAUOm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82c5eeb948a6b523-OSL
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/css/f39b716.css
200 OK 94 B URL GET HTTP/3 new.lewd.ninja/_nuxt/css/f39b716.css
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 2b3e230b93a8c2cd1cafb4342d057624
87c1caa7dc9c81faaf24e211164871b76eb0a4d6
2ebf94a729552c5fb6ec4acd4bbea186c09f63e680176818392f1a26b1a0898a
GET /_nuxt/css/f39b716.css HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
etag: W/"5e-h8HKp9ycgfqvJOIRFkhxt26wpNY"
last-modified: 2023-11-03T22:39:22.967Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 403864
server: cloudflare
cf-ray: 82c5eea00a915693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/1a0aae5.js
200 OK 1.1 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/1a0aae5.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (1185), with no line terminators
Hash 40e6beab12b84fa63595c6181126fe23
29e0fa727705be84d1118d38b124bb6126d6ce76
ca4ba681a26a6498227f64b6c73a452a2cb07a98e37bf214147df890376af65a
GET /_nuxt/1a0aae5.js HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"459-0Kq/lDJCzFGDbov7j6qBNpRjM2c"
last-modified: 2023-11-03T22:39:23.011Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 1668923
server: cloudflare
cf-ray: 82c5eea58e945693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
twinrdack.com/beh.engine?b=53&o=1
200 OK 0 B URL GET HTTP/2 twinrdack.com/beh.engine?b=53&o=1
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerGoogle Trust Services LLC
Subjecttwinrdack.com
Fingerprint1E:F8:EF:EE:AF:E9:AB:8B:B6:3B:9E:16:4B:8A:AF:17:9F:0D:01:75
ValidityMon, 16 Oct 2023 04:04:30 GMT - Sun, 14 Jan 2024 04:04:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beh.engine?b=53&o=1 HTTP/1.1
Host: twinrdack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-length: 0
cache-control: no-cache, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: INF_DFL8=false; path=/; SameSite=None; secure
IUID=c76080cc-6e41-49ce-bdde-657c12fc0f08; expires=Sat, 26-Nov-2033 23:32:45 GMT; path=/; SameSite=None; secure
ISSH=6F91C4; path=/; SameSite=None; secure
ILMPF=#False; expires=Mon, 27-Nov-2023 03:32:45 GMT; path=/; SameSite=None; secure; HttpOnly
IBL=#["53"]; expires=Sat, 26-Nov-2033 23:32:45 GMT; path=/; SameSite=None; secure; HttpOnly
p3p: CP="CAO PSA OUR IND"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pArTDucJgbxYgdvZ0KnuUbOTdLfKQ8jHV5rtLs1v2Va93f6jU8Cyoi1bc353n5t6oRly1ra6A9h06ZgNPwy7wM%2FQ1yLTH1WZuIYe6oFs64PCYPCjZEeaNtFuQJM7EQY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c5eeb52e2a5689-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
go.sexfortokens.com/app/domain-checker/check-result
204 No Content 0 B URL POST HTTP/3 go.sexfortokens.com/app/domain-checker/check-result
IP
Requested by https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Certificate IssuerCloudflare, Inc.
Subjectsexfortokens.com
Fingerprint14:74:83:B8:1B:D5:4F:1D:A3:FD:1B:C0:F1:C8:9F:C4:71:56:16:CA
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /app/domain-checker/check-result HTTP/1.1
Host: go.sexfortokens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 173
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
date: Sun, 26 Nov 2023 23:32:46 GMT
strict-transport-security: max-age=15768000
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
access-control-allow-origin: https://creative.bbrdbr.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuGyDLPvii6XBe56JvubV3FmnADLrTBxcoSQXDteEg; SameSite=None; Secure; path=/; expires=Mon, 27-Nov-23 23:32:46 GMT; HttpOnly
server: cloudflare
cf-ray: 82c5eebd0920b515-OSL
alt-svc: h3=":443"; ma=86400
static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
200 OK 20 kB URL GET HTTP/2 static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:79:35:ED:04:A2:CA:50:F7:9A:B8:FE:DF:A5:0C:B1:F2:E6:DD:E8
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (19986), with no line terminators
Hash dd1d068fdb5fe90b6c05a5b3940e088c
0d96f9df8772633a9df4c81cf323a4ef8998ba59
6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101
GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://new.lewd.ninja
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2023.10.0"
last-modified: Tue, 10 Oct 2023 21:38:13 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5ee9d4f4656c7-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
static-assets.highwebmedia.com/CACHE/css/output.fe3e9fec3a8e.css
200 OK 22 kB URL GET HTTP/2 static-assets.highwebmedia.com/CACHE/css/output.fe3e9fec3a8e.css
IP
Requested by https://chaturbate.com/tours/3/?tour=x1Rd&campaign=taOsB&c=1&p=0&gender=x&tag=anime&disable_sound=0
Certificate IssuerDigiCert Inc
Subject*.highwebmedia.com
FingerprintE8:AA:DE:C2:5D:9E:54:E7:4E:14:3F:F4:80:9B:A4:9F:97:F3:8C:69
ValiditySat, 30 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (22272), with no line terminators
Hash 777d0d0ed7ac6e68203aafae7ada65d6
baca6a795da7921d8b3e309a98d2513379bcc4cd
d4dac3accf8ef08f2b8de9cb80a86dfc4fcbc718545dcb8bd3d0e4e8362c3079
GET /CACHE/css/output.fe3e9fec3a8e.css HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chaturbate.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-type: text/css
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=26903
etag: W/"45ecf3091aa86ce3d3732164aafcc3d8"
last-modified: Mon, 16 Oct 2023 16:59:17 GMT
x-amz-id-2: BHqWEoDWO/RlNChk9Py6YRTm6qCeF/y49mY09iY6YbHwspxHd1XKAbwwmqRk6jN8nsHlJR4CYvw=
x-amz-meta-s3cmd-attrs: md5:45ecf3091aa86ce3d3732164aafcc3d8
x-amz-request-id: 1MBX1WWVJVKWCPRY
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
age: 408022
expires: Tue, 26 Dec 2023 23:32:45 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X3AIfqszqJmEJKwoHvclVZoVOuybR9YItrWRjyE4bm6sWC2GS4OhXc8YtM8PXU8bCDDVPVPVEpm1CLMa%2Fkg03UrwWKz%2BJQMEOAhnSUhQwn4awYIkhQggJYkAC5cNPGxEcA5z5SZZMl8inHxbcryoiA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=u0rvA0JFN_Rt3ugkQEzOv90ZQ2DKalfQV9mTGdGC.Zs-1701041565090-0-604800000; path=/; domain=.highwebmedia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 82c5eeb5ccd45695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
chaturbate.com/cdn-cgi/challenge-platform/h/g/jsd/r/82c5eeb1dc9eb523
200 OK 0 B URL POST HTTP/3 chaturbate.com/cdn-cgi/challenge-platform/h/g/jsd/r/82c5eeb1dc9eb523
IP
Requested by https://chaturbate.com/tours/3/?tour=x1Rd&campaign=taOsB&c=1&p=0&gender=x&tag=anime&disable_sound=0
Certificate IssuerDigiCert Inc
Subject*.highwebmedia.com
FingerprintE8:AA:DE:C2:5D:9E:54:E7:4E:14:3F:F4:80:9B:A4:9F:97:F3:8C:69
ValiditySat, 30 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/g/jsd/r/82c5eeb1dc9eb523 HTTP/1.1
Host: chaturbate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12280
Origin: https://chaturbate.com
DNT: 1
Connection: keep-alive
Referer: https://chaturbate.com/tours/3/?tour=x1Rd&campaign=taOsB&c=1&p=0&gender=x&tag=anime&disable_sound=0
Cookie: __cf_bm=2987vKUG5Of08dvuboioTW7myXG7Mw6fHYIIPb6HXAc-1701041564-0-Aau68zBVKpURhXUrd+j8LM9PkJ33uFdxyq4SeeYuJGSlXsL9SaHNc63fNvekEIV9mzF/ZxExEKLZprOaC2usbD8=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:46 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=mpLkVq4Xp9.WiXF_yWKZW4EBgfsWzEjQ8AhfMnyq4lU-1701041566-0-1-730ca2d2.73a07051.5b213570-0.2.1701041566; path=/; expires=Mon, 25-Nov-24 23:32:46 GMT; domain=.chaturbate.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qr1le0ZZISZi8lqPnOnzZUX97I6Cp3%2BiDd7eZUH5Szt9F%2FQAVM5drqCvFWiZika9qL2520i3Kt0IE%2Frp3grEmvDUmwIoEMewucbD9zzvrmqP3BgPtflUxUJdulQ0lLEt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82c5eebc0a7cb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/css/1c9a4f3.css
200 OK 15 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/css/1c9a4f3.css
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (8020)
Hash 7805289423de172f2e84eea70a2aeed8
1a86aeb0e639931489fc2ff7b6ddf79a2345390e
a51a46e4742b5d626fca63fc077dfe3718029c109e6952ca37a1e5fb6c9837bf
GET /_nuxt/css/1c9a4f3.css HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
etag: W/"3bfd-GoausOY5kxSJ/C/3tt33miNFOQ4"
last-modified: 2023-11-03T22:39:22.983Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 322230
server: cloudflare
cf-ray: 82c5ee9cf8e85693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
owo.lewd.ninja/images/games/b_87094_27adaa839e845a249dd6ad0ea6011f40.jpg
200 OK 49 kB URL GET HTTP/3 owo.lewd.ninja/images/games/b_87094_27adaa839e845a249dd6ad0ea6011f40.jpg
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 533x300, components 3\012- data
Hash 2f31b92c2a5945e5f9c9bf1f0b3047c8
f91a705406db9f183da95c29391fb94aea940628
ee2e032f1a9f076f6c547a4b9e989c3bd799927346567b8865236333ba735a6b
GET /images/games/b_87094_27adaa839e845a249dd6ad0ea6011f40.jpg HTTP/1.1
Host: owo.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: image/jpeg
content-length: 48757
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: degrade=85, origSize=51214, status=webp_bigger
etag: "63b1fdd8-c80e"
expires: Sun, 24 Dec 2023 23:25:50 GMT
last-modified: Sun, 01 Jan 2023 21:40:40 GMT
lewd: yes
x-cache-status: MISS
cf-cache-status: HIT
age: 102051
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eea0eb675693-OSL
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/8eeb184.js
200 OK 8.3 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/8eeb184.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (8810), with no line terminators
Hash 3463321db270fd22803cc9df063248d6
729fdb83b9c62a9e1184a4fdd7bd4e1437e3c3fe
0cb833038000bfeaf3d4332dc13f972f83dc39827f655ce25ae5926cd486c908
GET /_nuxt/8eeb184.js HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:44 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"2041-2rEAO3VFODraYXWfjy8kosRld9U"
last-modified: 2023-11-03T22:39:56.939Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 422220
server: cloudflare
cf-ray: 82c5eeb12ef55693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
static-assets.highwebmedia.com/images/ico-female.svg?818c9c4c368f
200 OK 7.4 kB URL GET HTTP/3 static-assets.highwebmedia.com/images/ico-female.svg?818c9c4c368f
IP
Requested by https://chaturbate.com/tours/3/?tour=x1Rd&campaign=taOsB&c=1&p=0&gender=x&tag=anime&disable_sound=0
Certificate IssuerDigiCert Inc
Subject*.highwebmedia.com
FingerprintE8:AA:DE:C2:5D:9E:54:E7:4E:14:3F:F4:80:9B:A4:9F:97:F3:8C:69
ValiditySat, 30 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (7906), with no line terminators
Hash 438fae82cab2508845253c1fa4013bb3
db555dee3168fa00db1ab11a644d01e526e869eb
8d240bf814c7966017151fe029955d1394a4b57f6a67b21319b36816a42d1fa4
GET /images/ico-female.svg?818c9c4c368f HTTP/1.1
Host: static-assets.highwebmedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static-assets.highwebmedia.com/CACHE/css/output.fe3e9fec3a8e.css
Cookie: _cfuvid=u0rvA0JFN_Rt3ugkQEzOv90ZQ2DKalfQV9mTGdGC.Zs-1701041565090-0-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-type: image/svg+xml
x-amz-id-2: dmFowCHE53I0r5gdVNgZ4u8zarsxJCe00VU727swliUbpE02w96UPHVcbYHYw+YR6lNPBj+VrNdJWGPMzGa4Fg==
x-amz-request-id: 5G8RSRJTDTDKY2PA
last-modified: Tue, 09 Mar 2021 22:37:01 GMT
etag: W/"304b64c8f4b6c7e0c36c86b419151c45"
x-amz-meta-s3cmd-attrs: md5:304b64c8f4b6c7e0c36c86b419151c45
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 416525
expires: Tue, 26 Dec 2023 23:32:45 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=01qdTkNe24Y4nlTacyPZLKCbIJsEa2t5WPpz%2BTB147aQTX5balQjdGFyF2%2FVWxNOFzKoc9%2B4wg3IQcjpNftzyNl9lT25P7en6M6tpmkchnDDDu1OQuxaGjikLDJFThM58UDpxW6GgMmrR5cTgUHHWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eeb93c857129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
a.labadena.com/api/spots/454102?p=1&s1=%subid1%&kw=
200 OK 13 kB URL GET HTTP/2 a.labadena.com/api/spots/454102?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerLet's Encrypt
Subjecta.labadena.com
FingerprintD1:B7:B1:28:3A:1E:A1:04:6C:C3:7F:01:5F:80:CD:37:98:B7:BA:61
ValiditySat, 07 Oct 2023 23:27:10 GMT - Fri, 05 Jan 2024 23:27:09 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (710)
Hash cf86c188ad6ccecf1cb99bc28ac329ea
12bddfce70bc3976d75caf17f0912a102c501eb3
005975e889e3fd70d62ac106f5ce081ddadb334ae198442460b187c6bbb17ace
GET /api/spots/454102?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 23:32:43 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: nauid=sdpi8lbsUPeDotc1Hjjf; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
new.lewd.ninja/_nuxt/398fff7.js
200 OK 986 B URL GET HTTP/3 new.lewd.ninja/_nuxt/398fff7.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (1034), with no line terminators
Hash 0c1c72db0d6bb169a576644d2e9e37fa
021efce27c227ec8e8e88a44962a6ddb2b6beb88
6f2a5eff22157959777d98aa42010c65083f3bf82167c723b36d0384ab24e88c
GET /_nuxt/398fff7.js HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"3da-CfkUhufnOIZClkBUbNxafmRm5nE"
last-modified: 2023-11-03T22:39:23.007Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 236853
server: cloudflare
cf-ray: 82c5eea58e995693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dotsrv.com/Pixel/Script/Behavior?b=53&o=1
200 OK 2.6 kB URL GET HTTP/2 dotsrv.com/Pixel/Script/Behavior?b=53&o=1
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerGoogle Trust Services LLC
Subjectdotsrv.com
Fingerprint84:7B:F0:C4:D6:3B:74:33:7A:0F:76:C1:7E:EF:96:40:DA:0C:37:98
ValiditySat, 18 Nov 2023 04:45:15 GMT - Fri, 16 Feb 2024 04:45:14 GMT
File type ASCII text, with very long lines (2916), with no line terminators
Hash e6374c021bc41f36dac228afccf57f4e
ebfa0f5efca0b10484d6c86d9c53a35e3a33fb33
903eb8ab861f2d8055cb7a381931afebf12dc229c5fd74a3b777b59cd294ce06
GET /Pixel/Script/Behavior?b=53&o=1 HTTP/1.1
Host: dotsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:44 GMT
content-type: application/x-javascript; charset=utf-8
vary: Accept-Encoding
cache-control: no-cache
p3p: CP="CAO PSA OUR IND"
expires: -1
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wZ%2FT0KkcFRdOLRQSdjPYZwqxTwFhG0jwNGQaBAiaEE8sQCh7wPLz0c38lqtnK0hc6HRF4AJkvXaY%2B5Aj9KmkYExTpH5ZhL%2BhjttQm8d82nXTaVX4URjmbCT2SL4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c5eeb13d1c7128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
owo.lewd.ninja/j2.js
200 OK 3.8 kB IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (3981), with no line terminators
Hash 0c33aa896dc76d4f41cbb4edb33678bf
6e8854e9c079d67ac86077de59be06d8e8cb914c
824f52a3f58addeb822d810da577a1eee6d8d0a24145d52f5eae9687796d6e19
GET /j2.js HTTP/1.1
Host: owo.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: application/javascript
last-modified: Tue, 17 Nov 2020 16:48:40 GMT
etag: W/"5fb3fee8-eb4"
expires: Thu, 21 Dec 2023 04:06:48 GMT
cache-control: public, max-age=2592000
lewd: yes
x-cache-status: MISS
cf-cache-status: HIT
age: 69822
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5ee9d39115693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
twinrdsyte.com/beh.engine?b=53&o=1
200 OK 0 B URL GET HTTP/2 twinrdsyte.com/beh.engine?b=53&o=1
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerGoogle Trust Services LLC
Subjecttwinrdsyte.com
Fingerprint54:BA:9E:9F:1E:14:AF:BA:0A:5D:09:72:3C:F5:CC:1A:1C:C7:CB:1D
ValidityThu, 23 Nov 2023 10:39:36 GMT - Wed, 21 Feb 2024 10:39:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beh.engine?b=53&o=1 HTTP/1.1
Host: twinrdsyte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-length: 0
cache-control: no-cache, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: INF_DFL8=false; path=/; SameSite=None; secure
IUID=9d3e7927-57a1-48a7-ba69-8633ebda7e7a; expires=Sat, 26-Nov-2033 23:32:45 GMT; path=/; SameSite=None; secure
ISSH=6F91C4; path=/; SameSite=None; secure
ILMPF=#False; expires=Mon, 27-Nov-2023 03:32:45 GMT; path=/; SameSite=None; secure; HttpOnly
IBL=#["53"]; expires=Sat, 26-Nov-2033 23:32:45 GMT; path=/; SameSite=None; secure; HttpOnly
p3p: CP="CAO PSA OUR IND"
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82c5eeb54c555695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
slit.lewd.rip/lMKFG41.js
200 OK 236 kB IP
ASN #24940 Hetzner Online GmbH
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerLet's Encrypt
Subjecta.myprettyads.one
Fingerprint78:08:03:48:81:A1:3D:57:BA:39:BB:44:F0:A8:A2:4E:0F:68:85:81
ValidityTue, 31 Oct 2023 01:27:08 GMT - Mon, 29 Jan 2024 01:27:07 GMT
Size 236 kB (236369 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /lMKFG41.js HTTP/1.1
Host: slit.lewd.rip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: application/javascript
content-length: 76022
last-modified: Wed, 22 Nov 2023 08:26:07 GMT
vary: Accept-Encoding
etag: "655dbb1f-128f6"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 211
cf-ray: 829fd00ade553768-HEL
x-frame-options: DENY
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
new.lewd.ninja/_nuxt/css/81644a5.css
200 OK 321 B URL GET HTTP/3 new.lewd.ninja/_nuxt/css/81644a5.css
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (321), with no line terminators
Hash 3727dbbd43a1de391911624063c6dd29
3b6a3436c1ecc2ee94b1b7edb1e2bbfad5070c0f
ea2b9bb0272be3ec7695cdb9795a26baaf83e82bc23760d8db139617eb3aa7be
GET /_nuxt/css/81644a5.css HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
etag: W/"141-O2o0NsHswu6UsbftseK7+tUHDA8"
last-modified: 2023-11-03T22:39:56.923Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 239076
server: cloudflare
cf-ray: 82c5ee9fda6a5693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/css/eefd083.css
200 OK 111 B URL GET HTTP/3 new.lewd.ninja/_nuxt/css/eefd083.css
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 34194314d33cc19df0a3e7fa342333e7
8b7b0b9ff1c6680a9336f2a8b2a10eb63a1ffd4e
6175e8a9af1bb29b58543fa6f0dcf005f77caa28f78d854ddaa95f4111ca4311
GET /_nuxt/css/eefd083.css HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
etag: W/"6f-i3sLn/HGaAqTNvKosqEOtjof/U4"
last-modified: 2023-11-03T22:39:22.975Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 162037
server: cloudflare
cf-ray: 82c5ee9ffa895693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Poppins:400,700&display=swap
200 OK 2.2 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Poppins:400,700&display=swap
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (2284), with no line terminators
Hash b0c37e51cdaf2a324d4bf59101bd49b7
905c88943785b914ad61fdeb327b864244504a62
efae939be8f50b51b4c6387e258b37f1d9683a9a2e404e6793010a399110b789
GET /css?family=Poppins:400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 26 Nov 2023 23:32:41 GMT
date: Sun, 26 Nov 2023 23:32:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
new.lewd.ninja/_nuxt/60dc175.js
200 OK 3.5 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/60dc175.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (3655), with no line terminators
Hash 773b16c39fe0ebf6e9df672c595cbbdc
f66bce0e709f89328d8cd9fa97bdb4edea0fa7d3
f3f71b746de30def4073bc34e6e0a89e8985a65c952bab2c86658902af2648ff
GET /_nuxt/60dc175.js HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"d94-dQREE9glsJrb3sL8dVZCxkExefU"
last-modified: 2023-11-03T22:39:56.951Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 225373
server: cloudflare
cf-ray: 82c5eea5beb65693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/css/aa37f48.css
200 OK 564 B URL GET HTTP/3 new.lewd.ninja/_nuxt/css/aa37f48.css
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (564), with no line terminators
Hash 3c4b16061d280abb156d81fcce107046
6d6b9c1037a190b4e3181c5b12c3790619c8e470
8d3a1f83abc391df7622c03a917d7112a69495e4a90cbed0d360ccd81337653c
GET /_nuxt/css/aa37f48.css HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
etag: W/"234-bWucEDehkLTjGBxbEsN5BhnI5HA"
last-modified: 2023-11-03T22:39:56.915Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 233847
server: cloudflare
cf-ray: 82c5ee9fda6f5693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/css/ecfe4c1.css
200 OK 2.0 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/css/ecfe4c1.css
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (2012), with no line terminators
Hash 07b82e749a63540d8dd81b7ec6466120
90e10a7a0afa7a2feb7ebca360245d76ad419962
903236aa64fd5b17719ed8d49cc94087448a649ed0c7c7296438a648f2b440c0
GET /_nuxt/css/ecfe4c1.css HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
etag: W/"7da-KtYiGuLoMDpu+UpbEalIakAPg2s"
last-modified: 2023-11-03T22:39:22.975Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 245873
server: cloudflare
cf-ray: 82c5ee9fea825693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/993f9ba.js
200 OK 2.8 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/993f9ba.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (2993), with no line terminators
Hash 188a998188434e5d0dae93c55504e843
2f9d2f93d845ecf770db85d12fb70fa2862a9a42
75fb689dc3926ae6188e3f5bda3786fd3488b3e0fe23260ab6dd9bd8114114bf
GET /_nuxt/993f9ba.js HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"b07-fmbVmP/hBoQaBTxCWu4iA0aoK0Y"
last-modified: 2023-11-03T22:39:56.935Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 1989451
server: cloudflare
cf-ray: 82c5eea57e915693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/flag/pt.svg
200 OK 751 B URL GET HTTP/3 new.lewd.ninja/flag/pt.svg
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (811), with no line terminators
Hash 98d5b0c1080eb0a6ac272b3782de57ee
2921ee23421c9e5d337883d9d2d108ae2254242c
ba6dd85e2e9d5637f03c68ffe2d8ecb1e1d26bffc468d8bc637f52c38cb1ae0d
GET /flag/pt.svg HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: image/svg+xml
vary: Accept-Encoding
etag: W/"2ef-I0ACoADofB9ir7oKK7wmMAFMMMg"
last-modified: 2023-11-03T22:39:56.971Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=31536000
cf-cache-status: HIT
age: 256245
server: cloudflare
cf-ray: 82c5eea60ef35693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/flag/dk.svg
200 OK 522 B URL GET HTTP/3 new.lewd.ninja/flag/dk.svg
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (563), with no line terminators
Hash a40c5b55d733af44544df7100804d0ce
dcd9d0d3506aaa599c95a51d901308de1140cea8
8fc862a04b60704aadee8014ce942e49a3f00f35d9ef7aa14c8d9a985b60d3b5
GET /flag/dk.svg HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: image/svg+xml
vary: Accept-Encoding
etag: W/"20a-LyEenG022/YAhBM0hvWUsGxS5fM"
last-modified: 2023-11-03T22:39:56.975Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1679573
server: cloudflare
cf-ray: 82c5eea61f005693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
go.sexfortokens.com/api/models?tag=girls%2Fahegao&quality=optimal&forceClient=1&stripcashR=0&limit=1&usePreroll&webp=1
200 OK 1.5 kB URL GET HTTP/2 go.sexfortokens.com/api/models?tag=girls%2Fahegao&quality=optimal&forceClient=1&stripcashR=0&limit=1&usePreroll&webp=1
IP
Requested by https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Certificate IssuerCloudflare, Inc.
Subjectsexfortokens.com
Fingerprint14:74:83:B8:1B:D5:4F:1D:A3:FD:1B:C0:F1:C8:9F:C4:71:56:16:CA
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1605), with no line terminators
Hash faa285b1743fcbbd29bf3d7e0b37a63d
75d6f7b441876dc55c49c54ae2adecace561652e
2ecfebc0fffa3dd582905cb3384f386a202463081356635de65084c6210cf033
GET /api/models?tag=girls%2Fahegao&quality=optimal&forceClient=1&stripcashR=0&limit=1&usePreroll&webp=1 HTTP/1.1
Host: go.sexfortokens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-type: application/json
strict-transport-security: max-age=15768000
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
access-control-allow-origin: https://creative.bbrdbr.com
access-control-allow-credentials: true
last-modified: Sun, 26 Nov 2023 23:32:23 GMT
cf-cache-status: HIT
age: 9
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eeba8de6b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js
200 OK 850 B URL GET HTTP/2 www.google.com/recaptcha/api.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
File type ASCII text, with very long lines (850), with no line terminators
Hash 57e10dcd72dd2953878092014eae522b
95ba7e48825c26c5d9395ef2edb73e790bce6fa7
c7b54326365940d062bce26ed41579eebcb4946a86ba280790b603926692bd59
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Sun, 26 Nov 2023 23:32:41 GMT
date: Sun, 26 Nov 2023 23:32:41 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
new.lewd.ninja/_nuxt/css/d432a61.css
200 OK 3.7 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/css/d432a61.css
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (3751), with no line terminators
Hash c3c802cc5e3651352d4bdac7c2704edf
446055dd19e182237a3839e15594d608e1f23727
254f9e7821c946a7208f2f1ec6c67f071f199d6efc54507b667ca2736d30bfb8
GET /_nuxt/css/d432a61.css HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
etag: W/"ea5-iXYoXjOi376Zkk/zSHDz4TFBGqg"
last-modified: 2023-11-03T22:39:56.915Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 256245
server: cloudflare
cf-ray: 82c5ee9cf8ed5693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/css/58cee63.css
200 OK 389 B URL GET HTTP/3 new.lewd.ninja/_nuxt/css/58cee63.css
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (389), with no line terminators
Hash 56a5485ddcdcc44d7a08a3d63ffbce43
edd4ab62de52984cf77d0a484d72733d6ad8708f
807aec1f916e8cfd01a35c5704972740c3728eebda257167f55a89decec738d3
GET /_nuxt/css/58cee63.css HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
etag: W/"185-7dSrYt5SmEz3fQpITXJzPWrYcI8"
last-modified: 2023-11-03T22:39:22.983Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 233847
server: cloudflare
cf-ray: 82c5ee9fca685693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/e6758c8.js
200 OK 20 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/e6758c8.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (19777), with no line terminators
Hash 69039a6492e0f347a283bedc64cf6556
eff634d5c9e3489596293940ab92b8fbdea60eb1
7bd2713830542c971a55e4cc86085c099b592b0b50acb1b365555db989d2bf87
GET /_nuxt/e6758c8.js HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"4d41-7/Y01cnjSJWWKTlAq5K4+96mDrE"
last-modified: 2023-11-03T22:39:56.895Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 405555
server: cloudflare
cf-ray: 82c5eea2cca85693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/flag/br.svg
200 OK 970 B URL GET HTTP/3 new.lewd.ninja/flag/br.svg
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (1031), with no line terminators
Hash ce65f21c0bf81a492ea25b2834a1ec6e
d2c380e8b482649a553e7fdd16ad9825fdcdbeae
7937a49a234645ad6d18b760f50d7199da481d9606db614709c93fe4b01e575a
GET /flag/br.svg HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: image/svg+xml
vary: Accept-Encoding
etag: W/"3ca-e0spMFwxuqEnj9m5L03FvlzUs4Y"
last-modified: 2023-11-03T22:39:23.043Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=31536000
cf-cache-status: HIT
age: 164218
server: cloudflare
cf-ray: 82c5eea60efa5693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
owo.lewd.ninja/images/games/87094_55d3beea1d235735d2698d71a2868776_thumb.jpg
200 OK 9.1 kB URL GET HTTP/3 owo.lewd.ninja/images/games/87094_55d3beea1d235735d2698d71a2868776_thumb.jpg
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 311x175, components 3\012- data
Hash ee61e95240164a244175c53edf1a6513
504501e37c06fb7b5f43035beb3ae2c426ee3c0d
b2a382cfa9da79ebaeb6e8b6309513d9f7797bdfe8350531942b7ebb6cfe06a2
GET /images/games/87094_55d3beea1d235735d2698d71a2868776_thumb.jpg HTTP/1.1
Host: owo.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Cookie: google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: image/jpeg
content-length: 9143
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origSize=9238, status=webp_bigger
etag: "650ffc8b-2416"
expires: Mon, 25 Dec 2023 03:21:52 GMT
last-modified: Sun, 24 Sep 2023 09:08:27 GMT
lewd: yes
x-cache-status: MISS
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eea6af575693-OSL
alt-svc: h3=":443"; ma=86400
creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
200 OK 811 B URL GET HTTP/2 creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
IP
Requested by https://tsyndicate.com/iframes2/1c560c90460d4d9e893d58fe5b4a8f53.html?&adb=0&clientjs=1&w=1280&h=1024&tz=0
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint2A:9F:63:77:CB:A5:1C:FD:6E:10:F5:29:D2:FB:51:F4:7C:EC:36:A2
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (872), with no line terminators
Hash c72e056cd01671e0e53e1be37e5b29ec
44d2211f84a922401458d095aa595a3320040c96
5609d268dd4d7959a25a6a7f3c8ec2c1c4f93f54819a1623dfc4bc46bb0084e0
GET /widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000 HTTP/1.1
Host: creative.bbrdbr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:44 GMT
content-type: text/html
last-modified: Thu, 23 Nov 2023 14:37:17 GMT
expires: Sun, 26 Nov 2023 23:32:39 GMT
cache-control: max-age=10
strict-transport-security: max-age=15768000
pragma: public
report-to: { "endpoints":[{ "url": "https://go.stripchat.com/report" }], "group": "default", "max_age": 1048576 }
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: HIT
age: 5
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eeaf3fdb712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
new.lewd.ninja/_nuxt/css/3b560fb.css
200 OK 2.1 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/css/3b560fb.css
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (2115), with no line terminators
Hash c2c7fb5156533a214a74def0640ba23d
8b7b18025b0911df91fd6a086f82d950614d08e2
089ae66d14319effad48cfcf54c945788d58c5c779d3918af4191726566211d6
GET /_nuxt/css/3b560fb.css HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
etag: W/"843-i3sYAlsJEd+R/WoIb4LZUGFNCOI"
last-modified: 2023-11-03T22:39:22.983Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 232100
server: cloudflare
cf-ray: 82c5ee9fba545693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
twinrdsyn.com/beh.engine?b=53&o=1
200 OK 0 B URL GET HTTP/2 twinrdsyn.com/beh.engine?b=53&o=1
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerGoogle Trust Services LLC
Subjecttwinrdsyn.com
Fingerprint5A:14:93:70:60:0A:E4:66:2F:AA:CF:7D:B9:A9:47:F9:52:A0:E5:46
ValidityThu, 12 Oct 2023 23:10:25 GMT - Wed, 10 Jan 2024 23:10:24 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beh.engine?b=53&o=1 HTTP/1.1
Host: twinrdsyn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-length: 0
cache-control: no-cache, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: INF_DFL8=false; path=/; SameSite=None; secure
IUID=35414a78-a527-4316-b7e5-3d034924d0f2; expires=Sat, 26-Nov-2033 23:32:44 GMT; path=/; SameSite=None; secure
ISSH=6F91C4; path=/; SameSite=None; secure
ILMPF=#False; expires=Mon, 27-Nov-2023 03:32:44 GMT; path=/; SameSite=None; secure; HttpOnly
IBL=#["53"]; expires=Sat, 26-Nov-2033 23:32:44 GMT; path=/; SameSite=None; secure; HttpOnly
p3p: CP="CAO PSA OUR IND"
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82c5eeb45edf0b51-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
edge-hls.doppiocdn.com/hls/79793927/master/79793927.m3u8
200 OK 222 B URL GET HTTP/2 edge-hls.doppiocdn.com/hls/79793927/master/79793927.m3u8
IP
Requested by https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with no line terminators
Hash db156f7dc31afee904f63181f2437eba
81e196dcc5657810b1cecbe5b0447b5d21259d77
b8be745d531afec32b6e806c859f72c3859705877f9ca4638932efa1d38e97c5
GET /hls/79793927/master/79793927.m3u8 HTTP/1.1
Host: edge-hls.doppiocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:46 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Sun, 26 Nov 2023 23:32:41 GMT
x-proxy-cache: EXPIRED
cache-control: public, max-age=3, s-maxage=3
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 82c5eebdafdbb4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
new.lewd.ninja/_nuxt/2a0a4cb.js
200 OK 2.9 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/2a0a4cb.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (3019), with no line terminators
Hash 5fe3d9ec2c6fe1d4548205045ec56007
4c66a06beb9c98c8c4800b40bc6385ba9ad3bf61
2d5b8997f80f7de175eaea96a65aceaa5a11434b48f5de95a13cb453646210d8
GET /_nuxt/2a0a4cb.js HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"b3d-3k4R0jO9xSZbIRcoiqP2l4gR+zs"
last-modified: 2023-11-03T22:39:56.951Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 233810
server: cloudflare
cf-ray: 82c5eea58e9c5693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/flag/gb.svg
200 OK 2.1 kB URL GET HTTP/3 new.lewd.ninja/flag/gb.svg
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (2231), with no line terminators
Hash 633c3ded142537234d4702d7fbeb2e7b
fb867fffb53404bcecdac895e3b1e9f42cecbc4d
bfee694cd5d0f957f9640e8cd96eb542c87bbdcae9bb3f41d4a58066a330c238
GET /flag/gb.svg HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: image/svg+xml
vary: Accept-Encoding
etag: W/"836-I2OrVz9r14mjCOc2QVLcXqUawps"
last-modified: 2023-11-03T22:39:23.043Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1990057
server: cloudflare
cf-ray: 82c5eea5eed45693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
chaturbate.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
200 OK 7.3 kB URL GET HTTP/3 chaturbate.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
IP
Requested by https://chaturbate.com/tours/3/?tour=x1Rd&campaign=taOsB&c=1&p=0&gender=x&tag=anime&disable_sound=0
Certificate IssuerDigiCert Inc
Subject*.highwebmedia.com
FingerprintE8:AA:DE:C2:5D:9E:54:E7:4E:14:3F:F4:80:9B:A4:9F:97:F3:8C:69
ValiditySat, 30 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (7341), with no line terminators
Hash d3b3be7907dfcb6de0feb44c18e4b1e8
e7cc827ef4c025820255115c20fa11f16d8ee47e
da2f153c19f3c56f1f30cdc3e828740a492767c48b2127791a9b62cf4604b5b2
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js HTTP/1.1
Host: chaturbate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=2987vKUG5Of08dvuboioTW7myXG7Mw6fHYIIPb6HXAc-1701041564-0-Aau68zBVKpURhXUrd+j8LM9PkJ33uFdxyq4SeeYuJGSlXsL9SaHNc63fNvekEIV9mzF/ZxExEKLZprOaC2usbD8=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
cache-control: max-age=14400, public
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tnw4yubHCQiaWngXHwiVbpL9%2BU5XoVD2POx8cL%2BcEexLpkexmUt3rcG6wWj%2Bh%2FVDO8EU1EyLA2AYrcr3%2BD60w%2BUrVhKiLMxJ9JRmavhlNZn9JiwIBTPutr09SVI4zgZT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82c5eeb988d8b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/170e200.js
200 OK 733 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/170e200.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
Size 733 kB (732829 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/170e200.js HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"b2e9d-dE93b5kt9egJKITlcZpJePyeMBA"
last-modified: 2023-11-03T22:39:23.015Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 422178
server: cloudflare
cf-ray: 82c5ee9cf8ef5693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
a.labadena.com/api/spots/454245?p=1&s1=%subid1%&kw=
200 OK 13 kB URL GET HTTP/2 a.labadena.com/api/spots/454245?p=1&s1=%subid1%&kw=
IP
ASN #24940 Hetzner Online GmbH
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerLet's Encrypt
Subjecta.labadena.com
FingerprintD1:B7:B1:28:3A:1E:A1:04:6C:C3:7F:01:5F:80:CD:37:98:B7:BA:61
ValiditySat, 07 Oct 2023 23:27:10 GMT - Fri, 05 Jan 2024 23:27:09 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (710)
Hash 195028eb88d05394b2a9887a1646a7c2
efab6f0abc608145bb50712b88e24145e2a874bc
e1a55ec29b4a48ef51171623e9fb61e87661fc6f48f01f6c07fa796d0601c49a
GET /api/spots/454245?p=1&s1=%subid1%&kw= HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 23:32:43 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: nauid=JIr0PjWN9l3khCm4TF8l; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
creative.bbrdbr.com/widgets/v4/Universal/main.672e6e87c69b0c60653e.css
200 OK 13 kB URL GET HTTP/3 creative.bbrdbr.com/widgets/v4/Universal/main.672e6e87c69b0c60653e.css
IP
Requested by https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint2A:9F:63:77:CB:A5:1C:FD:6E:10:F5:29:D2:FB:51:F4:7C:EC:36:A2
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (13396), with no line terminators
Hash d55b785d72863fbb8425a36b7d675ec2
546cda15b6fb2a67ce1f102dc82eefb6f749f9c3
a4d09f6a50b6d96e7f22ab12f406dcf44be0d815105018cc5c7f1105fbf597f7
GET /widgets/v4/Universal/main.672e6e87c69b0c60653e.css HTTP/1.1
Host: creative.bbrdbr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:44 GMT
content-type: text/css
last-modified: Thu, 23 Nov 2023 14:38:50 GMT
etag: W/"655f63fa-3454"
expires: Sun, 26 Nov 2023 23:32:47 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 2
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eeb239900b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
go.bbrdbr.com/config?url=https%3A%2F%2Fcreative.bbrdbr.com%2Fwidgets%2Fv4%2FUniversal%3FcampaignId%3Dsexfortokens-adxad-728x90-ww-bootyheros%26sourceId%3Dc4c444c1fe40124de71c3102647ef5ff%26modelPageOption%3Dmodel%26tag%3Dgirls%252Fahegao%26hideModelName%3D1%26thumbsMargin%3D0%26gridRows%3D1%26gridColumns%3D1%26responsive%3D0%26hideButton%3D1%26hideTitle%3D1%26liveBadgeColor%3Dbd2200%26targetDomain%3Dsexfortokens.com%26userId%3D17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd%26autoplay%3DfirstThumb%26autoplayForce%3D1%26quality%3Doptimal%26kbLimit%3D2000
200 OK 7.3 kB URL GET HTTP/2 go.bbrdbr.com/config?url=https%3A%2F%2Fcreative.bbrdbr.com%2Fwidgets%2Fv4%2FUniversal%3FcampaignId%3Dsexfortokens-adxad-728x90-ww-bootyheros%26sourceId%3Dc4c444c1fe40124de71c3102647ef5ff%26modelPageOption%3Dmodel%26tag%3Dgirls%252Fahegao%26hideModelName%3D1%26thumbsMargin%3D0%26gridRows%3D1%26gridColumns%3D1%26responsive%3D0%26hideButton%3D1%26hideTitle%3D1%26liveBadgeColor%3Dbd2200%26targetDomain%3Dsexfortokens.com%26userId%3D17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd%26autoplay%3DfirstThumb%26autoplayForce%3D1%26quality%3Doptimal%26kbLimit%3D2000
IP
Requested by https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint2A:9F:63:77:CB:A5:1C:FD:6E:10:F5:29:D2:FB:51:F4:7C:EC:36:A2
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (9435), with no line terminators
Hash df0292dee4e2bd248cc34402afc32e2b
e06053546fd2627960d419610504e122b42b962d
4885608899e75596d8e536c79ac359a7435753256a5405529927e8d03c88157d
GET /config?url=https%3A%2F%2Fcreative.bbrdbr.com%2Fwidgets%2Fv4%2FUniversal%3FcampaignId%3Dsexfortokens-adxad-728x90-ww-bootyheros%26sourceId%3Dc4c444c1fe40124de71c3102647ef5ff%26modelPageOption%3Dmodel%26tag%3Dgirls%252Fahegao%26hideModelName%3D1%26thumbsMargin%3D0%26gridRows%3D1%26gridColumns%3D1%26responsive%3D0%26hideButton%3D1%26hideTitle%3D1%26liveBadgeColor%3Dbd2200%26targetDomain%3Dsexfortokens.com%26userId%3D17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd%26autoplay%3DfirstThumb%26autoplayForce%3D1%26quality%3Doptimal%26kbLimit%3D2000 HTTP/1.1
Host: go.bbrdbr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-type: application/json
access-control-allow-origin: https://creative.bbrdbr.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Sun, 26 Nov 2023 21:36:58 GMT
cf-cache-status: EXPIRED
set-cookie: __cflb=0H28upDCGznfDm9XVD3SofQ5NjJpXSds4rbodwehHsa; SameSite=None; Secure; path=/; expires=Mon, 27-Nov-23 23:32:45 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eeb5a9bc56ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
new.lewd.ninja/_nuxt/3a5bf38.js
200 OK 336 B URL GET HTTP/3 new.lewd.ninja/_nuxt/3a5bf38.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (342), with no line terminators
Hash a3e7ac02d98882709d8e109f4041a09a
042583df15403c811ed7edaf7a4c59a7808fc781
59cabfa35500418303bfa6f88fa420c7787e1871797a4b086c0323df220bdb7e
GET /_nuxt/3a5bf38.js HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"150-Zr88ioKNy9q8KThXm2EH6TkBF6Y"
last-modified: 2023-11-03T22:39:56.951Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 233810
server: cloudflare
cf-ray: 82c5eea5beb55693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/970bda6.js
200 OK 4.4 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/970bda6.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (4636), with no line terminators
Hash 061d3ee23d8b1c6d5fcf6170d27b406f
98d7fbe995a28724a00466cb6408b41f332b2175
ad5a728853aa12e7ed37b889b24001f33293f48d43feb560f13655bdb5d1b5b1
GET /_nuxt/970bda6.js HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"1137-UsLFcVn6gHjx9WABcoGEBGVjYk8"
last-modified: 2023-11-03T22:39:22.991Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 75866
server: cloudflare
cf-ray: 82c5eea5beb85693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/css/b511cb9.css
200 OK 1.9 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/css/b511cb9.css
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (1909), with no line terminators
Hash 28d087fb09915af676bc6b1511c6f1ce
14cdd152d6594dff2cbbad2b0a37a5f5183d349b
8ae431d118279d9dfa133dab4ac66c0dd1818457bb9cdbc682c4e745d06d2731
GET /_nuxt/css/b511cb9.css HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
etag: W/"775-FM3RUtZZTf8su60rCjel9Rg9NJs"
last-modified: 2023-11-03T22:39:22.979Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 1990056
server: cloudflare
cf-ray: 82c5ee9fda745693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/css/d188683.css
200 OK 287 B URL GET HTTP/3 new.lewd.ninja/_nuxt/css/d188683.css
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 191b325e961c3c13f93edd94f123917e
f5c26ffb76966c1f0cd4be008307fd6d2e37662a
95120f69629ffe32782c8bae4577871b92e6b8c5a84bcd5589f409014df446c2
GET /_nuxt/css/d188683.css HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
etag: W/"11f-9cJv+3aWbB8M1L4Agwf9bS43Zio"
last-modified: 2023-11-03T22:39:56.915Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 153562
server: cloudflare
cf-ray: 82c5ee9fda765693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/ddabbe3.js
200 OK 3.1 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/ddabbe3.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (3205), with no line terminators
Hash c30d3e27c594ca6283b7b9d89ceb7917
ff0045ad86b5796856b1624956ea35a8795a12ee
049c5028f8aed4273b5998329c6acaf615ab906ccfd55159e00bf3b3947523d4
GET /_nuxt/ddabbe3.js HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"c47-1LiIyFpLEu1XyTuXbO6ZlNBi3zQ"
last-modified: 2023-11-03T22:39:22.967Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 66382
server: cloudflare
cf-ray: 82c5eea59ea15693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/flag/ru.svg
200 OK 613 B URL GET HTTP/3 new.lewd.ninja/flag/ru.svg
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (672), with no line terminators
Hash 89e1b477cde905834deffbb6a041ade5
3f0dcd99b300644fabcb5d591d20b88b1414c8c4
112bebed6a9a1f34b22f386e4ccb199145635e1eaa21d42c6007079c5ed2c194
GET /flag/ru.svg HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: image/svg+xml
vary: Accept-Encoding
etag: W/"265-9F3dO27o8ALaXoLTYj/rSUDHEGA"
last-modified: 2023-11-03T22:39:23.039Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=31536000
cf-cache-status: HIT
age: 403865
server: cloudflare
cf-ray: 82c5eea60eef5693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
img.strpst.com/thumbs/1701041490/79793927_webp
200 OK 5.3 kB URL GET HTTP/2 img.strpst.com/thumbs/1701041490/79793927_webp
IP
Requested by https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Certificate IssuerCloudflare, Inc.
Subjectimg.strpst.com
FingerprintED:62:74:FE:E4:F5:89:43:B3:49:55:FE:18:19:0D:29:24:96:75:BC
ValidityMon, 03 Apr 2023 00:00:00 GMT - Tue, 02 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4909467c2524d7fc8ec3050381e657a3
5075635f28417719a5a72322b3cc0373eae8c14e
658d9d9aae1c1187bc5a10bf461a81f60c45d51097ff9164b260eef588e61c8c
GET /thumbs/1701041490/79793927_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:46 GMT
content-type: image/webp
content-length: 5348
etag: "4909467c2524d7fc8ec3050381e657a3"
last-modified: Sun, 26 Nov 2023 23:30:10 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 82
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eebb8a0e5689-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
new.lewd.ninja/_nuxt/96ca5f2.js
200 OK 174 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/96ca5f2.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
Size 174 kB (174351 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/96ca5f2.js HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"2a90f-FMrJ8rgpRhxZKg31lZDXi/FcaaA"
last-modified: 2023-11-03T22:39:56.939Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 330990
server: cloudflare
cf-ray: 82c5ee9cf8f45693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tsyndicate.com/iframes2/1c560c90460d4d9e893d58fe5b4a8f53.html?&adb=0&clientjs=1&w=1280&h=1024&tz=0
200 OK 6.9 kB URL GET HTTP/2 tsyndicate.com/iframes2/1c560c90460d4d9e893d58fe5b4a8f53.html?&adb=0&clientjs=1&w=1280&h=1024&tz=0
IP
ASN #24940 Hetzner Online GmbH
Requested by https://a.labadena.com/api/spots/454245?p=1&s1=%subid1%&kw=
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6953), with no line terminators
Hash a5dca7c3d50c49d0307f734e8551aec4
859685a29fab96268eff83bf7fa346a97b80b15d
63e5eb3f440de8fa9a7ecf252e83108e0977caf07706ce9f65ca077975171a5d
GET /iframes2/1c560c90460d4d9e893d58fe5b4a8f53.html?&adb=0&clientjs=1&w=1280&h=1024&tz=0 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 23:32:43 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
link: <https://lcdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: a75b90627ef3637c
set-cookie: ts_uid=9b717316-db41-4994-8b0e-07bfffe98eaf; expires=Sun, 26 May 2024 23:32:43 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
new.lewd.ninja/_nuxt/css/ee9a000.css
200 OK 88 B URL GET HTTP/3 new.lewd.ninja/_nuxt/css/ee9a000.css
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 48e85d6dfdab2e1f75f1de016528a28b
e764d317adc699fff3e2224cf09f74950e0f61ef
772d8beaaac95f216c341ffafec6a19f195ff86d8afc8ddbabf385dff51dd4d5
GET /_nuxt/css/ee9a000.css HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
etag: W/"58-52TTF63Gmf/z4iJM8J90lQ4PYe8"
last-modified: 2023-11-03T22:39:22.975Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 322230
server: cloudflare
cf-ray: 82c5ee9fea855693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
200 OK 476 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (563)
Size 476 kB (476095 bytes)
Hash 23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://new.lewd.ninja
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 25 Nov 2023 17:15:26 GMT
expires: Sun, 24 Nov 2024 17:15:26 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 109036
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
new.lewd.ninja/favicon.ico
200 OK 1.2 kB URL GET HTTP/3 new.lewd.ninja/favicon.ico
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash d9616028c608050263d7dc6b4adb9f39
802212567182a6a26711d5b0dbf5e39870731217
47dabc9ca64738d0b691a4ce5511c6eb21824487946132baf83415ab45dccddd
GET /favicon.ico HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: image/vnd.microsoft.icon
vary: Accept-Encoding
etag: W/"47e-gCISVnGCpqJnEdWw2/XjmHBzEhc"
last-modified: 2023-11-03T22:39:56.979Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=31536000
cf-cache-status: HIT
age: 56699
server: cloudflare
cf-ray: 82c5eea46dab5693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/f53deb0.js
200 OK 1.3 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/f53deb0.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (1465), with no line terminators
Hash a9186f798df88b53abbbc22cdd78a3e2
0ec92e1849b6558e462ea4cdfd4bd422d528b1bd
f5d9a13f76e636e7bd5129458fca6edabc404748ed24dec7a0b4b87e60e9221f
GET /_nuxt/f53deb0.js HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g; google-analytics_v4_fizD__engagementStart=1701041562178; google-analytics_v4_fizD__counter=1; google-analytics_v4_fizD__ga4sid=816440751; google-analytics_v4_fizD__session_counter=1; google-analytics_v4_fizD__ga4=35f4c9ed-23e3-48da-ac40-c0ec6275fe55; google-analytics_v4_fizD__let=1701041562178
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:42 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"544-9N0MQVY5fVVhMY54G/F8u8VL3C8"
last-modified: 2023-11-03T22:39:56.895Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 1989451
server: cloudflare
cf-ray: 82c5eea5aea65693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
chaturbate.com/tours/3/?tour=x1Rd&campaign=taOsB&c=1&p=0&gender=x&tag=anime&disable_sound=0
200 OK 62 kB URL GET HTTP/3 chaturbate.com/tours/3/?tour=x1Rd&campaign=taOsB&c=1&p=0&gender=x&tag=anime&disable_sound=0
IP
Requested by https://tsyndicate.com/iframes2/1c560c90460d4d9e893d58fe5b4a8f53.html?&adb=0&clientjs=1&w=1280&h=1024&tz=0
Certificate IssuerDigiCert Inc
Subject*.highwebmedia.com
FingerprintE8:AA:DE:C2:5D:9E:54:E7:4E:14:3F:F4:80:9B:A4:9F:97:F3:8C:69
ValiditySat, 30 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (54753)
Hash dd4c450d49a4795188505f5dde27a23c
4828e26ea3e0da32f144d7e7c91cd6f999bf1a50
4e820b87f1a32e81ebdcaadb10e23da0515b838858bac46e777afb307eb32505
GET /tours/3/?tour=x1Rd&campaign=taOsB&c=1&p=0&gender=x&tag=anime&disable_sound=0 HTTP/1.1
Host: chaturbate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tsyndicate.com/
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=2987vKUG5Of08dvuboioTW7myXG7Mw6fHYIIPb6HXAc-1701041564-0-Aau68zBVKpURhXUrd+j8LM9PkJ33uFdxyq4SeeYuJGSlXsL9SaHNc63fNvekEIV9mzF/ZxExEKLZprOaC2usbD8=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:44 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding, Accept-Language, Cookie
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
content-language: en
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mmcdn.com https://*.static.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://*.googletagmanager.com https://www.google.com/recaptcha/ https://www.google.com/cv/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/cv/ https://www.gstatic.com/eureka/ https://www.gstatic.com/cast/ https://*.nr-data.net https://certify-js.alexametrics.com https://player.vimeo.com/api/player.js https://static.hotjar.com https://script.hotjar.com ; style-src 'self' data: 'unsafe-inline' https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://static.hotjar.com https://script.hotjar.com; img-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://*.stream.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://*.google-analytics.com https://*.googletagmanager.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.nr-data.net https://certify.alexametrics.com https://stats.g.doubleclick.net https://cbgames.s3.amazonaws.com https://player.vimeo.com https://script.hotjar.com http://script.hotjar.com ; font-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.gstatic.com http://script.hotjar.com https://script.hotjar.com ; connect-src 'self' blob: blob https://*.mmcdn.com wss://*.mmcdn.com wss://*.mmcdn.com:8443 https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://*.nr-data.net https://*.chaturbate.com https://chaturbate.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com https://cbvideoupload.s3-accelerate.amazonaws.com https://stats.g.doubleclick.net https://internet-up.ably-realtime.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://tls-use1.fpapi.io https://use1.fptls.com https://eun1.fptls.com https://aps1.fptls.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com ; media-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://storage.googleapis.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com; object-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://download.macromedia.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ; frame-src 'self' https://*.mmcdn.com https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://*.wnu.com https://wnu.com https://checkout.2000charge.com https://www.sofort.com https://*.girogate.de https://player.vimeo.com https://vars.hotjar.com https://directory-live.cb.dev https://*.web.cb.dev ; child-src 'self' blob: blob ; worker-src 'self' blob: blob ; form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://*.wnu.com https://wnu.com https://devportal.cb.dev https://*.web.amer-1.jumio.ai https://saas-onboarding.incodesmile.com https://smartpay.coinsmart.com https://crypto-payments.net https://secure.paygarden.com ; manifest-src 'self' https://*.mmcdn.com https://*.highwebmedia.com ; report-uri https://report-uri.mmcdn.com/r/t/csp/enforce;
report-to: {"group":"default","max_age":2592000,"endpoints":[{"url":"https://report-uri.mmcdn.com/a/t/g"}],"include_subdomains":true}
nel: {"report_to":"default","max_age":2592000,"include_subdomains":true}
cache-control: no-cache
set-cookie: affkey="eJyrVipSslJQyigpKSi20tcvKa7MS8lMTixJ1UvOz9VXqgUArd0K7A=="; Domain=.chaturbate.com; expires=Tue, 26 Dec 2023 23:32:44 GMT; Max-Age=2592000; Path=/
sbr=sec:sbr703dbf9a-1e2b-42ec-bda1-8a0a904b77ca:1r7OcG:7RTChL6lm3W-TQTF9r-nFMR58ck; Domain=.chaturbate.com; expires=Fri, 21 Aug 2026 23:32:44 GMT; HttpOnly; Max-Age=86313600; Path=/; Secure
x-content-type-options: nosniff
x-xss-protection: 1; mode=block; report=https://report-uri.highwebmedia.com/r/t/xss/enforce
referrer-policy: strict-origin-when-cross-origin
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82c5eeb1dc9eb523-OSL
content-encoding: br
go.sexfortokens.com/thumbs/view
200 OK 218 B URL POST HTTP/3 go.sexfortokens.com/thumbs/view
IP
Requested by https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Certificate IssuerCloudflare, Inc.
Subjectsexfortokens.com
Fingerprint14:74:83:B8:1B:D5:4F:1D:A3:FD:1B:C0:F1:C8:9F:C4:71:56:16:CA
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sat, 21 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 9667147e20b564f7b119272e2a1f42d0
0854a68301df4be443fbd9fd8a65d90c67dfa5b7
fc8c7444cf647e4a72a6a2af53802903b9c243463a9f32526f41e45db8deaf5e
POST /thumbs/view HTTP/1.1
Host: go.sexfortokens.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.bbrdbr.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 86
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:46 GMT
content-type: application/json
strict-transport-security: max-age=15768000
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
access-control-allow-origin: https://creative.bbrdbr.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuGyDLPvii6XBe56JkFLbbmn2HToucTggQLj7Ppo5n; SameSite=None; Secure; path=/; expires=Mon, 27-Nov-23 23:32:46 GMT; HttpOnly
server: cloudflare
cf-ray: 82c5eebc6880b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
randomadsrv.com/beh.engine?b=53&o=1
200 OK 0 B URL GET HTTP/2 randomadsrv.com/beh.engine?b=53&o=1
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerGoogle Trust Services LLC
Subjectrandomadsrv.com
Fingerprint8B:26:D6:41:2D:9D:6E:42:F7:48:CF:0B:A8:27:17:71:36:FC:26:82
ValidityFri, 06 Oct 2023 23:40:04 GMT - Thu, 04 Jan 2024 23:40:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /beh.engine?b=53&o=1 HTTP/1.1
Host: randomadsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:45 GMT
content-length: 0
cache-control: no-cache, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: INF_DFL8=false; path=/; SameSite=None; secure
IUID=40d51e08-2758-4947-bb4f-2ecea76c0f90; expires=Sat, 26-Nov-2033 23:32:44 GMT; path=/; SameSite=None; secure
ISSH=6F91C4; path=/; SameSite=None; secure
ILMPF=#False; expires=Mon, 27-Nov-2023 03:32:44 GMT; path=/; SameSite=None; secure; HttpOnly
IBL=#["53"]; expires=Sat, 26-Nov-2033 23:32:44 GMT; path=/; SameSite=None; secure; HttpOnly
p3p: CP="CAO PSA OUR IND"
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82c5eeb4596d1c16-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
b-hls-05.doppiocdn.com/hls/79793927/79793927_419_Kg2Le4abT7LUtkUM_1701041556.mp4
200 OK 384 kB URL GET HTTP/2 b-hls-05.doppiocdn.com/hls/79793927/79793927_419_Kg2Le4abT7LUtkUM_1701041556.mp4
IP
Requested by https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint99:FA:E1:1F:E8:F6:A1:57:63:A7:AA:BD:3E:C1:94:58:E7:83:02:13
ValiditySat, 21 Jan 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
Size 384 kB (384015 bytes)
Hash 5e5b880e301eaec98c85739fed1aa78a
5f5ca51ed67b349ede7b1d7847afbea41d7dcaf0
9644958fd7a1253d5c3f67158fb0434e6f32a416c404dcec3208b1d82ef147f8
GET /hls/79793927/79793927_419_Kg2Le4abT7LUtkUM_1701041556.mp4 HTTP/1.1
Host: b-hls-05.doppiocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.bbrdbr.com
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 23:32:46 GMT
content-type: video/mp4
content-length: 384015
last-modified: Sun, 26 Nov 2023 23:32:38 GMT
etag: "6563d596-5dc0f"
cache-control: public, max-age=60, s-maxage=60
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 5
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eebe584eb4fa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
new.lewd.ninja/_nuxt/css/4fac9a6.css
200 OK 524 B URL GET HTTP/3 new.lewd.ninja/_nuxt/css/4fac9a6.css
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (524), with no line terminators
Hash 38e124de5cbaf1738a1f238c6d22cdab
065a1a4f9d6dfaf293c99c07bbd26c485b8eeb17
167650990d45b391dc8cb29cf9df85af21c7660b7f4d07f8ea20ec4e35046f9e
GET /_nuxt/css/4fac9a6.css HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
etag: W/"20c-BloaT51t+vKTyZwHu9JsSFuO6xc"
last-modified: 2023-11-03T22:39:56.927Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 335847
server: cloudflare
cf-ray: 82c5ee9fca625693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
chaturbate.com/in/?tour=x1Rd&campaign=taOsB&track=adxad-728x90-ww-bootyheros&c=1&p=0&gender=x&tag=anime
302 Found 62 kB URL GET HTTP/2 chaturbate.com/in/?tour=x1Rd&campaign=taOsB&track=adxad-728x90-ww-bootyheros&c=1&p=0&gender=x&tag=anime
IP
Requested by https://tsyndicate.com/iframes2/1c560c90460d4d9e893d58fe5b4a8f53.html?&adb=0&clientjs=1&w=1280&h=1024&tz=0
Certificate IssuerDigiCert Inc
Subject*.highwebmedia.com
FingerprintE8:AA:DE:C2:5D:9E:54:E7:4E:14:3F:F4:80:9B:A4:9F:97:F3:8C:69
ValiditySat, 30 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/?tour=x1Rd&campaign=taOsB&track=adxad-728x90-ww-bootyheros&c=1&p=0&gender=x&tag=anime HTTP/1.1
Host: chaturbate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 26 Nov 2023 23:32:44 GMT
content-type: text/html; charset=utf-8
location: /tours/3/?tour=x1Rd&campaign=taOsB&c=1&p=0&gender=x&tag=anime&disable_sound=0
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
vary: Accept-Language, Cookie
content-language: en
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mmcdn.com https://*.static.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://*.googletagmanager.com https://www.google.com/recaptcha/ https://www.google.com/cv/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/cv/ https://www.gstatic.com/eureka/ https://www.gstatic.com/cast/ https://*.nr-data.net https://certify-js.alexametrics.com https://player.vimeo.com/api/player.js https://static.hotjar.com https://script.hotjar.com ; style-src 'self' data: 'unsafe-inline' https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://static.hotjar.com https://script.hotjar.com; img-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://*.stream.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://*.google-analytics.com https://*.googletagmanager.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.nr-data.net https://certify.alexametrics.com https://stats.g.doubleclick.net https://cbgames.s3.amazonaws.com https://player.vimeo.com https://script.hotjar.com http://script.hotjar.com ; font-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.gstatic.com http://script.hotjar.com https://script.hotjar.com ; connect-src 'self' blob: blob https://*.mmcdn.com wss://*.mmcdn.com wss://*.mmcdn.com:8443 https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://*.nr-data.net https://*.chaturbate.com https://chaturbate.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com https://cbvideoupload.s3-accelerate.amazonaws.com https://stats.g.doubleclick.net https://internet-up.ably-realtime.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://tls-use1.fpapi.io https://use1.fptls.com https://eun1.fptls.com https://aps1.fptls.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com ; media-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://storage.googleapis.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com; object-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://download.macromedia.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ; frame-src 'self' https://*.mmcdn.com https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://*.wnu.com https://wnu.com https://checkout.2000charge.com https://www.sofort.com https://*.girogate.de https://player.vimeo.com https://vars.hotjar.com https://directory-live.cb.dev https://*.web.cb.dev ; child-src 'self' blob: blob ; worker-src 'self' blob: blob ; form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://*.wnu.com https://wnu.com https://devportal.cb.dev https://*.web.amer-1.jumio.ai https://saas-onboarding.incodesmile.com https://smartpay.coinsmart.com https://crypto-payments.net https://secure.paygarden.com ; manifest-src 'self' https://*.mmcdn.com https://*.highwebmedia.com ; report-uri https://report-uri.mmcdn.com/r/t/csp/enforce;
report-to: {"group":"default","max_age":2592000,"endpoints":[{"url":"https://report-uri.mmcdn.com/a/t/g"}],"include_subdomains":true}
nel: {"report_to":"default","max_age":2592000,"include_subdomains":true}
x-frame-options: DENY
cache-control: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block; report=https://report-uri.highwebmedia.com/r/t/xss/enforce
referrer-policy: strict-origin-when-cross-origin
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
set-cookie: u_x1Rd=1; expires=Fri, 01 Dec 2023 23:32:44 GMT; Max-Age=432000; Path=/
us_x1Rd=1; Path=/
affkey="eJwdjUEKgzAURK8if9001Y2ty16g0Bt8k4hB0kj+BxNK717G3byZB/Mlpamj2r89XTpyaQcqv+QJ1rKB2Vf2Zhzu9XEzx2HmnLWtoWSBVKCsqrtM1qq0j4+ONVxdThY7LwsM1+ZQUtwCuvNm6BElegD9/kGSKH8="; Domain=.chaturbate.com; expires=Tue, 26 Dec 2023 23:32:44 GMT; Max-Age=2592000; Path=/
fromaffiliate=1; Domain=.chaturbate.com; Path=/
noads=1; expires=Mon, 27 Nov 2023 05:32:44 GMT; Max-Age=21600; Path=/
sbr=sec:sbr77f5cdc2-6bd7-480d-a6a2-f343ae15f312:1r7OcG:ATxd92jZIC3M3_8Ad6q4mz3hoCI; Domain=.chaturbate.com; expires=Fri, 21 Aug 2026 23:32:44 GMT; HttpOnly; Max-Age=86313600; Path=/; Secure
__cf_bm=2987vKUG5Of08dvuboioTW7myXG7Mw6fHYIIPb6HXAc-1701041564-0-Aau68zBVKpURhXUrd+j8LM9PkJ33uFdxyq4SeeYuJGSlXsL9SaHNc63fNvekEIV9mzF/ZxExEKLZprOaC2usbD8=; path=/; expires=Mon, 27-Nov-23 00:02:44 GMT; domain=.chaturbate.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82c5eeaf3ac27131-OSL
X-Firefox-Spdy: h2
smartpicrotation.com/bnr/4/67b/4e64a9/67b4e64a93077e42432298ed16fee9a4.mp4
206 Partial Content 674 kB URL GET HTTP/2 smartpicrotation.com/bnr/4/67b/4e64a9/67b4e64a93077e42432298ed16fee9a4.mp4
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint14:E4:19:7A:F4:96:18:FC:EB:1C:EC:65:23:F8:07:EE:78:E2:CE:A6
ValidityThu, 09 Mar 2023 00:00:00 GMT - Thu, 07 Mar 2024 23:59:59 GMT
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Size 674 kB (673583 bytes)
Hash 54558d9646afdebb27914ef63c8a4e9e
9b833db77926a31d8a21cbde44aed79f44a5559f
b3107c6a173ea633da4bacb1469acfd1790affd614065eb48e52bd28c7a75f89
GET /bnr/4/67b/4e64a9/67b4e64a93077e42432298ed16fee9a4.mp4 HTTP/1.1
Host: smartpicrotation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://iliketomakingpics.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Sun, 26 Nov 2023 23:32:44 GMT
content-type: text/plain; charset=utf-8
content-length: 673583
vary: Accept-Encoding
cache-control: max-age=31536000
x-cache-status: MISS
last-modified: Sun, 26 Nov 2023 09:00:38 GMT
cf-cache-status: HIT
age: 52318
content-range: bytes 0-673582/673583
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lcjJPezO%2FnvKy0rqb4T042dAorHw9mOSXBMKnrjfWag2vdvolRz%2BvMAmJI9vnZ4SM1065KupJykg6%2B3FMWqCb1UXRMVyDd26QjZ006JQN8Gkqt0JaD5LIZizC7vBqzfod1GTiwkS8w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82c5eeb2af36b51b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
creative.bbrdbr.com/widgets/v4/Universal/vendors~hls.13f01a3a9d7e36c14415.js
200 OK 178 kB URL GET HTTP/3 creative.bbrdbr.com/widgets/v4/Universal/vendors~hls.13f01a3a9d7e36c14415.js
IP
Requested by https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint2A:9F:63:77:CB:A5:1C:FD:6E:10:F5:29:D2:FB:51:F4:7C:EC:36:A2
ValiditySun, 26 Feb 2023 00:00:00 GMT - Sun, 25 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (45140)
Size 178 kB (177865 bytes)
Hash 4a1e862a348e6713dfcce18e9cda2f42
47bed78ef29844bec68da443a6b0add48936b61b
b3b83266dde6fa2870ddc1cc812233d8baa03727cd4d65733ed5ee7a4fbb4490
GET /widgets/v4/Universal/vendors~hls.13f01a3a9d7e36c14415.js HTTP/1.1
Host: creative.bbrdbr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.bbrdbr.com/widgets/v4/Universal?campaignId=sexfortokens-adxad-728x90-ww-bootyheros&sourceId=c4c444c1fe40124de71c3102647ef5ff&modelPageOption=model&tag=girls%2Fahegao&hideModelName=1&thumbsMargin=0&gridRows=1&gridColumns=1&responsive=0&hideButton=1&hideTitle=1&liveBadgeColor=bd2200&targetDomain=sexfortokens.com&userId=17f9365c62dae0392084d66eed45063ce6b41df9976c693e547fc771f6c551fd&autoplay=firstThumb&autoplayForce=1&quality=optimal&kbLimit=2000
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:46 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 23 Nov 2023 14:38:50 GMT
etag: W/"655f63fa-2b6c9"
expires: Sun, 26 Nov 2023 23:32:47 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 2
vary: Accept-Encoding
server: cloudflare
cf-ray: 82c5eebd0d8c0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/css/93cd910.css
200 OK 319 B URL GET HTTP/3 new.lewd.ninja/_nuxt/css/93cd910.css
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (319), with no line terminators
Hash 61f11ed3058037eb7fd2cb369631e700
f439d0d528c8ca87e65c3f0423206e2d98cee21f
ef7cc05c931adfed0ff92bb9d2894d64b5af87b94287f1f4feafba1d0508d6ba
GET /_nuxt/css/93cd910.css HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
etag: W/"13f-9DnQ1SjIyofmXD8EIyBuLZjO4h8"
last-modified: 2023-11-03T22:39:22.979Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 232100
server: cloudflare
cf-ray: 82c5ee9cf8ee5693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
my.rtmark.net/img.gif?f=sync&lr=1&partner=8c7c01962f4e2c3e4ed0abe5cbafc84289b3e8521c6f0b5a27c2e73ae5e07e86
200 OK 43 B URL GET HTTP/2 my.rtmark.net/img.gif?f=sync&lr=1&partner=8c7c01962f4e2c3e4ed0abe5cbafc84289b3e8521c6f0b5a27c2e73ae5e07e86
IP
Requested by https://iliketomakingpics.com/iframe/5bc063dbba5?iframe&ag_custom_domain=lewd.ninja
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&lr=1&partner=8c7c01962f4e2c3e4ed0abe5cbafc84289b3e8521c6f0b5a27c2e73ae5e07e86 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 23:32:44 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=e0eda26dae394c56be52238ce5b196f6; expires=Mon, 25 Nov 2024 23:32:44 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
new.lewd.ninja/fluidplayer.min.js
200 OK 212 kB URL GET HTTP/3 new.lewd.ninja/fluidplayer.min.js
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (62751)
Size 212 kB (211686 bytes)
Hash 57c091151b032dc219a8e239b3add116
a5bd1b4a98747fffd21e26902e3941f99934bcba
26bb48d4e49c2cabb541d8c1cc261551400a51fcac679ecbdb9e5e3c4329e688
GET /fluidplayer.min.js HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"33ae6-pb0bSph0f//SHiaQLjlB+Zk0vLo"
last-modified: 2023-11-03T22:39:23.039Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 415344
server: cloudflare
cf-ray: 82c5ee9cf8f65693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/css/02955de.css
200 OK 2.2 kB URL GET HTTP/3 new.lewd.ninja/_nuxt/css/02955de.css
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (2186), with no line terminators
Hash 83a9bffffc2e0c9e35b5edab8d78d8ed
70933cb935781add2e4482de474872e70ba49d90
7b5854a9faed811e7ad0f95043d4b7d9a1b2bbeb87026f93ea135899de561baf
GET /_nuxt/css/02955de.css HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
etag: W/"886-fEe5pN/vgiDMb8mzQ7O9wsHy7gk"
last-modified: 2023-11-03T22:39:22.991Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 322230
server: cloudflare
cf-ray: 82c5ee9fba535693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
new.lewd.ninja/_nuxt/css/8d5794a.css
200 OK 77 B URL GET HTTP/3 new.lewd.ninja/_nuxt/css/8d5794a.css
IP
Requested by https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintE5:40:5C:F2:3B:BB:4F:ED:D5:BF:61:5F:20:1E:D1:59:33:7E:F3:A8
ValidityFri, 12 May 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 29165efc5bdf9194f6c279fa824c866d
82e25defe1aa7004f79132fe576cd26068d98ee1
d282000d138914647bc82687720d1296527d53b60675dd4f4b5e564925bd8ccc
GET /_nuxt/css/8d5794a.css HTTP/1.1
Host: new.lewd.ninja
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://new.lewd.ninja/game/87094-sapphire-safari-v007-kinky-fridays?asgtbndr=1
Cookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRhzef7ivT5nic2g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 26 Nov 2023 23:32:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
etag: W/"4d-guJd7+GqcAT3kTL+V2zSYGjZjuE"
last-modified: 2023-11-03T22:39:22.979Z
server-timing: -;dur=0;desc="Generate"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: *, *
cache-control: max-age=2678400
cf-cache-status: HIT
age: 64537
server: cloudflare
cf-ray: 82c5ee9fda6c5693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
104.22.56.80
142.250.74.67
18.157.203.0
135.181.208.216
185.94.236.253
185.76.9.24
188.114.96.1
139.45.195.8
0.0.0.0